This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft File: OSR_d6OuCvcerAMlZEn10pLP_XQ.mft (raw, json) Hash identifier: pGF17sTmBFBfPppb61S9IBiNchbIM4r4AiTpNPTj/9U= Subject key identifier: 1E:AA:F9:93:55:5D:8A:17:98:1A:69:85:C5:F1:11:D3:A0:72:8C:25 Authority key identifier: 39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74 Certificate issuer: /CN=39247f77a3ae0af71eac03256449f5d292cffd74 Certificate serial: 019AF12D9B14D5CD6EE02DF180A9E68FFDFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft Manifest number: 07DD Signing time: Sat 06 Dec 2025 01:01:29 +0000 Manifest this update: Sat 06 Dec 2025 01:01:29 +0000 Manifest next update: Sun 07 Dec 2025 01:01:29 +0000 Files and hashes: 1: A52HcjjVvjURrnqIKzVJffIr5pg.roa (hash: 0khgPx2sOeKgtKjIWQMCspv9EOJEwLPaIfkqJUfbIZI=) 2: OSR_d6OuCvcerAMlZEn10pLP_XQ.crl (hash: eQKzJdSE0k1dM8kLho+DW7XpZlzQnql4XSGzCpw6OuU=) 3: hbbnLuZpD5go-VUHqMX6cwP0VYE.roa (hash: nw4SsVKZtCMAF0Lk44Bca7n8JsrQ2D2s1YmNiP6JfI0=) 4: m07MDAfpyBy-79ZtRPrjp1nHgUM.roa (hash: nt5wNRLp/3eGdwl0jwqVp6q4VVV8Q+vzoY7sROczSbU=) 5: teZ2j_hniWXjQJK5Wyibz3szGe4.roa (hash: AAisqmOnDvymL41tgHnrdsHw2NsaGEhx42Vrfhr3Fe8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:9b:14:d5:cd:6e:e0:2d:f1:80:a9:e6:8f:fd:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39247f77a3ae0af71eac03256449f5d292cffd74 Validity Not Before: Dec 6 01:01:29 2025 GMT Not After : Dec 7 01:01:29 2025 GMT Subject: CN=1eaaf993555d8a17981a6985c5f111d3a0728c25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:77:0d:8a:21:65:f8:c6:e4:d6:21:b3:2f:28: 9f:c0:f7:88:1b:39:8b:37:62:41:5a:f6:69:6e:6a: 36:8d:f0:db:81:39:42:30:83:c6:63:28:49:1d:70: c7:0d:d2:a5:0a:8c:ca:57:8a:12:ed:56:3b:b7:f8: a4:ab:6e:8d:99:72:9d:50:a0:68:02:f6:25:f9:96: a8:22:57:a5:40:5e:4b:7f:d4:7b:13:d0:45:50:9f: a4:ac:77:99:a1:62:e3:31:32:61:b7:65:b7:f7:26: 4e:97:cf:46:4d:e6:ee:e0:e6:0b:de:80:ff:e7:80: a8:c3:99:d0:8f:98:e9:63:23:84:70:d8:a4:b5:b3: 9a:8e:05:ba:4c:85:38:fb:ea:f0:f5:16:65:09:e8: 74:05:34:14:fa:52:9c:26:37:d8:76:cb:9d:a3:5f: 17:03:4d:8f:98:16:6a:45:b1:35:78:23:0c:07:7c: d4:f0:88:0f:d4:fb:f0:53:4b:a8:ff:7e:ce:a4:57: 5d:fb:01:b1:06:e0:64:08:32:1e:2e:b0:2e:c8:76: 55:c4:92:f6:9e:a9:77:4c:17:3b:f1:fb:ba:ae:b9: f3:63:a4:10:ce:d1:ad:f1:7c:a3:c4:46:82:9f:50: 92:f3:60:37:85:a2:8b:e7:59:35:b7:3b:14:d3:24: c6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:AA:F9:93:55:5D:8A:17:98:1A:69:85:C5:F1:11:D3:A0:72:8C:25 X509v3 Authority Key Identifier: keyid:39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:ec:55:6b:13:ab:eb:38:76:a8:cd:99:4b:95:30:18:8c:b8: e5:47:8a:d5:f3:ea:ad:0f:f6:3d:85:66:91:ce:9f:34:59:d0: 4e:e6:9e:5a:19:ca:56:ac:2b:1b:76:93:6c:28:35:83:eb:6d: 17:4a:a6:66:d2:da:99:f3:4a:59:3d:f0:81:3a:e8:d4:31:be: ae:c9:b8:65:4d:24:48:ee:71:ca:03:93:6e:8d:a2:6f:f1:5a: c1:72:12:79:bd:88:6c:b5:01:03:40:2e:57:76:bc:12:cf:48: 31:55:73:aa:7d:db:1b:a1:e5:84:85:02:fc:2e:57:79:20:ff: 29:6d:a3:5f:22:dd:95:83:f6:25:86:d6:63:8e:69:51:5a:78: 39:dd:79:c7:8e:4d:ae:38:df:81:69:ba:8a:d8:32:20:0f:09: 74:2a:4c:74:e8:c1:5e:2f:59:c0:4a:f0:81:60:d5:d6:2b:dd: 21:d4:82:03:68:2c:d2:72:e3:34:1f:c2:d9:80:2a:3a:c2:4b: 9b:61:67:33:33:61:80:22:fa:46:d2:5f:e7:71:f7:7d:56:c6: 54:85:99:81:7c:8d:bd:0b:fa:d3:e0:70:f8:1a:46:10:c3:3d: 76:7d:9b:e7:91:d1:00:41:3d:9b:23:35:57:45:59:74:1a:85: 5b:14:48:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZsU1c1u4C3xgKnmj/36MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MjQ3Zjc3YTNhZTBhZjcxZWFjMDMyNTY0NDlmNWQyOTJj ZmZkNzQwHhcNMjUxMjA2MDEwMTI5WhcNMjUxMjA3MDEwMTI5WjAzMTEwLwYDVQQD EygxZWFhZjk5MzU1NWQ4YTE3OTgxYTY5ODVjNWYxMTFkM2EwNzI4YzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3cNiiFl+Mbk1iGzLyifwPeIGzmL N2JBWvZpbmo2jfDbgTlCMIPGYyhJHXDHDdKlCozKV4oS7VY7t/ikq26NmXKdUKBo AvYl+ZaoIlelQF5Lf9R7E9BFUJ+krHeZoWLjMTJht2W39yZOl89GTebu4OYL3oD/ 54Cow5nQj5jpYyOEcNiktbOajgW6TIU4++rw9RZlCeh0BTQU+lKcJjfYdsudo18X A02PmBZqRbE1eCMMB3zU8IgP1PvwU0uo/37OpFdd+wGxBuBkCDIeLrAuyHZVxJL2 nql3TBc78fu6rrnzY6QQztGt8XyjxEaCn1CS82A3haKL51k1tzsU0yTGmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB6q+ZNVXYoXmBpphcXxEdOgcowlMB8GA1UdIwQY MBaAFDkkf3ejrgr3HqwDJWRJ9dKSz/10MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1NSX2Q2T3VDdmNlckFNbFpFbjEwcExQX1hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84MmVkOWMtN2MxMy00OGI5LWE4ODYt Y2Q2NmFkNTM0ODEyLzEvT1NSX2Q2T3VDdmNlckFNbFpFbjEwcExQX1hRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi84MmVkOWMtN2MxMy00OGI5LWE4ODYtY2Q2NmFkNTM0ODEy LzEvT1NSX2Q2T3VDdmNlckFNbFpFbjEwcExQX1hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgOxVaxOr 6zh2qM2ZS5UwGIy45UeK1fPqrQ/2PYVmkc6fNFnQTuaeWhnKVqwrG3aTbCg1g+tt F0qmZtLamfNKWT3wgTro1DG+rsm4ZU0kSO5xygOTbo2ib/FawXISeb2IbLUBA0Au V3a8Es9IMVVzqn3bG6HlhIUC/C5XeSD/KW2jXyLdlYP2JYbWY45pUVp4Od15x45N rjjfgWm6itgyIA8JdCpMdOjBXi9ZwErwgWDV1ivdIdSCA2gs0nLjNB/C2YAqOsJL m2FnMzNhgCL6RtJf53H3fVbGVIWZgXyNvQv60+Bw+BpGEMM9dn2b55HRAEE9myM1 V0VZdBqFWxRIwQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:33 2025 by rpki-client