This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft File: ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft (raw, json) Hash identifier: rNCPMUd9M6oGc4/xf5ahfJ0SaiJWP5gYctvWbHtf+1o= Subject key identifier: E7:79:4F:96:90:CD:BF:7A:C2:DE:E5:DA:B2:1A:E4:1C:05:89:A4:92 Authority key identifier: A1:C1:30:07:2D:2C:E9:CF:56:2B:83:19:8E:DA:AD:AF:A4:8F:6D:B4 Certificate issuer: /CN=a1c130072d2ce9cf562b83198edaadafa48f6db4 Certificate serial: 019B10B7E500EA788714B68094F05FB31891 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft Manifest number: 1042 Signing time: Fri 12 Dec 2025 04:00:45 +0000 Manifest this update: Fri 12 Dec 2025 04:00:45 +0000 Manifest next update: Sat 13 Dec 2025 04:00:45 +0000 Files and hashes: 1: JyWi5BFZcLnbfEzmECOIrpo9WqY.roa (hash: BGeaCEXgvEq5NNxKl+Ag2+yFWkLD9Y1n05TPe3xR8kw=) 2: ocEwBy0s6c9WK4MZjtqtr6SPbbQ.crl (hash: nzfRQNn1/ftZJaZbEMEuTCH/bi/fxCZ2nqDsOTKyy18=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 04:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:b7:e5:00:ea:78:87:14:b6:80:94:f0:5f:b3:18:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1c130072d2ce9cf562b83198edaadafa48f6db4 Validity Not Before: Dec 12 04:00:45 2025 GMT Not After : Dec 13 04:00:45 2025 GMT Subject: CN=e7794f9690cdbf7ac2dee5dab21ae41c0589a492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:88:67:d2:6c:f7:2c:d7:05:e5:67:cd:eb:e1: ee:f4:de:44:1a:8c:03:b4:2e:50:6b:62:9c:18:55: 44:0a:46:70:7e:ad:32:72:2c:45:99:33:7c:f1:9a: 7c:fe:80:30:b6:2f:13:28:1f:22:00:f8:7e:53:ad: d9:ca:d4:0b:bb:40:ee:8f:38:5b:37:67:62:92:31: 45:a0:46:9b:8c:53:53:31:1a:b0:ed:b5:6a:1f:81: f3:36:81:3b:0c:39:1c:8a:05:3b:3c:25:63:d8:e4: 0b:e7:e1:08:cb:13:e0:55:9d:57:75:c3:b3:87:3d: d5:0a:94:58:d5:fa:cd:20:35:c5:0e:23:8e:e8:7d: a8:b8:7f:95:b7:37:fb:22:d5:ed:bd:b5:fa:4a:d7: 40:18:07:84:02:45:4b:4c:49:ce:55:43:0f:eb:13: f4:17:09:96:55:ac:17:d6:48:7a:5f:e6:46:18:7c: fb:89:f0:ba:51:2b:e0:ad:14:f4:23:38:da:e0:d5: e8:18:84:e4:b6:dc:f1:6d:5b:34:4b:41:97:87:11: ed:fd:ec:1d:fc:f8:2c:0e:32:a4:3b:79:a5:4d:59: 61:90:ec:d8:17:07:57:7f:43:06:38:59:68:24:4c: 0e:97:c2:e3:d2:95:13:f4:72:61:d1:ae:f3:44:a5: 45:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:79:4F:96:90:CD:BF:7A:C2:DE:E5:DA:B2:1A:E4:1C:05:89:A4:92 X509v3 Authority Key Identifier: keyid:A1:C1:30:07:2D:2C:E9:CF:56:2B:83:19:8E:DA:AD:AF:A4:8F:6D:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:1b:47:fe:b7:b4:b5:73:c4:6e:a0:ed:5c:4b:8b:00:9d:2a: