This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft File: os1DAbKJXx2YqFDlic58BjxTn00.mft (raw, json) Hash identifier: YySceRhkweMbD1lUuSCuZLJOZx+FBtwouosWg6VgxwU= Subject key identifier: A5:00:27:42:68:4B:37:FF:D9:F2:3D:9C:75:4C:6D:A8:A4:EC:84:70 Authority key identifier: A2:CD:43:01:B2:89:5F:1D:98:A8:50:E5:89:CE:7C:06:3C:53:9F:4D Certificate issuer: /CN=a2cd4301b2895f1d98a850e589ce7c063c539f4d Certificate serial: 019B55CFF1B3AEA646A34AC0CC14F96D77C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft Manifest number: 12FA Signing time: Thu 25 Dec 2025 14:00:49 +0000 Manifest this update: Thu 25 Dec 2025 14:00:49 +0000 Manifest next update: Fri 26 Dec 2025 14:00:49 +0000 Files and hashes: 1: KAKz0xo2XXEBIDI7U4s2tUakP98.roa (hash: nzwZHLIuL4E1A+Jcxn7qeWA8mqGxoFVori2v9JbkLPE=) 2: os1DAbKJXx2YqFDlic58BjxTn00.crl (hash: /2ZEjauL6MEfd/y/nRraS6/sp0MhWQ2OQX/8OAKFLSQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.crl rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 14:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:cf:f1:b3:ae:a6:46:a3:4a:c0:cc:14:f9:6d:77:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2cd4301b2895f1d98a850e589ce7c063c539f4d Validity Not Before: Dec 25 14:00:49 2025 GMT Not After : Dec 26 14:00:49 2025 GMT Subject: CN=a5002742684b37ffd9f23d9c754c6da8a4ec8470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:40:42:26:f5:7f:ac:5e:0d:f3:ec:0f:80:f6: ac:c6:3c:13:fd:50:ea:e8:ae:92:15:f1:97:55:80: 70:56:49:94:28:35:2a:d6:20:ee:fb:9c:2d:96:0d: ae:34:45:b3:75:2e:57:cc:4e:b4:57:20:64:0b:a1: 6d:5d:c9:64:cf:96:66:85:8a:66:22:79:db:91:b1: 0e:bf:02:c6:f2:d0:97:aa:75:c0:81:b2:69:da:8e: 9d:25:f8:b8:ce:04:7b:40:57:52:af:f2:9d:05:0e: 72:01:7f:05:08:c2:35:cc:5f:9e:f8:d1:65:e6:8f: 4c:42:1d:2c:c4:97:8f:1b:2b:29:d5:ba:ef:d2:bf: e1:d5:71:79:b4:f7:ab:02:26:56:b4:f2:ab:66:63: 83:fa:0c:e9:d3:51:4b:c6:dc:f3:d3:f5:23:e3:67: 72:2d:09:13:03:18:8a:33:02:10:6e:bb:fa:5c:91: cb:ec:26:fc:ab:eb:c5:69:fd:8f:0c:0b:f7:e7:0c: 8a:a7:87:23:d8:f7:07:53:56:86:f6:91:9b:cf:bc: c5:5b:73:70:e8:c7:dd:da:b0:15:73:42:4e:a0:7b: 4f:3c:96:80:07:76:85:db:63:0d:b2:51:5b:c3:e4: da:93:d5:cf:a9:f3:96:4d:51:38:c4:aa:3a:c3:75: 7e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:00:27:42:68:4B:37:FF:D9:F2:3D:9C:75:4C:6D:A8:A4:EC:84:70 X509v3 Authority Key Identifier: keyid:A2:CD:43:01:B2:89:5F:1D:98:A8:50:E5:89:CE:7C:06:3C:53:9F:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:fb:0d:57:a9:d9:c2:37:57:60:49:9d:5e:86:9a:8c:4f:31: 