This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/afd99f-df55-4e97-886a-a9775aa8d812/1/Os5p2XnZoNxneVEGweVayhVHCH8.mft File: Os5p2XnZoNxneVEGweVayhVHCH8.mft (raw, json) Hash identifier: piss2ScX4s7Ub0yxbIoyHunbbJTEfgw+LQUsBXvRRbo= Subject key identifier: BC:14:8E:FC:BC:B9:38:13:5B:0B:49:F1:A1:B6:A1:EB:55:19:A4:A5 Authority key identifier: 3A:CE:69:D9:79:D9:A0:DC:67:79:51:06:C1:E5:5A:CA:15:47:08:7F Certificate issuer: /CN=3ace69d979d9a0dc67795106c1e55aca1547087f Certificate serial: 019AF3C0BDC2D37DC6E6BFE924E313ADDD3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Os5p2XnZoNxneVEGweVayhVHCH8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/afd99f-df55-4e97-886a-a9775aa8d812/1/Os5p2XnZoNxneVEGweVayhVHCH8.mft Manifest number: 175C Signing time: Sat 06 Dec 2025 13:01:26 +0000 Manifest this update: Sat 06 Dec 2025 13:01:26 +0000 Manifest next update: Sun 07 Dec 2025 13:01:26 +0000 Files and hashes: 1: Os5p2XnZoNxneVEGweVayhVHCH8.crl (hash: yIsPi3iRYbg1A/cp9p2gFYhJu2qx04dtP+32o/5Ld0A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/afd99f-df55-4e97-886a-a9775aa8d812/1/Os5p2XnZoNxneVEGweVayhVHCH8.crl rsync://rpki.ripe.net/repository/DEFAULT/06/afd99f-df55-4e97-886a-a9775aa8d812/1/Os5p2XnZoNxneVEGweVayhVHCH8.mft rsync://rpki.ripe.net/repository/DEFAULT/Os5p2XnZoNxneVEGweVayhVHCH8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:bd:c2:d3:7d:c6:e6:bf:e9:24:e3:13:ad:dd:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ace69d979d9a0dc67795106c1e55aca1547087f Validity Not Before: Dec 6 13:01:26 2025 GMT Not After : Dec 7 13:01:26 2025 GMT Subject: CN=bc148efcbcb938135b0b49f1a1b6a1eb5519a4a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:78:14:48:47:81:4d:3d:f0:9d:90:dc:68:9f: 6a:0e:4d:69:19:3f:27:d3:62:d8:bf:3f:e7:91:43: 07:a8:f5:c3:49:bc:54:95:47:87:d4:93:a0:85:f9: 47:56:5d:50:0f:e1:7d:06:b9:ca:66:73:63:1c:dd: 56:a9:de:e5:46:45:96:44:fa:ca:fc:03:7e:fc:55: 43:49:fd:9c:7e:a0:b7:86:46:fd:f4:62:36:7c:c0: c0:3e:cf:04:64:9d:9b:4d:89:b6:ca:20:6d:0b:16: 72:ca:17:57:fd:7f:4e:c5:2b:62:46:72:51:95:ed: 00:96:4d:d4:dd:76:73:87:dc:28:f0:65:a9:cf:42: 2c:c1:36:21:e4:bb:38:86:82:ed:a7:46:f4:2d:f5: dd:7a:c9:bb:2f:6f:95:18:83:4c:42:55:08:14:5a: 32:86:40:15:26:83:fb:80:9a:c8:8f:0f:84:f5:eb: 4c:f4:84:d7:ce:0a:a5:16:4c:2c:6d:90:57:9e:cd: 09:7f:ac:cd:cb:c4:0c:6a:e8:74:87:51:97:43:11: d2:25:75:59:cb:0a:24:fe:31:ed:dc:d1:eb:7d:7e: 0f:0b:5e:42:99:fd:83:38:6a:a6:4c:7c:4a:37:b7: 58:28:76:5e:31:3e:fe:2a:0a:03:95:6a:49:d8:34: ab:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:14:8E:FC:BC:B9:38:13:5B:0B:49:F1:A1:B6:A1:EB:55:19:A4:A5 X509v3 Authority Key Identifier: