This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft File: osiREA5QD7XGTzDxYD_lRdq0kBY.mft (raw, json) Hash identifier: YDdtiO5oSShX6kBcx5x16W2qpHoi0/C24oDLwVKk0Ys= Subject key identifier: 3D:1F:5C:54:00:32:92:AD:3D:4D:A0:63:97:7D:49:78:05:87:22:55 Authority key identifier: A2:C8:91:10:0E:50:0F:B5:C6:4F:30:F1:60:3F:E5:45:DA:B4:90:16 Certificate issuer: /CN=a2c891100e500fb5c64f30f1603fe545dab49016 Certificate serial: 019B3E6D338DE6D7DCF711C4B80E31D7C14F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft Manifest number: 0B7B Signing time: Sun 21 Dec 2025 01:01:42 +0000 Manifest this update: Sun 21 Dec 2025 01:01:42 +0000 Manifest next update: Mon 22 Dec 2025 01:01:42 +0000 Files and hashes: 1: 2r58NpxvTCdcnNGrjt0v-zkeUtY.roa (hash: TkXA680kjgu+5bXWMHrgD9kPPHcPEiisIsJWWTeRFzw=) 2: osiREA5QD7XGTzDxYD_lRdq0kBY.crl (hash: VoGSSpZczPzLLW2aR4udeGVD/6c38AHoaEa3Bdj97g4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.crl rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:33:8d:e6:d7:dc:f7:11:c4:b8:0e:31:d7:c1:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2c891100e500fb5c64f30f1603fe545dab49016 Validity Not Before: Dec 21 01:01:42 2025 GMT Not After : Dec 22 01:01:42 2025 GMT Subject: CN=3d1f5c54003292ad3d4da063977d497805872255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:82:73:ce:98:8d:eb:52:a6:80:6d:3c:94:41: 9d:b6:bc:60:8d:69:3d:0a:9c:93:f0:fe:b9:b1:da: 1c:b3:5a:77:a5:4f:79:88:f4:b0:5a:d7:90:a8:f2: 13:f2:33:2a:ef:10:e2:c1:c4:a4:9d:6d:12:d8:70: f7:45:26:ed:75:57:8f:e2:e0:c1:24:c6:9e:00:79: 90:f9:10:75:0d:ed:49:2b:cb:60:82:ca:3e:e1:0d: fa:47:04:43:e8:8e:19:69:6a:8e:39:d9:01:b2:ca: 4e:26:83:08:f5:c5:a0:38:9f:94:c3:12:09:46:43: 86:59:17:35:e2:0f:b6:61:14:00:95:84:e6:28:36: ce:f4:80:be:49:4e:a6:ad:e4:fa:e4:e5:49:6d:15: 4b:80:b3:d2:9b:21:c4:ff:13:12:f8:2c:14:f4:99: a5:ea:14:52:bc:0c:45:b8:bb:39:09:74:af:8f:f0: 3e:95:38:db:fe:f8:d7:58:24:bd:5c:14:c0:ce:f7: d8:b0:45:6d:f0:e7:6e:ce:0e:bf:fb:d3:0b:91:a9: d1:bc:69:c4:cc:ed:d6:16:ce:0f:9d:bf:76:57:ee: 8e:c1:c6:69:54:82:64:dd:12:8d:42:08:06:67:1a: f2:34:6b:74:d8:c5:dd:a3:8f:e9:e1:b7:51:dc:90: 4c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:1F:5C:54:00:32:92:AD:3D:4D:A0:63:97:7D:49:78:05:87:22:55 X509v3 Authority Key Identifier: keyid:A2:C8:91:10:0E:50:0F:B5:C6:4F:30:F1:60:3F:E5:45:DA:B4:90:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:30:34:af:b5:09:5d:48:3f:e1:de:70:79:7a:36:33:db:e7: 