This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft File: OsREa6mbQ4kezx9_os2wLhSjRPM.mft (raw, json) Hash identifier: TkVtHsvVFLQy44ESnqYHHDg0T0TUNN3QBtb1TvhvrL0= Subject key identifier: 56:0D:DF:32:36:38:2C:D2:C3:20:64:73:BE:DF:62:56:C6:F7:B8:D8 Authority key identifier: 3A:C4:44:6B:A9:9B:43:89:1E:CF:1F:7F:A2:CD:B0:2E:14:A3:44:F3 Certificate issuer: /CN=3ac4446ba99b43891ecf1f7fa2cdb02e14a344f3 Certificate serial: 019AF42E4D6432A3310AA29E72916D6859B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft Manifest number: 0BD9 Signing time: Sat 06 Dec 2025 15:01:06 +0000 Manifest this update: Sat 06 Dec 2025 15:01:06 +0000 Manifest next update: Sun 07 Dec 2025 15:01:06 +0000 Files and hashes: 1: OsREa6mbQ4kezx9_os2wLhSjRPM.crl (hash: bwqMGO9QVwzsuPw2owqH6eq1RV2FVkNTHrMdM5/ffZA=) 2: V65aigPklzLMXli-Tma7YMiy9ac.roa (hash: 9I1JxRzOP3IIZw3rQmGtzPQg16sopd8Gd0K1+blUv2k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:4d:64:32:a3:31:0a:a2:9e:72:91:6d:68:59:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ac4446ba99b43891ecf1f7fa2cdb02e14a344f3 Validity Not Before: Dec 6 15:01:06 2025 GMT Not After : Dec 7 15:01:06 2025 GMT Subject: CN=560ddf3236382cd2c3206473bedf6256c6f7b8d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2e:0d:9d:9d:33:62:2a:a6:17:31:13:59:3b: d1:2c:1c:0e:de:a9:86:3c:38:21:71:a6:b6:61:da: 35:4c:07:f0:bb:17:a8:1e:4f:a9:63:91:94:7e:1f: 07:56:0b:43:61:a6:08:59:47:81:30:80:77:34:81: 5b:21:13:5a:74:fc:85:58:7d:cd:53:19:2e:25:b0: e5:d4:cb:32:63:64:d3:12:d8:88:d6:1b:fe:a2:b4: 30:58:7c:22:e2:54:e3:ea:46:c9:98:66:e6:f2:f9: f2:96:a1:eb:d2:29:08:cc:35:cb:c0:75:7b:ea:7c: 62:cc:d4:97:d2:fa:5e:aa:5f:0a:ef:e1:e3:91:c8: be:a1:7e:6b:e2:03:bc:3c:ad:f9:cb:61:92:b5:bb: aa:43:bf:84:32:9f:70:37:61:18:15:5d:72:b0:3b: 33:24:f0:54:85:6a:77:d5:05:1f:d2:0a:21:fa:24: 2f:8f:15:45:6c:6a:f7:34:a5:de:e5:0e:df:91:c8: 86:a0:19:28:4d:2d:25:fc:85:3c:43:00:40:f7:72: bf:66:7d:da:b7:d2:e1:39:6b:d2:e7:c0:13:89:fb: f3:04:d1:a8:26:ef:2b:86:14:13:06:7f:55:72:05: 87:02:dd:84:c9:ac:22:eb:40:21:f3:20:51:8d:d3: 44:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:0D:DF:32:36:38:2C:D2:C3:20:64:73:BE:DF:62:56:C6:F7:B8:D8 X509v3 Authority Key Identifier: keyid:3A:C4:44:6B:A9:9B:43:89:1E:CF:1F:7F:A2:CD:B0:2E:14:A3:44:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:f7:17:69:96:7a:ac:2d:60:d5:88:06:41:4a:49:b6:09:c9: 