This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft File: OsePM-jhGHMnZn-pT9dEa42R5bQ.mft (raw, json) Hash identifier: 56AnX7b47AzzG311HhpupIpsC4VE+jbgeQDExEubbZs= Subject key identifier: F2:FF:31:3C:24:AB:E7:CA:C3:7B:58:B8:B7:14:60:1A:4F:A9:A1:91 Authority key identifier: 3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4 Certificate issuer: /CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4 Certificate serial: 019AFCC4063C2BA795BA1597B41E6519A320 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft Manifest number: 1769 Signing time: Mon 08 Dec 2025 07:01:36 +0000 Manifest this update: Mon 08 Dec 2025 07:01:36 +0000 Manifest next update: Tue 09 Dec 2025 07:01:36 +0000 Files and hashes: 1: F6UTD5xs6irn044j6Bn0b3rkg8E.roa (hash: 9sFquSQ+RMEX3oUpXt6ncKZDty2H5HID8F9gmHeYrQI=) 2: OsePM-jhGHMnZn-pT9dEa42R5bQ.crl (hash: 34/ptcJl2QHHnPCjz7okMV0PPQxQwb7zvSg3Rrwh47U=) 3: XWOSrFlYBz01u9ZbsC7SaVbGNk0.roa (hash: cXF9VQeB5aeojhDFULFIh/R4knNnDgR602re3Gn7FPU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:c4:06:3c:2b:a7:95:ba:15:97:b4:1e:65:19:a3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4 Validity Not Before: Dec 8 07:01:36 2025 GMT Not After : Dec 9 07:01:36 2025 GMT Subject: CN=f2ff313c24abe7cac37b58b8b714601a4fa9a191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1f:c7:6e:20:63:ca:67:f7:00:f0:a2:f2:d7: e5:a5:96:77:f7:fc:da:f8:a3:53:c1:2d:59:01:07: ff:ed:9c:47:94:b9:32:6d:7b:02:57:d4:24:a8:af: 9d:36:ae:39:07:af:1d:43:91:53:20:a1:2c:df:87: 00:f3:c5:0b:2e:a1:21:46:7b:37:57:04:08:24:c9: 21:0a:5a:a6:73:ce:1d:de:2c:04:72:8c:52:be:38: 21:33:0a:4a:2d:88:d4:c4:08:4b:94:ed:6c:f0:a8: 05:8e:e9:0e:e5:16:5d:7b:b7:c9:b0:f5:35:b3:3e: 7b:f1:f9:7c:0b:31:27:b8:d9:7d:d9:95:ed:8f:22: c1:6f:2a:9b:8a:bc:d6:93:10:b0:c8:b5:9e:fc:d0: 9a:91:4c:b1:39:d4:58:cc:93:80:95:da:3e:98:37: 9d:1d:11:2f:72:f6:58:0e:31:94:5f:16:bf:c0:f5: fd:1c:98:9f:d5:79:ee:e5:83:6a:82:d1:51:85:e9: 59:4d:9a:d6:d1:98:e1:b3:64:6a:cc:22:18:05:65: 34:11:b5:2b:d6:50:d3:05:05:17:d1:60:05:a4:8c: a9:77:f6:25:15:bf:66:09:50:56:eb:7f:6f:eb:0d: 7f:4c:cc:86:62:f0:ee:02:48:3d:7a:d2:52:08:9f: eb:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:FF:31:3C:24:AB:E7:CA:C3:7B:58:B8:B7:14:60:1A:4F:A9:A1:91 X509v3 Authority Key Identifier: keyid:3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:87:9b:07:cd:ce:c5:94:05:1c:84:1b:6e:4b:af:6f:0e:9e: 