This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft File: OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft (raw, json) Hash identifier: CPSNy0DjSN1XVetGBwCkUMt6erDBqRq2IottRUHEqnA= Subject key identifier: 03:51:09:7A:93:B7:1E:19:A7:FA:E8:6D:A1:E7:27:58:E0:DD:B5:CA Authority key identifier: 39:25:DF:79:87:06:F9:0E:6D:8F:D4:20:49:55:50:24:B7:3E:D3:69 Certificate issuer: /CN=3925df798706f90e6d8fd42049555024b73ed369 Certificate serial: 019AF19B93F79E91D6AC6C8E2A2DA441C6A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft Manifest number: BC Signing time: Sat 06 Dec 2025 03:01:36 +0000 Manifest this update: Sat 06 Dec 2025 03:01:36 +0000 Manifest next update: Sun 07 Dec 2025 03:01:36 +0000 Files and hashes: 1: OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl (hash: ZXYpIsGfXZSMYy5g+4emc1TfjNLchyLLCCvZvdUnY0I=) 2: k_uwe0_hbp0DrMLcpHMI8wGcruA.roa (hash: qbYK3P/JMzm2gpspT6OG1E1S38E2GDjqMXcyX1H7Szc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:93:f7:9e:91:d6:ac:6c:8e:2a:2d:a4:41:c6:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3925df798706f90e6d8fd42049555024b73ed369 Validity Not Before: Dec 6 03:01:36 2025 GMT Not After : Dec 7 03:01:36 2025 GMT Subject: CN=0351097a93b71e19a7fae86da1e72758e0ddb5ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c0:a0:17:e0:e5:6a:27:81:1a:3f:0d:78:f3: ad:b7:aa:5e:2c:2d:4d:ae:7c:34:98:22:93:1d:e6: 5a:d4:5c:08:71:ae:e7:9b:a7:b2:8d:ad:f9:ff:37: 90:16:43:3d:3c:dd:38:4c:1b:79:f7:81:9a:29:ea: 43:4c:c0:fb:da:af:63:d5:c9:e7:fd:39:1a:0d:3e: 98:d6:25:3a:47:25:ba:5a:9a:8a:74:63:48:fd:88: b2:6e:ce:a2:4f:66:6e:da:6f:dc:35:e3:b7:ff:89: 51:66:f8:e1:a9:9c:49:ea:82:d3:ac:18:75:eb:e3: 39:72:7a:ff:d3:a3:85:95:a0:1a:d4:f1:3d:36:e0: a5:06:63:31:5d:e0:3c:08:39:ce:80:14:da:d3:68: 0f:8f:d4:d8:a0:57:c0:d9:c8:b2:85:54:68:4c:04: 20:c7:e9:30:14:a7:62:31:d9:ca:d6:83:ee:49:51: 1f:2f:db:49:b1:c0:36:58:ff:06:76:c5:49:73:35: 90:47:c6:62:e2:d4:91:91:6f:ac:f9:7e:9e:c2:0d: 75:7b:77:12:99:f7:41:57:c9:e9:35:7b:c6:0b:aa: 21:76:69:d0:92:1d:35:77:76:e4:26:79:10:97:ba: 78:b8:ac:d5:ed:01:a5:f7:4c:81:8c:b6:cc:51:ba: 69:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:51:09:7A:93:B7:1E:19:A7:FA:E8:6D:A1:E7:27:58:E0:DD:B5:CA X509v3 Authority Key Identifier: keyid:39:25:DF:79:87:06:F9:0E:6D:8F:D4:20:49:55:50:24:B7:3E:D3:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:26:0b:34:dc:f2:0a:62:76:cf:e9:9a:ae:c0:89:ae:19:95: 