This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft File: os1DAbKJXx2YqFDlic58BjxTn00.mft (raw, json) Hash identifier: T9rfc7NCXeLADI7BXAyRm7CUyr7xGxkskzIMZz7dJA4= Subject key identifier: 62:89:EB:46:D4:29:5A:02:55:B8:F3:C7:A4:01:04:6D:40:03:10:C0 Authority key identifier: A2:CD:43:01:B2:89:5F:1D:98:A8:50:E5:89:CE:7C:06:3C:53:9F:4D Certificate issuer: /CN=a2cd4301b2895f1d98a850e589ce7c063c539f4d Certificate serial: 019B59ACEBA8DC71A64D18B4CDD0A7228760 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft Manifest number: 12FC Signing time: Fri 26 Dec 2025 08:01:03 +0000 Manifest this update: Fri 26 Dec 2025 08:01:03 +0000 Manifest next update: Sat 27 Dec 2025 08:01:03 +0000 Files and hashes: 1: KAKz0xo2XXEBIDI7U4s2tUakP98.roa (hash: nzwZHLIuL4E1A+Jcxn7qeWA8mqGxoFVori2v9JbkLPE=) 2: os1DAbKJXx2YqFDlic58BjxTn00.crl (hash: qoALWmv4TusiF84HGBlMV9DkiLJDA5v3iDILtdZAs2U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.crl rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:eb:a8:dc:71:a6:4d:18:b4:cd:d0:a7:22:87:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2cd4301b2895f1d98a850e589ce7c063c539f4d Validity Not Before: Dec 26 08:01:03 2025 GMT Not After : Dec 27 08:01:03 2025 GMT Subject: CN=6289eb46d4295a0255b8f3c7a401046d400310c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:93:49:17:bf:4d:35:49:7f:44:7a:ce:8c:f8: 00:7e:ef:e1:2d:7f:8d:6b:17:a2:59:3f:2d:a1:b8: df:0b:c2:8e:fa:31:b0:35:f7:db:19:16:96:d3:c5: 50:72:c2:4e:14:8a:72:de:4c:06:7a:fa:8f:ae:a2: 4a:ac:72:8f:96:94:9e:ea:05:43:92:be:6e:d5:a4: b4:72:27:0c:ea:fe:4a:07:2f:44:46:72:64:e6:6d: f2:26:f2:09:6a:e7:9c:05:41:09:50:58:7c:84:93: 88:a6:bb:5e:52:82:bd:a4:ef:0a:47:e2:e3:9e:e5: 10:0b:ff:c6:2d:3f:ad:8a:01:aa:02:bc:7e:95:20: 6d:41:59:03:fe:90:44:b6:a2:78:0b:38:0a:a2:9e: 86:9b:2e:17:8e:05:cb:06:ac:a4:9a:ba:8e:bc:9c: 7e:5b:bb:44:20:80:96:82:43:28:50:4c:54:61:99: 2f:70:60:07:fb:2a:fd:bc:1d:6f:94:fc:44:4b:94: ff:7d:cc:b0:02:60:06:45:a8:8f:37:79:d5:49:2e: 86:52:c5:68:99:4e:f5:ce:c9:dd:5d:40:61:7d:24: 45:11:bf:7b:51:b2:9b:0c:84:4a:08:45:ce:b6:dd: a5:90:77:53:e5:39:d8:ee:14:aa:0f:b6:b0:59:64: 6b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:89:EB:46:D4:29:5A:02:55:B8:F3:C7:A4:01:04:6D:40:03:10:C0 X509v3 Authority Key Identifier: keyid:A2:CD:43:01:B2:89:5F:1D:98:A8:50:E5:89:CE:7C:06:3C:53:9F:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:09:1d:9a:14:34:bb:8b:94:55:02:4c:bf:1f:cf:34:58:66: ae:0b:f1:8a:ca:a6:c5:09:61:94:30:03:bb:9e:ec:20:26:c6: 6d:6a:5e:7a:aa:a7:cf:f2:db:0b:06:d6:b0:60:34:ae:31:d1: 26:29:6a:b5:b6:67:45:cc:3c:85:58:48:d2:be:f0:71:14:15: ed:6e:c0:11:29:2d:1f:ab:48:8d:c0:63:b9:a7:01:8e:7b:3c: b7:1d:44:9d:8e:15:ed:55:d7:e5:8c:a1:10:26:75:0c:64:48: 87:17:16:23:0b:29:84:33:49:bb:34:81:5d:59:20:34:d8:a1: e4:65:aa:f6:97:a6:9a:90:b0:18:e9:be:db:a4:f0:2d:6e:80: a8:40:49:0e:43:38:50:82:19:49:53:50:5e:d8:76:f8:54:67: 73:f4:4d:3d:86:7d:35:7b:3c:a7:f8:86:97:a6:f1:03:a0:d0: 22:8c:0a:19:52:78:b6:2b:bd:f6:20:f5:6f:6d:57:af:67:de: b6:c3:de:cc:32:04:51:48:18:ca:e1:86:70:28:58:eb:5f:de: 4a:51:f9:f1:fb:fa:7e:7e:20:1f:67:10:fc:00:e2:38:bb:c6: 8b:25:32:8f:b5:d5:d5:d9:98:2d:00:57:33:fe:d3:97:7b:23: 0d:b4:12:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrOuo3HGmTRi0zdCnIodgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyY2Q0MzAxYjI4OTVmMWQ5OGE4NTBlNTg5Y2U3YzA2M2M1 MzlmNGQwHhcNMjUxMjI2MDgwMTAzWhcNMjUxMjI3MDgwMTAzWjAzMTEwLwYDVQQD Eyg2Mjg5ZWI0NmQ0Mjk1YTAyNTViOGYzYzdhNDAxMDQ2ZDQwMDMxMGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZNJF79NNUl/RHrOjPgAfu/hLX+N axeiWT8tobjfC8KO+jGwNffbGRaW08VQcsJOFIpy3kwGevqPrqJKrHKPlpSe6gVD kr5u1aS0cicM6v5KBy9ERnJk5m3yJvIJauecBUEJUFh8hJOIprteUoK9pO8KR+Lj nuUQC//GLT+tigGqArx+lSBtQVkD/pBEtqJ4CzgKop6Gmy4XjgXLBqykmrqOvJx+ W7tEIICWgkMoUExUYZkvcGAH+yr9vB1vlPxES5T/fcywAmAGRaiPN3nVSS6GUsVo mU71zsndXUBhfSRFEb97UbKbDIRKCEXOtt2lkHdT5TnY7hSqD7awWWRroQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGKJ60bUKVoCVbjzx6QBBG1AAxDAMB8GA1UdIwQY MBaAFKLNQwGyiV8dmKhQ5YnOfAY8U59NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3MxREFiS0pYeDJZcUZEbGljNThCanhUbjAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8zODQ4NmMtOWRlMy00NGVmLWFiMjkt NThmM2YzN2NjZGQ5LzEvb3MxREFiS0pYeDJZcUZEbGljNThCanhUbjAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8zODQ4NmMtOWRlMy00NGVmLWFiMjktNThmM2YzN2NjZGQ5 LzEvb3MxREFiS0pYeDJZcUZEbGljNThCanhUbjAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMwkdmhQ0 u4uUVQJMvx/PNFhmrgvxisqmxQlhlDADu57sICbGbWpeeqqnz/LbCwbWsGA0rjHR JilqtbZnRcw8hVhI0r7wcRQV7W7AESktH6tIjcBjuacBjns8tx1EnY4V7VXX5Yyh ECZ1DGRIhxcWIwsphDNJuzSBXVkgNNih5GWq9pemmpCwGOm+26TwLW6AqEBJDkM4 UIIZSVNQXth2+FRnc/RNPYZ9NXs8p/iGl6bxA6DQIowKGVJ4tiu99iD1b21Xr2fe tsPezDIEUUgYyuGGcChY61/eSlH58fv6fn4gH2cQ/ADiOLvGiyUyj7XV1dmYLQBX M/7Tl3sjDbQSIA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:04 2025 by rpki-client