This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft File: OspQhYoYVv-gLpE1bxQjbnw4uFo.mft (raw, json) Hash identifier: 2IHjEQpF1w2migjCobhqWywyHNo+9nb1wzWyvIK73Os= Subject key identifier: 5A:8B:39:70:DA:6A:ED:20:75:83:10:79:95:CA:70:2C:6B:8E:B9:EA Authority key identifier: 3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A Certificate issuer: /CN=3aca50858a1856ffa02e91356f14236e7c38b85a Certificate serial: 019AF5098AAE916C40DE56AA9A6BB52AE6BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft Manifest number: 1769 Signing time: Sat 06 Dec 2025 19:00:34 +0000 Manifest this update: Sat 06 Dec 2025 19:00:34 +0000 Manifest next update: Sun 07 Dec 2025 19:00:34 +0000 Files and hashes: 1: 0i27NjvnFtlwbFJL8brWgH_dw8U.roa (hash: YML80PmXT345DJiCwX4apNsJ7UtnB8nEMX5Dpv2Ctsw=) 2: 1kY2nGT8PP1V1pxbzH8gDFZHRGw.roa (hash: pbZtP+N8idLMQTinI/aHUKYzG+cdVac5nacfjqhyPdo=) 3: OfxxmNtzJcdCBkWeVovM4im8aiY.roa (hash: WRZK3jUR3eiSqkPuuJOy87KYkFs/X19TJQecAHmPTCA=) 4: OspQhYoYVv-gLpE1bxQjbnw4uFo.crl (hash: 3G52SS47ep1pr0tD3yyA+seZNfU6fM6yWsE8+Tfg8GU=) 5: ct0UdU9tbjVu5vnRCDtuTGBSo4c.roa (hash: 2wetSh/WjuBgx0H+sbj7Aow3E9vqoUt+MG+BDwetShE=) 6: jV1pD1wy6zLmakfh_f72GHVni5Q.roa (hash: GDZLboSv9SwaZfkg4VA5DHs868/fV4K/Z3Ty0GV8vng=) 7: pZwUUb6x4Lez1tW_jvxd_X_PyY8.roa (hash: weF+c7Ta8anbMKz4f67ACPq7m1FTdbmyMymH/ZhAy3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:8a:ae:91:6c:40:de:56:aa:9a:6b:b5:2a:e6:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aca50858a1856ffa02e91356f14236e7c38b85a Validity Not Before: Dec 6 19:00:34 2025 GMT Not After : Dec 7 19:00:34 2025 GMT Subject: CN=5a8b3970da6aed207583107995ca702c6b8eb9ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2e:f8:22:e8:08:35:3a:16:ad:0e:0b:62:00: 51:32:f0:cf:85:3c:5f:66:19:0d:31:6f:a9:df:70: c3:c4:8e:d3:4a:91:dd:33:5d:2e:6c:1b:8b:b0:19: b6:17:b8:05:37:3b:76:54:ba:bb:11:28:3c:ea:0e: 47:ac:31:f4:cb:ce:5b:6e:5e:d4:22:62:83:a6:a5: cf:ac:26:19:f3:ef:88:df:49:85:e5:51:f6:84:09: c5:44:7e:1d:8d:f1:97:ca:40:8b:c3:ec:00:99:00: a8:f4:18:ed:09:7a:54:fb:f4:66:20:3b:a1:95:1f: c1:c7:79:7d:eb:71:d0:ca:c7:fb:9f:5f:8c:6b:bf: 16:ca:8a:fb:1e:e0:3d:95:dd:6e:a7:61:a5:c9:3c: 06:a4:2a:cc:69:23:a0:af:21:bc:11:c2:ee:30:22: 6f:ac:2c:e8:2c:85:ea:0a:6d:40:d4:0e:f1:4a:60: 24:0e:d3:f9:7a:a2:a3:6e:c8:b8:26:e6:2a:e7:c5: 9b:b7:28:01:05:af:42:d3:e4:58:46:96:8f:4a:0d: c1:91:17:3a:58:59:8b:a4:93:78:41:02:89:84:ab: 79:b4:85:26:e5:a5:4a:59:b1:69:c0:7d:9b:64:28: 05:0d:a4:f1:f7:e7:0d:2b:c5:4d:6c:d7:cc:4d:d1: 61:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:8B:39:70:DA:6A:ED:20:75:83:10:79:95:CA:70:2C:6B:8E:B9:EA