This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.mft File: OstMHbOigqLFrhaULo1gYb50UWs.mft (raw, json) Hash identifier: s/DPTB8eXC7R/SIrpvcAPMFnkq8Nm72NWLydyBvemJM= Subject key identifier: 9D:8C:34:E0:5B:F9:22:90:89:20:58:38:13:2C:14:B9:12:A2:CF:9C Authority key identifier: 3A:CB:4C:1D:B3:A2:82:A2:C5:AE:16:94:2E:8D:60:61:BE:74:51:6B Certificate issuer: /CN=3acb4c1db3a282a2c5ae16942e8d6061be74516b Certificate serial: 019AF12E4B0F530F326AC4D1A98AFF9870A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OstMHbOigqLFrhaULo1gYb50UWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.mft Manifest number: 0FCF Signing time: Sat 06 Dec 2025 01:02:14 +0000 Manifest this update: Sat 06 Dec 2025 01:02:14 +0000 Manifest next update: Sun 07 Dec 2025 01:02:14 +0000 Files and hashes: 1: OstMHbOigqLFrhaULo1gYb50UWs.crl (hash: ch0KSWOqkIWDT2jwEmSmLsFOTYMt+2HgQAysi6Us75M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.mft rsync://rpki.ripe.net/repository/DEFAULT/OstMHbOigqLFrhaULo1gYb50UWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:4b:0f:53:0f:32:6a:c4:d1:a9:8a:ff:98:70:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3acb4c1db3a282a2c5ae16942e8d6061be74516b Validity Not Before: Dec 6 01:02:14 2025 GMT Not After : Dec 7 01:02:14 2025 GMT Subject: CN=9d8c34e05bf9229089205838132c14b912a2cf9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:91:56:7d:1a:28:85:5f:61:96:c5:e2:af:69: e8:67:16:89:e4:fd:a1:bc:4b:1c:eb:c5:6f:fb:3d: 15:56:cc:f6:1b:74:7f:e3:d4:4e:31:35:3e:98:1e: 26:cc:cb:59:d8:53:c6:75:70:5b:b4:64:28:d0:b3: 9f:9a:b8:1d:7d:f4:57:84:09:77:e7:db:9b:a9:dc: 96:60:64:d3:18:ca:a4:91:05:e2:96:f8:cc:0a:09: 37:ac:85:45:58:2d:fa:36:28:06:ee:b6:6d:a1:89: 35:46:ce:81:e8:32:24:d5:4a:64:8b:b5:6a:7b:3e: d1:f8:38:05:87:f2:f6:c3:b5:64:54:87:79:a2:c3: f0:90:5d:71:6f:ca:e9:b2:d1:21:60:25:15:ad:45: eb:db:f1:e6:ff:c3:75:e9:04:c7:06:6d:67:4a:69: 35:92:40:8b:6d:9c:f4:5e:ce:ee:e0:ca:e3:8f:de: 55:ec:0b:9d:b1:7e:42:e4:01:b1:24:fc:00:c8:b8: 4f:3e:d7:df:c5:92:7c:a3:31:02:b2:9d:35:91:67: 1d:db:dc:56:d1:4a:40:cd:2f:cc:3b:ce:a3:7c:6e: d6:57:79:70:79:16:07:99:aa:24:c5:b5:c2:ed:8b: b4:4d:e1:0d:56:33:66:cb:ae:ce:02:7b:bf:cf:c0: c3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:8C:34:E0:5B:F9:22:90:89:20:58:38:13:2C:14:B9:12:A2:CF:9C X509v3 Authority Key Identifier: keyid:3A:CB:4C:1D:B3:A2:82:A2:C5:AE:16:94:2E:8D:60:61:BE:74:51:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OstMHbOigqLFrhaULo1gYb50UWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:86:a9:b5:56:6f:9c:75:9c:5a:f8:6c:68:5e:79:32:46:7c: 