This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft File: OsePM-jhGHMnZn-pT9dEa42R5bQ.mft (raw, json) Hash identifier: lypqjMmIUMI+goHcOmFePkX/HJbs8mtTk91fQFpumvE= Subject key identifier: 5D:2E:CA:A3:42:F0:92:77:A9:AE:03:73:B7:BB:E8:AB:8F:4E:8F:B1 Authority key identifier: 3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4 Certificate issuer: /CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4 Certificate serial: 019B1BAA1C6CC644ACF9E13EEBC83D28FBA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft Manifest number: 1779 Signing time: Sun 14 Dec 2025 07:01:31 +0000 Manifest this update: Sun 14 Dec 2025 07:01:31 +0000 Manifest next update: Mon 15 Dec 2025 07:01:31 +0000 Files and hashes: 1: F6UTD5xs6irn044j6Bn0b3rkg8E.roa (hash: 9sFquSQ+RMEX3oUpXt6ncKZDty2H5HID8F9gmHeYrQI=) 2: OsePM-jhGHMnZn-pT9dEa42R5bQ.crl (hash: SXLpFPHV3f+J4SN47SZiJNURwmoqOuG73qbBVejQ8T0=) 3: XWOSrFlYBz01u9ZbsC7SaVbGNk0.roa (hash: cXF9VQeB5aeojhDFULFIh/R4knNnDgR602re3Gn7FPU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:aa:1c:6c:c6:44:ac:f9:e1:3e:eb:c8:3d:28:fb:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4 Validity Not Before: Dec 14 07:01:31 2025 GMT Not After : Dec 15 07:01:31 2025 GMT Subject: CN=5d2ecaa342f09277a9ae0373b7bbe8ab8f4e8fb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0c:37:0c:af:32:5a:9f:b0:84:b0:30:a1:bc: 05:c1:fb:5c:f2:48:c3:98:2c:fd:e0:29:2f:a0:14: 29:c0:0a:7e:26:af:57:07:16:bf:64:fd:95:7e:c6: dc:3a:c1:26:66:bd:2b:23:30:9d:a3:cb:13:85:cb: 9c:08:10:38:87:35:7f:e9:83:b2:02:43:c9:da:77: 77:e4:eb:2d:a2:11:b6:8d:33:6d:81:97:47:03:de: 93:f3:46:07:4a:e9:58:57:80:df:d2:c3:94:74:07: f1:3f:61:e7:03:6e:6e:1e:65:55:ee:98:0c:51:f3: e9:5e:ed:1d:93:95:c7:47:3f:6a:40:f4:6c:50:4f: fa:da:76:5b:fd:e8:f4:d6:2a:83:d5:33:d1:63:95: bd:77:9c:b6:7e:48:88:55:e1:e6:da:56:b8:90:69: 4b:75:71:6c:f4:b6:9c:f9:fe:47:8b:53:56:09:84: 69:a7:3c:69:98:8a:00:17:3c:1f:bb:04:8c:3c:36: fa:68:af:26:80:fd:64:8d:39:a3:a6:4d:9b:59:b8: 3f:60:25:b9:40:de:ff:2e:6a:55:f5:70:ba:1f:23: d8:ee:00:7c:83:d2:cf:fb:00:1a:ac:7a:54:cc:33: 7d:d3:f7:d7:83:f5:18:e3:df:a8:d7:ce:fe:20:c2: d3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:2E:CA:A3:42:F0:92:77:A9:AE:03:73:B7:BB:E8:AB:8F:4E:8F:B1 X509v3 Authority Key Identifier: keyid:3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:92:d3:9a:06:a9:ee:81:03:06:bf:d7:31:24:a8:11:95:f1: 