This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft File: OspQhYoYVv-gLpE1bxQjbnw4uFo.mft (raw, json) Hash identifier: qRtwJEvleM2IxdHU66M7PU4x7JYRY1xFlqj02/4qwOg= Subject key identifier: E6:B6:43:9D:FB:E9:32:23:4C:54:F2:BA:2C:08:88:F0:6F:A3:61:B5 Authority key identifier: 3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A Certificate issuer: /CN=3aca50858a1856ffa02e91356f14236e7c38b85a Certificate serial: 019AF31BB307E2008897D57A85831970ADE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 10:01:09 +0000 Manifest this update: Sat 06 Dec 2025 10:01:09 +0000 Manifest next update: Sun 07 Dec 2025 10:01:09 +0000 Files and hashes: 1: 0i27NjvnFtlwbFJL8brWgH_dw8U.roa (hash: YML80PmXT345DJiCwX4apNsJ7UtnB8nEMX5Dpv2Ctsw=) 2: 1kY2nGT8PP1V1pxbzH8gDFZHRGw.roa (hash: pbZtP+N8idLMQTinI/aHUKYzG+cdVac5nacfjqhyPdo=) 3: OfxxmNtzJcdCBkWeVovM4im8aiY.roa (hash: WRZK3jUR3eiSqkPuuJOy87KYkFs/X19TJQecAHmPTCA=) 4: OspQhYoYVv-gLpE1bxQjbnw4uFo.crl (hash: uarlQQpOGeMQyW+vCtcfZc2734onINM2HgJF2XAmXTA=) 5: ct0UdU9tbjVu5vnRCDtuTGBSo4c.roa (hash: 2wetSh/WjuBgx0H+sbj7Aow3E9vqoUt+MG+BDwetShE=) 6: jV1pD1wy6zLmakfh_f72GHVni5Q.roa (hash: GDZLboSv9SwaZfkg4VA5DHs868/fV4K/Z3Ty0GV8vng=) 7: pZwUUb6x4Lez1tW_jvxd_X_PyY8.roa (hash: weF+c7Ta8anbMKz4f67ACPq7m1FTdbmyMymH/ZhAy3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:b3:07:e2:00:88:97:d5:7a:85:83:19:70:ad:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aca50858a1856ffa02e91356f14236e7c38b85a Validity Not Before: Dec 6 10:01:09 2025 GMT Not After : Dec 7 10:01:09 2025 GMT Subject: CN=e6b6439dfbe932234c54f2ba2c0888f06fa361b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:04:7d:90:df:f4:ab:b0:a3:bb:24:73:e6:ba: 52:54:71:5e:bf:9f:14:6b:7b:86:e3:c0:8b:d9:38: 49:89:af:99:55:78:01:69:2f:e1:b8:3e:29:c2:46: 54:24:57:f5:c0:e0:e3:36:22:28:1b:ff:6e:26:8b: 96:7d:20:3e:ef:13:49:e6:ca:02:74:9c:d8:2c:be: bd:e2:4d:17:25:e0:c6:42:21:a4:9e:f3:e7:5b:60: 5d:82:86:3e:06:5b:aa:15:4f:bf:c9:6b:16:59:cb: ef:6f:7a:32:4d:02:74:79:5f:cc:03:42:79:1b:6a: 7d:b7:a9:0f:e8:09:16:55:be:2f:4b:aa:b6:59:52: 5a:7a:24:4f:05:e6:93:06:ac:21:30:5f:75:6c:db: d7:8e:30:33:c4:60:a1:22:b6:f2:6a:0b:d9:05:d7: f5:f6:e8:ef:4d:c1:7f:7d:af:77:58:80:6a:34:bc: dd:49:83:c4:e4:c7:64:02:30:e5:0c:5e:7f:32:d9: 33:15:72:13:7c:d0:be:1e:d8:41:48:65:51:6f:05: 96:72:b7:ca:e8:98:0a:f1:21:55:57:c7:f4:a7:65: 52:94:f2:15:42:20:25:f4:6a:5f:1d:0e:2c:3a:d2: 5f:19:65:b1:70:b3:d0:fc:a6:80:39:04:09:f9:d1: 71:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:B6:43:9D:FB:E9:32:23:4C:54:F2:BA:2C:08:88:F0:6F:A3:61:B5 