This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft File: oSCGrcccvsWuoqH4lU36ZCtTDDs.mft (raw, json) Hash identifier: 1JHAsAHbX4ts6uHhAthnnomAD2q6THDe/OdQLXrmZFY= Subject key identifier: 1A:CD:CA:CE:8D:C4:C3:B3:FC:0B:A1:A5:C7:2B:FE:50:58:3F:CB:10 Authority key identifier: A1:20:86:AD:C7:1C:BE:C5:AE:A2:A1:F8:95:4D:FA:64:2B:53:0C:3B Certificate issuer: /CN=a12086adc71cbec5aea2a1f8954dfa642b530c3b Certificate serial: 019AF389936BEA6388801AD6D8B3DD439CF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 12:01:10 +0000 Manifest this update: Sat 06 Dec 2025 12:01:10 +0000 Manifest next update: Sun 07 Dec 2025 12:01:10 +0000 Files and hashes: 1: _C22KYJjbT7k9Y0F086sSatuYjQ.roa (hash: sGeEeSXLg1Z6VuPUdF3Kx1VfqYaLdwKkzR5hHIgdTMo=) 2: oSCGrcccvsWuoqH4lU36ZCtTDDs.crl (hash: HZf6jd4SU3bh0hhqRMdy134t1cBE/OIDtzKa+0KpFck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:93:6b:ea:63:88:80:1a:d6:d8:b3:dd:43:9c:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a12086adc71cbec5aea2a1f8954dfa642b530c3b Validity Not Before: Dec 6 12:01:10 2025 GMT Not After : Dec 7 12:01:10 2025 GMT Subject: CN=1acdcace8dc4c3b3fc0ba1a5c72bfe50583fcb10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8c:97:56:80:3b:16:99:44:ce:8d:26:d6:98: 87:a0:e6:14:85:96:6d:c3:fd:41:62:66:9a:4d:52: 72:a7:c6:21:76:4a:9d:bd:6b:d1:5d:ba:b2:58:03: 5a:7b:5d:82:d2:df:4f:76:57:ff:48:a3:1e:7d:60: 80:b7:d2:cd:6a:46:cb:8f:7a:2a:c4:38:ad:0d:54: a7:7f:00:fa:d8:b9:ff:09:a3:eb:6d:5f:b7:7b:0c: 0f:a0:80:a6:e2:ee:c0:5e:c2:61:1d:1d:8c:37:5a: ac:ab:f5:a0:e9:87:1f:ad:0f:5b:e2:a3:53:ed:3a: 7f:91:8b:06:1c:32:f1:69:11:33:53:7b:f2:f1:f4: a4:2a:cd:ff:36:5e:b7:c1:00:72:7d:95:c1:ed:ed: c0:50:46:ab:84:ae:0e:43:9c:cd:a4:fd:39:7e:5b: be:0d:48:2a:b8:4b:92:65:9b:c9:bb:b3:67:49:45: 65:0c:84:89:a2:a1:24:47:25:28:0d:78:f5:1f:99: 3f:23:4f:9e:2c:bf:22:0c:9e:a7:00:5e:80:7d:e2: 76:19:47:ae:5d:6c:fd:02:e9:01:88:ca:37:3e:76: 79:d2:7c:f9:bd:22:2d:65:bc:3b:6a:69:f1:a7:2b: e6:06:c0:e5:96:9b:64:be:35:ba:73:f0:c7:09:7a: 99:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:CD:CA:CE:8D:C4:C3:B3:FC:0B:A1:A5:C7:2B:FE:50:58:3F:CB:10 X509v3 Authority Key Identifier: keyid:A1:20:86:AD:C7:1C:BE:C5:AE:A2:A1:F8:95:4D:FA:64:2B:53:0C:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:a9:e9:d5:9d:18:fa:80:49:57:d6:61:a7:22:ff:ef:49:42: 81:02:0f:0c:1d:ae:46:35:9c:4a:9d:e3:ed:4d:a2:15:01:29: 