00:81:fa:21:4a:bb:1d:2b:40:6f:6c:c5:e4:73:a7:f9:ad:79: a8:78:9e:cd:aa:f3:eb:c1:11:4b:d8:97:93:b2:c6:50:b1:bf: b2:6f:06:9b:f6:dc:02:b7:0f:25:55:30:85:15:51:54:a6:4c: 1b:83:b5:78:90:30:66:3c:a9:b3:dc:07:98:e1:92:18:0a:94: e3:8b:77:a9:be:f0:a2:e0:b8:1b:ef:c2:be:44:22:58:b3:84: 16:a4:5f:f6:48:3b:4a:a4:a7:45:fc:4c:43:cb:59:95:ae:98: 0e:06:12:88:55:92:a5:8e:51:0c:2e:b2:00:aa:19:0a:32:0b: 7d:a2:b5:5d:21:00:0b:be:9d:ab:11:63:ab:f0:90:d8:e9:5b: 2c:71:d7:bc:88:be:21:97:9f:12:47:8d:22:c0:b6:7f:48:54: a5:09:f5:44:14:be:10:1c:a0:dd:ad:59:1c:74:91:fc:65:5f: ea:a7:0d:16:94:2a:35:4d:ce:25:60:5b:91:58:9d:f7:fb:df: 71:d8:c9:9d:4a:41:00:76:f1:ab:85:1a:85:f9:a8:fa:3c:d7: b7:57:6e:27:42:27:7e:08:31:81:70:c2:46:b1:23:ca:36:a8: 6b:e8:67:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbqhxsxkSs+eE+68g9KPupMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhYzc4ZjMzZThlMTE4NzMyNzY2N2ZhOTRmZDc0NDZiOGQ5 MWU1YjQwHhcNMjUxMjE0MDcwMTMxWhcNMjUxMjE1MDcwMTMxWjAzMTEwLwYDVQQD Eyg1ZDJlY2FhMzQyZjA5Mjc3YTlhZTAzNzNiN2JiZThhYjhmNGU4ZmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQw3DK8yWp+whLAwobwFwftc8kjD mCz94CkvoBQpwAp+Jq9XBxa/ZP2VfsbcOsEmZr0rIzCdo8sThcucCBA4hzV/6YOy AkPJ2nd35OstohG2jTNtgZdHA96T80YHSulYV4Df0sOUdAfxP2HnA25uHmVV7pgM UfPpXu0dk5XHRz9qQPRsUE/62nZb/ej01iqD1TPRY5W9d5y2fkiIVeHm2la4kGlL dXFs9Lac+f5Hi1NWCYRppzxpmIoAFzwfuwSMPDb6aK8mgP1kjTmjpk2bWbg/YCW5 QN7/LmpV9XC6HyPY7gB8g9LP+wAarHpUzDN90/fXg/UY49+o187+IMLTawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF0uyqNC8JJ3qa4Dc7e76KuPTo+xMB8GA1UdIwQY MBaAFDrHjzPo4RhzJ2Z/qU/XRGuNkeW0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3NlUE0tamhHSE1uWm4tcFQ5ZEVhNDJSNWJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81ZWRhYWYtMzMyNy00M2VkLTkwYjEt ZGMwMWY0YjRiYWU0LzEvT3NlUE0tamhHSE1uWm4tcFQ5ZEVhNDJSNWJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy81ZWRhYWYtMzMyNy00M2VkLTkwYjEtZGMwMWY0YjRiYWU0 LzEvT3NlUE0tamhHSE1uWm4tcFQ5ZEVhNDJSNWJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWJLTmgap 7oEDBr/XMSSoEZXxAIH6IUq7HStAb2zF5HOn+a15qHiezarz68ERS9iXk7LGULG/ sm8Gm/bcArcPJVUwhRVRVKZMG4O1eJAwZjyps9wHmOGSGAqU44t3qb7wouC4G+/C vkQiWLOEFqRf9kg7SqSnRfxMQ8tZla6YDgYSiFWSpY5RDC6yAKoZCjILfaK1XSEA C76dqxFjq/CQ2OlbLHHXvIi+IZefEkeNIsC2f0hUpQn1RBS+EByg3a1ZHHSR/GVf 6qcNFpQqNU3OJWBbkVid9/vfcdjJnUpBAHbxq4Uahfmo+jzXt1duJ0InfggxgXDC RrEjyjaoa+hnwA== -----END CERTIFICATE-----Generated at Sun Dec 14 12:25:19 2025 by rpki-client