This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft File: O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft (raw, json) Hash identifier: dLYg4e612nzu0m3Zb0Ijm1hJaSLcmnEPuC7ab09BcH0= Subject key identifier: F0:95:61:40:74:CD:2E:2E:15:23:C1:E9:6E:45:AD:12:32:9B:73:C7 Authority key identifier: 3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F Certificate issuer: /CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f Certificate serial: 019B34FB6A58025C4320FD4FC3C71E7530F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 05:00:50 +0000 Manifest this update: Fri 19 Dec 2025 05:00:50 +0000 Manifest next update: Sat 20 Dec 2025 05:00:50 +0000 Files and hashes: 1: ETzMLJ9E8ekQKvTuSVRndgg_ftE.roa (hash: zxZL9sGsfFQCpFwlHr+nLeuc9weJmZjmaUU+udBc04c=) 2: O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl (hash: LJ/6tIg1rJTTDypEcrNPCZ1+cOwdN88kRKxXstd7T4U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:6a:58:02:5c:43:20:fd:4f:c3:c7:1e:75:30:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f Validity Not Before: Dec 19 05:00:50 2025 GMT Not After : Dec 20 05:00:50 2025 GMT Subject: CN=f095614074cd2e2e1523c1e96e45ad12329b73c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:31:c5:0c:a4:99:c6:5e:74:84:78:c3:a2:d2: 8e:56:a0:41:b8:b1:70:17:58:8b:e3:6d:16:12:ad: fb:c1:e0:9e:3b:17:a0:63:82:57:6c:db:29:e2:2e: 8b:b6:dd:ba:5a:5d:9d:53:c3:7f:80:aa:0b:e5:c7: ef:3e:fe:eb:43:0b:97:5c:e0:a7:fc:b7:e2:78:9a: b4:b7:27:eb:a7:45:a2:b2:f9:2c:50:61:e5:b2:af: 2c:b9:43:c5:09:a0:8b:e1:a3:51:f7:e7:b5:23:b3: d6:15:84:cf:67:ee:2b:75:6c:13:af:4c:88:6c:56: b3:9b:12:bd:58:a1:85:b2:2f:06:9a:91:a3:c8:7b: fd:3c:58:50:44:89:20:3f:0a:92:3f:04:d1:07:7e: ed:c7:8f:a0:b2:f4:d1:2d:68:d5:40:b0:f2:ab:19: 6e:b4:a1:8a:2d:0a:63:24:11:95:e4:91:38:51:9c: 2d:12:70:f7:f3:ac:e4:f3:fc:7e:06:e6:b9:e1:bc: d3:00:94:f9:ee:40:12:01:9c:97:ad:45:73:fa:9e: 26:13:a0:a5:8e:55:9c:8e:94:c5:fa:14:83:1b:53: 59:6a:84:e5:fb:9f:94:41:80:12:00:b0:21:1e:96: fd:4f:3c:52:64:0d:b8:de:6e:c9:77:92:8d:55:bb: 47:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:95:61:40:74:CD:2E:2E:15:23:C1:E9:6E:45:AD:12:32:9B:73:C7 X509v3 Authority Key Identifier: keyid:3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:64:90:d6:19:c9:c0:b7:08:3b:38:8d:a1:07:a6:3a:91:81: 0a:cc:00:ca:21:30:da:09:72:9b:30:55:96:a0:dd:a6:33:4f: 