This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft File: Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft (raw, json) Hash identifier: GsdJqSrOUALvYd97ghPI56xrjaMxfvr2uqZNIR/SXXY= Subject key identifier: A0:AE:ED:68:9D:6F:19:23:1F:58:96:D8:1B:94:C7:37:F6:3E:79:2F Authority key identifier: 3A:CD:90:CB:63:7D:3D:2C:73:D9:9D:EA:9A:4F:E8:13:E6:48:58:43 Certificate issuer: /CN=3acd90cb637d3d2c73d99dea9a4fe813e6485843 Certificate serial: 019B3F47E0F55D739C95C3181002E9BD8E7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft Manifest number: 11C1 Signing time: Sun 21 Dec 2025 05:00:33 +0000 Manifest this update: Sun 21 Dec 2025 05:00:33 +0000 Manifest next update: Mon 22 Dec 2025 05:00:33 +0000 Files and hashes: 1: Mu4iTpkBhKid85hQkXUqPdd3l28.roa (hash: m9wF2k+Ifz07DvZ8KG/nCFZD2LO8ELnkwbys5hG5IQw=) 2: Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.crl (hash: gyRjCa226vnmqtvDweOkxMd4UWHUi+tGtaPVCulcu90=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft rsync://rpki.ripe.net/repository/DEFAULT/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:47:e0:f5:5d:73:9c:95:c3:18:10:02:e9:bd:8e:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3acd90cb637d3d2c73d99dea9a4fe813e6485843 Validity Not Before: Dec 21 05:00:33 2025 GMT Not After : Dec 22 05:00:33 2025 GMT Subject: CN=a0aeed689d6f19231f5896d81b94c737f63e792f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ea:ff:c8:d7:ff:e6:52:0d:9a:20:de:7b:1c: 06:58:00:dd:7b:16:c0:2b:7b:22:14:9a:14:3c:98: 4e:dd:bc:d1:ee:54:05:1e:de:3d:c7:04:ac:3b:75: f5:02:88:b2:a4:72:ce:1f:66:f3:49:55:fd:c0:ce: 74:24:79:80:f3:95:eb:6b:7a:ee:34:13:15:d2:68: c0:37:9b:81:7c:c9:84:4d:ab:ad:ba:21:5e:1e:42: 96:5e:9e:39:2d:14:0f:9d:93:e9:ef:b6:82:47:5d: 4e:b6:04:42:1a:84:de:ae:e5:b2:6f:85:14:b7:5e: 14:56:8d:40:f8:b2:e3:c5:5c:53:16:19:5f:2a:e6: 29:3e:0a:17:fe:fa:79:39:55:64:70:0f:3b:17:0f: d4:1c:3b:db:2c:3b:60:de:e1:9a:5f:11:2b:97:af: f6:24:b9:e7:87:dd:fe:5b:8e:1c:1a:03:8c:a3:0e: 6f:8f:1e:e3:21:cc:0a:d1:8b:e8:71:90:8f:3b:1b: 84:cc:3f:70:fa:a6:e3:44:2f:a7:79:90:2d:54:a8: 42:2d:d0:87:6a:4b:ea:79:6b:01:3d:37:36:d2:29: 0b:7d:6c:f4:a2:dc:ea:9a:3c:31:2b:57:58:b0:d5: 55:6c:40:e0:66:9d:07:b4:4d:bd:79:10:b6:b9:64: 5e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:AE:ED:68:9D:6F:19:23:1F:58:96:D8:1B:94:C7:37:F6:3E:79:2F X509v3 Authority Key Identifier: keyid:3A:CD:90:CB:63:7D:3D:2C:73:D9:9D:EA:9A:4F:E8:13:E6:48:58:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:7e:d5:d4:1f:ee:9a:4f:98:f9:79:a1:70:79:08:b8:2c:d2: 