This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft File: O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft (raw, json) Hash identifier: 3aKkt0KA/7ex09QewLjfp0BbbulZ55uwp3rp3ioX1VI= Subject key identifier: A2:50:8B:72:D5:8A:1E:0E:75:66:65:5C:5C:E0:E4:02:2B:45:8E:B7 Authority key identifier: 3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F Certificate issuer: /CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f Certificate serial: 019AF35238EC1CD82E894B97CB0DEABE0FAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 11:00:43 +0000 Manifest this update: Sat 06 Dec 2025 11:00:43 +0000 Manifest next update: Sun 07 Dec 2025 11:00:43 +0000 Files and hashes: 1: ETzMLJ9E8ekQKvTuSVRndgg_ftE.roa (hash: zxZL9sGsfFQCpFwlHr+nLeuc9weJmZjmaUU+udBc04c=) 2: O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl (hash: Cg8W2tm55+XpnjSZIv3Ctz0pXM6lbqYWW8RHEk6PS2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:38:ec:1c:d8:2e:89:4b:97:cb:0d:ea:be:0f:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f Validity Not Before: Dec 6 11:00:43 2025 GMT Not After : Dec 7 11:00:43 2025 GMT Subject: CN=a2508b72d58a1e0e7566655c5ce0e4022b458eb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:79:c2:2a:d5:da:bb:a5:07:56:e4:dd:8b:c0: 43:91:3b:89:f8:a7:f7:21:12:74:dd:6f:32:bf:b3: 99:83:1a:cf:1b:bb:15:e6:6f:43:cd:09:71:28:18: 43:5a:64:ba:a3:31:93:54:fb:73:2b:4f:39:ca:4c: 47:7c:9c:74:e7:41:22:fd:50:0b:e6:12:ad:a8:ed: af:80:4f:0b:dc:2e:0b:d0:57:e2:e5:58:75:ed:fb: 95:4c:ff:64:f7:7c:3b:f7:2c:11:94:5e:d7:08:fa: 3d:36:41:30:27:af:ca:4b:0e:cb:7a:00:0e:94:cd: 77:99:c8:2c:ef:1c:17:b4:7f:12:6e:5e:cf:90:0a: 64:f1:ca:1b:63:91:bc:4e:cc:75:7a:e4:4d:47:26: dc:a0:31:6f:e4:8c:29:77:9e:5f:29:bf:98:ed:ff: e2:55:ea:23:05:d1:72:d5:94:49:fa:0d:8c:53:af: 12:ed:d3:87:3a:dc:30:bc:33:d4:49:95:30:94:89: b8:40:8e:d9:b4:00:4f:b4:42:a3:14:0e:4a:b1:ab: 15:de:c5:fa:5b:13:a2:51:dd:40:40:f3:03:07:00: d9:c2:7c:30:c8:38:5b:05:99:48:c7:92:98:f8:6d: 41:bd:2f:64:a2:a9:6b:fe:fb:9c:7b:c3:51:25:d3: 5f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:50:8B:72:D5:8A:1E:0E:75:66:65:5C:5C:E0:E4:02:2B:45:8E:B7 X509v3 Authority Key Identifier: keyid:3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:5d:3b:f2:f9:1b:a7:86:56:c9:2b:08:9e:60:54:34:43:d6: c8:42:5e:73:18:db:ae:ef:26:4a:8e:ee:97:f1:18:dd:0d:8e: 7c:f7:4d:d6:ac:20:7c:19:71:5e:a4:9e:1f:50:04:b2:9a:de: cf:76:2d:f4:06:2b:c4:4e:41:87:6e:c6:53:0d:3e:05:da:36: 55:63:e6:de:ed:b9:2d:a5:7b:9f:80:1c:75:dd:07:2f:36:b6: bc:a6:47:0d:a7:e7:75:7f:a2:41:2f:82:c3:57:63:19:9c:7c: 1c:f7:3a:ab:5f:93:2d:a9:06:26:ce:de:85:74:a1:c0:5a:48: cd:a6:61:1b:c1:8e:88:df:b8:a4:4f:2a:e0:ac:e4:97:9c:03: bd:8b:cf:73:39:dd:19:72:e3:06:90:9c:fe:54:d1:dc:af:1d: ec:40:05:0b:c8:00:25:94:77:a9:3c:1d:b3:63:ce:62:21:b6: 54:90:2c:90:c4:08:17:74:d2:d6:f3:09:0e:42:30:d5:0f:87: 65:3b:ee:7d:2d:c9:13:74:ff:40:21:67:62:56:b7:52:fd:93: 39:5e:53:51:be:9c:c5:4a:c9:36:d9:04:91:01:a5:5b:6b:27: b9:e9:92:6d:56:7e:1a:20:e0:2d:5b:c1:a2:e6:fb:8c:16:83: 37:c4:fb:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUjjsHNguiUuXyw3qvg+qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiOTRhMWQ4ODFkZDRiZWIyZmQzMWI3NmZhMGQ1ZDU4NWE5 YjIzOGYwHhcNMjUxMjA2MTEwMDQzWhcNMjUxMjA3MTEwMDQzWjAzMTEwLwYDVQQD EyhhMjUwOGI3MmQ1OGExZTBlNzU2NjY1NWM1Y2UwZTQwMjJiNDU4ZWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunnCKtXau6UHVuTdi8BDkTuJ+Kf3 IRJ03W8yv7OZgxrPG7sV5m9DzQlxKBhDWmS6ozGTVPtzK085ykxHfJx050Ei/VAL 5hKtqO2vgE8L3C4L0Ffi5Vh17fuVTP9k93w79ywRlF7XCPo9NkEwJ6/KSw7LegAO lM13mcgs7xwXtH8Sbl7PkApk8cobY5G8Tsx1euRNRybcoDFv5Iwpd55fKb+Y7f/i VeojBdFy1ZRJ+g2MU68S7dOHOtwwvDPUSZUwlIm4QI7ZtABPtEKjFA5KsasV3sX6 WxOiUd1AQPMDBwDZwnwwyDhbBZlIx5KY+G1BvS9koqlr/vuce8NRJdNf8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJQi3LVih4OdWZlXFzg5AIrRY63MB8GA1UdIwQY MBaAFDuUodiB3UvrL9MbdvoNXVhamyOPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzVTaDJJSGRTLXN2MHh0Mi1nMWRXRnFiSTQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS83YzZiMmQtYWM0Mi00ODdlLTljMTkt MTYxODc3NmJkYWFlLzEvTzVTaDJJSGRTLXN2MHh0Mi1nMWRXRnFiSTQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS83YzZiMmQtYWM0Mi00ODdlLTljMTktMTYxODc3NmJkYWFl LzEvTzVTaDJJSGRTLXN2MHh0Mi1nMWRXRnFiSTQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa1078vkb p4ZWySsInmBUNEPWyEJecxjbru8mSo7ul/EY3Q2OfPdN1qwgfBlxXqSeH1AEspre z3Yt9AYrxE5Bh27GUw0+Bdo2VWPm3u25LaV7n4Acdd0HLza2vKZHDafndX+iQS+C w1djGZx8HPc6q1+TLakGJs7ehXShwFpIzaZhG8GOiN+4pE8q4Kzkl5wDvYvPcznd GXLjBpCc/lTR3K8d7EAFC8gAJZR3qTwds2POYiG2VJAskMQIF3TS1vMJDkIw1Q+H ZTvufS3JE3T/QCFnYla3Uv2TOV5TUb6cxUrJNtkEkQGlW2snuemSbVZ+GiDgLVvB oub7jBaDN8T7Fw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:25:07 2025 by rpki-client