This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft File: osUThqzwWzqrYYEEdHjW7qG_AGI.mft (raw, json) Hash identifier: B19mDwvHANDhYzeMNRZ56xrIfFXaSvR4nRk/M3exkh0= Subject key identifier: 35:FD:98:21:38:85:CB:48:40:D1:86:25:D7:75:B0:F8:09:49:6A:3A Authority key identifier: A2:C5:13:86:AC:F0:5B:3A:AB:61:81:04:74:78:D6:EE:A1:BF:00:62 Certificate issuer: /CN=a2c51386acf05b3aab6181047478d6eea1bf0062 Certificate serial: 019AF577ED50E7BAAA440D590629B2B6A68F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osUThqzwWzqrYYEEdHjW7qG_AGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft Manifest number: 034E Signing time: Sat 06 Dec 2025 21:01:08 +0000 Manifest this update: Sat 06 Dec 2025 21:01:08 +0000 Manifest next update: Sun 07 Dec 2025 21:01:08 +0000 Files and hashes: 1: 0cFm87h5GkHalEGqmJaLcd0Qqo8.roa (hash: jMxPSL+zdsv3eh4JmgehYYH5Kp/WnR56mTqAfCb0p0E=) 2: osUThqzwWzqrYYEEdHjW7qG_AGI.crl (hash: 633PPeGcS+EXMth1uB9U6+I4eyYVZ7xKVRGZ+CAEgSY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.crl rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft rsync://rpki.ripe.net/repository/DEFAULT/osUThqzwWzqrYYEEdHjW7qG_AGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:ed:50:e7:ba:aa:44:0d:59:06:29:b2:b6:a6:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2c51386acf05b3aab6181047478d6eea1bf0062 Validity Not Before: Dec 6 21:01:08 2025 GMT Not After : Dec 7 21:01:08 2025 GMT Subject: CN=35fd98213885cb4840d18625d775b0f809496a3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0c:21:02:12:51:e0:5c:2f:04:ce:fc:2c:00: 5f:06:9e:ab:ef:92:73:4c:97:47:1e:17:6e:48:09: a4:4f:e1:7f:8d:8c:46:9d:79:b4:87:64:25:24:09: b3:71:5b:e8:06:d9:1a:cb:bd:c1:75:6b:52:fe:f9: 91:40:57:ad:0b:bc:94:1c:99:fd:ca:b0:81:c1:a6: 06:eb:fe:0b:07:ad:23:da:27:3c:e6:15:9c:3b:ab: e9:08:10:26:78:3e:e3:cc:6a:ab:62:b6:c2:13:11: df:2c:33:84:bb:75:4a:6d:ea:3c:84:6a:c4:b3:b1: 66:45:4a:65:4f:a0:25:b0:a1:a7:ab:9e:54:03:65: a4:5d:aa:4d:db:29:ed:31:84:af:c7:1c:52:97:78: f4:75:ed:f7:f6:ce:e5:7b:f4:8c:c2:99:ad:24:5b: d7:12:88:ea:d4:15:16:f5:ff:51:be:97:4d:76:8d: 7b:f9:f6:41:10:cb:bd:a9:ce:ef:b8:0e:a9:1d:5d: 8f:37:15:43:ac:4a:03:33:3a:1c:ec:fd:bb:8f:ae: ab:f5:9e:87:fc:6a:71:09:12:be:bf:d0:c1:b6:76: 44:76:1a:eb:a0:c8:59:46:01:f3:98:4c:0b:d0:0f: fc:f4:9f:0c:d7:08:80:74:c4:65:2b:f9:c7:9f:f0: cc:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:FD:98:21:38:85:CB:48:40:D1:86:25:D7:75:B0:F8:09:49:6A:3A X509v3 Authority Key Identifier: keyid:A2:C5:13:86:AC:F0:5B:3A:AB:61:81:04:74:78:D6:EE:A1:BF:00:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osUThqzwWzqrYYEEdHjW7qG_AGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:c1:ef:39:2b:38:00:7c:7e:a7:49:db:ce:d9:6a:53:34:55: 04:ec:7a:2d:92:3e:64:e9:47:30:01:16:c6:be:f5:75:94:d1: 98:c9:37:3e:89:62:51:7a:3e:e1:f8:28:c1:36:5a:1b:2a:6c: 0d:89:3b:7b:a8:f1:7f:a0:4d:f7:fb:f7:86:9d:e4:2a:89:e7: f6:08:50:42:cf:34:79:14:51:cf:9a:92:e3:a3:02:b6:d6:8a: d0:f7:fa:c6:6f:4c:12:30:4c:30:83:6e:1a:6d:c0:56:02:a1: f6:3c:0a:7a:83:04:b3:81:cc:9d:7c:89:e4:c4:6c:69:61:24: cc:0d:24:20:47:f9:31:c3:52:4d:9e:65:38:2e:d8:21:93:05: 46:bd:93:2c:fd:c7:89:2b:50:a7:c0:84:dd:45:7a:a5:78:45: 4e:7a:22:c5:8d:38:d1:27:09:05:2c:32:48:a9:5b:a4:dc:5b: 67:f1:8a:ad:ad:53:92:db:e1:a6:b2:03:c3:d3:dc:2b:1c:22: 6e:3a:ac:dd:41:70:7c:8b:d4:90:18:b6:68:c7:5f:0b:b3:c0: e2:f5:eb:73:0e:cc:9b:1d:8e:2b:cc:af:e3:35:57:39:f3:7e: 25:a9:a6:4d:97:71:10:89:cf:bc:b5:64:b8:86:c0:fa:70:0d: 34:e3:20:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d+1Q57qqRA1ZBimytqaPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyYzUxMzg2YWNmMDViM2FhYjYxODEwNDc0NzhkNmVlYTFi ZjAwNjIwHhcNMjUxMjA2MjEwMTA4WhcNMjUxMjA3MjEwMTA4WjAzMTEwLwYDVQQD EygzNWZkOTgyMTM4ODVjYjQ4NDBkMTg2MjVkNzc1YjBmODA5NDk2YTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAwhAhJR4FwvBM78LABfBp6r75Jz TJdHHhduSAmkT+F/jYxGnXm0h2QlJAmzcVvoBtkay73BdWtS/vmRQFetC7yUHJn9 yrCBwaYG6/4LB60j2ic85hWcO6vpCBAmeD7jzGqrYrbCExHfLDOEu3VKbeo8hGrE s7FmRUplT6AlsKGnq55UA2WkXapN2yntMYSvxxxSl3j0de339s7le/SMwpmtJFvX Eojq1BUW9f9RvpdNdo17+fZBEMu9qc7vuA6pHV2PNxVDrEoDMzoc7P27j66r9Z6H /GpxCRK+v9DBtnZEdhrroMhZRgHzmEwL0A/89J8M1wiAdMRlK/nHn/DMZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDX9mCE4hctIQNGGJdd1sPgJSWo6MB8GA1UdIwQY MBaAFKLFE4as8Fs6q2GBBHR41u6hvwBiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3NVVGhxendXenFyWVlFRWRIalc3cUdfQUdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xNjRkMzQtMTI1Zi00YzYwLTg2MzUt N2Q2ZjUzODg5ZDU3LzEvb3NVVGhxendXenFyWVlFRWRIalc3cUdfQUdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xNjRkMzQtMTI1Zi00YzYwLTg2MzUtN2Q2ZjUzODg5ZDU3 LzEvb3NVVGhxendXenFyWVlFRWRIalc3cUdfQUdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXsHvOSs4 AHx+p0nbztlqUzRVBOx6LZI+ZOlHMAEWxr71dZTRmMk3PoliUXo+4fgowTZaGyps DYk7e6jxf6BN9/v3hp3kKonn9ghQQs80eRRRz5qS46MCttaK0Pf6xm9MEjBMMINu Gm3AVgKh9jwKeoMEs4HMnXyJ5MRsaWEkzA0kIEf5McNSTZ5lOC7YIZMFRr2TLP3H iStQp8CE3UV6pXhFTnoixY040ScJBSwySKlbpNxbZ/GKra1TktvhprIDw9PcKxwi bjqs3UFwfIvUkBi2aMdfC7PA4vXrcw7Mmx2OK8yv4zVXOfN+JammTZdxEInPvLVk uIbA+nANNOMggw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:59:21 2025 by rpki-client