66:fc:d2:fa:22:8f:83:aa:22:51:45:b6:18:cc:8e:d6:77:55: ad:3d:a8:ef:db:66:87:90:83:1d:66:31:2e:f5:e5:15:55:f2: 0a:d6:7c:ad:59:59:95:fa:be:c5:15:9e:5b:7c:ca:2d:43:0e: 6a:13:90:b5:5e:47:25:63:29:5e:6d:9f:ae:74:96:fe:2d:7d: 76:36:71:65:f2:15:b1:06:a7:31:da:90:fb:88:1e:28:7e:8c: f7:1f:37:5a:7b:c1:b5:5c:ce:b0:f7:d5:1c:c7:14:16:26:71: 6e:4a:4c:be:19:c5:ee:bc:a8:8f:b6:84:e9:7e:1f:f3:89:91: 41:8a:cc:24:e9:4c:96:a7:87:f1:73:ad:c8:48:60:10:44:cd: 8c:de:27:94:36:1f:e5:9f:5d:a5:87:dc:97:fe:a5:27:3b:96: 6d:1f:68:67:8a:8c:51:b4:fd:36:b9:c3:a5:96:fa:c0:93:9b: 66:35:b5:ed:51:af:ff:4e:4d:f5:19:ed:2b:5a:0d:e6:d5:6a: 2e:2f:4b:4a:92:fb:b2:f8:bf:95:8d:91:dc:02:a1:7f:6a:1d: a1:f4:44:96:fc:da:aa:78:d2:b0:74:a8:ef:8e:00:90:06:12: a5:a1:43:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bTON5tfc9xHEuA4x18FPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyYzg5MTEwMGU1MDBmYjVjNjRmMzBmMTYwM2ZlNTQ1ZGFi NDkwMTYwHhcNMjUxMjIxMDEwMTQyWhcNMjUxMjIyMDEwMTQyWjAzMTEwLwYDVQQD EygzZDFmNWM1NDAwMzI5MmFkM2Q0ZGEwNjM5NzdkNDk3ODA1ODcyMjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoJzzpiN61KmgG08lEGdtrxgjWk9 CpyT8P65sdocs1p3pU95iPSwWteQqPIT8jMq7xDiwcSknW0S2HD3RSbtdVeP4uDB JMaeAHmQ+RB1De1JK8tggso+4Q36RwRD6I4ZaWqOOdkBsspOJoMI9cWgOJ+UwxIJ RkOGWRc14g+2YRQAlYTmKDbO9IC+SU6mreT65OVJbRVLgLPSmyHE/xMS+CwU9Jml 6hRSvAxFuLs5CXSvj/A+lTjb/vjXWCS9XBTAzvfYsEVt8Oduzg6/+9MLkanRvGnE zO3WFs4Pnb92V+6OwcZpVIJk3RKNQggGZxryNGt02MXdo4/p4bdR3JBMMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD0fXFQAMpKtPU2gY5d9SXgFhyJVMB8GA1UdIwQY MBaAFKLIkRAOUA+1xk8w8WA/5UXatJAWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3NpUkVBNVFEN1hHVHpEeFlEX2xSZHEwa0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8yOGI1NmMtNmFhYy00OGQ3LWFiYTIt OGNhMGM5MGY1NzdlLzEvb3NpUkVBNVFEN1hHVHpEeFlEX2xSZHEwa0JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8yOGI1NmMtNmFhYy00OGQ3LWFiYTItOGNhMGM5MGY1Nzdl LzEvb3NpUkVBNVFEN1hHVHpEeFlEX2xSZHEwa0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAajA0r7UJ XUg/4d5weXo2M9vnZvzS+iKPg6oiUUW2GMyO1ndVrT2o79tmh5CDHWYxLvXlFVXy CtZ8rVlZlfq+xRWeW3zKLUMOahOQtV5HJWMpXm2frnSW/i19djZxZfIVsQanMdqQ +4geKH6M9x83WnvBtVzOsPfVHMcUFiZxbkpMvhnF7ryoj7aE6X4f84mRQYrMJOlM lqeH8XOtyEhgEETNjN4nlDYf5Z9dpYfcl/6lJzuWbR9oZ4qMUbT9NrnDpZb6wJOb ZjW17VGv/05N9RntK1oN5tVqLi9LSpL7svi/lY2R3AKhf2odofRElvzaqnjSsHSo 744AkAYSpaFDIA== -----END CERTIFICATE-----Generated at Sun Dec 21 06:07:00 2025 by rpki-client