This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft File: osiREA5QD7XGTzDxYD_lRdq0kBY.mft (raw, json) Hash identifier: 4i7yQulTlwql78qpqTeftOphb3FYQJZ3ixhlo/yBN5g= Subject key identifier: 92:AE:0B:8E:5B:C0:4F:BF:00:E7:89:D6:22:DD:60:25:38:89:19:51 Authority key identifier: A2:C8:91:10:0E:50:0F:B5:C6:4F:30:F1:60:3F:E5:45:DA:B4:90:16 Certificate issuer: /CN=a2c891100e500fb5c64f30f1603fe545dab49016 Certificate serial: 019B2363E7AB7B1C5C62C33E78A91A22878B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft Manifest number: 0B6D Signing time: Mon 15 Dec 2025 19:01:48 +0000 Manifest this update: Mon 15 Dec 2025 19:01:48 +0000 Manifest next update: Tue 16 Dec 2025 19:01:48 +0000 Files and hashes: 1: 2r58NpxvTCdcnNGrjt0v-zkeUtY.roa (hash: TkXA680kjgu+5bXWMHrgD9kPPHcPEiisIsJWWTeRFzw=) 2: osiREA5QD7XGTzDxYD_lRdq0kBY.crl (hash: 3dUO+AsD12+tAXH/zVXokx/R5zBNlain7meAOw1RKy8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.crl rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:63:e7:ab:7b:1c:5c:62:c3:3e:78:a9:1a:22:87:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2c891100e500fb5c64f30f1603fe545dab49016 Validity Not Before: Dec 15 19:01:48 2025 GMT Not After : Dec 16 19:01:48 2025 GMT Subject: CN=92ae0b8e5bc04fbf00e789d622dd602538891951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:eb:fa:76:58:e6:68:75:15:fe:fe:a8:1f:57: 58:e8:cc:4b:98:19:a0:e3:38:ce:77:3f:93:11:9b: d0:86:fc:5f:1c:2a:00:ef:3e:2d:3e:29:77:d4:1e: 33:b1:e1:6a:7b:85:6b:f5:cb:38:32:76:3a:32:e3: 26:74:1e:b6:70:a8:e3:48:f3:b6:e6:e6:e2:74:c9: f7:4a:aa:5a:65:8d:d4:12:61:5f:35:5c:8f:f5:06: ff:77:13:14:79:4a:01:65:17:19:50:05:64:42:6b: 6c:56:59:6e:20:ea:d9:ea:db:dc:39:84:96:47:62: 77:8d:2d:1b:a8:bd:c2:98:fd:bf:83:ec:c7:ab:6f: 96:90:31:dd:e7:59:3f:0a:96:ab:56:e8:b2:30:70: da:f7:eb:43:2b:db:76:07:a3:a9:ff:07:e3:35:3a: 87:96:32:e9:fc:62:10:e6:b6:aa:4a:22:f3:ed:d7: 83:2e:7b:05:f9:1b:3c:98:be:86:1f:92:e6:be:cb: 88:ec:a8:2f:cd:f1:39:fe:a5:57:e4:7a:61:76:75: a6:87:0d:7c:8e:c9:49:fc:74:19:45:9e:de:9c:a7: 01:d1:cc:bc:4e:db:4c:a9:1b:e3:cb:88:0a:ed:43: 6a:21:d5:3b:f3:9e:c5:42:75:60:41:11:89:e5:35: 96:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:AE:0B:8E:5B:C0:4F:BF:00:E7:89:D6:22:DD:60:25:38:89:19:51 X509v3 Authority Key Identifier: keyid:A2:C8:91:10:0E:50:0F:B5:C6:4F:30:F1:60:3F:E5:45:DA:B4:90:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:2a:61:5a:99:27:59:26:d7:4e:9f:3d:4e:43:71:d0:fe:21: 