This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft File: osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft (raw, json) Hash identifier: YUQnsyT9bvnYGhS6LhYBrUjM+7wamIzQt1dnILXmFcc= Subject key identifier: FE:ED:B0:7D:03:A4:07:DE:F9:9A:71:98:36:14:A9:C4:55:AA:74:61 Authority key identifier: A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24 Certificate issuer: /CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824 Certificate serial: 019B42EE5DB85B62B28C462B8AA52B32B694 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft Manifest number: 178E Signing time: Sun 21 Dec 2025 22:01:16 +0000 Manifest this update: Sun 21 Dec 2025 22:01:16 +0000 Manifest next update: Mon 22 Dec 2025 22:01:16 +0000 Files and hashes: 1: 02C_6-y3jpHJLm9UcRW5gBVff44.roa (hash: wYTntFQi0lmSYI73ThMJ6MckJaqvifZzL3vAEsSW0Jk=) 2: osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl (hash: BCaZS6540XGxs3o1YZp1wa9E/rUMYd37fT2rQF72kR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:5d:b8:5b:62:b2:8c:46:2b:8a:a5:2b:32:b6:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824 Validity Not Before: Dec 21 22:01:16 2025 GMT Not After : Dec 22 22:01:16 2025 GMT Subject: CN=feedb07d03a407def99a71983614a9c455aa7461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:45:c4:18:64:d3:d0:68:38:dd:51:03:54:ef: 4b:8d:0a:e2:19:3f:32:77:63:78:74:c6:ef:79:9f: 57:b8:ff:d0:6e:a0:7b:64:ec:4d:85:7d:30:3d:a9: e9:71:2c:d0:b2:49:e2:33:0b:35:f0:f4:19:ad:16: b4:40:52:9d:a1:3a:7d:ff:06:8b:10:28:a1:78:bc: ad:e4:64:b3:86:cb:5b:4a:7b:b5:02:8b:33:99:e0: 2d:a9:55:44:cd:67:d3:c4:19:d0:62:b3:85:3e:e0: 51:0f:6c:df:96:64:b5:cd:1a:5f:3f:aa:52:37:1f: 19:c7:39:b2:f7:06:aa:f7:61:0f:ee:35:47:52:83: 0d:47:0a:8e:ef:f8:d8:22:c4:6b:9e:a0:bd:fc:d4: 05:6f:c9:6d:54:a2:42:fc:71:4a:64:a4:84:9d:06: 83:d7:a7:59:29:38:26:3e:6e:d8:e6:86:a0:bb:db: c1:48:d8:a4:bb:2e:ca:02:a1:3a:80:a9:6d:3d:9a: 96:f6:7c:d7:38:7a:b7:a5:98:d8:08:7e:78:79:d1: ab:54:42:d0:75:01:c4:f4:e7:88:e8:82:63:58:54: 3f:67:7d:ef:72:06:33:fc:d7:59:29:8f:f9:cf:1b: 02:ca:63:e3:60:f1:41:28:e5:30:ae:f1:08:ee:ee: 94:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:ED:B0:7D:03:A4:07:DE:F9:9A:71:98:36:14:A9:C4:55:AA:74:61 X509v3 Authority Key Identifier: keyid:A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:07:b2:3a:8d:de:d3:4d:95:4c:e6:f1:42:be:e8:d7:32:f8: 53:df:76:ab:a3:84:20:38:24:4c:ee:1c:a6:51:d5:d1:d9:2b: 