This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft File: osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft (raw, json) Hash identifier: OiThkk1if94tZq6/tfqK/ETtJ6In0MKumgVHR5rKb0Q= Subject key identifier: 19:3B:B0:AB:59:61:E6:79:34:AE:65:76:0B:A9:FE:8A:76:03:07:F6 Authority key identifier: A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24 Certificate issuer: /CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824 Certificate serial: 019B563DD7B89CD4D11FD5265B676889279D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft Manifest number: 1798 Signing time: Thu 25 Dec 2025 16:00:52 +0000 Manifest this update: Thu 25 Dec 2025 16:00:52 +0000 Manifest next update: Fri 26 Dec 2025 16:00:52 +0000 Files and hashes: 1: 02C_6-y3jpHJLm9UcRW5gBVff44.roa (hash: wYTntFQi0lmSYI73ThMJ6MckJaqvifZzL3vAEsSW0Jk=) 2: osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl (hash: /KPCkDZVRPXZpjvGdZv62D8NN8dMDSYwfgmLak/h+78=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 16:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:3d:d7:b8:9c:d4:d1:1f:d5:26:5b:67:68:89:27:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824 Validity Not Before: Dec 25 16:00:52 2025 GMT Not After : Dec 26 16:00:52 2025 GMT Subject: CN=193bb0ab5961e67934ae65760ba9fe8a760307f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ac:c2:c3:12:76:17:70:b0:8e:d2:86:28:ef: a4:8b:8e:9c:2f:72:2c:5e:20:2f:1b:32:de:57:2d: c0:bf:61:f4:77:fe:cc:89:74:af:7c:91:6f:94:43: 87:3b:15:dc:61:83:9f:52:f8:f0:84:dd:e1:04:a3: bd:46:6e:d4:ea:39:c2:ae:f4:0c:b0:78:6e:3c:f6: 9e:dd:bb:a0:79:bd:32:28:9f:7c:e1:d5:58:6a:53: 81:84:ba:dd:17:0f:08:92:36:87:4f:93:a0:93:59: 97:b4:40:15:7b:9c:7e:8b:26:61:aa:d9:07:e0:29: d4:cd:ee:84:f0:1d:44:2e:6b:63:ff:a5:ff:05:22: 89:72:5c:4b:6f:7c:3a:ec:85:c9:6e:d2:49:0e:b0: 8c:14:40:bd:e1:ed:21:c7:8d:df:59:03:b2:68:15: 27:9f:30:83:02:e9:6e:73:72:d3:0d:5f:98:3f:8b: 0d:0f:00:65:a9:2b:8b:a6:88:77:89:fe:7b:f6:58: 37:dd:d5:76:2d:de:3b:70:71:54:10:99:cf:5b:5a: c4:54:04:f3:98:0a:91:5d:0a:62:db:30:65:bd:48: 29:a4:29:fa:02:c4:44:24:c3:3b:af:8e:1a:cd:14: 16:76:aa:98:51:2e:4d:ba:76:82:9a:78:9f:33:d5: 00:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:3B:B0:AB:59:61:E6:79:34:AE:65:76:0B:A9:FE:8A:76:03:07:F6 X509v3 Authority Key Identifier: keyid:A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:56:2e:ee:ee:71:55:26:d4:6d:6d:b7:96:fb:41:12:5b:b4: 