This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft File: ozzWJ5463BmcztFEj4CIGEKVnbs.mft (raw, json) Hash identifier: 776n1umlf9W8tmWzTzTmvDF9jebuZwEW1bVCOoPInOs= Subject key identifier: E4:3D:FD:95:0D:28:07:C7:96:F9:53:68:5C:69:5B:C0:D4:38:4E:9E Authority key identifier: A3:3C:D6:27:9E:3A:DC:19:9C:CE:D1:44:8F:80:88:18:42:95:9D:BB Certificate issuer: /CN=a33cd6279e3adc199cced1448f80881842959dbb Certificate serial: 019B39EB20902B11F05522D89096F20575AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft Manifest number: 8F Signing time: Sat 20 Dec 2025 04:01:09 +0000 Manifest this update: Sat 20 Dec 2025 04:01:09 +0000 Manifest next update: Sun 21 Dec 2025 04:01:09 +0000 Files and hashes: 1: 58vpK8vRiMDsKrPDcpGa-DJvE88.roa (hash: sInLzOJCLuIv4eBWcJWicm0cgoZkrirnczsJmugMVLs=) 2: ozzWJ5463BmcztFEj4CIGEKVnbs.crl (hash: uwPZg4tHB/rlyipGcyXMz8hDn3a23AlqxFuhj46uiI4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:20:90:2b:11:f0:55:22:d8:90:96:f2:05:75:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a33cd6279e3adc199cced1448f80881842959dbb Validity Not Before: Dec 20 04:01:09 2025 GMT Not After : Dec 21 04:01:09 2025 GMT Subject: CN=e43dfd950d2807c796f953685c695bc0d4384e9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7d:72:58:99:3a:d7:f9:d4:be:3f:33:8b:8c: 12:11:9d:51:08:cd:4c:08:e7:55:52:02:7e:33:0f: ba:24:6e:85:cf:8a:ef:7c:16:61:80:75:6b:34:fd: 00:17:27:7e:2f:c3:33:79:17:a0:1f:40:e3:e0:26: b7:88:81:6f:5e:54:36:e6:11:31:5f:3f:fa:5e:2f: f1:af:1e:40:8d:31:4c:b6:a2:e7:e2:3e:6e:ae:c5: 8c:9e:89:63:d6:7e:cf:03:67:fb:2b:34:13:7d:20: 2e:f6:87:6e:4d:c2:d3:d5:98:85:5e:df:4b:84:be: 3d:6d:ec:19:7d:6b:ac:b4:3a:ed:ce:06:6c:9a:39: 89:c2:66:6b:0e:f1:08:46:2e:05:f7:32:2b:e3:5d: 8b:fc:21:35:9a:67:91:a0:6b:f5:18:5b:3a:99:09: 0d:42:ec:01:2c:34:5d:07:ed:54:a0:e8:26:07:8b: 7f:11:44:00:9c:73:bc:7a:d2:7c:75:07:48:b4:ca: 61:1a:9a:4d:de:d4:a4:9b:17:8b:61:17:93:89:b0: 38:fa:c4:39:9a:b4:98:d8:6f:40:5f:d7:77:d4:07: 91:8d:fc:64:81:54:27:e7:86:6a:de:e8:e3:12:42: 49:8f:b9:9a:1e:eb:57:55:7d:77:1c:2f:3d:bb:de: e6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:3D:FD:95:0D:28:07:C7:96:F9:53:68:5C:69:5B:C0:D4:38:4E:9E X509v3 Authority Key Identifier: keyid:A3:3C:D6:27:9E:3A:DC:19:9C:CE:D1:44:8F:80:88:18:42:95:9D:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:e1:62:48:27:65:d1:5f:95:e4:a2:31:b6:53:99:82:42:78: 