ce:e7:b8:dd:ff:5e:95:f8:51:4a:8d:af:fc:30:80:c1:0f:a5: 9c:7f:08:4f:30:54:61:49:9a:e6:e4:8a:7b:b4:ab:69:b6:70: 88:ca:bc:64:27:f4:11:be:fd:49:23:d6:bd:eb:b1:89:ba:2a: ca:c3:5c:5b:aa:9d:00:a8:9a:50:5d:df:43:4c:32:48:c0:04: f1:3d:94:95:07:81:01:87:1a:f5:2f:70:b5:79:47:6c:c2:0a: e1:ec:ec:63:f8:bb:29:ec:20:1c:b6:59:e7:8a:3d:c4:4b:13: 76:8d:ea:2d:9f:8c:d0:76:8a:6b:e7:fc:aa:76:1f:87:df:f1: ab:70:ba:c3:7e:79:4c:03:2f:91:48:cf:85:fb:9d:34:a0:d2: 66:f0:61:0e:71:43:6f:ba:ee:ee:4b:17:92:95:98:17:23:c2: c9:f6:04:af:07:31:9b:8e:5e:b2:27:94:c9:cd:ec:1c:ee:cd: df:8f:e0:2f:34:00:c4:13:e9:1c:2b:c1:31:a8:da:61:c7:9f: fc:6d:87:a6:f6:83:6a:10:70:a4:0f:d6:cc:ff:7d:ed:97:ee: 92:73:d5:43:08:89:49:6b:3f:41:16:61:81:02:72:b9:14:b1: e8:a8:c6:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQt+UA6niHFLaAlPBfsxiRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExYzEzMDA3MmQyY2U5Y2Y1NjJiODMxOThlZGFhZGFmYTQ4 ZjZkYjQwHhcNMjUxMjEyMDQwMDQ1WhcNMjUxMjEzMDQwMDQ1WjAzMTEwLwYDVQQD EyhlNzc5NGY5NjkwY2RiZjdhYzJkZWU1ZGFiMjFhZTQxYzA1ODlhNDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqohn0mz3LNcF5WfN6+Hu9N5EGowD tC5Qa2KcGFVECkZwfq0ycixFmTN88Zp8/oAwti8TKB8iAPh+U63ZytQLu0Dujzhb N2dikjFFoEabjFNTMRqw7bVqH4HzNoE7DDkcigU7PCVj2OQL5+EIyxPgVZ1XdcOz hz3VCpRY1frNIDXFDiOO6H2ouH+Vtzf7ItXtvbX6StdAGAeEAkVLTEnOVUMP6xP0 FwmWVawX1kh6X+ZGGHz7ifC6USvgrRT0Izja4NXoGITkttzxbVs0S0GXhxHt/ewd /PgsDjKkO3mlTVlhkOzYFwdXf0MGOFloJEwOl8Lj0pUT9HJh0a7zRKVFawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOd5T5aQzb96wt7l2rIa5BwFiaSSMB8GA1UdIwQY MBaAFKHBMActLOnPViuDGY7ara+kj220MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2NFd0J5MHM2YzlXSzRNWmp0cXRyNlNQYmJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9mNWJiNTEtNzA4Zi00ZGQyLTg4MGYt ODdkOTA1NjFhYTQ4LzEvb2NFd0J5MHM2YzlXSzRNWmp0cXRyNlNQYmJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9mNWJiNTEtNzA4Zi00ZGQyLTg4MGYtODdkOTA1NjFhYTQ4 LzEvb2NFd0J5MHM2YzlXSzRNWmp0cXRyNlNQYmJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqRtH/re0 tXPEbqDtXEuLAJ0qzue43f9elfhRSo2v/DCAwQ+lnH8ITzBUYUma5uSKe7SrabZw iMq8ZCf0Eb79SSPWveuxiboqysNcW6qdAKiaUF3fQ0wySMAE8T2UlQeBAYca9S9w tXlHbMIK4ezsY/i7KewgHLZZ54o9xEsTdo3qLZ+M0HaKa+f8qnYfh9/xq3C6w355 TAMvkUjPhfudNKDSZvBhDnFDb7ru7ksXkpWYFyPCyfYErwcxm45esieUyc3sHO7N 34/gLzQAxBPpHCvBMajaYcef/G2HpvaDahBwpA/WzP997ZfuknPVQwiJSWs/QRZh gQJyuRSx6KjGqw== -----END CERTIFICATE-----Generated at Fri Dec 12 09:48:19 2025 by rpki-client