This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft File: Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft (raw, json) Hash identifier: 2CcMyIPyo7lNPll2zSlZa7Aw/8Q3jA/KWb9tVhrV2cA= Subject key identifier: 34:9F:C7:3A:0F:26:4B:E5:0A:0A:8D:3B:BD:1E:00:CE:9E:6E:04:3D Authority key identifier: 3A:CD:90:CB:63:7D:3D:2C:73:D9:9D:EA:9A:4F:E8:13:E6:48:58:43 Certificate issuer: /CN=3acd90cb637d3d2c73d99dea9a4fe813e6485843 Certificate serial: 019AF3F730025775A4A18B11CD736DC092D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft Manifest number: 119A Signing time: Sat 06 Dec 2025 14:00:54 +0000 Manifest this update: Sat 06 Dec 2025 14:00:54 +0000 Manifest next update: Sun 07 Dec 2025 14:00:54 +0000 Files and hashes: 1: Mu4iTpkBhKid85hQkXUqPdd3l28.roa (hash: m9wF2k+Ifz07DvZ8KG/nCFZD2LO8ELnkwbys5hG5IQw=) 2: Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.crl (hash: POIgF1Kr7wxNGDtxxhA7BV4WdnqXqKf6X1F2zhIZC7A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft rsync://rpki.ripe.net/repository/DEFAULT/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:30:02:57:75:a4:a1:8b:11:cd:73:6d:c0:92:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3acd90cb637d3d2c73d99dea9a4fe813e6485843 Validity Not Before: Dec 6 14:00:54 2025 GMT Not After : Dec 7 14:00:54 2025 GMT Subject: CN=349fc73a0f264be50a0a8d3bbd1e00ce9e6e043d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:da:13:58:59:d9:19:f2:21:62:4f:4b:4f:1b: 1c:2a:1f:e6:eb:c9:2f:e0:51:22:42:87:af:cc:c4: b5:37:19:82:9d:43:ec:16:e7:27:da:01:67:86:0d: 52:4e:67:09:fc:dd:ac:7b:a5:69:8c:a4:ce:34:34: 8f:6a:ed:28:05:6e:a1:7d:0b:cf:68:2b:46:ab:f3: 57:dd:03:60:1a:d2:d5:ba:c5:a6:94:0f:08:a5:dd: 7e:48:86:c2:a9:7a:04:c5:04:54:b3:29:cd:5e:ea: ac:5d:7e:c3:ae:d1:5e:94:53:79:f8:0f:b7:70:12: c7:32:f6:62:0d:72:64:d2:01:03:14:83:6a:95:4c: 6c:04:ce:4e:99:fd:c7:25:be:3e:d0:1e:04:5a:69: 19:5f:62:86:1a:5f:1a:83:e4:2f:e7:bc:c0:10:d0: bf:78:4f:bf:54:73:11:60:62:11:9e:1d:f9:83:ea: af:55:3a:cd:41:f3:bb:27:84:1d:a2:14:de:d0:44: 3d:16:58:9c:d4:c2:06:14:7d:a9:3b:53:8e:78:83: bd:39:86:be:9a:94:54:73:85:b1:5b:cd:c9:0e:eb: 8b:d5:82:f9:f0:73:7e:58:56:66:7b:29:2c:ce:74: d6:36:a9:db:0d:ed:c2:7c:73:ca:f7:cf:7b:02:86: 35:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:9F:C7:3A:0F:26:4B:E5:0A:0A:8D:3B:BD:1E:00:CE:9E:6E:04:3D X509v3 Authority Key Identifier: keyid:3A:CD:90:CB:63:7D:3D:2C:73:D9:9D:EA:9A:4F:E8:13:E6:48:58:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:ab:9f:44:dd:e4:9d:dc:71:0d:fb:18:1b:f2:e0:4e:76:67: 