This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft File: O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft (raw, json) Hash identifier: rM5M3YBmsvYVdFS8LN39n5ZMwP5hKIQzeyDqQhkTqeM= Subject key identifier: 53:13:9C:43:FC:A1:DE:ED:AA:30:86:FD:7F:5D:73:4D:9B:99:05:DA Authority key identifier: 3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F Certificate issuer: /CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f Certificate serial: 019B3EA358D38AA9BD947CB7FC26CD616B56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 02:00:50 +0000 Manifest this update: Sun 21 Dec 2025 02:00:50 +0000 Manifest next update: Mon 22 Dec 2025 02:00:50 +0000 Files and hashes: 1: ETzMLJ9E8ekQKvTuSVRndgg_ftE.roa (hash: zxZL9sGsfFQCpFwlHr+nLeuc9weJmZjmaUU+udBc04c=) 2: O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl (hash: 64qqK3BVP2vW2pdJAAkxcejGvNBNWymCsIFRSGvQdJk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:58:d3:8a:a9:bd:94:7c:b7:fc:26:cd:61:6b:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f Validity Not Before: Dec 21 02:00:50 2025 GMT Not After : Dec 22 02:00:50 2025 GMT Subject: CN=53139c43fca1deedaa3086fd7f5d734d9b9905da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9c:b8:9a:99:21:dc:f1:f8:19:f7:57:9b:0d: 72:3d:b2:e3:2d:f0:21:13:68:af:f8:a1:79:db:c3: d4:07:69:35:bb:88:cb:0b:37:5a:f2:ce:ac:c8:4f: 3f:bf:01:58:28:a9:37:4d:59:7a:84:a9:7b:57:9b: 52:20:8f:bc:6b:75:1f:73:db:47:60:4b:9a:60:25: 29:b8:c6:a3:c4:dc:0f:ad:a6:1a:7c:eb:22:ca:da: e2:8d:09:9e:d4:20:bb:83:7b:e8:bb:18:f4:9f:f0: b5:07:36:87:85:9e:ac:43:29:c2:72:76:0f:6f:a1: 94:c6:fb:92:b3:8b:62:df:99:25:57:3c:a2:be:df: ed:3e:3f:90:f9:14:74:ec:2b:a9:d7:3c:72:93:77: 5f:05:e6:62:2f:aa:d7:1f:59:81:29:96:e6:a0:2a: e6:e2:f0:65:dd:2d:8e:0f:d0:c5:b0:7a:68:95:14: f5:0a:6a:aa:43:71:4b:2a:16:ed:7d:8d:e8:fd:b6: c0:ff:26:a7:04:3f:aa:67:0b:85:fd:bf:0e:79:81: 20:cc:48:a7:b8:d8:b3:0e:23:40:30:6a:68:cc:94: 90:76:be:73:73:4a:e5:2d:63:ba:1e:99:49:10:06: 0d:e2:43:1a:b4:8f:b3:bf:e4:c6:63:01:50:e3:c8: a3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:13:9C:43:FC:A1:DE:ED:AA:30:86:FD:7F:5D:73:4D:9B:99:05:DA X509v3 Authority Key Identifier: keyid:3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:05:e3:a0:6c:2d:1e:6f:b7:0e:0e:e6:92:39:cb:48:da:e9: b5:56:f9:1c:ea:98:42:df:51:ec:c1:45:97:24:85:18:10:53: 