This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft File: OSG38e7pDZnilCGKk4dTweotwmc.mft (raw, json) Hash identifier: nnXwX/XZAk5hDSbLsJfBxdNpXjUBVPl9916dIA29PS4= Subject key identifier: 68:71:CB:8A:79:62:41:6D:E1:DF:9E:2E:3D:CF:50:27:42:6E:7C:07 Authority key identifier: 39:21:B7:F1:EE:E9:0D:99:E2:94:21:8A:93:87:53:C1:EA:2D:C2:67 Certificate issuer: /CN=3921b7f1eee90d99e294218a938753c1ea2dc267 Certificate serial: 019B18DFD998355353BA999FD1322641DF4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSG38e7pDZnilCGKk4dTweotwmc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft Manifest number: 1704 Signing time: Sat 13 Dec 2025 18:01:21 +0000 Manifest this update: Sat 13 Dec 2025 18:01:21 +0000 Manifest next update: Sun 14 Dec 2025 18:01:21 +0000 Files and hashes: 1: OSG38e7pDZnilCGKk4dTweotwmc.crl (hash: vVWULkAZzhsvuYDLzpYDjghmujHuvFYgBpS7D9yu/oc=) 2: oHES2kIQSwcnceUnSAnzOBK0UoA.roa (hash: R0HeMmAONLyIzPgR+arZikegwIRj9xGz1jODUH2wdeA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft rsync://rpki.ripe.net/repository/DEFAULT/OSG38e7pDZnilCGKk4dTweotwmc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:df:d9:98:35:53:53:ba:99:9f:d1:32:26:41:df:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3921b7f1eee90d99e294218a938753c1ea2dc267 Validity Not Before: Dec 13 18:01:21 2025 GMT Not After : Dec 14 18:01:21 2025 GMT Subject: CN=6871cb8a7962416de1df9e2e3dcf5027426e7c07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:59:6b:c2:ee:6a:5f:7c:d2:09:9f:b4:f2:c1: bd:72:09:9f:31:86:ba:3d:e4:25:cb:39:6c:0c:57: 84:73:93:f7:d5:21:a8:7d:1e:4b:27:ea:a2:43:57: 67:27:49:c1:41:db:c9:93:de:61:4c:99:c4:88:20: e3:c6:d5:0d:a4:9f:5e:54:91:3e:19:75:e9:5d:89: ba:c6:24:c0:8c:2b:16:b2:fe:d4:77:d3:6e:36:a1: 2d:b9:95:8f:c1:86:f6:29:82:73:e5:30:58:60:a7: b7:36:ae:a3:7d:40:2e:88:1f:c7:a4:a5:44:21:fb: 53:89:09:0c:ff:c2:53:61:d4:ec:6a:41:7f:5e:d3: 37:26:8a:44:6b:be:60:ad:80:b3:3e:84:24:76:7d: 69:36:1e:d8:c7:58:37:79:5e:56:84:e6:1e:bb:ce: 47:67:74:e4:58:4f:ae:8c:39:a2:5d:04:af:96:31: 6b:51:09:3d:e8:86:be:82:69:65:3c:50:f6:20:71: e5:88:4b:ad:e2:9e:39:d7:85:61:65:77:53:c8:5b: 67:8b:0a:e7:85:ae:c4:b3:5b:33:0c:42:45:62:21: ed:e5:ac:60:55:55:3c:2f:d3:63:1f:6f:02:f4:7b: 2b:ad:d0:f4:0f:41:93:83:37:19:f3:1b:61:28:47: 07:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:71:CB:8A:79:62:41:6D:E1:DF:9E:2E:3D:CF:50:27:42:6E:7C:07 X509v3 Authority Key Identifier: keyid:39:21:B7:F1:EE:E9:0D:99:E2:94:21:8A:93:87:53:C1:EA:2D:C2:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSG38e7pDZnilCGKk4dTweotwmc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:a1:c2:b4:d7:e1:07:ac:db:35:98:e8:f1:68:46:6a:d9:4f: 