X509v3 Authority Key Identifier: keyid:3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:a2:71:21:3d:a1:3f:2b:0a:57:0c:f8:2f:20:a8:76:22:7e: 96:5c:bc:66:a5:95:11:03:5b:7a:e7:63:de:cf:f0:e3:cc:5a: 00:7d:16:e3:ba:80:25:98:cc:17:ed:d1:7e:15:d7:53:32:fc: fb:54:b4:31:40:56:24:c0:f8:d6:4a:ec:d3:d2:25:82:c0:38: 58:98:56:a0:77:02:80:c5:88:04:da:67:29:9f:a1:67:4b:cd: b8:d5:d3:a2:17:74:c8:79:3b:71:75:ca:01:3c:21:c2:30:3e: c0:14:55:ff:09:5c:89:49:7c:f3:5f:f6:9d:b5:72:0e:2a:86: 69:76:44:6d:b7:bf:ba:6b:30:e0:78:34:6b:f0:20:8c:02:5b: 6d:d0:ef:4d:f8:73:37:cf:78:0f:68:26:ce:46:11:a7:e2:a3: d6:3f:c6:98:ea:cf:77:6d:06:d4:62:88:f4:23:91:e6:c9:84: 9b:bc:71:3a:4f:01:9d:fa:b5:fe:18:17:01:5a:4a:ef:45:6c: d8:00:48:b8:92:05:60:ac:82:92:d9:fc:c7:1b:b2:71:61:55: de:6d:61:f0:8b:dd:5b:64:15:90:d9:05:70:bd:74:8e:4b:db: a8:a1:f3:6f:38:63:a1:de:df:57:f8:4e:38:26:d8:e1:06:26: b9:41:c2:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG7MH4gCIl9V6hYMZcK3pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhY2E1MDg1OGExODU2ZmZhMDJlOTEzNTZmMTQyMzZlN2Mz OGI4NWEwHhcNMjUxMjA2MTAwMTA5WhcNMjUxMjA3MTAwMTA5WjAzMTEwLwYDVQQD EyhlNmI2NDM5ZGZiZTkzMjIzNGM1NGYyYmEyYzA4ODhmMDZmYTM2MWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8QR9kN/0q7CjuyRz5rpSVHFev58U a3uG48CL2ThJia+ZVXgBaS/huD4pwkZUJFf1wODjNiIoG/9uJouWfSA+7xNJ5soC dJzYLL694k0XJeDGQiGknvPnW2BdgoY+BluqFU+/yWsWWcvvb3oyTQJ0eV/MA0J5 G2p9t6kP6AkWVb4vS6q2WVJaeiRPBeaTBqwhMF91bNvXjjAzxGChIrbyagvZBdf1 9ujvTcF/fa93WIBqNLzdSYPE5MdkAjDlDF5/MtkzFXITfNC+HthBSGVRbwWWcrfK 6JgK8SFVV8f0p2VSlPIVQiAl9GpfHQ4sOtJfGWWxcLPQ/KaAOQQJ+dFxNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOa2Q5376TIjTFTyuiwIiPBvo2G1MB8GA1UdIwQY MBaAFDrKUIWKGFb/oC6RNW8UI258OLhaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3NwUWhZb1lWdi1nTHBFMWJ4UWpibnc0dUZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xMmI5MzctODkwZC00N2I1LWEwNDEt MzMxZDdmYzc3YmQ0LzEvT3NwUWhZb1lWdi1nTHBFMWJ4UWpibnc0dUZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8xMmI5MzctODkwZC00N2I1LWEwNDEtMzMxZDdmYzc3YmQ0 LzEvT3NwUWhZb1lWdi1nTHBFMWJ4UWpibnc0dUZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArqJxIT2h PysKVwz4LyCodiJ+lly8ZqWVEQNbeudj3s/w48xaAH0W47qAJZjMF+3RfhXXUzL8 +1S0MUBWJMD41krs09IlgsA4WJhWoHcCgMWIBNpnKZ+hZ0vNuNXTohd0yHk7cXXK ATwhwjA+wBRV/wlciUl881/2nbVyDiqGaXZEbbe/umsw4Hg0a/AgjAJbbdDvTfhz N894D2gmzkYRp+Kj1j/GmOrPd20G1GKI9COR5smEm7xxOk8Bnfq1/hgXAVpK70Vs 2ABIuJIFYKyCktn8xxuycWFV3m1h8IvdW2QVkNkFcL10jkvbqKHzbzhjod7fV/hO OCbY4QYmuUHCDw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:15:05 2025 by rpki-client