2d:38:dc:10:8c:21:d1:8f:a2:84:43:ec:ed:8e:68:4f:bc:ab: 97:db:e6:5f:ce:1a:bf:64:b5:60:3e:d2:a0:24:64:59:bc:ed: 4b:b2:e9:a5:b3:af:83:3b:04:f5:c3:f5:47:c2:9d:b3:9e:27: 55:ea:06:00:9d:75:40:3e:b3:24:8c:9e:49:4d:2a:20:3d:30: 01:86:ac:25:c5:e2:19:84:3b:da:f0:fd:23:7c:5e:b9:18:df: 26:fe:fe:7d:9b:6f:8b:07:5b:af:c7:4b:23:78:14:90:f8:3f: 72:ea:9a:a2:53:ca:aa:91:79:c1:57:eb:6c:37:78:79:3f:fc: 0e:64:c4:ec:f2:6f:33:b5:91:58:ed:0a:79:77:32:1c:3a:7c: 67:f4:5c:bc:f2:3e:3e:7d:d3:d7:e2:06:72:d7:f4:b1:25:cf: 9d:c4:a3:26:d4:9e:c7:f0:75:bf:13:8c:e8:7c:6e:84:f9:58: de:a7:37:96:4c:12:2c:2c:06:ac:7f:b9:9f:eb:99:18:99:79: 73:a7:30:df:18:f0:e5:72:16:21:c6:d0:48:72:2a:f0:55:91: f9:0e:ce:5c:d5:5a:e0:5d:62:5b:5c:c2:4d:26:3d:f5:c9:89: b8:24:e8:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9zACV3WkoYsRzXNtwJLSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhY2Q5MGNiNjM3ZDNkMmM3M2Q5OWRlYTlhNGZlODEzZTY0 ODU4NDMwHhcNMjUxMjA2MTQwMDU0WhcNMjUxMjA3MTQwMDU0WjAzMTEwLwYDVQQD EygzNDlmYzczYTBmMjY0YmU1MGEwYThkM2JiZDFlMDBjZTllNmUwNDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdoTWFnZGfIhYk9LTxscKh/m68kv 4FEiQoevzMS1NxmCnUPsFucn2gFnhg1STmcJ/N2se6VpjKTONDSPau0oBW6hfQvP aCtGq/NX3QNgGtLVusWmlA8Ipd1+SIbCqXoExQRUsynNXuqsXX7DrtFelFN5+A+3 cBLHMvZiDXJk0gEDFINqlUxsBM5Omf3HJb4+0B4EWmkZX2KGGl8ag+Qv57zAENC/ eE+/VHMRYGIRnh35g+qvVTrNQfO7J4QdohTe0EQ9Flic1MIGFH2pO1OOeIO9OYa+ mpRUc4WxW83JDuuL1YL58HN+WFZmeyksznTWNqnbDe3CfHPK9897AoY1BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDSfxzoPJkvlCgqNO70eAM6ebgQ9MB8GA1UdIwQY MBaAFDrNkMtjfT0sc9md6ppP6BPmSFhDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3MyUXkyTjlQU3h6MlozcW1rX29FLVpJV0VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8wOThjZjQtMDdjMC00YWI3LTljYzct YmU4Yzc4YzA2ZmM3LzEvT3MyUXkyTjlQU3h6MlozcW1rX29FLVpJV0VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8wOThjZjQtMDdjMC00YWI3LTljYzctYmU4Yzc4YzA2ZmM3 LzEvT3MyUXkyTjlQU3h6MlozcW1rX29FLVpJV0VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgaufRN3k ndxxDfsYG/LgTnZnLTjcEIwh0Y+ihEPs7Y5oT7yrl9vmX84av2S1YD7SoCRkWbzt S7LppbOvgzsE9cP1R8Kds54nVeoGAJ11QD6zJIyeSU0qID0wAYasJcXiGYQ72vD9 I3xeuRjfJv7+fZtviwdbr8dLI3gUkPg/cuqaolPKqpF5wVfrbDd4eT/8DmTE7PJv M7WRWO0KeXcyHDp8Z/RcvPI+Pn3T1+IGctf0sSXPncSjJtSex/B1vxOM6HxuhPlY 3qc3lkwSLCwGrH+5n+uZGJl5c6cw3xjw5XIWIcbQSHIq8FWR+Q7OXNVa4F1iW1zC TSY99cmJuCToxQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:42:13 2025 by rpki-client