55:c4:64:fa:7d:73:de:c9:ed:eb:3b:ec:c9:1c:28:73:cb:ce: d0:f9:f1:9d:18:df:fa:0b:37:61:ff:7c:70:b7:66:0f:14:5c: b5:2b:95:73:2f:62:1c:8d:dd:cf:ff:a8:8b:2f:96:73:80:56: f4:d2:a9:9c:39:ec:24:83:cb:5f:9f:72:b3:d3:59:12:3f:66: 67:38:dc:9d:ae:1a:9a:2f:76:24:3c:7c:e1:fb:fc:6e:19:a2: 63:6e:a4:d6:62:b6:e2:30:28:b8:cd:ca:5c:44:0f:56:f2:c2: e3:47:17:36:94:b6:75:0c:38:30:19:9a:0c:43:59:d0:12:bb: f3:06:df:09:b8:12:c2:f8:d4:62:5c:d8:e3:e4:a8:c5:0a:71: cb:4d:91:2d:24:ce:61:40:ba:60:c7:c8:e2:53:41:9e:fb:82: 2d:48:4f:14:98:ce:b9:c3:5c:63:5c:3e:4b:0b:6c:d5:b5:92: 61:a3:32:ca:64:ef:71:a2:e7:36:50:d3:a5:f9:ed:7b:8a:28: dd:ab:8b:dd:af:f9:09:91:a4:ee:7a:0f:cd:5e:d7:0c:41:55: 31:3d:58:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7l24W2KyjEYriqUrMraUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyY2JlOWFiYTFmZjc1NjRkOTEzZWQ3ODY3MmUzMzcxYjdm MzU4MjQwHhcNMjUxMjIxMjIwMTE2WhcNMjUxMjIyMjIwMTE2WjAzMTEwLwYDVQQD EyhmZWVkYjA3ZDAzYTQwN2RlZjk5YTcxOTgzNjE0YTljNDU1YWE3NDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0XEGGTT0Gg43VEDVO9LjQriGT8y d2N4dMbveZ9XuP/QbqB7ZOxNhX0wPanpcSzQskniMws18PQZrRa0QFKdoTp9/waL ECiheLyt5GSzhstbSnu1AoszmeAtqVVEzWfTxBnQYrOFPuBRD2zflmS1zRpfP6pS Nx8Zxzmy9waq92EP7jVHUoMNRwqO7/jYIsRrnqC9/NQFb8ltVKJC/HFKZKSEnQaD 16dZKTgmPm7Y5oagu9vBSNikuy7KAqE6gKltPZqW9nzXOHq3pZjYCH54edGrVELQ dQHE9OeI6IJjWFQ/Z33vcgYz/NdZKY/5zxsCymPjYPFBKOUwrvEI7u6UQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP7tsH0DpAfe+ZpxmDYUqcRVqnRhMB8GA1UdIwQY MBaAFKLL6auh/3Vk2RPteGcuM3G381gkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3N2cHE2SF9kV1RaRS0xNFp5NHpjYmZ6V0NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS80MDhlODMtNTMwZC00NDYyLWIxYzkt ZGYzMjRjNGM2ZWVkLzEvb3N2cHE2SF9kV1RaRS0xNFp5NHpjYmZ6V0NRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS80MDhlODMtNTMwZC00NDYyLWIxYzktZGYzMjRjNGM2ZWVk LzEvb3N2cHE2SF9kV1RaRS0xNFp5NHpjYmZ6V0NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUgeyOo3e 002VTObxQr7o1zL4U992q6OEIDgkTO4cplHV0dkrVcRk+n1z3snt6zvsyRwoc8vO 0PnxnRjf+gs3Yf98cLdmDxRctSuVcy9iHI3dz/+oiy+Wc4BW9NKpnDnsJIPLX59y s9NZEj9mZzjcna4ami92JDx84fv8bhmiY26k1mK24jAouM3KXEQPVvLC40cXNpS2 dQw4MBmaDENZ0BK78wbfCbgSwvjUYlzY4+SoxQpxy02RLSTOYUC6YMfI4lNBnvuC LUhPFJjOucNcY1w+Swts1bWSYaMyymTvcaLnNlDTpfnte4oo3auL3a/5CZGk7noP zV7XDEFVMT1YlA== -----END CERTIFICATE-----Generated at Mon Dec 22 07:03:45 2025 by rpki-client