This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.mft File: OstMHbOigqLFrhaULo1gYb50UWs.mft (raw, json) Hash identifier: KOXIl8cnJHQ/gugUW+puWHAY6JSx0TpZOnSbnHTg9Mc= Subject key identifier: 6F:41:69:56:55:76:28:35:2E:1A:FA:E1:2B:FF:F4:C7:98:37:8B:67 Authority key identifier: 3A:CB:4C:1D:B3:A2:82:A2:C5:AE:16:94:2E:8D:60:61:BE:74:51:6B Certificate issuer: /CN=3acb4c1db3a282a2c5ae16942e8d6061be74516b Certificate serial: 019B3C7F70CFD787B0213EDD9B774393F39D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OstMHbOigqLFrhaULo1gYb50UWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.mft Manifest number: 0FF6 Signing time: Sat 20 Dec 2025 16:02:23 +0000 Manifest this update: Sat 20 Dec 2025 16:02:23 +0000 Manifest next update: Sun 21 Dec 2025 16:02:23 +0000 Files and hashes: 1: OstMHbOigqLFrhaULo1gYb50UWs.crl (hash: cZw6ShaSmFpPAXNhNDCBVz3z+DdYMm4CoW5WGBXSBLE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.mft rsync://rpki.ripe.net/repository/DEFAULT/OstMHbOigqLFrhaULo1gYb50UWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:70:cf:d7:87:b0:21:3e:dd:9b:77:43:93:f3:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3acb4c1db3a282a2c5ae16942e8d6061be74516b Validity Not Before: Dec 20 16:02:23 2025 GMT Not After : Dec 21 16:02:23 2025 GMT Subject: CN=6f416956557628352e1afae12bfff4c798378b67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:90:b1:e3:71:5d:dc:d0:04:ed:db:c0:34:48: 7f:ac:05:72:f8:c0:d0:09:87:1e:cf:9b:b1:f2:de: 43:52:fc:18:80:a8:e0:97:bd:2c:e6:fa:74:ba:c3: d3:bb:55:a0:02:a0:1b:cb:70:50:e5:b8:b1:15:bd: 68:83:25:12:92:f7:68:4f:ea:02:55:bb:65:63:07: 87:36:da:52:ea:ef:03:ea:1b:7e:d0:cd:c7:f5:b5: 1f:c5:50:4d:68:4a:da:55:2d:b5:38:c7:88:f3:b3: 8e:48:5a:8a:d8:65:b1:92:07:01:fc:1a:54:60:40: 58:60:32:32:77:af:b7:ff:c8:f9:5a:b5:ff:da:83: b4:71:af:11:8f:9a:7a:a2:bd:f6:ea:42:72:bf:2a: dd:86:89:be:37:85:69:bc:f0:53:6d:3a:7a:9d:62: c5:08:96:47:f9:ec:d4:46:2e:3d:63:d0:7e:73:9e: 0c:eb:ac:93:ed:3f:9b:c3:cf:27:bd:5c:f4:46:92: 0b:03:7a:b8:50:a8:12:c6:e1:7b:ae:e0:11:d5:2a: f5:63:56:11:9a:58:54:6c:b7:1f:27:9d:60:af:58: 14:f8:5a:97:90:2b:71:52:81:02:06:c2:8c:1f:b4: da:a4:22:41:49:4e:16:d6:37:15:04:29:c8:f2:fe: 09:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:41:69:56:55:76:28:35:2E:1A:FA:E1:2B:FF:F4:C7:98:37:8B:67 X509v3 Authority Key Identifier: keyid:3A:CB:4C:1D:B3:A2:82:A2:C5:AE:16:94:2E:8D:60:61:BE:74:51:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OstMHbOigqLFrhaULo1gYb50UWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:4b:6d:03:84:da:3e:56:21:e2:61:6e:4a:62:3d:4b:7c:55: e7:b4:42:c8:c4:4a:71:d7:4d:89:b4:18:87:b7:4d:a8:e5:da: 47:2c:f5:ec:72:41:17:4d:9b:5a:09:8d:6e:3b:82:b5:cc:8c: 5b:f8:4f:21:6a:d6:03:db:7e:f2:67:4d:69:fa:56:d6:97:09: 4f:ed:96:5d:71:96:e1:35:8a:6b:d0:1c:6c:ca:b7:26:24:e6: 2e:b6:63:86:82:47:5b:58:13:8c:5b:de:5f:60:b8:0d:14:1b: 3b:08:ef:99:98:3d:6d:ba:11:e5:a3:3d:6e:81:c3:00:ef:13: 2b:1c:30:0e:74:ba:c1:91:c3:13:6c:a9:d6:07:68:ac:61:13: dd:54:c8:c1:08:9c:0c:4a:ab:db:8b:2f:de:95:c1:bb:a0:4c: d7:70:0d:20:9c:e3:3b:64:90:87:b1:46:e1:38:4c:db:93:7b: 71:10:3d:f9:7f:6e:81:f1:88:3d:c9:c2:77:4a:e6:ba:36:b6: 2a:06:e4:6f:11:be:ec:44:e7:96:cb:54:96:5f:fd:ee:5e:dd: 18:7a:05:00:c4:29:d2:ad:e3:7f:1b:b6:2a:3c:76:45:28:01: 14:2d:b3:ae:c8:ce:18:db:75:82:20:90:8a:d1:dc:bf:a2:6c: f9:bc:41:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f3DP14ewIT7dm3dDk/OdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhY2I0YzFkYjNhMjgyYTJjNWFlMTY5NDJlOGQ2MDYxYmU3 NDUxNmIwHhcNMjUxMjIwMTYwMjIzWhcNMjUxMjIxMTYwMjIzWjAzMTEwLwYDVQQD Eyg2ZjQxNjk1NjU1NzYyODM1MmUxYWZhZTEyYmZmZjRjNzk4Mzc4YjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5Cx43Fd3NAE7dvANEh/rAVy+MDQ CYcez5ux8t5DUvwYgKjgl70s5vp0usPTu1WgAqAby3BQ5bixFb1ogyUSkvdoT+oC VbtlYweHNtpS6u8D6ht+0M3H9bUfxVBNaEraVS21OMeI87OOSFqK2GWxkgcB/BpU YEBYYDIyd6+3/8j5WrX/2oO0ca8Rj5p6or326kJyvyrdhom+N4VpvPBTbTp6nWLF CJZH+ezURi49Y9B+c54M66yT7T+bw88nvVz0RpILA3q4UKgSxuF7ruAR1Sr1Y1YR mlhUbLcfJ51gr1gU+FqXkCtxUoECBsKMH7TapCJBSU4W1jcVBCnI8v4JawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG9BaVZVdig1Lhr64Sv/9MeYN4tnMB8GA1UdIwQY MBaAFDrLTB2zooKixa4WlC6NYGG+dFFrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3N0TUhiT2lncUxGcmhhVUxvMWdZYjUwVVdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi81YTgyYTctOGY2MS00NzQ5LTkxMTgt Y2JmMzRlYmNhNGI5LzEvT3N0TUhiT2lncUxGcmhhVUxvMWdZYjUwVVdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi81YTgyYTctOGY2MS00NzQ5LTkxMTgtY2JmMzRlYmNhNGI5 LzEvT3N0TUhiT2lncUxGcmhhVUxvMWdZYjUwVVdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZkttA4Ta PlYh4mFuSmI9S3xV57RCyMRKcddNibQYh7dNqOXaRyz17HJBF02bWgmNbjuCtcyM W/hPIWrWA9t+8mdNafpW1pcJT+2WXXGW4TWKa9AcbMq3JiTmLrZjhoJHW1gTjFve X2C4DRQbOwjvmZg9bboR5aM9boHDAO8TKxwwDnS6wZHDE2yp1gdorGET3VTIwQic DEqr24sv3pXBu6BM13ANIJzjO2SQh7FG4ThM25N7cRA9+X9ugfGIPcnCd0rmuja2 KgbkbxG+7ETnlstUll/97l7dGHoFAMQp0q3jfxu2Kjx2RSgBFC2zrsjOGNt1giCQ itHcv6Js+bxB/w== -----END CERTIFICATE-----Generated at Sat Dec 20 18:51:19 2025 by rpki-client