This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft File: OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft (raw, json) Hash identifier: THz5O9sEJfyrL6a81dzG04MDCfGw8vzIdRe4OSatEz4= Subject key identifier: ED:58:52:7A:48:1F:FB:4D:4C:E5:19:B3:58:D9:3B:D7:76:C8:F6:22 Authority key identifier: 3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10 Certificate issuer: /CN=3b39b2382f38512e59ed18ebfaa596c955212910 Certificate serial: 019B1A96EAE19A1CCBCAC96A6C68BF153A57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft Manifest number: 1775 Signing time: Sun 14 Dec 2025 02:00:56 +0000 Manifest this update: Sun 14 Dec 2025 02:00:56 +0000 Manifest next update: Mon 15 Dec 2025 02:00:56 +0000 Files and hashes: 1: NoOi2jkJpMpFwHCCbL-c7xjIW1s.roa (hash: Tg08HW2CXoyF7X1ERqaX+ZU6i4eKPe169u86v6bLQVU=) 2: OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl (hash: WlIKFlYDgqA2SHQ0J+Yg+kZ+ODBYa04eIKzgd1DsVc8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:96:ea:e1:9a:1c:cb:ca:c9:6a:6c:68:bf:15:3a:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b39b2382f38512e59ed18ebfaa596c955212910 Validity Not Before: Dec 14 02:00:56 2025 GMT Not After : Dec 15 02:00:56 2025 GMT Subject: CN=ed58527a481ffb4d4ce519b358d93bd776c8f622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b1:b0:3b:cf:6d:58:1c:53:c4:c1:a8:6d:d5: f6:3e:cc:6c:27:4b:61:74:38:16:4f:a9:92:34:52: 0b:4c:a7:37:05:b4:d2:04:fe:07:11:bd:2a:bd:2e: a7:c4:69:b5:bf:eb:5a:a4:66:0d:7d:1b:c3:d1:aa: 4e:04:61:81:95:56:c7:b4:13:63:dc:ee:fa:c5:4d: 14:46:79:97:d1:d7:f3:bc:29:62:96:60:aa:c0:ab: e6:b8:ce:5a:45:c8:49:8b:a1:be:1e:b8:f0:b3:9c: 08:55:48:fa:b1:b4:0b:f2:c1:73:52:d8:2a:47:a6: 41:0e:c8:0c:6f:63:70:fc:d4:cf:91:20:c3:27:44: 6c:37:b3:87:cb:35:60:d0:7f:b6:52:67:b9:ad:6a: 0a:ea:b8:0d:8b:0d:61:ff:94:73:c6:e1:b1:57:46: 32:26:44:16:b4:1e:ad:07:ce:dd:7c:30:ed:1f:25: 76:60:c1:b6:22:f0:d6:10:51:66:55:bf:2e:01:dd: 80:76:89:f3:57:42:b4:d1:28:6c:58:da:b7:40:97: 33:57:e7:85:52:90:03:10:39:a9:cc:2c:4e:07:45: 02:fc:45:54:42:7e:4d:39:7c:e8:42:b9:f3:8d:d2: 6a:38:f5:7f:55:65:23:06:91:83:a4:1d:fc:c0:e0: 3a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:58:52:7A:48:1F:FB:4D:4C:E5:19:B3:58:D9:3B:D7:76:C8:F6:22 X509v3 Authority Key Identifier: keyid:3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:5e:ea:12:e8:a6:17:1c:fe:41:a2:bb:8c:10:32:4d:f0:a6: 