X509v3 Authority Key Identifier: keyid:3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:72:37:2f:46:da:49:9d:e7:b5:39:cb:b7:df:f3:23:f5:d4: 2a:13:68:61:ce:a8:69:56:8e:28:a6:31:6a:e8:5f:82:a6:09: 09:ed:93:0e:3b:79:8a:c9:80:2e:c4:b1:8b:4d:05:bd:52:e7: e5:1b:a3:b2:d5:a8:46:1d:01:cf:eb:51:76:3d:56:f1:89:54: 60:fa:50:b3:67:6e:02:61:55:73:11:47:38:c9:82:6d:73:43: 47:0c:b8:23:e7:d6:b1:cc:ad:b5:eb:63:dc:67:b6:1a:e4:63: f1:72:62:65:dd:85:e4:6e:0f:59:15:57:1f:32:71:59:f5:b6: ff:53:f2:a8:95:3c:59:05:bd:46:78:17:7a:bc:b2:8a:ea:8b: 81:b3:a3:f0:4f:75:31:af:38:90:6e:4a:3f:99:90:33:58:5e: 1d:f4:c2:09:b2:2b:e5:91:44:10:e8:44:fb:7c:2c:45:5d:6c: bf:94:d3:3e:93:f0:40:48:13:41:df:02:31:51:62:0c:e4:d0: 09:2c:57:10:6a:4f:5b:37:32:fb:80:bc:15:3d:29:b0:03:6f: 8a:fa:00:58:0c:56:13:77:3f:92:2a:6f:9c:34:42:11:af:27: 44:86:30:87:85:5a:27:13:71:db:96:2e:f7:60:7a:b4:fc:fd: 8b:03:af:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CYqukWxA3laqmmu1Kua8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhY2E1MDg1OGExODU2ZmZhMDJlOTEzNTZmMTQyMzZlN2Mz OGI4NWEwHhcNMjUxMjA2MTkwMDM0WhcNMjUxMjA3MTkwMDM0WjAzMTEwLwYDVQQD Eyg1YThiMzk3MGRhNmFlZDIwNzU4MzEwNzk5NWNhNzAyYzZiOGViOWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0C74IugINToWrQ4LYgBRMvDPhTxf ZhkNMW+p33DDxI7TSpHdM10ubBuLsBm2F7gFNzt2VLq7ESg86g5HrDH0y85bbl7U ImKDpqXPrCYZ8++I30mF5VH2hAnFRH4djfGXykCLw+wAmQCo9BjtCXpU+/RmIDuh lR/Bx3l963HQysf7n1+Ma78Wyor7HuA9ld1up2GlyTwGpCrMaSOgryG8EcLuMCJv rCzoLIXqCm1A1A7xSmAkDtP5eqKjbsi4JuYq58WbtygBBa9C0+RYRpaPSg3BkRc6 WFmLpJN4QQKJhKt5tIUm5aVKWbFpwH2bZCgFDaTx9+cNK8VNbNfMTdFhWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFqLOXDaau0gdYMQeZXKcCxrjrnqMB8GA1UdIwQY MBaAFDrKUIWKGFb/oC6RNW8UI258OLhaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3NwUWhZb1lWdi1nTHBFMWJ4UWpibnc0dUZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xMmI5MzctODkwZC00N2I1LWEwNDEt MzMxZDdmYzc3YmQ0LzEvT3NwUWhZb1lWdi1nTHBFMWJ4UWpibnc0dUZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8xMmI5MzctODkwZC00N2I1LWEwNDEtMzMxZDdmYzc3YmQ0 LzEvT3NwUWhZb1lWdi1nTHBFMWJ4UWpibnc0dUZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQXI3L0ba SZ3ntTnLt9/zI/XUKhNoYc6oaVaOKKYxauhfgqYJCe2TDjt5ismALsSxi00FvVLn 5RujstWoRh0Bz+tRdj1W8YlUYPpQs2duAmFVcxFHOMmCbXNDRwy4I+fWscyttetj 3Ge2GuRj8XJiZd2F5G4PWRVXHzJxWfW2/1PyqJU8WQW9RngXeryyiuqLgbOj8E91 Ma84kG5KP5mQM1heHfTCCbIr5ZFEEOhE+3wsRV1sv5TTPpPwQEgTQd8CMVFiDOTQ CSxXEGpPWzcy+4C8FT0psANvivoAWAxWE3c/kipvnDRCEa8nRIYwh4VaJxNx25Yu 92B6tPz9iwOvew== -----END CERTIFICATE-----Generated at Sat Dec 6 22:19:43 2025 by rpki-client