2b:fb:8b:d5:e2:9e:ed:57:11:8f:43:5f:59:e8:f1:89:b3:83: cd:b2:8b:de:e6:e0:30:39:65:c7:ff:62:a2:e6:07:97:6c:dd: 8f:33:23:a7:58:b8:b6:82:63:d6:84:48:df:4f:72:33:8f:00: 65:ec:e9:f9:61:b6:41:8e:7b:c9:a7:81:4f:b6:1b:cf:c4:39: ef:16:0c:73:9e:c9:cc:78:35:64:d5:55:9f:84:d3:dc:45:13: 69:d4:7a:a6:fc:d0:b9:6a:be:23:4c:e5:a2:1f:64:45:37:7c: 91:96:09:a9:3e:0a:3d:a6:a1:5b:2d:2c:fc:fa:27:34:c5:6a: 61:86:3d:c2:2d:3c:83:a4:8b:63:10:79:bd:62:d0:4b:bf:87: 85:c9:06:5c:e2:f9:5d:d7:7b:b8:f4:b8:a5:23:b0:3c:08:2a: 46:d9:d5:16:bb:e8:ad:f4:4e:ed:6d:2b:ec:23:79:11:3c:ad: 88:3f:77:25:58:f0:0a:bf:ed:06:2c:73:3c:f0:59:31:3a:7d: c4:ef:c8:f7:0a:74:9d:3e:71:1d:fc:ef:81:9e:89:90:62:70: a0:dc:9c:b3:65:fd:7f:d1:6d:cb:8a:cf:79:b3:c4:14:cf:a1: a7:7e:a1:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVz/GzrqZGo0rAzBT5bXfFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyY2Q0MzAxYjI4OTVmMWQ5OGE4NTBlNTg5Y2U3YzA2M2M1 MzlmNGQwHhcNMjUxMjI1MTQwMDQ5WhcNMjUxMjI2MTQwMDQ5WjAzMTEwLwYDVQQD EyhhNTAwMjc0MjY4NGIzN2ZmZDlmMjNkOWM3NTRjNmRhOGE0ZWM4NDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEBCJvV/rF4N8+wPgPasxjwT/VDq 6K6SFfGXVYBwVkmUKDUq1iDu+5wtlg2uNEWzdS5XzE60VyBkC6FtXclkz5ZmhYpm InnbkbEOvwLG8tCXqnXAgbJp2o6dJfi4zgR7QFdSr/KdBQ5yAX8FCMI1zF+e+NFl 5o9MQh0sxJePGysp1brv0r/h1XF5tPerAiZWtPKrZmOD+gzp01FLxtzz0/Uj42dy LQkTAxiKMwIQbrv6XJHL7Cb8q+vFaf2PDAv35wyKp4cj2PcHU1aG9pGbz7zFW3Nw 6Mfd2rAVc0JOoHtPPJaAB3aF22MNslFbw+Tak9XPqfOWTVE4xKo6w3V+8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKUAJ0JoSzf/2fI9nHVMbaik7IRwMB8GA1UdIwQY MBaAFKLNQwGyiV8dmKhQ5YnOfAY8U59NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3MxREFiS0pYeDJZcUZEbGljNThCanhUbjAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8zODQ4NmMtOWRlMy00NGVmLWFiMjkt NThmM2YzN2NjZGQ5LzEvb3MxREFiS0pYeDJZcUZEbGljNThCanhUbjAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8zODQ4NmMtOWRlMy00NGVmLWFiMjktNThmM2YzN2NjZGQ5 LzEvb3MxREFiS0pYeDJZcUZEbGljNThCanhUbjAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIfsNV6nZ wjdXYEmdXoaajE8xK/uL1eKe7VcRj0NfWejxibODzbKL3ubgMDllx/9iouYHl2zd jzMjp1i4toJj1oRI309yM48AZezp+WG2QY57yaeBT7Ybz8Q57xYMc57JzHg1ZNVV n4TT3EUTadR6pvzQuWq+I0zloh9kRTd8kZYJqT4KPaahWy0s/PonNMVqYYY9wi08 g6SLYxB5vWLQS7+HhckGXOL5Xdd7uPS4pSOwPAgqRtnVFrvorfRO7W0r7CN5ETyt iD93JVjwCr/tBixzPPBZMTp9xO/I9wp0nT5xHfzvgZ6JkGJwoNycs2X9f9Fty4rP ebPEFM+hp36h1g== -----END CERTIFICATE-----Generated at Thu Dec 25 23:04:04 2025 by rpki-client