7f:2f:3f:50:15:80:bf:9c:b9:8a:c8:32:bf:bb:4f:98:cd:a5: 53:a4:41:2a:a0:e7:7b:a1:4c:13:80:57:da:8a:9c:e8:85:a8: 70:13:ab:4f:e7:7e:f7:92:7f:21:30:55:15:e9:f1:2d:ae:8c: 8f:06:eb:ac:91:27:3a:04:d9:44:f3:fd:db:40:24:91:4e:2b: 48:09:e8:4c:64:60:e9:91:b7:36:92:2d:27:79:e8:16:dc:4e: 56:ca:86:30:2f:dc:18:99:ee:c3:4c:b5:9e:fc:13:42:a9:e3: 65:46:be:fe:5f:8a:a3:09:89:65:f3:7e:74:a1:ef:bf:4a:c0: e8:34:92:24:f6:d1:69:5b:68:f1:ac:c0:94:fa:03:a4:68:0e: 0e:b6:37:92:a1:78:89:9b:83:77:1d:34:d2:20:3d:13:10:79: 21:5a:8f:90:f8:6c:9d:20:0a:1a:db:2b:63:e9:35:1d:e1:9b: b0:b4:67:c6:83:5f:b3:ab:07:1c:2a:9e:ff:1d:46:45:73:90: df:3b:a3:3a:bf:42:17:a5:86:23:af:8e:87:24:69:6f:3d:6f: ec:d9:13:e3:5b:de:cc:2e:e6:1f:f0:a5:cb:63:4a:0a:0f:ab: 13:f9:e0:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLksPUw8yasTRqYr/mHCiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhY2I0YzFkYjNhMjgyYTJjNWFlMTY5NDJlOGQ2MDYxYmU3 NDUxNmIwHhcNMjUxMjA2MDEwMjE0WhcNMjUxMjA3MDEwMjE0WjAzMTEwLwYDVQQD Eyg5ZDhjMzRlMDViZjkyMjkwODkyMDU4MzgxMzJjMTRiOTEyYTJjZjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpFWfRoohV9hlsXir2noZxaJ5P2h vEsc68Vv+z0VVsz2G3R/49ROMTU+mB4mzMtZ2FPGdXBbtGQo0LOfmrgdffRXhAl3 59ubqdyWYGTTGMqkkQXilvjMCgk3rIVFWC36NigG7rZtoYk1Rs6B6DIk1Upki7Vq ez7R+DgFh/L2w7VkVId5osPwkF1xb8rpstEhYCUVrUXr2/Hm/8N16QTHBm1nSmk1 kkCLbZz0Xs7u4Mrjj95V7AudsX5C5AGxJPwAyLhPPtffxZJ8ozECsp01kWcd29xW 0UpAzS/MO86jfG7WV3lweRYHmaokxbXC7Yu0TeENVjNmy67OAnu/z8DD8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2MNOBb+SKQiSBYOBMsFLkSos+cMB8GA1UdIwQY MBaAFDrLTB2zooKixa4WlC6NYGG+dFFrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3N0TUhiT2lncUxGcmhhVUxvMWdZYjUwVVdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi81YTgyYTctOGY2MS00NzQ5LTkxMTgt Y2JmMzRlYmNhNGI5LzEvT3N0TUhiT2lncUxGcmhhVUxvMWdZYjUwVVdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi81YTgyYTctOGY2MS00NzQ5LTkxMTgtY2JmMzRlYmNhNGI5 LzEvT3N0TUhiT2lncUxGcmhhVUxvMWdZYjUwVVdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj4aptVZv nHWcWvhsaF55MkZ8fy8/UBWAv5y5isgyv7tPmM2lU6RBKqDne6FME4BX2oqc6IWo cBOrT+d+95J/ITBVFenxLa6MjwbrrJEnOgTZRPP920AkkU4rSAnoTGRg6ZG3NpIt J3noFtxOVsqGMC/cGJnuw0y1nvwTQqnjZUa+/l+KowmJZfN+dKHvv0rA6DSSJPbR aVto8azAlPoDpGgODrY3kqF4iZuDdx000iA9ExB5IVqPkPhsnSAKGtsrY+k1HeGb sLRnxoNfs6sHHCqe/x1GRXOQ3zujOr9CF6WGI6+OhyRpbz1v7NkT41vezC7mH/Cl y2NKCg+rE/ngfg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:25:06 2025 by rpki-client