38:bf:90:c3:be:69:6a:b3:da:a9:e2:f4:b6:14:33:73:06:05: fe:9a:c1:c0:35:c5:63:59:0f:c1:c8:e9:9a:1e:ae:26:f0:54: 3c:ce:84:7a:42:07:96:8d:8c:00:16:f1:9c:f3:ae:91:70:bd: 01:e8:4f:77:ab:2e:84:77:24:5b:a6:b6:2a:be:3d:b3:a8:5a: 4d:e0:04:cb:58:f0:89:da:ae:9f:4e:92:86:35:e3:11:b6:0a: 19:d1:b2:d0:4c:06:34:e6:7c:5c:83:bd:db:96:1c:33:ae:27: ca:35:bc:c7:4b:0f:1d:17:00:e3:4c:f7:5d:17:66:16:bc:a5: 77:b6:a0:f7:d9:2b:85:4d:80:48:0e:67:0a:e6:c1:2b:c9:91: 40:03:67:ca:cf:08:f1:be:40:77:6e:a4:96:e6:7a:43:5e:77: 08:b8:cc:76:37:10:6a:09:a1:18:b5:d4:17:3b:c9:5d:c4:f0: b5:c3:72:40:98:08:7c:5e:4a:6d:4c:ab:1e:58:40:3a:18:44: 90:de:08:62:4a:2a:9c:07:82:14:70:e0:b7:16:4f:1a:f9:93: c3:5c:cc:67:d6:a9:18:a4:cc:c5:2f:5d:4d:da:71:c8:de:32: 6d:fa:f2:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjY+erexxcYsM+eKkaIoeLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyYzg5MTEwMGU1MDBmYjVjNjRmMzBmMTYwM2ZlNTQ1ZGFi NDkwMTYwHhcNMjUxMjE1MTkwMTQ4WhcNMjUxMjE2MTkwMTQ4WjAzMTEwLwYDVQQD Eyg5MmFlMGI4ZTViYzA0ZmJmMDBlNzg5ZDYyMmRkNjAyNTM4ODkxOTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuv6dljmaHUV/v6oH1dY6MxLmBmg 4zjOdz+TEZvQhvxfHCoA7z4tPil31B4zseFqe4Vr9cs4MnY6MuMmdB62cKjjSPO2 5ubidMn3SqpaZY3UEmFfNVyP9Qb/dxMUeUoBZRcZUAVkQmtsVlluIOrZ6tvcOYSW R2J3jS0bqL3CmP2/g+zHq2+WkDHd51k/CparVuiyMHDa9+tDK9t2B6Op/wfjNTqH ljLp/GIQ5raqSiLz7deDLnsF+Rs8mL6GH5LmvsuI7KgvzfE5/qVX5HphdnWmhw18 jslJ/HQZRZ7enKcB0cy8TttMqRvjy4gK7UNqIdU7857FQnVgQRGJ5TWWFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJKuC45bwE+/AOeJ1iLdYCU4iRlRMB8GA1UdIwQY MBaAFKLIkRAOUA+1xk8w8WA/5UXatJAWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3NpUkVBNVFEN1hHVHpEeFlEX2xSZHEwa0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8yOGI1NmMtNmFhYy00OGQ3LWFiYTIt OGNhMGM5MGY1NzdlLzEvb3NpUkVBNVFEN1hHVHpEeFlEX2xSZHEwa0JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8yOGI1NmMtNmFhYy00OGQ3LWFiYTItOGNhMGM5MGY1Nzdl LzEvb3NpUkVBNVFEN1hHVHpEeFlEX2xSZHEwa0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWiphWpkn WSbXTp89TkNx0P4hOL+Qw75parPaqeL0thQzcwYF/prBwDXFY1kPwcjpmh6uJvBU PM6EekIHlo2MABbxnPOukXC9AehPd6suhHckW6a2Kr49s6haTeAEy1jwidqun06S hjXjEbYKGdGy0EwGNOZ8XIO925YcM64nyjW8x0sPHRcA40z3XRdmFryld7ag99kr hU2ASA5nCubBK8mRQANnys8I8b5Ad26kluZ6Q153CLjMdjcQagmhGLXUFzvJXcTw tcNyQJgIfF5KbUyrHlhAOhhEkN4IYkoqnAeCFHDgtxZPGvmTw1zMZ9apGKTMxS9d TdpxyN4ybfrywA== -----END CERTIFICATE-----Generated at Tue Dec 16 01:07:20 2025 by rpki-client