This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft File: OsePM-jhGHMnZn-pT9dEa42R5bQ.mft (raw, json) Hash identifier: jbFBImcTyyo9bEJKXMKLRvTubIOS3YTEecZ6khLHnCg= Subject key identifier: 71:BE:FD:9D:88:A3:77:A3:BC:D8:C0:36:75:EA:CC:4F:68:60:D8:76 Authority key identifier: 3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4 Certificate issuer: /CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4 Certificate serial: 019B405B752D2F8ABE707093B60616C66C61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 10:01:34 +0000 Manifest this update: Sun 21 Dec 2025 10:01:34 +0000 Manifest next update: Mon 22 Dec 2025 10:01:34 +0000 Files and hashes: 1: F6UTD5xs6irn044j6Bn0b3rkg8E.roa (hash: 9sFquSQ+RMEX3oUpXt6ncKZDty2H5HID8F9gmHeYrQI=) 2: OsePM-jhGHMnZn-pT9dEa42R5bQ.crl (hash: YUFupLgFOTB6XO630Fjlp27eKURN8lyRio3+A+qJd5g=) 3: XWOSrFlYBz01u9ZbsC7SaVbGNk0.roa (hash: cXF9VQeB5aeojhDFULFIh/R4knNnDgR602re3Gn7FPU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:75:2d:2f:8a:be:70:70:93:b6:06:16:c6:6c:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4 Validity Not Before: Dec 21 10:01:34 2025 GMT Not After : Dec 22 10:01:34 2025 GMT Subject: CN=71befd9d88a377a3bcd8c03675eacc4f6860d876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7c:c1:78:35:93:11:fc:cc:a6:5d:f5:52:4d: 57:07:82:ef:7d:bf:92:7d:b8:cb:8b:af:d4:e1:92: 08:6f:04:f5:ca:c1:95:8d:49:16:ce:41:a1:a3:50: 1e:eb:a1:df:e0:d2:48:4f:5d:66:e6:28:c0:a8:2d: 36:58:de:0a:7e:a9:28:2b:63:bf:86:37:67:10:b8: 44:1d:0e:1c:73:86:22:14:d8:b0:f1:43:38:c6:6f: d4:b3:bc:11:01:95:c1:ef:87:14:93:21:57:45:86: e1:4e:b9:f3:d0:34:38:f8:07:4d:10:a8:0c:ae:8b: c0:14:00:98:37:35:5a:04:ff:f4:e7:6a:71:2c:d3: 2f:ec:52:55:33:8e:7a:84:ee:f7:b5:c6:f5:4d:4e: 6b:dd:ba:38:c4:e3:3e:c8:af:1c:69:07:62:e2:c1: 5b:62:7b:31:97:95:92:df:50:ea:e6:9e:79:63:25: d5:a9:6e:77:9c:94:af:53:5e:32:b3:31:9d:ee:a1: 34:ff:86:62:cf:4e:f1:82:fc:1b:01:65:a5:63:09: 59:8f:ac:2f:26:c9:3a:91:cb:d1:2c:cb:b3:9d:cc: 9a:0b:ae:8c:ab:cf:a2:8c:0a:c2:7e:e2:8b:f8:de: 27:bc:50:97:b0:97:b3:9f:0c:39:8a:84:a4:5f:26: ca:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:BE:FD:9D:88:A3:77:A3:BC:D8:C0:36:75:EA:CC:4F:68:60:D8:76 X509v3 Authority Key Identifier: keyid:3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:f3:ba:a0:46:63:a2:26:8f:6d:7b:83:55:a9:f9:ae:16:a6: 3f:43:49:32:12:79:7b:7c:ae:8a:98:4f:61:2c:4b:66:76:b0: a4:14:17:11:e0:3e:4a:9e:1a:2f:b1:0b:85:5e:b0:a7:fd:4a: c6:1a:7e:e1:d0:ac:e3:25:52:db:ba:cb:a8:d2:c1:99:dd:17: 4b:d5:4d:94:b5:29:4d:01:46:4e:9f:d8:45:46:7c:98:31:83: 5b:a8:69:bd:52:e6:10:10:b7:7e:9e:be:85:1f:ce:89:7f:a1: ed:95:21:93:f4:64:18:e2:2a:52:6e:e9:ac:f3:82:7a:97:51: 34:2c:e6:f3:4d:5e:8b:db:b6:38:95:20:56:23:89:84:6f:f7: 82:55:90:8f:94:f0:41:5b:92:88:d3:e7:65:74:d5:f5:c4:48: b1:83:80:49:1d:a4:85:08:96:7a:d6:93:61:02:10:7d:1d:3a: 93:57:6d:81:e0:9d:37:f7:c4:92:9c:d9:63:6c:30:11:ba:05: 38:08:0c:91:9b:3b:ed:66:ed:0d:4b:59:6d:09:de:31:fe:07: f8:75:bd:6c:04:39:35:44:e1:43:5c:d2:9c:bd:fc:1b:f7:d2: 54:03:a4:80:29:25:c7:87:58:ab:1f:ec:c2:3d:9b:a3:61:5c: 3c:5c:dd:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW3UtL4q+cHCTtgYWxmxhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhYzc4ZjMzZThlMTE4NzMyNzY2N2ZhOTRmZDc0NDZiOGQ5 MWU1YjQwHhcNMjUxMjIxMTAwMTM0WhcNMjUxMjIyMTAwMTM0WjAzMTEwLwYDVQQD Eyg3MWJlZmQ5ZDg4YTM3N2EzYmNkOGMwMzY3NWVhY2M0ZjY4NjBkODc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnzBeDWTEfzMpl31Uk1XB4Lvfb+S fbjLi6/U4ZIIbwT1ysGVjUkWzkGho1Ae66Hf4NJIT11m5ijAqC02WN4KfqkoK2O/ hjdnELhEHQ4cc4YiFNiw8UM4xm/Us7wRAZXB74cUkyFXRYbhTrnz0DQ4+AdNEKgM rovAFACYNzVaBP/052pxLNMv7FJVM456hO73tcb1TU5r3bo4xOM+yK8caQdi4sFb Ynsxl5WS31Dq5p55YyXVqW53nJSvU14yszGd7qE0/4Ziz07xgvwbAWWlYwlZj6wv Jsk6kcvRLMuzncyaC66Mq8+ijArCfuKL+N4nvFCXsJeznww5ioSkXybKOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHG+/Z2Io3ejvNjANnXqzE9oYNh2MB8GA1UdIwQY MBaAFDrHjzPo4RhzJ2Z/qU/XRGuNkeW0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3NlUE0tamhHSE1uWm4tcFQ5ZEVhNDJSNWJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81ZWRhYWYtMzMyNy00M2VkLTkwYjEt ZGMwMWY0YjRiYWU0LzEvT3NlUE0tamhHSE1uWm4tcFQ5ZEVhNDJSNWJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy81ZWRhYWYtMzMyNy00M2VkLTkwYjEtZGMwMWY0YjRiYWU0 LzEvT3NlUE0tamhHSE1uWm4tcFQ5ZEVhNDJSNWJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAufO6oEZj oiaPbXuDVan5rhamP0NJMhJ5e3yuiphPYSxLZnawpBQXEeA+Sp4aL7ELhV6wp/1K xhp+4dCs4yVS27rLqNLBmd0XS9VNlLUpTQFGTp/YRUZ8mDGDW6hpvVLmEBC3fp6+ hR/OiX+h7ZUhk/RkGOIqUm7prPOCepdRNCzm801ei9u2OJUgViOJhG/3glWQj5Tw QVuSiNPnZXTV9cRIsYOASR2khQiWetaTYQIQfR06k1dtgeCdN/fEkpzZY2wwEboF OAgMkZs77WbtDUtZbQneMf4H+HW9bAQ5NUThQ1zSnL38G/fSVAOkgCklx4dYqx/s wj2bo2FcPFzdmg== -----END CERTIFICATE-----Generated at Sun Dec 21 16:13:33 2025 by rpki-client