This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft File: OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft (raw, json) Hash identifier: X3Jd5BtYr59siTnFdVOzqecnuWMVfSAg9gRjSBLSU/w= Subject key identifier: 45:E7:1A:BB:03:FE:3B:3A:6E:82:78:CC:DF:B9:FC:20:E6:23:3F:80 Authority key identifier: 38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 Certificate issuer: /CN=38203463eb944b25c65135ca47bdbdab646f3984 Certificate serial: 019B10EEEE1E259B15B371C198751946055D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft Manifest number: 14B0 Signing time: Fri 12 Dec 2025 05:00:52 +0000 Manifest this update: Fri 12 Dec 2025 05:00:52 +0000 Manifest next update: Sat 13 Dec 2025 05:00:52 +0000 Files and hashes: 1: 0Fmh8eaTe-TA8TzJaqV0xDv1Pzo.roa (hash: ZxN3vaamtDqMo8xYPJBI33oBeaqJ8QIz0amzm/bnvtg=) 2: 3nej7O_5-sZXCWeuqPyGbja9XnQ.roa (hash: p+MNFJ74eHqjwkPNS5+3QDf8dfQpJUlMjkJWwIsIN5s=) 3: JpI0mKHoKJGb5HpwhqpgQJ-989w.roa (hash: +p1PcccuIrfXBOI8p25PVV972uHT5dceE6dg0Tn0L/g=) 4: OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl (hash: gz/x675p+ng50LsvuP5fHY6VKh0t7yKz1ZB0elY4HzE=) 5: Q718Z9XRXwbb8eAv-JSYxNy8m3E.roa (hash: QwKiyK2H3mBEUzLEautBF28TXwWRoI+nh+WAF8i9ayk=) 6: eapLNVKWkPJvIKSSw8FvjnbqKM4.roa (hash: lQyg7ma6RsIJVyHbW0BuPsXW31hRi/B1a2UZgfzLbWY=) 7: flTVx8-F7E37FHcVoN5708sXexM.roa (hash: snTHoXZxUjfO9kURa3StUkh2LzhC8cP2m56/uoBtpVA=) 8: itNeHRmlhkmkLNFMeFLLpwNO4FY.roa (hash: iZAIvlpDGBx0E4icQgD8R/hQnWve6QmLhqITJu2cuoY=) 9: ktpnhSV94n1dgI9-LO5orxsroMo.roa (hash: HdTZITsdNE12a7HbwFoAmzx8Exmybo0iwACkTzBDWZ0=) 10: p6yu9K0prb-3wy95x-qc7KcMywQ.roa (hash: bNVvwouaPK4oyavhTkisO8oVhR1iolZntv1z6WFieUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 05:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:ee:ee:1e:25:9b:15:b3:71:c1:98:75:19:46:05:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38203463eb944b25c65135ca47bdbdab646f3984 Validity Not Before: Dec 12 05:00:52 2025 GMT Not After : Dec 13 05:00:52 2025 GMT Subject: CN=45e71abb03fe3b3a6e8278ccdfb9fc20e6233f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:86:e4:79:12:14:86:bf:f0:d8:c5:48:c6:db: c8:39:aa:3b:8d:2c:02:69:0d:2d:4b:88:37:47:7f: 7d:59:be:75:61:16:94:86:16:04:6f:2a:ef:61:f4: b8:24:9a:7c:f2:d1:82:d3:6f:30:4f:bb:df:54:16: 13:f3:d6:70:65:ca:86:87:65:de:b5:a9:62:31:1c: 12:9f:e3:10:54:55:80:36:4b:1d:a8:08:0e:d6:d4: 41:b4:12:d6:0c:15:3e:f0:03:e8:81:e9:56:72:05: a9:ba:6b:6f:7b:de:61:02:01:85:7f:7c:bf:22:9f: 99:cb:4f:11:5f:a2:b3:18:5e:e0:90:9f:1b:ba:9e: 93:30:de:a8:13:45:69:75:f8:d2:75:f1:b3:c3:b7: f1:04:e9:43:01:5a:15:39:75:b1:86:6b:ac:0b:c7: 96:cb:3a:19:0d:11:23:23:18:90:4b:26:a0:19:ef: e2:a4:4d:23:8d:52:e6:f5:bd:a8:04:50:88:e5:d9: 