32:75:45:01:1b:73:88:d8:d0:e6:a1:6a:6a:4b:4f:88:33:f0: 2d:4e:b9:4e:f9:9d:6f:a0:26:5b:09:1c:41:3c:5c:40:7b:2d: ee:4a:02:0a:68:31:5a:66:d4:b5:0d:41:42:ce:a5:38:3a:e4: 61:be:3d:01:7f:18:5b:fb:b4:90:fc:c4:dd:e0:fa:4a:44:ee: 01:dc:26:72:71:a9:e2:fb:e1:c2:2d:81:3f:cd:f3:9a:b2:cd: c2:98:0c:15:35:f3:f4:d0:83:c1:a8:d8:23:e1:55:f9:3a:52: 5b:46:24:46:61:77:e6:66:0f:39:8a:b1:2a:55:3e:0f:41:03: b3:33:df:ec:9c:2c:a1:8d:15:af:a3:04:fb:74:2a:5b:cd:a0: 13:94:31:cb:2c:e1:7d:97:cb:74:02:da:32:70:38:06:34:00: 0d:61:14:64:05:f1:83:37:71:ab:a7:39:92:df:bd:46:c1:45: 28:4c:25:d6:08:5c:db:21:96:54:42:e3:2a:ab:cc:fc:c7:16: d4:47:68:bb:27:3e:ec:e8:37:d1:20:64:cd:01:da:d1:dc:ba: c7:6d:ab:d2:e0:bb:ea:fa:49:c8:55:e3:f7:31:08:bf:e5:28: 25:d0:c4:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm5P3npHWrGyOKi2kQcajMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MjVkZjc5ODcwNmY5MGU2ZDhmZDQyMDQ5NTU1MDI0Yjcz ZWQzNjkwHhcNMjUxMjA2MDMwMTM2WhcNMjUxMjA3MDMwMTM2WjAzMTEwLwYDVQQD EygwMzUxMDk3YTkzYjcxZTE5YTdmYWU4NmRhMWU3Mjc1OGUwZGRiNWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28CgF+DlaieBGj8NePOtt6peLC1N rnw0mCKTHeZa1FwIca7nm6eyja35/zeQFkM9PN04TBt594GaKepDTMD72q9j1cnn /TkaDT6Y1iU6RyW6WpqKdGNI/Yiybs6iT2Zu2m/cNeO3/4lRZvjhqZxJ6oLTrBh1 6+M5cnr/06OFlaAa1PE9NuClBmMxXeA8CDnOgBTa02gPj9TYoFfA2ciyhVRoTAQg x+kwFKdiMdnK1oPuSVEfL9tJscA2WP8GdsVJczWQR8Zi4tSRkW+s+X6ewg11e3cS mfdBV8npNXvGC6ohdmnQkh01d3bkJnkQl7p4uKzV7QGl90yBjLbMUbpphQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFANRCXqTtx4Zp/robaHnJ1jg3bXKMB8GA1UdIwQY MBaAFDkl33mHBvkObY/UIElVUCS3PtNpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1NYZmVZY0ctUTV0ajlRZ1NWVlFKTGMtMDJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xYzdjYjItNzY5Yy00N2FlLWI1YzUt MDg5NDJiNDU0OTk4LzEvT1NYZmVZY0ctUTV0ajlRZ1NWVlFKTGMtMDJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8xYzdjYjItNzY5Yy00N2FlLWI1YzUtMDg5NDJiNDU0OTk4 LzEvT1NYZmVZY0ctUTV0ajlRZ1NWVlFKTGMtMDJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATyYLNNzy CmJ2z+marsCJrhmVMnVFARtziNjQ5qFqaktPiDPwLU65Tvmdb6AmWwkcQTxcQHst 7koCCmgxWmbUtQ1BQs6lODrkYb49AX8YW/u0kPzE3eD6SkTuAdwmcnGp4vvhwi2B P83zmrLNwpgMFTXz9NCDwajYI+FV+TpSW0YkRmF35mYPOYqxKlU+D0EDszPf7Jws oY0Vr6ME+3QqW82gE5QxyyzhfZfLdALaMnA4BjQADWEUZAXxgzdxq6c5kt+9RsFF KEwl1ghc2yGWVELjKqvM/McW1Edouyc+7Og30SBkzQHa0dy6x22r0uC76vpJyFXj 9zEIv+UoJdDEzg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:49:05 2025 by rpki-client