4d:e4:1b:3f:29:ad:57:b5:63:3c:26:2f:38:74:84:d8:e3:f4: 2e:31:2e:ae:bb:a9:7e:78:41:8b:da:dd:f6:e0:35:c9:81:ed: d5:c6:ff:17:ff:f0:6d:25:4b:f7:63:2b:f1:90:27:14:4e:12: 41:a6:ae:67:c0:ce:a6:e7:5a:92:cf:38:a4:b4:44:34:9e:3a: e6:e8:ec:ed:88:54:4a:6c:64:b8:95:d4:a7:e2:e6:ff:c3:5f: 78:73:7a:83:38:e4:6a:3e:29:b1:37:ab:d0:70:5c:8e:ba:ba: 0f:ad:b4:fd:f8:d1:f8:12:fb:cd:af:fe:d1:f9:60:5b:b7:8f: 95:d4:81:25:d0:01:34:11:c1:8a:40:bb:59:89:71:5b:d4:30: c1:57:d4:93:57:c9:76:80:d8:47:10:0f:47:d0:24:f6:62:ce: 37:fe:7a:6d:da:ff:15:dd:b8:73:15:4d:1b:a6:26:f4:3f:c0: 0e:17:e0:a0:80:96:e0:18:52:6e:45:0e:35:df:d7:1b:91:49: 5c:77:c3:98:8d:4a:9b:12:a4:ce:5a:c8:80:59:50:74:96:3a: 66:25:0f:c3:ed:df:a9:4a:b0:a0:4f:a0:f4:4e:64:1f:78:12: 98:18:52:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lk1kMqMxCqKecpFtaFmyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhYzQ0NDZiYTk5YjQzODkxZWNmMWY3ZmEyY2RiMDJlMTRh MzQ0ZjMwHhcNMjUxMjA2MTUwMTA2WhcNMjUxMjA3MTUwMTA2WjAzMTEwLwYDVQQD Eyg1NjBkZGYzMjM2MzgyY2QyYzMyMDY0NzNiZWRmNjI1NmM2ZjdiOGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAky4NnZ0zYiqmFzETWTvRLBwO3qmG PDghcaa2Ydo1TAfwuxeoHk+pY5GUfh8HVgtDYaYIWUeBMIB3NIFbIRNadPyFWH3N UxkuJbDl1MsyY2TTEtiI1hv+orQwWHwi4lTj6kbJmGbm8vnylqHr0ikIzDXLwHV7 6nxizNSX0vpeql8K7+Hjkci+oX5r4gO8PK35y2GStbuqQ7+EMp9wN2EYFV1ysDsz JPBUhWp31QUf0goh+iQvjxVFbGr3NKXe5Q7fkciGoBkoTS0l/IU8QwBA93K/Zn3a t9LhOWvS58ATifvzBNGoJu8rhhQTBn9VcgWHAt2Eyawi60Ah8yBRjdNERQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFYN3zI2OCzSwyBkc77fYlbG97jYMB8GA1UdIwQY MBaAFDrERGupm0OJHs8ff6LNsC4Uo0TzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3NSRWE2bWJRNGtleng5X29zMndMaFNqUlBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9lNWM4NzctYTJlZS00YzNmLWFkNWMt MDJhN2Y2ZGY2ODEwLzEvT3NSRWE2bWJRNGtleng5X29zMndMaFNqUlBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9lNWM4NzctYTJlZS00YzNmLWFkNWMtMDJhN2Y2ZGY2ODEw LzEvT3NSRWE2bWJRNGtleng5X29zMndMaFNqUlBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApvcXaZZ6 rC1g1YgGQUpJtgnJTeQbPymtV7VjPCYvOHSE2OP0LjEurrupfnhBi9rd9uA1yYHt 1cb/F//wbSVL92Mr8ZAnFE4SQaauZ8DOpudaks84pLRENJ465ujs7YhUSmxkuJXU p+Lm/8NfeHN6gzjkaj4psTer0HBcjrq6D620/fjR+BL7za/+0flgW7ePldSBJdAB NBHBikC7WYlxW9QwwVfUk1fJdoDYRxAPR9Ak9mLON/56bdr/Fd24cxVNG6Ym9D/A DhfgoICW4BhSbkUONd/XG5FJXHfDmI1KmxKkzlrIgFlQdJY6ZiUPw+3fqUqwoE+g 9E5kH3gSmBhSDQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:30:44 2025 by rpki-client