This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft File: OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft (raw, json) Hash identifier: Gcqxpqhiv6T+AVT2mjWQpstZRKL7rcFxSrNlmGhuEa4= Subject key identifier: 5F:43:63:1D:F1:54:B0:8F:9F:19:AB:6C:62:EF:B7:0F:73:70:A1:39 Authority key identifier: 39:25:DF:79:87:06:F9:0E:6D:8F:D4:20:49:55:50:24:B7:3E:D3:69 Certificate issuer: /CN=3925df798706f90e6d8fd42049555024b73ed369 Certificate serial: 019B372157A217A1521DEBDC73B96421A48B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft Manifest number: E0 Signing time: Fri 19 Dec 2025 15:01:30 +0000 Manifest this update: Fri 19 Dec 2025 15:01:30 +0000 Manifest next update: Sat 20 Dec 2025 15:01:30 +0000 Files and hashes: 1: OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl (hash: 6DVBxSUs3d/D2BPaXJ+l3eZO/Z70LzA09+CgpflbAOs=) 2: k_uwe0_hbp0DrMLcpHMI8wGcruA.roa (hash: qbYK3P/JMzm2gpspT6OG1E1S38E2GDjqMXcyX1H7Szc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:21:57:a2:17:a1:52:1d:eb:dc:73:b9:64:21:a4:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3925df798706f90e6d8fd42049555024b73ed369 Validity Not Before: Dec 19 15:01:30 2025 GMT Not After : Dec 20 15:01:30 2025 GMT Subject: CN=5f43631df154b08f9f19ab6c62efb70f7370a139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e8:cf:53:02:25:07:4e:4c:aa:6f:7c:2b:08: 21:c2:82:fd:55:4f:8e:3b:6f:e2:18:a8:98:40:1d: 92:03:88:b5:ad:91:53:72:e9:b4:2e:14:14:86:4a: 15:1e:47:4b:f3:0c:92:15:67:7d:c3:b2:83:1c:74: b7:4e:ae:89:cd:b6:52:40:61:09:80:40:54:25:d7: 4e:62:44:f5:39:d0:37:40:3c:6c:fa:5d:64:8d:82: a2:4a:89:5a:6b:0b:7f:bd:c4:30:ef:f7:13:4f:25: 4f:db:fe:9a:76:fb:d5:3b:c8:19:da:f2:4c:6e:3e: ec:79:c7:38:67:1a:b0:fe:b2:8d:be:a4:30:2c:61: 63:f4:a1:c8:71:e6:0f:7d:42:cb:45:46:7c:ad:8f: 09:3d:68:14:d3:74:a9:01:82:d2:c7:75:71:2a:f4: a4:e3:51:0e:70:fd:14:ef:46:2c:68:1e:83:85:9e: b7:e5:76:08:0d:52:a5:16:9b:91:2c:ba:85:5a:60: dc:a2:b5:6d:30:1d:ff:2b:be:49:67:2f:51:31:02: d3:ad:52:c4:f4:b4:71:09:72:b4:dd:dc:aa:6e:76: c9:f6:08:96:6f:34:ce:e8:37:df:50:51:a0:a3:46: df:63:39:6d:a9:f6:63:af:90:80:10:a7:b6:79:75: 92:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:43:63:1D:F1:54:B0:8F:9F:19:AB:6C:62:EF:B7:0F:73:70:A1:39 X509v3 Authority Key Identifier: keyid:39:25:DF:79:87:06:F9:0E:6D:8F:D4:20:49:55:50:24:B7:3E:D3:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:1d:c7:ee:c4:c9:f7:63:27:d1:32:2f:a5:69:7d:e0:a0:ef: 