This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft File: oCcpAmWOFcs0vVCcOVC63iGnltI.mft (raw, json) Hash identifier: XWsHGztpnagr7rIJDaIUYawXNiAMVBAMiz8UkGJqlus= Subject key identifier: 04:8D:F2:D2:F9:EB:73:E6:B7:75:F9:94:39:27:D3:2E:B0:04:3F:2A Authority key identifier: A0:27:29:02:65:8E:15:CB:34:BD:50:9C:39:50:BA:DE:21:A7:96:D2 Certificate issuer: /CN=a0272902658e15cb34bd509c3950bade21a796d2 Certificate serial: 019B19F1F57C1DF3618A639BFE5FE2435B8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft Manifest number: 1775 Signing time: Sat 13 Dec 2025 23:00:45 +0000 Manifest this update: Sat 13 Dec 2025 23:00:45 +0000 Manifest next update: Sun 14 Dec 2025 23:00:45 +0000 Files and hashes: 1: oCcpAmWOFcs0vVCcOVC63iGnltI.crl (hash: 1fRzU846ZmvrZNI1vsq+Ck/JAJAUf5loIo4yzvFt6B8=) 2: uXecHkITe3bY6-3ektwCD9ek34Q.roa (hash: 5+69NhDXNCJ8JAsANzmdkWv9h8VWfgURSoIbAe4jtSk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:f1:f5:7c:1d:f3:61:8a:63:9b:fe:5f:e2:43:5b:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0272902658e15cb34bd509c3950bade21a796d2 Validity Not Before: Dec 13 23:00:45 2025 GMT Not After : Dec 14 23:00:45 2025 GMT Subject: CN=048df2d2f9eb73e6b775f9943927d32eb0043f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0b:4b:41:78:a7:b7:1a:81:be:58:29:1e:f4: 6a:43:56:c1:94:3f:29:b5:c3:43:94:3e:f2:d3:c5: b2:0d:47:62:ff:9b:30:d0:b7:47:a7:c1:66:1c:ea: 78:41:e1:a0:59:cc:9e:18:ed:a6:0b:a0:8e:ac:e0: 4f:68:d3:e0:11:57:a2:79:d8:11:67:20:18:83:d7: 22:83:5a:79:62:b9:5b:69:13:e1:4c:65:5b:42:e1: 0a:28:02:28:94:37:56:68:83:6b:ff:de:73:22:0a: 9b:96:0b:fd:fc:c0:c3:01:ae:02:3b:a9:0e:ed:0d: 2d:14:ee:a4:63:e0:17:51:8e:d6:3b:ec:36:6c:6e: 0a:41:98:2a:1c:da:3a:0b:83:c5:0b:33:88:4f:3c: 89:ee:d5:3e:dc:2f:99:5d:ec:55:1e:d4:89:7a:e6: 95:f2:b5:63:a0:35:20:b5:a9:74:23:c8:37:eb:97: f0:b2:fb:70:ea:b2:49:cc:5c:fb:9e:e7:06:b9:05: e9:fc:f2:4a:e4:75:16:be:fa:30:c3:10:cc:62:40: 5e:aa:7c:ab:6a:de:c8:75:40:86:1e:ed:25:99:ad: bb:a7:93:56:ba:1f:1a:99:34:39:1d:88:f7:c5:9a: 57:32:0a:36:55:eb:1c:ac:f8:bb:91:20:2f:0b:bb: 9d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:8D:F2:D2:F9:EB:73:E6:B7:75:F9:94:39:27:D3:2E:B0:04:3F:2A X509v3 Authority Key Identifier: keyid:A0:27:29:02:65:8E:15:CB:34:BD:50:9C:39:50:BA:DE:21:A7:96:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:18:ff:8b:fb:68:d2:2b:7e:07:1d:bf:37:3b:14:ab:64:67: 