This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft File: os0snkthAHq1W8aePuP_zmJi2BE.mft (raw, json) Hash identifier: QTa+kPEg50ru1G6iOCSsa4zGiXMYmGWsqhr5hLhRKeU= Subject key identifier: B2:F9:67:F2:F1:E7:92:3D:15:9B:F2:E3:16:55:65:2F:B0:45:87:40 Authority key identifier: A2:CD:2C:9E:4B:61:00:7A:B5:5B:C6:9E:3E:E3:FF:CE:62:62:D8:11 Certificate issuer: /CN=a2cd2c9e4b61007ab55bc69e3ee3ffce6262d811 Certificate serial: 019AF12EDE0AAEFBF9A2BF1FDF252C539792 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/os0snkthAHq1W8aePuP_zmJi2BE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft Manifest number: 0FD2 Signing time: Sat 06 Dec 2025 01:02:51 +0000 Manifest this update: Sat 06 Dec 2025 01:02:51 +0000 Manifest next update: Sun 07 Dec 2025 01:02:51 +0000 Files and hashes: 1: os0snkthAHq1W8aePuP_zmJi2BE.crl (hash: R2aiDLVldsGDuIxmqq/lrE0V1EN/gKkFWdzIwt8GSTc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft rsync://rpki.ripe.net/repository/DEFAULT/os0snkthAHq1W8aePuP_zmJi2BE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:de:0a:ae:fb:f9:a2:bf:1f:df:25:2c:53:97:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2cd2c9e4b61007ab55bc69e3ee3ffce6262d811 Validity Not Before: Dec 6 01:02:51 2025 GMT Not After : Dec 7 01:02:51 2025 GMT Subject: CN=b2f967f2f1e7923d159bf2e31655652fb0458740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:be:2f:33:c0:89:55:20:3d:7a:45:85:3d:d9: 9f:8f:2b:94:7f:91:59:1c:f3:47:f6:18:41:69:aa: d2:d5:ba:5d:ea:bb:36:cd:4f:49:4f:1b:2f:35:5a: c2:17:d9:38:bf:cf:47:26:98:92:06:13:26:e9:13: c0:d2:6c:64:67:7c:a6:81:aa:a8:9e:d0:9f:bf:c6: f3:dc:b9:ae:35:81:1f:af:5d:80:69:c8:0f:09:d0: 90:c8:0d:ce:aa:29:43:23:00:e5:71:71:72:81:da: fb:9b:bb:1e:9b:6b:34:3d:d3:84:f4:7e:0c:ed:e3: 97:29:cb:6f:30:f6:12:8b:06:9f:b1:48:b5:73:01: b1:59:71:76:3f:b8:8d:12:2d:c0:1b:47:8c:2d:dd: 79:de:c5:96:1d:22:58:db:3d:65:ca:67:a6:82:3f: a3:6e:c8:7d:d4:31:7c:74:e6:42:b5:5a:89:c9:97: a5:bd:3e:3a:30:6e:44:3c:99:ce:d6:0b:37:0f:0c: 6c:7a:20:f8:2a:d3:7f:94:1d:10:ff:a1:e0:ed:87: 79:cb:fe:b9:c2:33:ed:b6:bf:2e:7b:12:38:d6:e9: 9f:91:25:3b:46:6b:c8:20:0b:02:b3:cc:43:7e:b1: 34:74:d2:1c:cf:7c:4b:b6:4d:f9:1b:b1:72:22:3d: 16:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:F9:67:F2:F1:E7:92:3D:15:9B:F2:E3:16:55:65:2F:B0:45:87:40 X509v3 Authority Key Identifier: keyid:A2:CD:2C:9E:4B:61:00:7A:B5:5B:C6:9E:3E:E3:FF:CE:62:62:D8:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/os0snkthAHq1W8aePuP_zmJi2BE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:44:6f:65:f9:8a:a7:4e:20:b4:f0:61:a9:0b:af:e2:a5:d9: 