This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft File: OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft (raw, json) Hash identifier: F4W1EE8z63KHXXbbYMcY3Z+VKtNrxv95ZaskweY88BU= Subject key identifier: D3:A0:2E:CE:21:1B:A6:18:4A:05:6C:C4:43:D8:B0:6E:4D:EB:A1:F6 Authority key identifier: 3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10 Certificate issuer: /CN=3b39b2382f38512e59ed18ebfaa596c955212910 Certificate serial: 019B1E73A80FE973730BA12F1766A4FF9D60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft Manifest number: 1777 Signing time: Sun 14 Dec 2025 20:00:54 +0000 Manifest this update: Sun 14 Dec 2025 20:00:54 +0000 Manifest next update: Mon 15 Dec 2025 20:00:54 +0000 Files and hashes: 1: NoOi2jkJpMpFwHCCbL-c7xjIW1s.roa (hash: Tg08HW2CXoyF7X1ERqaX+ZU6i4eKPe169u86v6bLQVU=) 2: OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl (hash: Qfx4IsbvrjoitD69g5KJZCIe7PXEgNYbE1OIF3q1mT8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 20:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:73:a8:0f:e9:73:73:0b:a1:2f:17:66:a4:ff:9d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b39b2382f38512e59ed18ebfaa596c955212910 Validity Not Before: Dec 14 20:00:54 2025 GMT Not After : Dec 15 20:00:54 2025 GMT Subject: CN=d3a02ece211ba6184a056cc443d8b06e4deba1f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:50:54:35:dd:92:cf:83:cf:95:c1:71:cf:9a: a6:10:19:f7:00:fe:97:5b:0d:cf:91:f4:a2:f4:07: 11:0a:11:d2:3b:41:d0:88:69:f6:0c:d6:5d:c7:1c: f4:5e:c6:59:dc:4e:2b:42:14:d5:be:5c:1e:9f:1b: e8:9b:04:b2:c7:d2:33:95:8f:87:49:65:5e:fd:49: a8:a4:8c:e8:d5:b4:3a:64:60:c5:71:a5:2e:71:5c: 3e:2e:2b:37:89:49:a5:b7:2f:5f:6e:df:ad:56:4d: 30:71:78:5b:1b:71:4e:76:03:f7:53:05:bb:6f:42: 10:fb:ce:d0:f3:50:22:c2:13:05:fe:38:f2:26:85: cc:78:83:68:2e:ac:4a:a7:fd:aa:39:d3:4a:53:cf: ae:58:ce:d3:5a:d9:81:41:3d:6d:f3:15:5e:3e:f7: a5:39:44:2f:f3:54:cc:04:56:64:8f:4d:34:10:2f: c3:c2:1a:fc:34:7b:de:d5:ae:f8:73:a9:a1:d0:51: 7f:c7:2f:0e:01:c7:73:37:38:29:34:8e:9a:47:8a: 2a:d7:7c:7a:b8:99:b6:cf:f6:6c:a8:9b:ab:c2:05: d2:a4:8d:9b:86:32:5f:c9:ea:26:6c:c8:8e:bc:70: be:f8:4b:47:48:a4:89:81:e6:a5:5a:02:8f:70:20: b6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A0:2E:CE:21:1B:A6:18:4A:05:6C:C4:43:D8:B0:6E:4D:EB:A1:F6 X509v3 Authority Key Identifier: keyid:3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:9b:82:79:ea:7d:35:9a:ab:83:07:de:73:68:50:eb:ce:4d: c7:3b:76:f0:56:5a:39:d7:43:f5:1e:4c:e4:22:36:14:b1:3e: 07:75:f8:8b:9f:7e:cf:89:80:a9:c9:6a:6c:54:e4:b3:b8:39: 69:44:e2:90:49:21:9d:d0:e6:0c:63:31:62:1d:61:38:ac:f9: d3:14:11:54:b9:70:e7:9c:51:2b:5f:47:45:cf:a3:76:f1:75: 6b:e3:ec:0c:fa:ee:f5:43:da:4e:e4:c4:68:be:d1:e8:4e:61: ba:80:cf:cb:33:fa:4d:d7:5b:97:ee:8d:15:94:20:7b:51:86: 44:60:6f:b2:dd:63:a2:bc:d7:7c:80:4f:7b:58:14:04:44:74: 07:0f:cb:5b:69:c3:93:9c:a6:c6:4f:12:a9:6d:0d:da:a2:c0: 81:00:7d:84:ea:17:a5:ca:15:e4:d4:5a:89:0c:47:b2:ea:c3: b8:32:57:00:06:70:f6:3b:35:d0:b5:9d:f0:0b:8d:a7:3b:bb: 02:37:9c:19:bd:26:1a:5c:a6:ea:cc:c7:db:e3:9e:70:49:e8: 58:0e:db:71:87:14:2b:2f:5d:49:e9:4b:46:a5:8b:34:f8:99: 2c:a0:40:7a:ad:68:e5:71:38:6f:99:2a:f0:8d:ba:e7:03:ba: a3:b1:99:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsec6gP6XNzC6EvF2ak/51gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMzliMjM4MmYzODUxMmU1OWVkMThlYmZhYTU5NmM5NTUy MTI5MTAwHhcNMjUxMjE0MjAwMDU0WhcNMjUxMjE1MjAwMDU0WjAzMTEwLwYDVQQD EyhkM2EwMmVjZTIxMWJhNjE4NGEwNTZjYzQ0M2Q4YjA2ZTRkZWJhMWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01BUNd2Sz4PPlcFxz5qmEBn3AP6X Ww3PkfSi9AcRChHSO0HQiGn2DNZdxxz0XsZZ3E4rQhTVvlwenxvomwSyx9IzlY+H SWVe/UmopIzo1bQ6ZGDFcaUucVw+Lis3iUmlty9fbt+tVk0wcXhbG3FOdgP3UwW7 b0IQ+87Q81AiwhMF/jjyJoXMeINoLqxKp/2qOdNKU8+uWM7TWtmBQT1t8xVePvel OUQv81TMBFZkj000EC/Dwhr8NHve1a74c6mh0FF/xy8OAcdzNzgpNI6aR4oq13x6 uJm2z/ZsqJurwgXSpI2bhjJfyeombMiOvHC++EtHSKSJgealWgKPcCC2uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNOgLs4hG6YYSgVsxEPYsG5N66H2MB8GA1UdIwQY MBaAFDs5sjgvOFEuWe0Y6/qllslVISkQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3pteU9DODRVUzVaN1Jqci1xV1d5VlVoS1JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zYmRhZDYtMGVjOC00M2FjLWJjMzMt OGI4ZDc2YjJkMjRlLzEvT3pteU9DODRVUzVaN1Jqci1xV1d5VlVoS1JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8zYmRhZDYtMGVjOC00M2FjLWJjMzMtOGI4ZDc2YjJkMjRl LzEvT3pteU9DODRVUzVaN1Jqci1xV1d5VlVoS1JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnpuCeep9 NZqrgwfec2hQ685Nxzt28FZaOddD9R5M5CI2FLE+B3X4i59+z4mAqclqbFTks7g5 aUTikEkhndDmDGMxYh1hOKz50xQRVLlw55xRK19HRc+jdvF1a+PsDPru9UPaTuTE aL7R6E5huoDPyzP6Tddbl+6NFZQge1GGRGBvst1jorzXfIBPe1gUBER0Bw/LW2nD k5ymxk8SqW0N2qLAgQB9hOoXpcoV5NRaiQxHsurDuDJXAAZw9js10LWd8AuNpzu7 AjecGb0mGlym6szH2+OecEnoWA7bcYcUKy9dSelLRqWLNPiZLKBAeq1o5XE4b5kq 8I265wO6o7GZSw== -----END CERTIFICATE-----Generated at Mon Dec 15 04:51:55 2025 by rpki-client