78:ab:ed:d5:61:26:c2:f0:72:3a:71:79:cf:30:28:e0:45:b4: 04:32:7b:b3:ea:2c:ad:ef:17:54:b3:45:3f:a0:2a:d6:34:3a: 6a:aa:b9:05:b8:0a:f1:6b:ec:d6:2f:1c:7f:7f:10:79:9e:7c: 84:ea:38:c4:7b:da:3f:22:18:56:b5:0f:48:db:51:0a:5a:66: ce:ce:29:c9:31:0e:64:5e:57:e4:89:e0:a7:a0:29:96:a0:33: 93:a5:c1:a9:57:d0:a9:c9:22:d0:d4:77:fe:03:1f:1a:b4:91: 9a:fa:48:09:06:a3:c7:07:b3:8d:8f:0b:b5:51:b1:c0:bf:8b: c2:41:fd:c3:b4:77:cc:96:37:63:32:92:4a:cf:73:ab:35:4e: c6:1b:8b:8a:16:a1:b0:b9:bb:be:49:4b:96:8b:62:4f:a1:e1: f0:54:77:88:62:45:cf:10:07:aa:12:0b:d1:6b:c8:90:c6:58: 70:d2:9d:84:31:e6:88:75:4e:88:80:d0:c4:20:e8:59:7c:5c: 5b:9e:9b:12:db:41:5a:6e:64:97:a2:92:69:b5:00:80:10:95: 2d:c8:e4:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o1jTiqm9lHy3/CbNYWtWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiOTRhMWQ4ODFkZDRiZWIyZmQzMWI3NmZhMGQ1ZDU4NWE5 YjIzOGYwHhcNMjUxMjIxMDIwMDUwWhcNMjUxMjIyMDIwMDUwWjAzMTEwLwYDVQQD Eyg1MzEzOWM0M2ZjYTFkZWVkYWEzMDg2ZmQ3ZjVkNzM0ZDliOTkwNWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspy4mpkh3PH4GfdXmw1yPbLjLfAh E2iv+KF528PUB2k1u4jLCzda8s6syE8/vwFYKKk3TVl6hKl7V5tSII+8a3Ufc9tH YEuaYCUpuMajxNwPraYafOsiytrijQme1CC7g3vouxj0n/C1BzaHhZ6sQynCcnYP b6GUxvuSs4ti35klVzyivt/tPj+Q+RR07Cup1zxyk3dfBeZiL6rXH1mBKZbmoCrm 4vBl3S2OD9DFsHpolRT1CmqqQ3FLKhbtfY3o/bbA/yanBD+qZwuF/b8OeYEgzEin uNizDiNAMGpozJSQdr5zc0rlLWO6HplJEAYN4kMatI+zv+TGYwFQ48ijTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFMTnEP8od7tqjCG/X9dc02bmQXaMB8GA1UdIwQY MBaAFDuUodiB3UvrL9MbdvoNXVhamyOPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzVTaDJJSGRTLXN2MHh0Mi1nMWRXRnFiSTQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS83YzZiMmQtYWM0Mi00ODdlLTljMTkt MTYxODc3NmJkYWFlLzEvTzVTaDJJSGRTLXN2MHh0Mi1nMWRXRnFiSTQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS83YzZiMmQtYWM0Mi00ODdlLTljMTktMTYxODc3NmJkYWFl LzEvTzVTaDJJSGRTLXN2MHh0Mi1nMWRXRnFiSTQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbQXjoGwt Hm+3Dg7mkjnLSNrptVb5HOqYQt9R7MFFlySFGBBTeKvt1WEmwvByOnF5zzAo4EW0 BDJ7s+osre8XVLNFP6Aq1jQ6aqq5BbgK8Wvs1i8cf38QeZ58hOo4xHvaPyIYVrUP SNtRClpmzs4pyTEOZF5X5Ingp6AplqAzk6XBqVfQqcki0NR3/gMfGrSRmvpICQaj xwezjY8LtVGxwL+LwkH9w7R3zJY3YzKSSs9zqzVOxhuLihahsLm7vklLlotiT6Hh 8FR3iGJFzxAHqhIL0WvIkMZYcNKdhDHmiHVOiIDQxCDoWXxcW56bEttBWm5kl6KS abUAgBCVLcjkuA== -----END CERTIFICATE-----Generated at Sun Dec 21 07:42:13 2025 by rpki-client