97:d7:08:bf:49:75:c4:bf:11:cf:ee:18:53:db:e2:e5:c8:de: 95:ff:d7:9f:78:23:d3:27:66:0d:ca:74:36:cb:03:f0:46:71: 23:01:50:f0:e3:01:d1:9d:e4:f4:94:42:16:ba:c5:05:7e:c3: c7:52:f2:47:c1:0b:14:d0:11:4e:a7:8c:e4:06:4d:d2:e4:cb: ff:c6:05:fd:8a:13:28:32:ad:ec:0c:32:be:9b:f3:27:5f:00: 28:1f:54:65:65:46:65:4b:9a:06:5d:ac:22:47:c0:40:ca:3f: 82:25:e6:90:55:c9:10:4c:c4:53:f8:3b:34:0c:8a:34:39:44: bf:d1:c5:ed:fe:82:5f:12:95:a2:83:fa:25:ed:1d:b4:c8:60: 68:95:c5:c3:19:6b:fd:16:f6:53:9d:d9:15:62:e5:90:f4:a3: 3a:8c:88:15:64:51:89:88:61:d4:31:0c:e3:7b:21:d9:6b:42: 6c:1c:ab:a3:5c:56:06:48:1c:10:46:48:c3:20:a7:00:97:c4: 2a:d7:be:5e:77:ff:4d:3d:da:cb:d7:f5:9e:d3:66:0c:46:b8: 71:00:84:79:cb:16:90:66:f0:38:6e:a1:40:2a:19:fb:de:59: 7e:64:72:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZ8fV8HfNhimOb/l/iQ1uOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwMjcyOTAyNjU4ZTE1Y2IzNGJkNTA5YzM5NTBiYWRlMjFh Nzk2ZDIwHhcNMjUxMjEzMjMwMDQ1WhcNMjUxMjE0MjMwMDQ1WjAzMTEwLwYDVQQD EygwNDhkZjJkMmY5ZWI3M2U2Yjc3NWY5OTQzOTI3ZDMyZWIwMDQzZjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQtLQXintxqBvlgpHvRqQ1bBlD8p tcNDlD7y08WyDUdi/5sw0LdHp8FmHOp4QeGgWcyeGO2mC6COrOBPaNPgEVeiedgR ZyAYg9cig1p5YrlbaRPhTGVbQuEKKAIolDdWaINr/95zIgqblgv9/MDDAa4CO6kO 7Q0tFO6kY+AXUY7WO+w2bG4KQZgqHNo6C4PFCzOITzyJ7tU+3C+ZXexVHtSJeuaV 8rVjoDUgtal0I8g365fwsvtw6rJJzFz7nucGuQXp/PJK5HUWvvowwxDMYkBeqnyr at7IdUCGHu0lma27p5NWuh8amTQ5HYj3xZpXMgo2VescrPi7kSAvC7uduwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFASN8tL563Pmt3X5lDkn0y6wBD8qMB8GA1UdIwQY MBaAFKAnKQJljhXLNL1QnDlQut4hp5bSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0NjcEFtV09GY3MwdlZDY09WQzYzaUdubHRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zZTlkMWMtNGIwOC00NWM3LWE5ZTgt OTI3NTI2ZTZmMmQ5LzEvb0NjcEFtV09GY3MwdlZDY09WQzYzaUdubHRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8zZTlkMWMtNGIwOC00NWM3LWE5ZTgtOTI3NTI2ZTZmMmQ5 LzEvb0NjcEFtV09GY3MwdlZDY09WQzYzaUdubHRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlhj/i/to 0it+Bx2/NzsUq2Rnl9cIv0l1xL8Rz+4YU9vi5cjelf/Xn3gj0ydmDcp0NssD8EZx IwFQ8OMB0Z3k9JRCFrrFBX7Dx1LyR8ELFNARTqeM5AZN0uTL/8YF/YoTKDKt7Awy vpvzJ18AKB9UZWVGZUuaBl2sIkfAQMo/giXmkFXJEEzEU/g7NAyKNDlEv9HF7f6C XxKVooP6Je0dtMhgaJXFwxlr/Rb2U53ZFWLlkPSjOoyIFWRRiYhh1DEM43sh2WtC bByro1xWBkgcEEZIwyCnAJfEKte+Xnf/TT3ay9f1ntNmDEa4cQCEecsWkGbwOG6h QCoZ+95ZfmRykw== -----END CERTIFICATE-----Generated at Sun Dec 14 01:50:49 2025 by rpki-client