keyid:3A:CE:69:D9:79:D9:A0:DC:67:79:51:06:C1:E5:5A:CA:15:47:08:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Os5p2XnZoNxneVEGweVayhVHCH8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/afd99f-df55-4e97-886a-a9775aa8d812/1/Os5p2XnZoNxneVEGweVayhVHCH8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/afd99f-df55-4e97-886a-a9775aa8d812/1/Os5p2XnZoNxneVEGweVayhVHCH8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:50:de:19:1e:db:1d:12:a7:c4:02:21:6f:2e:07:23:84:d7: 4e:4b:8d:54:e8:52:e3:ef:0c:6e:3a:eb:d5:26:bb:39:48:66: 7c:8c:57:f2:24:6a:59:16:aa:a3:5a:1e:90:4f:c8:dc:ab:c2: a0:13:5e:c8:bb:b5:fb:00:29:35:1c:b3:db:48:6c:10:3f:a0: 56:f6:26:10:f2:63:0a:53:11:36:4a:15:81:74:b2:e9:63:c4: 6f:4d:5a:ce:ce:aa:04:27:ac:bb:02:4e:61:57:5c:99:5f:b2: 0d:a4:a7:84:5e:22:93:d0:6c:72:c8:f4:0c:30:94:b3:15:94: 84:b2:17:2e:e4:9d:cf:a9:a1:4c:74:71:90:96:9c:3f:ac:88: 20:73:ca:bc:23:16:02:43:eb:55:f8:bb:3e:56:12:13:5c:29: c1:ab:0f:d2:0c:3c:9f:70:c0:ed:ce:8f:c6:b4:b7:be:82:d8: 19:ec:b9:58:14:86:48:d8:b9:e6:e0:7d:36:05:52:b8:4f:b3: b1:d6:e0:e4:71:49:e1:dd:f7:1a:39:78:9c:04:60:0e:34:8b: 72:0d:25:9f:8b:fb:a7:20:a2:07:68:26:d9:58:d8:6d:dc:aa: 84:7d:01:95:64:20:61:ef:ea:39:61:8e:4f:c2:8c:b8:03:2b: 29:2d:23:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwL3C033G5r/pJOMTrd06MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhY2U2OWQ5NzlkOWEwZGM2Nzc5NTEwNmMxZTU1YWNhMTU0 NzA4N2YwHhcNMjUxMjA2MTMwMTI2WhcNMjUxMjA3MTMwMTI2WjAzMTEwLwYDVQQD EyhiYzE0OGVmY2JjYjkzODEzNWIwYjQ5ZjFhMWI2YTFlYjU1MTlhNGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8XgUSEeBTT3wnZDcaJ9qDk1pGT8n 02LYvz/nkUMHqPXDSbxUlUeH1JOghflHVl1QD+F9BrnKZnNjHN1Wqd7lRkWWRPrK /AN+/FVDSf2cfqC3hkb99GI2fMDAPs8EZJ2bTYm2yiBtCxZyyhdX/X9OxStiRnJR le0Alk3U3XZzh9wo8GWpz0IswTYh5Ls4hoLtp0b0LfXdesm7L2+VGINMQlUIFFoy hkAVJoP7gJrIjw+E9etM9ITXzgqlFkwsbZBXns0Jf6zNy8QMauh0h1GXQxHSJXVZ ywok/jHt3NHrfX4PC15Cmf2DOGqmTHxKN7dYKHZeMT7+KgoDlWpJ2DSrvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLwUjvy8uTgTWwtJ8aG2oetVGaSlMB8GA1UdIwQY MBaAFDrOadl52aDcZ3lRBsHlWsoVRwh/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3M1cDJYblpvTnhuZVZFR3dlVmF5aFZIQ0g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9hZmQ5OWYtZGY1NS00ZTk3LTg4NmEt YTk3NzVhYThkODEyLzEvT3M1cDJYblpvTnhuZVZFR3dlVmF5aFZIQ0g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9hZmQ5OWYtZGY1NS00ZTk3LTg4NmEtYTk3NzVhYThkODEy LzEvT3M1cDJYblpvTnhuZVZFR3dlVmF5aFZIQ0g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq1DeGR7b HRKnxAIhby4HI4TXTkuNVOhS4+8Mbjrr1Sa7OUhmfIxX8iRqWRaqo1oekE/I3KvC oBNeyLu1+wApNRyz20hsED+gVvYmEPJjClMRNkoVgXSy6WPEb01azs6qBCesuwJO YVdcmV+yDaSnhF4ik9Bscsj0DDCUsxWUhLIXLuSdz6mhTHRxkJacP6yIIHPKvCMW AkPrVfi7PlYSE1wpwasP0gw8n3DA7c6PxrS3voLYGey5WBSGSNi55uB9NgVSuE+z sdbg5HFJ4d33Gjl4nARgDjSLcg0ln4v7pyCiB2gm2VjYbdyqhH0BlWQgYe/qOWGO T8KMuAMrKS0jZQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:44:36 2025 by rpki-client