81:14:15:36:5c:71:08:82:9c:01:5a:24:e4:cc:a0:ae:6e:b0: 80:49:a6:d6:df:f8:a3:7d:d7:99:63:91:98:bb:ba:fa:ac:b7: e8:0f:57:33:6c:0b:97:33:42:a8:69:22:15:80:c3:80:12:94: 86:bd:90:43:14:9f:e8:1e:88:cb:1e:0e:98:db:ff:dc:b0:49: 28:a5:e0:6b:70:fb:1c:8d:b1:1f:56:bd:82:33:d6:f1:8e:2e: 42:a7:24:7d:34:49:2c:36:58:50:99:0b:a2:50:d4:7a:45:97: 64:ff:df:ba:42:b4:52:55:bf:ce:a0:92:88:c2:ab:49:15:3b: c1:d0:0c:2d:92:ef:fe:3e:d0:49:e5:2f:f3:b9:14:c1:99:47: 44:6d:ce:0c:79:d6:b6:ac:99:7f:80:41:22:06:ea:d7:2b:dc: b8:f2:6a:ab:d9:4c:4f:fb:ea:6f:a1:50:bd:c6:7d:f0:d8:2e: 09:8d:70:08:b7:84:e4:5d:0e:1a:b7:38:30:a5:28:5b:1a:18: bb:2e:88:c5:3d:d3:a5:a5:54:e3:80:81:34:48:b6:af:77:f7: 0b:f6:a7:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziZNr6mOIgBrW2LPdQ5z3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMjA4NmFkYzcxY2JlYzVhZWEyYTFmODk1NGRmYTY0MmI1 MzBjM2IwHhcNMjUxMjA2MTIwMTEwWhcNMjUxMjA3MTIwMTEwWjAzMTEwLwYDVQQD EygxYWNkY2FjZThkYzRjM2IzZmMwYmExYTVjNzJiZmU1MDU4M2ZjYjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYyXVoA7FplEzo0m1piHoOYUhZZt w/1BYmaaTVJyp8YhdkqdvWvRXbqyWANae12C0t9Pdlf/SKMefWCAt9LNakbLj3oq xDitDVSnfwD62Ln/CaPrbV+3ewwPoICm4u7AXsJhHR2MN1qsq/Wg6YcfrQ9b4qNT 7Tp/kYsGHDLxaREzU3vy8fSkKs3/Nl63wQByfZXB7e3AUEarhK4OQ5zNpP05flu+ DUgquEuSZZvJu7NnSUVlDISJoqEkRyUoDXj1H5k/I0+eLL8iDJ6nAF6AfeJ2GUeu XWz9AukBiMo3PnZ50nz5vSItZbw7amnxpyvmBsDllptkvjW6c/DHCXqZSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBrNys6NxMOz/Auhpccr/lBYP8sQMB8GA1UdIwQY MBaAFKEghq3HHL7FrqKh+JVN+mQrUww7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1NDR3JjY2N2c1d1b3FINGxVMzZaQ3RURERzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC82ZDlhMDItZTQyZC00MmUzLWFmMTMt NDg1YTkyYmI5YmEzLzEvb1NDR3JjY2N2c1d1b3FINGxVMzZaQ3RURERzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC82ZDlhMDItZTQyZC00MmUzLWFmMTMtNDg1YTkyYmI5YmEz LzEvb1NDR3JjY2N2c1d1b3FINGxVMzZaQ3RURERzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaKnp1Z0Y +oBJV9ZhpyL/70lCgQIPDB2uRjWcSp3j7U2iFQEpgRQVNlxxCIKcAVok5Mygrm6w gEmm1t/4o33XmWORmLu6+qy36A9XM2wLlzNCqGkiFYDDgBKUhr2QQxSf6B6Iyx4O mNv/3LBJKKXga3D7HI2xH1a9gjPW8Y4uQqckfTRJLDZYUJkLolDUekWXZP/fukK0 UlW/zqCSiMKrSRU7wdAMLZLv/j7QSeUv87kUwZlHRG3ODHnWtqyZf4BBIgbq1yvc uPJqq9lMT/vqb6FQvcZ98NguCY1wCLeE5F0OGrc4MKUoWxoYuy6IxT3TpaVU44CB NEi2r3f3C/anFg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:10:13 2025 by rpki-client