18:6b:2f:d1:c0:d1:dd:e9:3c:3c:8d:38:54:85:c8:8a:0a:54: 0b:96:38:5d:ea:0f:28:89:31:c6:17:75:83:96:a0:8f:1b:f8: 11:e4:c3:89:01:7b:27:1c:9e:4e:79:fa:b3:b0:2b:52:c4:6e: 40:dc:48:ed:27:68:23:c4:9b:6a:b9:fe:4e:db:c5:ee:d9:91: c6:12:78:71:4b:b6:66:09:23:a7:a8:24:4f:b7:78:92:18:4f: 94:6e:f3:da:14:4f:be:bf:dc:66:75:d9:8a:89:a4:88:94:ca: 68:29:60:ab:12:2d:2f:e2:b1:09:71:ef:e0:0c:6e:da:4d:c6: 7c:3f:03:39:1c:fa:d5:58:76:45:39:60:c2:8c:e2:41:1f:c0: 68:72:52:70:8a:04:96:3d:c8:51:14:7b:b2:92:08:a2:0e:4d: 06:92:e2:ce:2b:2f:f4:8f:b5:ac:ef:e2:88:31:5d:5a:4f:ad: 4d:54:2b:99:ad:fa:32:9d:f3:6d:ab:73:88:69:f0:2c:dd:31: bb:95:b9:d9:17:1e:fc:ab:d9:06:ce:92:6b:38:1a:d7:af:5e: d7:f6:4a:16:14:3d:d7:20:4c:bc:61:23:86:f0:99:d5:ce:c1: 08:39:a8:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56yCQKxHwVSLYkJbyBXWrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzM2NkNjI3OWUzYWRjMTk5Y2NlZDE0NDhmODA4ODE4NDI5 NTlkYmIwHhcNMjUxMjIwMDQwMTA5WhcNMjUxMjIxMDQwMTA5WjAzMTEwLwYDVQQD EyhlNDNkZmQ5NTBkMjgwN2M3OTZmOTUzNjg1YzY5NWJjMGQ0Mzg0ZTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX1yWJk61/nUvj8zi4wSEZ1RCM1M COdVUgJ+Mw+6JG6Fz4rvfBZhgHVrNP0AFyd+L8MzeRegH0Dj4Ca3iIFvXlQ25hEx Xz/6Xi/xrx5AjTFMtqLn4j5ursWMnolj1n7PA2f7KzQTfSAu9oduTcLT1ZiFXt9L hL49bewZfWustDrtzgZsmjmJwmZrDvEIRi4F9zIr412L/CE1mmeRoGv1GFs6mQkN QuwBLDRdB+1UoOgmB4t/EUQAnHO8etJ8dQdItMphGppN3tSkmxeLYReTibA4+sQ5 mrSY2G9AX9d31AeRjfxkgVQn54Zq3ujjEkJJj7maHutXVX13HC89u97mUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQ9/ZUNKAfHlvlTaFxpW8DUOE6eMB8GA1UdIwQY MBaAFKM81ieeOtwZnM7RRI+AiBhClZ27MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3p6V0o1NDYzQm1jenRGRWo0Q0lHRUtWbmJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82Y2UwNzYtMTI2ZS00ZTQ4LWE3NTkt YWE1YmIwYWJhYzIzLzEvb3p6V0o1NDYzQm1jenRGRWo0Q0lHRUtWbmJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy82Y2UwNzYtMTI2ZS00ZTQ4LWE3NTktYWE1YmIwYWJhYzIz LzEvb3p6V0o1NDYzQm1jenRGRWo0Q0lHRUtWbmJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw+FiSCdl 0V+V5KIxtlOZgkJ4GGsv0cDR3ek8PI04VIXIigpUC5Y4XeoPKIkxxhd1g5agjxv4 EeTDiQF7JxyeTnn6s7ArUsRuQNxI7SdoI8Sbarn+TtvF7tmRxhJ4cUu2Zgkjp6gk T7d4khhPlG7z2hRPvr/cZnXZiomkiJTKaClgqxItL+KxCXHv4Axu2k3GfD8DORz6 1Vh2RTlgwoziQR/AaHJScIoElj3IURR7spIIog5NBpLizisv9I+1rO/iiDFdWk+t TVQrma36Mp3zbatziGnwLN0xu5W52Rce/KvZBs6Sazga169e1/ZKFhQ91yBMvGEj hvCZ1c7BCDmoiw== -----END CERTIFICATE-----Generated at Sat Dec 20 06:42:23 2025 by rpki-client