This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft File: OsVr3pY-73wlC8hDxpXKP-B_usQ.mft (raw, json) Hash identifier: TiUPlXw7ks2+HD0MI+o+xrFFKb8PMsCV40mcBeeWVRE= Subject key identifier: 41:42:01:B3:54:18:53:63:A5:AD:A9:CC:E6:A4:0F:EA:E8:8B:2B:64 Authority key identifier: 3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4 Certificate issuer: /CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4 Certificate serial: 019B38D8308CC8303FA3263895B6F4538C45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft Manifest number: 086B Signing time: Fri 19 Dec 2025 23:00:50 +0000 Manifest this update: Fri 19 Dec 2025 23:00:50 +0000 Manifest next update: Sat 20 Dec 2025 23:00:50 +0000 Files and hashes: 1: 0CQ87gtDkmQ-YdioNl7SCmI2_Jg.roa (hash: vbvFk3kiJv5WUL7DS9QfsY/2+9s/5EIx/LnubRQ+4yA=) 2: OCRKDcURj8xaIImY8cNKFLg3_eE.roa (hash: HUOGD3LHhRpZmpPeYppPKP+b2mI5WdrLoJBrL3wQ2O0=) 3: OsVr3pY-73wlC8hDxpXKP-B_usQ.crl (hash: WcQVNXozNRNmpk7kEDOtuUyTc6qTxR26oqaGXIkOQ2Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:30:8c:c8:30:3f:a3:26:38:95:b6:f4:53:8c:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4 Validity Not Before: Dec 19 23:00:50 2025 GMT Not After : Dec 20 23:00:50 2025 GMT Subject: CN=414201b354185363a5ada9cce6a40feae88b2b64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:91:23:13:ea:d2:e8:cd:30:ee:38:20:76:2c: c8:cd:28:cb:10:e6:b6:74:50:c9:ad:d9:0f:c6:31: 86:97:9e:58:7c:be:7d:f8:6e:c6:e0:0a:ab:e1:87: f8:ed:51:e9:c8:1f:f9:2e:a9:17:f0:2a:1f:8c:1d: d9:5c:45:5f:e6:3d:04:72:a7:76:e1:23:3d:3e:81: 8e:13:03:af:c8:0d:a9:73:90:63:24:76:43:27:6e: 52:1d:e5:8c:0f:7b:1c:4e:37:8a:12:d5:33:6f:fe: fe:2d:61:9c:92:c7:54:3c:68:56:b0:2b:87:0a:7a: 14:90:ca:39:7f:36:dd:9f:a8:f2:b9:93:7a:33:e7: 4a:89:08:58:e4:44:df:81:22:85:17:76:46:0b:e4: 96:f0:16:c5:0a:c3:7e:36:1b:f6:ce:5e:39:18:63: 94:78:be:00:a8:21:8d:bf:91:ac:b3:2e:80:05:36: 58:79:c9:ee:87:92:40:f3:4e:e5:a2:3a:13:89:c1: f1:02:29:16:31:d9:12:7b:aa:4e:01:9f:da:eb:2a: d9:53:7e:30:7d:3a:fa:95:1b:8d:da:28:ed:2e:b4: d7:2c:38:40:f1:f5:53:3d:61:bb:cb:4a:50:66:44: e9:d7:0f:f2:14:33:43:94:ce:c6:eb:10:24:ed:da: a5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:42:01:B3:54:18:53:63:A5:AD:A9:CC:E6:A4:0F:EA:E8:8B:2B:64 X509v3 Authority Key Identifier: keyid:3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:b1:6c:c3:ea:2d:7a:23:ef:27:fb:0a:68:98:39:9f:bd:2b: 