09:2d:17:3e:18:a6:99:1b:22:25:a8:3b:9d:84:04:c2:11:55: 50:dd:a1:06:df:7f:23:52:e5:00:d8:1d:df:32:b8:bf:32:89: 86:d5:81:44:94:1f:b8:2e:68:de:13:83:0f:ab:ad:44:cb:dd: ab:2d:4e:30:96:35:b5:37:52:67:0f:52:dc:30:8f:14:ba:47: fc:f6:14:84:24:b6:72:d4:cb:56:5d:6c:b1:4f:91:25:d0:d8: 30:f3:d4:14:24:66:4d:61:ad:f5:02:fd:02:26:fe:61:49:39: 71:ee:3a:a6:22:88:cd:89:68:ae:b1:1f:f8:48:b4:00:40:3d: 7b:f5:6b:98:6b:d3:32:29:be:3c:8a:4b:be:bf:7a:02:82:53: 3d:54:26:de:94:d5:02:98:4a:fe:99:db:85:ac:3a:86:55:01: 82:a0:85:e1:4e:17:48:5d:2d:97:05:97:3c:c2:2b:e9:c0:48: 72:e8:0a:da:4b:1c:60:c2:57:cf:73:46:3d:63:88:4b:89:6d: 5b:37:0d:9a:39:eb:04:94:f6:db:2a:9b:4c:f1:f0:1a:97:b7: 3d:23:5c:c3:17:82:32:83:e1:14:d5:ed:0e:72:eb:12:6f:be: 1c:a0:90:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWPde4nNTRH9UmW2doiSedMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyY2JlOWFiYTFmZjc1NjRkOTEzZWQ3ODY3MmUzMzcxYjdm MzU4MjQwHhcNMjUxMjI1MTYwMDUyWhcNMjUxMjI2MTYwMDUyWjAzMTEwLwYDVQQD EygxOTNiYjBhYjU5NjFlNjc5MzRhZTY1NzYwYmE5ZmU4YTc2MDMwN2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKzCwxJ2F3CwjtKGKO+ki46cL3Is XiAvGzLeVy3Av2H0d/7MiXSvfJFvlEOHOxXcYYOfUvjwhN3hBKO9Rm7U6jnCrvQM sHhuPPae3bugeb0yKJ984dVYalOBhLrdFw8IkjaHT5Ogk1mXtEAVe5x+iyZhqtkH 4CnUze6E8B1ELmtj/6X/BSKJclxLb3w67IXJbtJJDrCMFEC94e0hx43fWQOyaBUn nzCDAuluc3LTDV+YP4sNDwBlqSuLpoh3if579lg33dV2Ld47cHFUEJnPW1rEVATz mAqRXQpi2zBlvUgppCn6AsREJMM7r44azRQWdqqYUS5NunaCmnifM9UAawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBk7sKtZYeZ5NK5ldgup/op2Awf2MB8GA1UdIwQY MBaAFKLL6auh/3Vk2RPteGcuM3G381gkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3N2cHE2SF9kV1RaRS0xNFp5NHpjYmZ6V0NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS80MDhlODMtNTMwZC00NDYyLWIxYzkt ZGYzMjRjNGM2ZWVkLzEvb3N2cHE2SF9kV1RaRS0xNFp5NHpjYmZ6V0NRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS80MDhlODMtNTMwZC00NDYyLWIxYzktZGYzMjRjNGM2ZWVk LzEvb3N2cHE2SF9kV1RaRS0xNFp5NHpjYmZ6V0NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHlYu7u5x VSbUbW23lvtBElu0CS0XPhimmRsiJag7nYQEwhFVUN2hBt9/I1LlANgd3zK4vzKJ htWBRJQfuC5o3hODD6utRMvdqy1OMJY1tTdSZw9S3DCPFLpH/PYUhCS2ctTLVl1s sU+RJdDYMPPUFCRmTWGt9QL9Aib+YUk5ce46piKIzYlorrEf+Ei0AEA9e/VrmGvT Mim+PIpLvr96AoJTPVQm3pTVAphK/pnbhaw6hlUBgqCF4U4XSF0tlwWXPMIr6cBI cugK2kscYMJXz3NGPWOIS4ltWzcNmjnrBJT22yqbTPHwGpe3PSNcwxeCMoPhFNXt DnLrEm++HKCQgg== -----END CERTIFICATE-----Generated at Fri Dec 26 01:30:35 2025 by rpki-client