14:aa:6e:97:cb:4d:b4:40:94:e5:34:8b:3d:a4:04:11:9c:ae: bb:f4:6d:0e:57:46:d1:ee:78:52:08:41:07:73:d8:0d:cb:2c: 39:8d:c3:53:f7:d4:44:83:61:79:a1:8a:d5:d2:91:5d:46:13: f9:8b:f7:6b:f2:a5:f3:62:85:d2:64:a9:cb:c5:f5:ca:09:b6: 85:09:b1:13:9a:7c:8f:70:60:09:2d:f3:8d:c8:30:5c:04:1e: 37:c8:fa:6f:75:2c:22:11:11:88:10:6d:a3:2a:8d:d0:be:02: 5e:60:9a:bf:0b:f1:46:0e:bd:a8:59:b5:3a:14:cb:69:7f:c9: 9f:67:57:ee:c2:cf:5d:b8:7d:11:f1:55:ed:9e:26:f8:06:c8: 22:5c:a0:9b:bd:e8:de:33:97:60:09:b9:cf:d1:8f:a4:a9:b4: 9a:9b:99:4e:52:36:72:d5:95:f8:09:7d:a4:90:f6:62:9d:c4: 47:d1:e7:56:f6:c7:dd:db:53:37:20:fd:51:41:da:71:ed:8c: d7:c7:90:68:17:5c:3c:8c:90:23:98:26:1f:1a:fc:b7:0b:ad: 24:aa:fd:03:9f:39:70:02:0e:2d:de:f2:68:17:c4:98:dd:59: ef:94:a0:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8xAY8K6eVuhWXtB5lGaMgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhYzc4ZjMzZThlMTE4NzMyNzY2N2ZhOTRmZDc0NDZiOGQ5 MWU1YjQwHhcNMjUxMjA4MDcwMTM2WhcNMjUxMjA5MDcwMTM2WjAzMTEwLwYDVQQD EyhmMmZmMzEzYzI0YWJlN2NhYzM3YjU4YjhiNzE0NjAxYTRmYTlhMTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjx/HbiBjymf3APCi8tflpZZ39/za +KNTwS1ZAQf/7ZxHlLkybXsCV9QkqK+dNq45B68dQ5FTIKEs34cA88ULLqEhRns3 VwQIJMkhClqmc84d3iwEcoxSvjghMwpKLYjUxAhLlO1s8KgFjukO5RZde7fJsPU1 sz578fl8CzEnuNl92ZXtjyLBbyqbirzWkxCwyLWe/NCakUyxOdRYzJOAldo+mDed HREvcvZYDjGUXxa/wPX9HJif1Xnu5YNqgtFRhelZTZrW0Zjhs2RqzCIYBWU0EbUr 1lDTBQUX0WAFpIypd/YlFb9mCVBW639v6w1/TMyGYvDuAkg9etJSCJ/rPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPL/MTwkq+fKw3tYuLcUYBpPqaGRMB8GA1UdIwQY MBaAFDrHjzPo4RhzJ2Z/qU/XRGuNkeW0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3NlUE0tamhHSE1uWm4tcFQ5ZEVhNDJSNWJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81ZWRhYWYtMzMyNy00M2VkLTkwYjEt ZGMwMWY0YjRiYWU0LzEvT3NlUE0tamhHSE1uWm4tcFQ5ZEVhNDJSNWJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy81ZWRhYWYtMzMyNy00M2VkLTkwYjEtZGMwMWY0YjRiYWU0 LzEvT3NlUE0tamhHSE1uWm4tcFQ5ZEVhNDJSNWJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFYebB83O xZQFHIQbbkuvbw6eFKpul8tNtECU5TSLPaQEEZyuu/RtDldG0e54UghBB3PYDcss OY3DU/fURINheaGK1dKRXUYT+Yv3a/Kl82KF0mSpy8X1ygm2hQmxE5p8j3BgCS3z jcgwXAQeN8j6b3UsIhERiBBtoyqN0L4CXmCavwvxRg69qFm1OhTLaX/Jn2dX7sLP Xbh9EfFV7Z4m+AbIIlygm73o3jOXYAm5z9GPpKm0mpuZTlI2ctWV+Al9pJD2Yp3E R9HnVvbH3dtTNyD9UUHace2M18eQaBdcPIyQI5gmHxr8twutJKr9A585cAIOLd7y aBfEmN1Z75Sgiw== -----END CERTIFICATE-----Generated at Mon Dec 8 09:37:20 2025 by rpki-client