This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft File: rOSXY9L9uQmGRpQDBmy15qeCXww.mft (raw, json) Hash identifier: tNmhLBuETV4yNN/ZePjUsi3aYHl1lfDCn1l3cavPaDQ= Subject key identifier: F2:E1:10:1C:99:75:37:5F:A9:F2:63:00:AE:65:55:F6:F8:E1:9D:27 Authority key identifier: AC:E4:97:63:D2:FD:B9:09:86:46:94:03:06:6C:B5:E6:A7:82:5F:0C Certificate issuer: /CN=ace49763d2fdb90986469403066cb5e6a7825f0c Certificate serial: 019B281BB8617CB61EC8ED78B8043387BD7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft Manifest number: 0950 Signing time: Tue 16 Dec 2025 17:01:03 +0000 Manifest this update: Tue 16 Dec 2025 17:01:03 +0000 Manifest next update: Wed 17 Dec 2025 17:01:03 +0000 Files and hashes: 1: D_Ap7aX55j2mvnDRbvve0G_OwsM.roa (hash: rFKERfrglcdmlPd1vXc+xLBg8nNvQQZtBdRb9+OODlU=) 2: rOSXY9L9uQmGRpQDBmy15qeCXww.crl (hash: jKaSA8UeBEC/L8NwDzz81/wguWwO6xhum6eHJsMadRA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1b:b8:61:7c:b6:1e:c8:ed:78:b8:04:33:87:bd:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ace49763d2fdb90986469403066cb5e6a7825f0c Validity Not Before: Dec 16 17:01:03 2025 GMT Not After : Dec 17 17:01:03 2025 GMT Subject: CN=f2e1101c9975375fa9f26300ae6555f6f8e19d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:13:fd:82:28:99:3a:1a:c1:c8:b8:8f:39:5b: 49:5d:c7:5d:7c:fb:b1:0c:10:03:1f:e0:8e:20:96: 83:77:e2:30:9a:16:35:89:64:e0:f8:65:dd:0d:83: 02:fb:53:28:9d:e2:25:41:64:15:87:a4:7e:68:1e: dc:a9:e7:f6:e5:54:91:74:be:ed:c4:02:1b:0d:57: e4:65:3d:8f:9f:6c:85:bb:bb:24:17:d1:d4:c9:51: aa:8a:8e:50:cc:23:5f:f1:81:8a:c8:42:0f:78:83: 32:9f:07:96:7d:84:29:4f:24:41:26:53:37:ca:45: 8c:c0:a7:a8:ea:3b:6a:fe:56:d7:56:08:fa:88:5a: 01:bf:95:b4:ac:09:50:41:55:65:ae:31:f2:cf:24: 5d:d7:ff:50:15:cb:e3:9a:1d:8f:7c:cb:46:dd:24: dd:29:a1:1f:c4:76:0c:de:f7:01:bf:6f:4f:55:0a: 87:d2:47:35:1d:98:b9:ef:3a:8c:eb:1b:60:82:d9: 28:0f:f5:2d:65:9b:b3:59:8a:40:2c:87:9c:c1:b1: 48:d0:a0:73:74:43:49:c8:e3:76:d8:f5:cf:e2:44: a0:52:ff:b9:f2:80:4b:02:79:3f:90:a0:6e:af:2f: 78:24:94:80:58:3e:2e:9d:aa:d3:22:e1:06:e0:4e: 4f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E1:10:1C:99:75:37:5F:A9:F2:63:00:AE:65:55:F6:F8:E1:9D:27 X509v3 Authority Key Identifier: keyid:AC:E4:97:63:D2:FD:B9:09:86:46:94:03:06:6C:B5:E6:A7:82:5F:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:fc:e6:ce:65:33:88:73:6a:74:64:1f:d4:c7:c5:d1:3e:41: 