This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft File: oSCGrcccvsWuoqH4lU36ZCtTDDs.mft (raw, json) Hash identifier: y9QMr0bctLOXcHD3Jc6Ccs288Lwv7DcQHZwM5YMbLTc= Subject key identifier: DC:CE:CF:34:F2:02:4A:28:EB:BA:40:43:AA:E6:38:4B:CE:DC:8D:92 Authority key identifier: A1:20:86:AD:C7:1C:BE:C5:AE:A2:A1:F8:95:4D:FA:64:2B:53:0C:3B Certificate issuer: /CN=a12086adc71cbec5aea2a1f8954dfa642b530c3b Certificate serial: 019B4882497EE8E8D8ED05E6A36046791F0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft Manifest number: 1790 Signing time: Tue 23 Dec 2025 00:00:56 +0000 Manifest this update: Tue 23 Dec 2025 00:00:56 +0000 Manifest next update: Wed 24 Dec 2025 00:00:56 +0000 Files and hashes: 1: _C22KYJjbT7k9Y0F086sSatuYjQ.roa (hash: sGeEeSXLg1Z6VuPUdF3Kx1VfqYaLdwKkzR5hHIgdTMo=) 2: oSCGrcccvsWuoqH4lU36ZCtTDDs.crl (hash: GJzO7Yh+DZjiPes4WOziH2S/QrITl6I4KpQ4OJ5ED0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:82:49:7e:e8:e8:d8:ed:05:e6:a3:60:46:79:1f:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a12086adc71cbec5aea2a1f8954dfa642b530c3b Validity Not Before: Dec 23 00:00:56 2025 GMT Not After : Dec 24 00:00:56 2025 GMT Subject: CN=dccecf34f2024a28ebba4043aae6384bcedc8d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3a:11:7c:05:ad:43:b3:cf:ae:32:8f:7c:28: 63:6a:a8:51:d6:65:e2:07:18:f4:ba:ef:a7:06:fe: 8b:e9:0c:96:b7:8a:4d:b1:a8:05:20:ec:2b:6c:a5: 0e:f1:dc:92:4e:4f:d9:32:41:c2:48:da:f1:41:95: 13:d0:8d:80:58:53:ab:97:2f:54:16:8b:1b:24:9e: bf:32:ba:f1:e1:9d:ce:58:a3:8a:21:05:17:2c:81: a9:fb:03:ba:45:49:e2:02:27:6e:f7:91:df:07:17: ec:7c:db:25:52:ed:52:07:3b:40:4e:56:54:42:0e: f6:47:ae:35:c0:89:c9:93:ba:3d:83:96:d0:ee:37: 4e:ce:fe:ae:ba:f8:b3:e5:25:7a:f9:df:d4:88:7c: eb:da:7e:2e:f2:7c:12:29:8b:d3:ae:a7:0a:f6:04: 0b:83:1d:ef:c5:e2:16:fc:89:c6:e4:eb:b7:4b:e3: 30:4c:82:e2:42:c7:1a:5b:bd:5a:9b:a7:77:1a:09: 6c:ba:12:f5:4f:df:1f:fc:21:b4:19:09:f4:d3:a6: 2c:18:33:fe:c3:c8:50:83:95:d7:01:b0:98:6b:ce: f3:78:d1:5e:2e:60:69:90:ae:e8:8e:d0:00:64:bc: 44:66:0e:e3:01:f3:5a:5c:b5:2b:37:07:04:a5:4c: 2c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:CE:CF:34:F2:02:4A:28:EB:BA:40:43:AA:E6:38:4B:CE:DC:8D:92 X509v3 Authority Key Identifier: keyid:A1:20:86:AD:C7:1C:BE:C5:AE:A2:A1:F8:95:4D:FA:64:2B:53:0C:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:85:62:cc:1f:da:94:c1:d2:81:34:7b:60:ed:d9:c9:55:ac: bc:94:95:72:88:08:70:c5:c8:03:c7:1d:39:c6:a5:10:2e:a2: c3:cd:93:56:ef:8e:7f:3b:5c:f3:6f:ed:94:7b:5b:a2:e0:85: a8:83:9d:55:de:44:24:79:0b:2b:26:18:d5:6b:ea:b0:32:cf: 1a:b2:53:b8:e9:c0:81:42:9c:09:56:fc:74:7e:99:d8:0e:ae: 97:84:1f:db:12:c2:6b:4b:55:62:2c:17:1f:cc:e9:ea:44:3a: 59:2f:cf:aa:01:79:a6:63:aa:5f:3a:68:b4:f0:7f:e5:12:f8: e3:0e:e2:17:78:cb:20:8d:8a:b9:a5:50:f0:72:f6:9d:f2:66: 62:56:ef:53:bc:8f:f0:fa:8d:59:ad:37:11:16:5f:cf:ed:a3: 86:48:84:88:fd:96:1b:9f:34:fb:38:2f:8d:45:5f:bb:58:da: 77:b2:ff:e2:fe:3d:e0:a3:ee:c8:f9:40:95:05:5b:8d:e8:01: 78:e9:0d:6d:58:2d:5c:7b:1f:c4:9d:6c:9f:52:04:2b:48:bc: ba:cd:9c:c5:c5:ad:e9:d1:4c:24:fa:5c:52:70:b9:70:56:46: 3f:21:5b:46:86:13:74:1d:08:fc:e2:31:be:11:0e:d2:10:1b: 6c:df:77:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIgkl+6OjY7QXmo2BGeR8PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMjA4NmFkYzcxY2JlYzVhZWEyYTFmODk1NGRmYTY0MmI1 MzBjM2IwHhcNMjUxMjIzMDAwMDU2WhcNMjUxMjI0MDAwMDU2WjAzMTEwLwYDVQQD EyhkY2NlY2YzNGYyMDI0YTI4ZWJiYTQwNDNhYWU2Mzg0YmNlZGM4ZDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDoRfAWtQ7PPrjKPfChjaqhR1mXi Bxj0uu+nBv6L6QyWt4pNsagFIOwrbKUO8dySTk/ZMkHCSNrxQZUT0I2AWFOrly9U FosbJJ6/Mrrx4Z3OWKOKIQUXLIGp+wO6RUniAidu95HfBxfsfNslUu1SBztATlZU Qg72R641wInJk7o9g5bQ7jdOzv6uuviz5SV6+d/UiHzr2n4u8nwSKYvTrqcK9gQL gx3vxeIW/InG5Ou3S+MwTILiQscaW71am6d3GglsuhL1T98f/CG0GQn006YsGDP+ w8hQg5XXAbCYa87zeNFeLmBpkK7ojtAAZLxEZg7jAfNaXLUrNwcEpUwsiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNzOzzTyAkoo67pAQ6rmOEvO3I2SMB8GA1UdIwQY MBaAFKEghq3HHL7FrqKh+JVN+mQrUww7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1NDR3JjY2N2c1d1b3FINGxVMzZaQ3RURERzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC82ZDlhMDItZTQyZC00MmUzLWFmMTMt NDg1YTkyYmI5YmEzLzEvb1NDR3JjY2N2c1d1b3FINGxVMzZaQ3RURERzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC82ZDlhMDItZTQyZC00MmUzLWFmMTMtNDg1YTkyYmI5YmEz LzEvb1NDR3JjY2N2c1d1b3FINGxVMzZaQ3RURERzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfYVizB/a lMHSgTR7YO3ZyVWsvJSVcogIcMXIA8cdOcalEC6iw82TVu+Ofztc82/tlHtbouCF qIOdVd5EJHkLKyYY1WvqsDLPGrJTuOnAgUKcCVb8dH6Z2A6ul4Qf2xLCa0tVYiwX H8zp6kQ6WS/PqgF5pmOqXzpotPB/5RL44w7iF3jLII2KuaVQ8HL2nfJmYlbvU7yP 8PqNWa03ERZfz+2jhkiEiP2WG580+zgvjUVfu1jad7L/4v494KPuyPlAlQVbjegB eOkNbVgtXHsfxJ1sn1IEK0i8us2cxcWt6dFMJPpcUnC5cFZGPyFbRoYTdB0I/OIx vhEO0hAbbN93Nw== -----END CERTIFICATE-----Generated at Tue Dec 23 02:51:19 2025 by rpki-client