75:47:61:33:ef:d9:45:34:a2:7a:17:d8:3b:08:88:ca:95:0f: ca:be:5d:d1:61:cf:63:e0:48:a5:72:30:89:b6:29:4f:17:c9: bb:19:ab:65:a4:11:8b:0e:95:14:b4:98:31:c3:7d:08:86:9a: 66:d5:e0:38:2d:62:5b:42:53:4a:31:55:2c:0e:c5:ce:c7:f3: 10:4b:0c:b4:88:b9:a1:7c:31:48:83:9a:28:60:8d:0d:fe:b1: 72:56:75:b8:71:9f:21:dd:0b:8c:89:3d:2e:d8:38:58:14:8b: 1f:5b:1d:d2:ae:93:64:a3:68:1c:3f:db:99:57:55:f0:6e:7e: 4d:1d:37:0f:c1:04:37:41:b7:5a:06:9d:38:09:fa:bd:ff:35: 0d:4b:12:b0:8f:60:4a:62:06:c4:ad:c8:d6:84:a3:36:9b:70: 48:31:3f:e9:98:47:34:e0:70:0c:bf:e7:84:2f:93:0d:9f:53: e7:4f:5e:88:eb:db:f9:bd:a1:df:5c:de:66:83:a9:0f:f5:f3: d3:ce:77:7d:7e:d8:9e:95:52:3b:3c:40:ae:c4:0f:61:47:11: c7:16:64:4c:44:02:94:0d:d3:b6:44:0d:81:5c:f1:ac:c8:0a: ff:4f:96:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLt4Krvv5or8f3yUsU5eSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyY2QyYzllNGI2MTAwN2FiNTViYzY5ZTNlZTNmZmNlNjI2 MmQ4MTEwHhcNMjUxMjA2MDEwMjUxWhcNMjUxMjA3MDEwMjUxWjAzMTEwLwYDVQQD EyhiMmY5NjdmMmYxZTc5MjNkMTU5YmYyZTMxNjU1NjUyZmIwNDU4NzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6r4vM8CJVSA9ekWFPdmfjyuUf5FZ HPNH9hhBaarS1bpd6rs2zU9JTxsvNVrCF9k4v89HJpiSBhMm6RPA0mxkZ3ymgaqo ntCfv8bz3LmuNYEfr12AacgPCdCQyA3OqilDIwDlcXFygdr7m7sem2s0PdOE9H4M 7eOXKctvMPYSiwafsUi1cwGxWXF2P7iNEi3AG0eMLd153sWWHSJY2z1lymemgj+j bsh91DF8dOZCtVqJyZelvT46MG5EPJnO1gs3DwxseiD4KtN/lB0Q/6Hg7Yd5y/65 wjPttr8uexI41umfkSU7RmvIIAsCs8xDfrE0dNIcz3xLtk35G7FyIj0WUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLL5Z/Lx55I9FZvy4xZVZS+wRYdAMB8GA1UdIwQY MBaAFKLNLJ5LYQB6tVvGnj7j/85iYtgRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3Mwc25rdGhBSHExVzhhZVB1UF96bUppMkJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS82YzRjNmMtYWYyMi00MGE0LWFlMmMt NGEwMmYwOTdjZGIxLzEvb3Mwc25rdGhBSHExVzhhZVB1UF96bUppMkJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS82YzRjNmMtYWYyMi00MGE0LWFlMmMtNGEwMmYwOTdjZGIx LzEvb3Mwc25rdGhBSHExVzhhZVB1UF96bUppMkJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjkRvZfmK p04gtPBhqQuv4qXZdUdhM+/ZRTSiehfYOwiIypUPyr5d0WHPY+BIpXIwibYpTxfJ uxmrZaQRiw6VFLSYMcN9CIaaZtXgOC1iW0JTSjFVLA7FzsfzEEsMtIi5oXwxSIOa KGCNDf6xclZ1uHGfId0LjIk9Ltg4WBSLH1sd0q6TZKNoHD/bmVdV8G5+TR03D8EE N0G3WgadOAn6vf81DUsSsI9gSmIGxK3I1oSjNptwSDE/6ZhHNOBwDL/nhC+TDZ9T 509eiOvb+b2h31zeZoOpD/Xz0853fX7YnpVSOzxArsQPYUcRxxZkTEQClA3TtkQN gVzxrMgK/0+Wqg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:37 2025 by rpki-client