This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft File: OsREa6mbQ4kezx9_os2wLhSjRPM.mft (raw, json) Hash identifier: Ga+uTObWyAbpxI4TAlW+x7IS/QgqjkV/W4BaYz06vXo= Subject key identifier: 00:4E:B8:21:08:5B:E4:31:B2:5A:88:B4:03:74:04:78:0F:33:6A:C5 Authority key identifier: 3A:C4:44:6B:A9:9B:43:89:1E:CF:1F:7F:A2:CD:B0:2E:14:A3:44:F3 Certificate issuer: /CN=3ac4446ba99b43891ecf1f7fa2cdb02e14a344f3 Certificate serial: 019B2852395552418214837FA2AC6DA5629A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft Manifest number: 0BF4 Signing time: Tue 16 Dec 2025 18:00:35 +0000 Manifest this update: Tue 16 Dec 2025 18:00:35 +0000 Manifest next update: Wed 17 Dec 2025 18:00:35 +0000 Files and hashes: 1: OsREa6mbQ4kezx9_os2wLhSjRPM.crl (hash: H8hXHBqdqPUpv5xzPm6AkHG0jh+bAVRhg0iGHnfbU3U=) 2: V65aigPklzLMXli-Tma7YMiy9ac.roa (hash: 9I1JxRzOP3IIZw3rQmGtzPQg16sopd8Gd0K1+blUv2k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:52:39:55:52:41:82:14:83:7f:a2:ac:6d:a5:62:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ac4446ba99b43891ecf1f7fa2cdb02e14a344f3 Validity Not Before: Dec 16 18:00:35 2025 GMT Not After : Dec 17 18:00:35 2025 GMT Subject: CN=004eb821085be431b25a88b4037404780f336ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0e:59:8c:fe:3f:6c:5c:1b:96:b7:89:c6:09: a7:ec:30:d2:5f:ea:c2:73:12:5b:cd:03:2c:da:fd: 3a:99:0a:8d:22:f2:40:6b:1d:3d:d7:fa:c1:ae:5e: fe:fe:80:f9:dd:fc:93:96:26:cf:7e:82:68:9c:dd: 1b:67:2b:1e:d1:b5:97:1a:7d:4d:c4:0e:c9:7f:58: c4:45:6f:9a:62:53:17:bd:40:aa:4a:80:45:28:bb: cb:cb:88:94:6d:c9:b1:19:36:bd:d7:ec:cc:8e:92: b4:70:a2:4a:6d:d7:6f:7b:60:df:bd:10:63:dc:c4: 22:fd:10:d3:54:b8:4c:51:65:73:47:5a:81:ad:09: 49:b2:0a:a4:f7:cf:8b:e0:0b:d5:55:01:73:b5:fc: cf:30:33:ba:e7:0d:a6:32:34:1b:18:16:1a:f3:cd: 0c:fc:11:72:12:bf:0d:5f:18:8d:fc:05:8a:a7:c2: b3:f7:f3:67:3b:2c:42:d6:71:6d:f2:24:c9:b3:e9: 85:42:dc:44:c1:f7:50:eb:b5:70:a4:bd:19:8f:a2: f3:bc:77:41:72:4a:d0:4f:68:d3:8f:15:4e:e9:80: 3d:de:4a:bc:69:2a:e1:bf:65:cc:9a:96:1e:34:40: 0c:dc:d4:bd:26:23:b5:66:61:32:5a:92:95:a9:a9: 3e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:4E:B8:21:08:5B:E4:31:B2:5A:88:B4:03:74:04:78:0F:33:6A:C5 X509v3 Authority Key Identifier: keyid:3A:C4:44:6B:A9:9B:43:89:1E:CF:1F:7F:A2:CD:B0:2E:14:A3:44:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:1c:9d:e7:97:0d:b3:5f:59:a0:c3:70:f1:89:87:4a:09:81: f5:6f:af:1b:92:74:f2:65:51:03:eb:3d:21:28:a7:3e:be:22: 1f:92:da:14:df:e1:90:a1:ce:d5:2e:74:30:9c:43:76:1c:38: a5:c3:f4:f7:19:d6:69:98:42:f8:18:54:5e:ad:02:b9:59:85: 65:8d:fe:d9:a6:1e:fd:43:2e:28:97:2e:fe:f8:49:67:a4:27: 55:46:8c:51:87:99:a3:a7:59:00:ce:0d:d2:6f:0e:4b:41:02: d4:ac:c2:41:92:7f:61:51:9c:a6:bf:f8:4e:0a:d5:89:3c:dd: b3:14:27:9e:7e:1e:90:6c:3b:09:8b:b8:54:9d:f2:b4:a0:a9: d1:b4:27:2f:db:4d:8f:8b:56:f4:1b:e5:d5:4b:eb:c2:0f:49: 07:24:48:7d:11:ac:8a:3f:a4:63:75:c0:c0:87:f9:63:41:35: d7:75:80:63:49:3e:07:31:ac:80:52:ae:df:6f:46:29:a8:06: a9:da:d4:ec:54:ac:82:60:77:f5:84:0c:c3:7c:c9:b1:36:a9: f3:03:28:77:fe:b9:7f:b7:71:99:27:da:06:62:da:aa:ed:0b: cd:42:d8:3b:5f:87:4f:97:3c:d0:a6:18:56:49:0e:c1:c5:d9: ff:9f:f1:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoUjlVUkGCFIN/oqxtpWKaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhYzQ0NDZiYTk5YjQzODkxZWNmMWY3ZmEyY2RiMDJlMTRh MzQ0ZjMwHhcNMjUxMjE2MTgwMDM1WhcNMjUxMjE3MTgwMDM1WjAzMTEwLwYDVQQD EygwMDRlYjgyMTA4NWJlNDMxYjI1YTg4YjQwMzc0MDQ3ODBmMzM2YWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw5ZjP4/bFwblreJxgmn7DDSX+rC cxJbzQMs2v06mQqNIvJAax091/rBrl7+/oD53fyTlibPfoJonN0bZyse0bWXGn1N xA7Jf1jERW+aYlMXvUCqSoBFKLvLy4iUbcmxGTa91+zMjpK0cKJKbddve2DfvRBj 3MQi/RDTVLhMUWVzR1qBrQlJsgqk98+L4AvVVQFztfzPMDO65w2mMjQbGBYa880M /BFyEr8NXxiN/AWKp8Kz9/NnOyxC1nFt8iTJs+mFQtxEwfdQ67VwpL0Zj6LzvHdB ckrQT2jTjxVO6YA93kq8aSrhv2XMmpYeNEAM3NS9JiO1ZmEyWpKVqak+KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFABOuCEIW+QxslqItAN0BHgPM2rFMB8GA1UdIwQY MBaAFDrERGupm0OJHs8ff6LNsC4Uo0TzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3NSRWE2bWJRNGtleng5X29zMndMaFNqUlBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9lNWM4NzctYTJlZS00YzNmLWFkNWMt MDJhN2Y2ZGY2ODEwLzEvT3NSRWE2bWJRNGtleng5X29zMndMaFNqUlBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9lNWM4NzctYTJlZS00YzNmLWFkNWMtMDJhN2Y2ZGY2ODEw LzEvT3NSRWE2bWJRNGtleng5X29zMndMaFNqUlBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJRyd55cN s19ZoMNw8YmHSgmB9W+vG5J08mVRA+s9ISinPr4iH5LaFN/hkKHO1S50MJxDdhw4 pcP09xnWaZhC+BhUXq0CuVmFZY3+2aYe/UMuKJcu/vhJZ6QnVUaMUYeZo6dZAM4N 0m8OS0EC1KzCQZJ/YVGcpr/4TgrViTzdsxQnnn4ekGw7CYu4VJ3ytKCp0bQnL9tN j4tW9Bvl1Uvrwg9JByRIfRGsij+kY3XAwIf5Y0E113WAY0k+BzGsgFKu329GKagG qdrU7FSsgmB39YQMw3zJsTap8wMod/65f7dxmSfaBmLaqu0LzULYO1+HT5c80KYY VkkOwcXZ/5/xHQ== -----END CERTIFICATE-----Generated at Tue Dec 16 22:32:58 2025 by rpki-client