This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft File: osUThqzwWzqrYYEEdHjW7qG_AGI.mft (raw, json) Hash identifier: SRn+KDZzy4K3l0xpcXuTZ/4ctLB49aDhMRPmAzUR79k= Subject key identifier: 78:6E:3B:03:86:34:73:8D:2F:70:F4:AC:80:CF:1F:F2:06:46:6C:16 Authority key identifier: A2:C5:13:86:AC:F0:5B:3A:AB:61:81:04:74:78:D6:EE:A1:BF:00:62 Certificate issuer: /CN=a2c51386acf05b3aab6181047478d6eea1bf0062 Certificate serial: 019B3344AEE06ADC7778F5F08E76F1573441 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osUThqzwWzqrYYEEdHjW7qG_AGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft Manifest number: 036E Signing time: Thu 18 Dec 2025 21:01:37 +0000 Manifest this update: Thu 18 Dec 2025 21:01:37 +0000 Manifest next update: Fri 19 Dec 2025 21:01:37 +0000 Files and hashes: 1: 0cFm87h5GkHalEGqmJaLcd0Qqo8.roa (hash: jMxPSL+zdsv3eh4JmgehYYH5Kp/WnR56mTqAfCb0p0E=) 2: osUThqzwWzqrYYEEdHjW7qG_AGI.crl (hash: yOVwQ2OKLFOZtW66GhMBNrdbkhpYE7iEX6iXecfrsQc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.crl rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft rsync://rpki.ripe.net/repository/DEFAULT/osUThqzwWzqrYYEEdHjW7qG_AGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:ae:e0:6a:dc:77:78:f5:f0:8e:76:f1:57:34:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2c51386acf05b3aab6181047478d6eea1bf0062 Validity Not Before: Dec 18 21:01:37 2025 GMT Not After : Dec 19 21:01:37 2025 GMT Subject: CN=786e3b038634738d2f70f4ac80cf1ff206466c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:af:c8:98:a2:fc:00:fa:4e:2a:96:3f:ea:97: e2:b7:a6:6f:70:15:99:10:97:cf:b1:fc:7a:19:54: c8:ad:33:a2:d6:96:f1:65:69:5e:b3:96:90:b7:67: c8:20:60:16:9a:64:32:17:28:ef:15:d1:02:91:97: a6:a8:43:1b:94:67:57:e8:d1:92:4e:f7:a4:8b:a4: 6f:79:59:61:c8:69:8c:f5:b8:4e:a7:19:9d:b9:4e: aa:ee:d5:3c:9e:f7:d6:57:ca:1b:00:af:a6:7b:84: b8:a8:43:de:9c:59:5f:c8:94:0d:dc:fa:05:1b:87: f4:90:d6:39:dd:db:d1:ad:0e:92:d1:98:42:c5:a9: 7b:49:4f:71:70:67:48:ae:ad:91:0a:75:d1:0e:6b: 35:25:0c:7e:39:35:4a:6c:4b:ba:ca:f4:bd:60:9d: 74:36:54:36:b2:08:e9:3a:07:42:64:80:f5:d4:e0: e5:db:3f:3c:4d:5c:3c:bc:04:b5:5e:72:de:75:64: 4f:c7:0c:fb:93:83:b2:4a:31:b0:19:bf:a5:b6:7e: f8:2e:b8:05:6b:83:6b:2a:ef:68:ea:64:8f:67:d8: 06:b2:c1:67:a4:76:1d:19:1f:b2:47:71:71:1d:b0: 0a:14:b9:b5:0b:88:d3:03:e0:cd:0d:94:2a:80:5f: 79:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:6E:3B:03:86:34:73:8D:2F:70:F4:AC:80:CF:1F:F2:06:46:6C:16 X509v3 Authority Key Identifier: keyid:A2:C5:13:86:AC:F0:5B:3A:AB:61:81:04:74:78:D6:EE:A1:BF:00:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osUThqzwWzqrYYEEdHjW7qG_AGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:ff:da:fb:55:c2:71:9f:2e:0f:76:de:a7:79:c5:b1:51:ed: 26:a1:88:fb:38:e4:60:fd:7f:04:59:48:11:bb:af:2b:f4:9d: bd:95:48:b3:30:bd:32:29:1e:a4:85:8e:d5:bc:00:35:52:ed: 69:3f:ab:fe:bc:d6:07:8d:aa:cb:83:2c:29:2d:38:50:4c:29: 73:bf:9b:c7:b3:b6:2e:d8:45:eb:c4:48:f7:58:8b:64:ce:58: 3e:d6:e7:9a:6a:31:ba:d4:87:ec:fe:57:25:a1:40:b2:91:5e: e8:cc:55:f4:41:e2:1c:ca:1a:1b:7d:7c:d0:c0:02:7f:8e:50: e4:c4:52:c2:8d:95:f9:87:33:69:aa:42:5a:aa:ac:2f:9e:50: 4b:4b:d0:64:89:cb:5e:e9:f2:53:17:a0:2f:37:9d:ee:b2:7f: 4b:94:7f:9d:e8:b6:01:df:29:53:ca:3b:63:ac:82:3b:87:7e: 72:dd:6f:21:4c:78:5d:99:f7:e0:31:18:95:e7:7b:b1:78:f5: b2:28:65:3b:04:f8:8e:48:e5:22:a7:95:70:7b:27:98:83:e5: 0e:59:bf:67:9f:c9:16:9d:d5:ae:44:33:82:ee:32:76:1c:2a: b2:e3:78:80:67:7f:9c:f1:b6:45:51:d9:8d:02:e0:7f:6c:37: 27:66:76:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRK7gatx3ePXwjnbxVzRBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyYzUxMzg2YWNmMDViM2FhYjYxODEwNDc0NzhkNmVlYTFi ZjAwNjIwHhcNMjUxMjE4MjEwMTM3WhcNMjUxMjE5MjEwMTM3WjAzMTEwLwYDVQQD Eyg3ODZlM2IwMzg2MzQ3MzhkMmY3MGY0YWM4MGNmMWZmMjA2NDY2YzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwq/ImKL8APpOKpY/6pfit6ZvcBWZ EJfPsfx6GVTIrTOi1pbxZWles5aQt2fIIGAWmmQyFyjvFdECkZemqEMblGdX6NGS Tveki6RveVlhyGmM9bhOpxmduU6q7tU8nvfWV8obAK+me4S4qEPenFlfyJQN3PoF G4f0kNY53dvRrQ6S0ZhCxal7SU9xcGdIrq2RCnXRDms1JQx+OTVKbEu6yvS9YJ10 NlQ2sgjpOgdCZID11ODl2z88TVw8vAS1XnLedWRPxwz7k4OySjGwGb+ltn74LrgF a4NrKu9o6mSPZ9gGssFnpHYdGR+yR3FxHbAKFLm1C4jTA+DNDZQqgF95fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHhuOwOGNHONL3D0rIDPH/IGRmwWMB8GA1UdIwQY MBaAFKLFE4as8Fs6q2GBBHR41u6hvwBiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3NVVGhxendXenFyWVlFRWRIalc3cUdfQUdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xNjRkMzQtMTI1Zi00YzYwLTg2MzUt N2Q2ZjUzODg5ZDU3LzEvb3NVVGhxendXenFyWVlFRWRIalc3cUdfQUdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xNjRkMzQtMTI1Zi00YzYwLTg2MzUtN2Q2ZjUzODg5ZDU3 LzEvb3NVVGhxendXenFyWVlFRWRIalc3cUdfQUdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg//a+1XC cZ8uD3bep3nFsVHtJqGI+zjkYP1/BFlIEbuvK/SdvZVIszC9MikepIWO1bwANVLt aT+r/rzWB42qy4MsKS04UEwpc7+bx7O2LthF68RI91iLZM5YPtbnmmoxutSH7P5X JaFAspFe6MxV9EHiHMoaG3180MACf45Q5MRSwo2V+YczaapCWqqsL55QS0vQZInL XunyUxegLzed7rJ/S5R/nei2Ad8pU8o7Y6yCO4d+ct1vIUx4XZn34DEYled7sXj1 sihlOwT4jkjlIqeVcHsnmIPlDlm/Z5/JFp3VrkQzgu4ydhwqsuN4gGd/nPG2RVHZ jQLgf2w3J2Z27A== -----END CERTIFICATE-----Generated at Fri Dec 19 01:27:11 2025 by rpki-client