12:f3:90:05:a5:01:90:6f:aa:31:26:99:7a:21:94:3a:7c:9f: 26:03:15:67:83:b9:e9:23:4c:d6:cf:76:5d:ec:c2:5f:e4:4b: 0b:c4:f0:ec:c5:93:bb:06:ed:2c:59:96:3f:a6:42:65:4a:d5: ea:8b:0d:40:7d:c3:42:d4:74:cd:36:1f:2f:42:60:e2:2b:e8: d5:9e:34:47:98:bd:74:92:c3:7c:cb:cb:ff:72:73:40:f7:1e: fc:1a:96:c6:e7:05:74:9b:03:fe:02:51:22:20:7c:10:2d:54: 77:c2:f1:5e:50:e0:82:4c:a3:d4:fe:5c:3e:17:82:e3:c6:9e: df:74:24:c6:fb:0b:4e:61:11:7b:48:0e:87:ff:01:89:ce:36: 50:d8:8a:c1:5d:c2:bd:89:f5:a2:f4:f8:16:b6:d0:30:0c:f6: 93:48:44:ec:06:1f:a6:77:20:7a:99:d2:2c:b8:fc:7b:55:1f: 11:6e:ec:10:88:cb:60:01:b6:c0:aa:78:75:20:78:0f:3b:ed: 3b:d6:2a:ad:51:0c:79:db:9b:cd:95:a1:ee:42:07:c8:f8:3c: a5:e8:b1:dc:b0:af:6a:41:67:68:d7:74:57:7d:a1:82:4c:a7: 34:f9:97:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsY39mYNVNTupmf0TImQd9NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MjFiN2YxZWVlOTBkOTllMjk0MjE4YTkzODc1M2MxZWEy ZGMyNjcwHhcNMjUxMjEzMTgwMTIxWhcNMjUxMjE0MTgwMTIxWjAzMTEwLwYDVQQD Eyg2ODcxY2I4YTc5NjI0MTZkZTFkZjllMmUzZGNmNTAyNzQyNmU3YzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFlrwu5qX3zSCZ+08sG9cgmfMYa6 PeQlyzlsDFeEc5P31SGofR5LJ+qiQ1dnJ0nBQdvJk95hTJnEiCDjxtUNpJ9eVJE+ GXXpXYm6xiTAjCsWsv7Ud9NuNqEtuZWPwYb2KYJz5TBYYKe3Nq6jfUAuiB/HpKVE IftTiQkM/8JTYdTsakF/XtM3JopEa75grYCzPoQkdn1pNh7Yx1g3eV5WhOYeu85H Z3TkWE+ujDmiXQSvljFrUQk96Ia+gmllPFD2IHHliEut4p4514VhZXdTyFtniwrn ha7Es1szDEJFYiHt5axgVVU8L9NjH28C9HsrrdD0D0GTgzcZ8xthKEcH0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGhxy4p5YkFt4d+eLj3PUCdCbnwHMB8GA1UdIwQY MBaAFDkht/Hu6Q2Z4pQhipOHU8HqLcJnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1NHMzhlN3BEWm5pbENHS2s0ZFR3ZW90d21jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9iZTFkYjEtNGRjNC00NjNjLWJhZjgt MjQ0MWUxMGY2ZjhmLzEvT1NHMzhlN3BEWm5pbENHS2s0ZFR3ZW90d21jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9iZTFkYjEtNGRjNC00NjNjLWJhZjgtMjQ0MWUxMGY2Zjhm LzEvT1NHMzhlN3BEWm5pbENHS2s0ZFR3ZW90d21jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKqHCtNfh B6zbNZjo8WhGatlPEvOQBaUBkG+qMSaZeiGUOnyfJgMVZ4O56SNM1s92XezCX+RL C8Tw7MWTuwbtLFmWP6ZCZUrV6osNQH3DQtR0zTYfL0Jg4ivo1Z40R5i9dJLDfMvL /3JzQPce/BqWxucFdJsD/gJRIiB8EC1Ud8LxXlDggkyj1P5cPheC48ae33QkxvsL TmERe0gOh/8Bic42UNiKwV3CvYn1ovT4FrbQMAz2k0hE7AYfpncgepnSLLj8e1Uf EW7sEIjLYAG2wKp4dSB4DzvtO9YqrVEMedubzZWh7kIHyPg8peix3LCvakFnaNd0 V32hgkynNPmXbQ== -----END CERTIFICATE-----Generated at Sun Dec 14 00:03:06 2025 by rpki-client