01:24:fc:c5:32:24:20:36:3f:3c:6d:bd:e3:55:f6:56:26:6b: a9:05:e8:56:77:e2:0b:87:9d:47:53:13:69:5b:4e:16:94:d1: e3:d5:3a:db:62:d6:3c:64:65:6b:fe:25:d0:9f:4e:fe:3d:81: 4a:81:a5:cd:dc:7e:d3:35:0f:63:18:72:0e:e4:ac:fd:b1:53: 2a:5e:9c:91:10:5f:a8:c4:4a:d2:73:9b:ba:67:b1:a0:e3:56: c1:1b:41:49:31:13:8c:5a:1d:0a:e5:46:f7:e3:95:66:1e:12: 49:34:3e:5c:f2:df:cb:2e:6d:09:2e:f0:9e:b8:01:13:83:d8: 75:ce:8d:1c:4a:23:72:15:86:d0:1b:a5:2f:01:b2:92:82:19: 2c:ce:b9:ed:e1:e9:1e:41:28:cd:c9:ee:ce:f6:85:78:5c:48: aa:57:bc:d1:74:a5:71:4b:af:40:ad:e3:3c:17:0b:04:85:a7: ca:50:cc:72:4b:f0:ab:6f:b4:28:e0:c1:9d:b6:de:17:4c:c9: e1:68:3b:8b:98:8a:b6:f2:2e:e6:01:ce:c3:fa:d4:37:f0:6c: 17:a4:e8:b1:53:6e:1a:7e:55:c8:83:b0:ce:33:bd:c9:75:6f: ea:6d:dd:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoG7hhfLYeyO14uAQzh718MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZTQ5NzYzZDJmZGI5MDk4NjQ2OTQwMzA2NmNiNWU2YTc4 MjVmMGMwHhcNMjUxMjE2MTcwMTAzWhcNMjUxMjE3MTcwMTAzWjAzMTEwLwYDVQQD EyhmMmUxMTAxYzk5NzUzNzVmYTlmMjYzMDBhZTY1NTVmNmY4ZTE5ZDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxP9giiZOhrByLiPOVtJXcddfPux DBADH+COIJaDd+IwmhY1iWTg+GXdDYMC+1MoneIlQWQVh6R+aB7cqef25VSRdL7t xAIbDVfkZT2Pn2yFu7skF9HUyVGqio5QzCNf8YGKyEIPeIMynweWfYQpTyRBJlM3 ykWMwKeo6jtq/lbXVgj6iFoBv5W0rAlQQVVlrjHyzyRd1/9QFcvjmh2PfMtG3STd KaEfxHYM3vcBv29PVQqH0kc1HZi57zqM6xtggtkoD/UtZZuzWYpALIecwbFI0KBz dENJyON22PXP4kSgUv+58oBLAnk/kKBury94JJSAWD4unarTIuEG4E5PqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPLhEByZdTdfqfJjAK5lVfb44Z0nMB8GA1UdIwQY MBaAFKzkl2PS/bkJhkaUAwZsteangl8MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck9TWFk5TDl1UW1HUnBRREJteTE1cWVDWHd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80NjMwZmQtYTBjYS00OGEwLWJjYWIt OTBhOGM2ZTc4NWM5LzEvck9TWFk5TDl1UW1HUnBRREJteTE1cWVDWHd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS80NjMwZmQtYTBjYS00OGEwLWJjYWItOTBhOGM2ZTc4NWM5 LzEvck9TWFk5TDl1UW1HUnBRREJteTE1cWVDWHd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjfzmzmUz iHNqdGQf1MfF0T5BAST8xTIkIDY/PG2941X2ViZrqQXoVnfiC4edR1MTaVtOFpTR 49U622LWPGRla/4l0J9O/j2BSoGlzdx+0zUPYxhyDuSs/bFTKl6ckRBfqMRK0nOb umexoONWwRtBSTETjFodCuVG9+OVZh4SSTQ+XPLfyy5tCS7wnrgBE4PYdc6NHEoj chWG0BulLwGykoIZLM657eHpHkEozcnuzvaFeFxIqle80XSlcUuvQK3jPBcLBIWn ylDMckvwq2+0KODBnbbeF0zJ4Wg7i5iKtvIu5gHOw/rUN/BsF6TosVNuGn5VyIOw zjO9yXVv6m3dcg== -----END CERTIFICATE-----Generated at Tue Dec 16 21:04:22 2025 by rpki-client