19:02:ae:9b:3a:cb:2b:c1:0f:2c:44:d9:29:d6:70:9e:dc:f9: ef:88:19:a3:48:97:4b:94:59:ec:66:76:f4:86:7a:f5:09:52: a2:5b:c3:1c:ab:5b:df:8a:e4:6d:be:d2:2a:fd:6d:53:04:fa: 38:8f:ce:94:8f:05:5e:5d:32:81:f5:d2:ef:76:64:83:5f:8e: 06:75:a1:86:3a:b6:d4:42:94:14:d7:02:62:07:9c:95:c3:ed: 8e:95:68:5a:fc:f6:7e:a8:51:c9:60:f6:9f:9b:88:8a:79:52: 04:b6:cd:f8:13:bf:34:63:7a:ec:95:be:12:1f:23:cb:32:f8: c3:8e:54:83:c7:e9:92:98:1c:7a:98:c2:79:c9:3e:d6:72:13: d9:4c:ad:50:99:a1:47:5e:90:e9:49:3e:fb:15:20:0a:f5:2a: 63:4f:ab:cf:c9:bb:4d:16:31:03:84:56:20:98:72:35:5b:af: 42:9a:10:b1:38:58:c3:d7:c9:8b:e5:7d:ef:e9:d2:b1:d3:48: 56:1f:ab:bc:73:dc:9e:87:7a:64:14:02:0f:6d:f6:85:49:ab: 68:13:3e:6b:d5:a0:12:33:f6:09:11:d5:a6:9f:c6:02:4e:71: 9a:90:07:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42DCMyDA/oyY4lbb0U4xFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhYzU2YmRlOTYzZWVmN2MyNTBiYzg0M2M2OTVjYTNmZTA3 ZmJhYzQwHhcNMjUxMjE5MjMwMDUwWhcNMjUxMjIwMjMwMDUwWjAzMTEwLwYDVQQD Eyg0MTQyMDFiMzU0MTg1MzYzYTVhZGE5Y2NlNmE0MGZlYWU4OGIyYjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JEjE+rS6M0w7jggdizIzSjLEOa2 dFDJrdkPxjGGl55YfL59+G7G4Aqr4Yf47VHpyB/5LqkX8CofjB3ZXEVf5j0Ecqd2 4SM9PoGOEwOvyA2pc5BjJHZDJ25SHeWMD3scTjeKEtUzb/7+LWGcksdUPGhWsCuH CnoUkMo5fzbdn6jyuZN6M+dKiQhY5ETfgSKFF3ZGC+SW8BbFCsN+Nhv2zl45GGOU eL4AqCGNv5Gssy6ABTZYecnuh5JA807lojoTicHxAikWMdkSe6pOAZ/a6yrZU34w fTr6lRuN2ijtLrTXLDhA8fVTPWG7y0pQZkTp1w/yFDNDlM7G6xAk7dqlZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFCAbNUGFNjpa2pzOakD+roiytkMB8GA1UdIwQY MBaAFDrFa96WPu98JQvIQ8aVyj/gf7rEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3NWcjNwWS03M3dsQzhoRHhwWEtQLUJfdXNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8wZGNmOTgtYThkMi00NmMwLWI3Y2It Y2U5YzlmM2FhODU1LzEvT3NWcjNwWS03M3dsQzhoRHhwWEtQLUJfdXNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8wZGNmOTgtYThkMi00NmMwLWI3Y2ItY2U5YzlmM2FhODU1 LzEvT3NWcjNwWS03M3dsQzhoRHhwWEtQLUJfdXNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArLFsw+ot eiPvJ/sKaJg5n70rGQKumzrLK8EPLETZKdZwntz574gZo0iXS5RZ7GZ29IZ69QlS olvDHKtb34rkbb7SKv1tUwT6OI/OlI8FXl0ygfXS73Zkg1+OBnWhhjq21EKUFNcC YgeclcPtjpVoWvz2fqhRyWD2n5uIinlSBLbN+BO/NGN67JW+Eh8jyzL4w45Ug8fp kpgcepjCeck+1nIT2UytUJmhR16Q6Uk++xUgCvUqY0+rz8m7TRYxA4RWIJhyNVuv QpoQsThYw9fJi+V97+nSsdNIVh+rvHPcnod6ZBQCD232hUmraBM+a9WgEjP2CRHV pp/GAk5xmpAHRQ== -----END CERTIFICATE-----Generated at Sat Dec 20 02:54:50 2025 by rpki-client