9f:c3:91:6b:4d:e9:99:f5:c8:7d:4a:dc:4f:8c:ce:59:f0:41: 15:2d:5d:96:f3:b0:c9:3d:9a:25:be:0c:74:a0:cb:67:e1:30: 13:de:bf:c7:ca:e7:df:13:81:56:dc:7c:39:8c:9c:c6:9d:d7: 6d:29:fa:d4:d1:92:b6:63:4f:d0:56:c4:2e:46:8b:e1:1f:f4: f4:08:54:ce:43:c4:00:28:a8:53:0a:f9:59:f9:ab:f6:15:29: b6:59:d5:d1:77:3e:15:58:cd:1b:89:a3:90:43:bd:f8:d6:00: 63:38:c9:bd:b4:f4:f4:91:a3:70:d1:3e:62:ea:1f:05:e9:e1: d2:40:a3:df:0b:b0:b1:e1:89:59:f2:fc:34:33:9d:62:a1:d4: 3c:c0:46:45:e3:35:70:0c:60:b1:fb:19:4c:ce:35:f4:dd:ea: e9:f9:bc:3d:e9:c7:47:29:6e:0f:00:4d:cb:04:8a:92:8b:17: 00:35:4d:6f:47:5a:bb:90:d0:86:71:e5:40:97:f5:6b:fd:0f: f2:b2:f8:ea:70:54:7e:a4:0e:c1:c7:e2:15:24:86:b6:4e:95: bf:3c:05:7b:ef:e8:7c:a0:92:85:15:8f:6e:d0:d4:65:70:33: 83:5e:62:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IVeiF6FSHevcc7lkIaSLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MjVkZjc5ODcwNmY5MGU2ZDhmZDQyMDQ5NTU1MDI0Yjcz ZWQzNjkwHhcNMjUxMjE5MTUwMTMwWhcNMjUxMjIwMTUwMTMwWjAzMTEwLwYDVQQD Eyg1ZjQzNjMxZGYxNTRiMDhmOWYxOWFiNmM2MmVmYjcwZjczNzBhMTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuejPUwIlB05Mqm98KwghwoL9VU+O O2/iGKiYQB2SA4i1rZFTcum0LhQUhkoVHkdL8wySFWd9w7KDHHS3Tq6JzbZSQGEJ gEBUJddOYkT1OdA3QDxs+l1kjYKiSolaawt/vcQw7/cTTyVP2/6advvVO8gZ2vJM bj7secc4Zxqw/rKNvqQwLGFj9KHIceYPfULLRUZ8rY8JPWgU03SpAYLSx3VxKvSk 41EOcP0U70YsaB6DhZ635XYIDVKlFpuRLLqFWmDcorVtMB3/K75JZy9RMQLTrVLE 9LRxCXK03dyqbnbJ9giWbzTO6DffUFGgo0bfYzltqfZjr5CAEKe2eXWSDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF9DYx3xVLCPnxmrbGLvtw9zcKE5MB8GA1UdIwQY MBaAFDkl33mHBvkObY/UIElVUCS3PtNpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1NYZmVZY0ctUTV0ajlRZ1NWVlFKTGMtMDJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xYzdjYjItNzY5Yy00N2FlLWI1YzUt MDg5NDJiNDU0OTk4LzEvT1NYZmVZY0ctUTV0ajlRZ1NWVlFKTGMtMDJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8xYzdjYjItNzY5Yy00N2FlLWI1YzUtMDg5NDJiNDU0OTk4 LzEvT1NYZmVZY0ctUTV0ajlRZ1NWVlFKTGMtMDJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASh3H7sTJ 92Mn0TIvpWl94KDvn8ORa03pmfXIfUrcT4zOWfBBFS1dlvOwyT2aJb4MdKDLZ+Ew E96/x8rn3xOBVtx8OYycxp3XbSn61NGStmNP0FbELkaL4R/09AhUzkPEACioUwr5 Wfmr9hUptlnV0Xc+FVjNG4mjkEO9+NYAYzjJvbT09JGjcNE+YuofBenh0kCj3wuw seGJWfL8NDOdYqHUPMBGReM1cAxgsfsZTM419N3q6fm8PenHRyluDwBNywSKkosX ADVNb0dau5DQhnHlQJf1a/0P8rL46nBUfqQOwcfiFSSGtk6VvzwFe+/ofKCShRWP btDUZXAzg15i3A== -----END CERTIFICATE-----Generated at Fri Dec 19 17:08:23 2025 by rpki-client