84:d2:51:fc:7f:2d:d0:85:c0:34:3a:f5:a0:3d:57:df:f4:d6: b6:42:ae:a0:1c:44:6d:66:45:26:c9:9a:e5:85:f9:03:d9:61: 6a:b4:9e:b1:ac:c3:cc:78:d1:00:61:0b:2b:30:33:38:d1:9e: 91:93:95:f2:d5:bc:a8:94:86:95:2c:47:95:02:74:ae:41:44: 28:ca:a2:79:c0:e4:16:d2:1b:2d:db:61:4f:4b:f9:18:e3:03: 97:9f:a9:7c:7c:e9:34:5d:2e:ac:e2:25:bf:dc:a3:e2:cf:0d: bd:e5:89:d5:c2:96:fe:3d:b6:0a:9c:90:09:78:7f:d8:68:e7: 3c:ae:37:72:c9:1e:81:af:c9:af:fb:68:3e:1e:05:6c:8b:a1: 1c:2f:1a:c0:c9:d8:d5:2b:7b:65:56:05:d8:c1:04:c2:cc:5b: 1c:df:f2:26:48:92:de:0b:de:45:b3:d3:39:9c:2b:e2:ff:d2: f9:ae:0a:9a:f3:b8:b7:39:dd:d8:39:69:ee:f5:17:dd:19:0c: 4e:43:6b:59:5f:03:4a:ab:f8:f7:42:bb:4c:8a:89:83:dd:fe: 2d:75:c1:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+2pYAlxDIP1Pw8cedTD1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiOTRhMWQ4ODFkZDRiZWIyZmQzMWI3NmZhMGQ1ZDU4NWE5 YjIzOGYwHhcNMjUxMjE5MDUwMDUwWhcNMjUxMjIwMDUwMDUwWjAzMTEwLwYDVQQD EyhmMDk1NjE0MDc0Y2QyZTJlMTUyM2MxZTk2ZTQ1YWQxMjMyOWI3M2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTHFDKSZxl50hHjDotKOVqBBuLFw F1iL420WEq37weCeOxegY4JXbNsp4i6Ltt26Wl2dU8N/gKoL5cfvPv7rQwuXXOCn /LfieJq0tyfrp0WisvksUGHlsq8suUPFCaCL4aNR9+e1I7PWFYTPZ+4rdWwTr0yI bFazmxK9WKGFsi8GmpGjyHv9PFhQRIkgPwqSPwTRB37tx4+gsvTRLWjVQLDyqxlu tKGKLQpjJBGV5JE4UZwtEnD386zk8/x+Bua54bzTAJT57kASAZyXrUVz+p4mE6Cl jlWcjpTF+hSDG1NZaoTl+5+UQYASALAhHpb9TzxSZA243m7Jd5KNVbtHbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPCVYUB0zS4uFSPB6W5FrRIym3PHMB8GA1UdIwQY MBaAFDuUodiB3UvrL9MbdvoNXVhamyOPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzVTaDJJSGRTLXN2MHh0Mi1nMWRXRnFiSTQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS83YzZiMmQtYWM0Mi00ODdlLTljMTkt MTYxODc3NmJkYWFlLzEvTzVTaDJJSGRTLXN2MHh0Mi1nMWRXRnFiSTQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS83YzZiMmQtYWM0Mi00ODdlLTljMTktMTYxODc3NmJkYWFl LzEvTzVTaDJJSGRTLXN2MHh0Mi1nMWRXRnFiSTQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGSQ1hnJ wLcIOziNoQemOpGBCswAyiEw2glymzBVlqDdpjNPhNJR/H8t0IXANDr1oD1X3/TW tkKuoBxEbWZFJsma5YX5A9lharSesazDzHjRAGELKzAzONGekZOV8tW8qJSGlSxH lQJ0rkFEKMqiecDkFtIbLdthT0v5GOMDl5+pfHzpNF0urOIlv9yj4s8NveWJ1cKW /j22CpyQCXh/2GjnPK43cskega/Jr/toPh4FbIuhHC8awMnY1St7ZVYF2MEEwsxb HN/yJkiS3gveRbPTOZwr4v/S+a4KmvO4tznd2Dlp7vUX3RkMTkNrWV8DSqv490K7 TIqJg93+LXXBOQ== -----END CERTIFICATE-----Generated at Fri Dec 19 09:23:28 2025 by rpki-client