41:10:a3:09:c6:76:c9:77:c6:98:bf:c3:e7:cf:5f:9a:27:ca: 64:fb:91:dd:3d:44:03:4a:91:03:23:a2:1c:09:fb:75:8c:f5: 57:f9:13:ce:39:6f:a8:50:27:89:0b:80:83:96:32:b0:0a:12: 2e:15:5f:d9:4e:37:2c:e1:a1:48:97:c6:a1:35:57:ee:47:27: a0:b4:8f:e3:a0:75:11:98:8c:8f:68:1c:a6:fd:23:2b:57:d9: b0:50:da:f8:03:1a:21:ee:ac:2a:7c:74:f2:b3:d9:aa:a6:75: a1:a0:2a:b2:71:cb:8f:f4:61:14:47:2c:77:b2:91:24:d8:6d: 5f:30:cc:1f:c9:f4:08:14:bb:05:a8:d5:4f:06:bf:b1:8e:c6: 94:85:ec:d4:7b:60:b7:25:02:c2:b4:d0:09:e3:d3:5f:85:a1: 0a:a8:16:fb:5d:db:fb:32:10:7b:76:78:2f:63:ee:18:c6:fc: ff:0d:1b:39:6e:e4:66:1e:25:6e:46:2c:ea:7b:a6:ad:e2:20: a4:aa:aa:78:2f:5c:ea:be:3b:af:12:21:c9:7a:50:8a:09:34: 2e:71:fc:3f:f9:23:74:19:1a:a4:61:68:9b:86:99:6c:d2:9d: 7f:09:16:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/R+D1XXOclcMYEALpvY56MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhY2Q5MGNiNjM3ZDNkMmM3M2Q5OWRlYTlhNGZlODEzZTY0 ODU4NDMwHhcNMjUxMjIxMDUwMDMzWhcNMjUxMjIyMDUwMDMzWjAzMTEwLwYDVQQD EyhhMGFlZWQ2ODlkNmYxOTIzMWY1ODk2ZDgxYjk0YzczN2Y2M2U3OTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+r/yNf/5lINmiDeexwGWADdexbA K3siFJoUPJhO3bzR7lQFHt49xwSsO3X1AoiypHLOH2bzSVX9wM50JHmA85Xra3ru NBMV0mjAN5uBfMmETautuiFeHkKWXp45LRQPnZPp77aCR11OtgRCGoTeruWyb4UU t14UVo1A+LLjxVxTFhlfKuYpPgoX/vp5OVVkcA87Fw/UHDvbLDtg3uGaXxErl6/2 JLnnh93+W44cGgOMow5vjx7jIcwK0YvocZCPOxuEzD9w+qbjRC+neZAtVKhCLdCH akvqeWsBPTc20ikLfWz0otzqmjwxK1dYsNVVbEDgZp0HtE29eRC2uWReeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCu7WidbxkjH1iW2BuUxzf2PnkvMB8GA1UdIwQY MBaAFDrNkMtjfT0sc9md6ppP6BPmSFhDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3MyUXkyTjlQU3h6MlozcW1rX29FLVpJV0VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8wOThjZjQtMDdjMC00YWI3LTljYzct YmU4Yzc4YzA2ZmM3LzEvT3MyUXkyTjlQU3h6MlozcW1rX29FLVpJV0VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8wOThjZjQtMDdjMC00YWI3LTljYzctYmU4Yzc4YzA2ZmM3 LzEvT3MyUXkyTjlQU3h6MlozcW1rX29FLVpJV0VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU37V1B/u mk+Y+XmhcHkIuCzSQRCjCcZ2yXfGmL/D589fmifKZPuR3T1EA0qRAyOiHAn7dYz1 V/kTzjlvqFAniQuAg5YysAoSLhVf2U43LOGhSJfGoTVX7kcnoLSP46B1EZiMj2gc pv0jK1fZsFDa+AMaIe6sKnx08rPZqqZ1oaAqsnHLj/RhFEcsd7KRJNhtXzDMH8n0 CBS7BajVTwa/sY7GlIXs1HtgtyUCwrTQCePTX4WhCqgW+13b+zIQe3Z4L2PuGMb8 /w0bOW7kZh4lbkYs6numreIgpKqqeC9c6r47rxIhyXpQigk0LnH8P/kjdBkapGFo m4aZbNKdfwkW/w== -----END CERTIFICATE-----Generated at Sun Dec 21 10:01:10 2025 by rpki-client