9c:4b:62:9f:48:03:cf:a4:d6:68:3d:c4:e2:51:37:a0:44:94: 97:2b:6c:56:17:85:69:5a:95:6a:bb:ad:37:46:f3:1b:9a:8a: 86:41:69:ef:83:67:3c:98:bd:c8:98:17:ef:69:e8:af:92:a4: 09:c9:8f:b0:00:99:d4:fb:fb:10:b8:f3:60:9b:34:69:ac:17: e6:a5:c1:e9:cb:e2:7d:34:7e:f8:98:01:cf:81:86:32:c2:8d: 07:ae:05:5b:5c:cf:6a:06:93:22:db:1f:f0:4f:9a:78:39:3c: 14:d5:ee:7d:26:81:70:e4:96:ff:a9:1f:85:46:ef:fc:0d:9d: a9:55:98:31:d2:64:41:f3:b3:31:a5:df:9b:b9:10:67:8f:ad: cb:ee:e9:58:e6:06:13:38:4c:b2:a3:85:2b:13:d1:85:b7:84: 10:86:c9:ea:18:70:2f:d5:ca:74:bf:4f:6d:99:19:89:b8:a1: b6:e1:a1:c2:6e:95:69:02:90:6b:f6:65:45:9b:96:29:27:bc: 0c:2a:9d:ce:a6:96:12:61:5b:36:6d:c0:ec:4a:1e:99:aa:d3: 36:a6:b0:08:03:47:de:96:3b:fc:22:b5:24:2c:81:2a:91:24: 25:a9:2d:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsalurhmhzLyslqbGi/FTpXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMzliMjM4MmYzODUxMmU1OWVkMThlYmZhYTU5NmM5NTUy MTI5MTAwHhcNMjUxMjE0MDIwMDU2WhcNMjUxMjE1MDIwMDU2WjAzMTEwLwYDVQQD EyhlZDU4NTI3YTQ4MWZmYjRkNGNlNTE5YjM1OGQ5M2JkNzc2YzhmNjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbGwO89tWBxTxMGobdX2PsxsJ0th dDgWT6mSNFILTKc3BbTSBP4HEb0qvS6nxGm1v+tapGYNfRvD0apOBGGBlVbHtBNj 3O76xU0URnmX0dfzvClilmCqwKvmuM5aRchJi6G+Hrjws5wIVUj6sbQL8sFzUtgq R6ZBDsgMb2Nw/NTPkSDDJ0RsN7OHyzVg0H+2Ume5rWoK6rgNiw1h/5RzxuGxV0Yy JkQWtB6tB87dfDDtHyV2YMG2IvDWEFFmVb8uAd2AdonzV0K00ShsWNq3QJczV+eF UpADEDmpzCxOB0UC/EVUQn5NOXzoQrnzjdJqOPV/VWUjBpGDpB38wOA64QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1YUnpIH/tNTOUZs1jZO9d2yPYiMB8GA1UdIwQY MBaAFDs5sjgvOFEuWe0Y6/qllslVISkQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3pteU9DODRVUzVaN1Jqci1xV1d5VlVoS1JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zYmRhZDYtMGVjOC00M2FjLWJjMzMt OGI4ZDc2YjJkMjRlLzEvT3pteU9DODRVUzVaN1Jqci1xV1d5VlVoS1JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8zYmRhZDYtMGVjOC00M2FjLWJjMzMtOGI4ZDc2YjJkMjRl LzEvT3pteU9DODRVUzVaN1Jqci1xV1d5VlVoS1JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARl7qEuim Fxz+QaK7jBAyTfCmnEtin0gDz6TWaD3E4lE3oESUlytsVheFaVqVarutN0bzG5qK hkFp74NnPJi9yJgX72nor5KkCcmPsACZ1Pv7ELjzYJs0aawX5qXB6cvifTR++JgB z4GGMsKNB64FW1zPagaTItsf8E+aeDk8FNXufSaBcOSW/6kfhUbv/A2dqVWYMdJk QfOzMaXfm7kQZ4+ty+7pWOYGEzhMsqOFKxPRhbeEEIbJ6hhwL9XKdL9PbZkZibih tuGhwm6VaQKQa/ZlRZuWKSe8DCqdzqaWEmFbNm3A7EoemarTNqawCANH3pY7/CK1 JCyBKpEkJaktjw== -----END CERTIFICATE-----Generated at Sun Dec 14 09:32:24 2025 by rpki-client