67:29:14:6f:9b:4a:30:74:ce:d3:5b:4f:65:21:33: 60:7e:74:39:23:b0:fd:4d:c9:de:a7:4b:a0:0e:e6: 10:1d:25:51:0a:2f:fc:9f:75:48:cb:90:56:fc:3d: 93:45:73:a3:65:d0:f4:ef:84:b0:ed:ab:75:85:25: 8c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E7:1A:BB:03:FE:3B:3A:6E:82:78:CC:DF:B9:FC:20:E6:23:3F:80 X509v3 Authority Key Identifier: keyid:38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:0c:b7:0f:0b:cc:9d:7a:e8:58:a3:80:d1:78:43:5d:4a:69: fb:88:be:07:7a:ac:a0:b6:da:6f:f0:31:61:8e:4c:fe:3e:be: d7:b9:b8:52:bb:f2:11:de:0c:00:4c:02:6c:41:a5:08:45:f3: b1:35:10:d5:50:7b:c8:6f:46:74:89:61:8c:0b:ce:c2:3c:da: 1f:88:51:f3:a0:3a:bc:15:82:bc:2c:3e:ec:90:30:74:a5:01: 63:71:b8:78:15:5d:03:71:a6:06:de:9b:83:c9:c9:c6:b8:37: cb:77:9f:d5:d0:54:53:bd:ec:a0:d8:d2:5e:43:ae:f9:5f:1e: 74:42:7c:1c:f3:e0:c4:c0:62:0f:c6:49:29:8f:75:4c:44:c5: 8c:2f:2d:76:93:10:ee:93:f1:06:1c:aa:82:11:2c:c1:77:67: c8:2c:d5:aa:08:1b:67:26:b1:21:b2:cb:35:98:a0:58:b8:5a: 01:31:0a:87:7d:a5:b7:db:e5:c3:da:0a:ba:ac:4f:a5:d9:18: 70:d3:7a:cb:91:83:eb:5f:2a:e5:b5:16:19:fa:9b:69:3d:b2: 7e:b2:70:dc:6f:8f:f6:e1:6c:8f:2a:50:49:a0:94:fe:7d:95: 90:ce:32:82:64:d2:be:3b:dc:2e:aa:f0:e5:03:a9:e4:f4:7e: f1:78:22:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQ7u4eJZsVs3HBmHUZRgVdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MjAzNDYzZWI5NDRiMjVjNjUxMzVjYTQ3YmRiZGFiNjQ2 ZjM5ODQwHhcNMjUxMjEyMDUwMDUyWhcNMjUxMjEzMDUwMDUyWjAzMTEwLwYDVQQD Eyg0NWU3MWFiYjAzZmUzYjNhNmU4Mjc4Y2NkZmI5ZmMyMGU2MjMzZjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6IbkeRIUhr/w2MVIxtvIOao7jSwC aQ0tS4g3R399Wb51YRaUhhYEbyrvYfS4JJp88tGC028wT7vfVBYT89ZwZcqGh2Xe taliMRwSn+MQVFWANksdqAgO1tRBtBLWDBU+8APogelWcgWpumtve95hAgGFf3y/ Ip+Zy08RX6KzGF7gkJ8bup6TMN6oE0VpdfjSdfGzw7fxBOlDAVoVOXWxhmusC8eW yzoZDREjIxiQSyagGe/ipE0jjVLm9b2oBFCI5dlnKRRvm0owdM7TW09lITNgfnQ5 I7D9Tcnep0ugDuYQHSVRCi/8n3VIy5BW/D2TRXOjZdD074Sw7at1hSWMpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEXnGrsD/js6boJ4zN+5/CDmIz+AMB8GA1UdIwQY MBaAFDggNGPrlEslxlE1yke9vatkbzmEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1Nzgt NTg5MzUxNzliOTg1LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1NzgtNTg5MzUxNzliOTg1 LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgwy3DwvM nXroWKOA0XhDXUpp+4i+B3qsoLbab/AxYY5M/j6+17m4UrvyEd4MAEwCbEGlCEXz sTUQ1VB7yG9GdIlhjAvOwjzaH4hR86A6vBWCvCw+7JAwdKUBY3G4eBVdA3GmBt6b g8nJxrg3y3ef1dBUU73soNjSXkOu+V8edEJ8HPPgxMBiD8ZJKY91TETFjC8tdpMQ 7pPxBhyqghEswXdnyCzVqggbZyaxIbLLNZigWLhaATEKh32lt9vlw9oKuqxPpdkY cNN6y5GD618q5bUWGfqbaT2yfrJw3G+P9uFsjypQSaCU/n2VkM4ygmTSvjvcLqrw 5QOp5PR+8Xgivw== -----END CERTIFICATE-----Generated at Fri Dec 12 11:55:57 2025 by rpki-client