This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft File: O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft (raw, json) Hash identifier: eRIhPr2l8kr16b6nSdGGbHrASkF2GH86peuWXXka8xw= Subject key identifier: CD:BF:0B:B9:56:EB:3A:95:FC:F1:68:00:63:A5:D7:80:0F:A8:B2:CA Authority key identifier: 3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F Certificate issuer: /CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f Certificate serial: 019B38D82D1EA7403A066FDE399BB6FF3B8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 23:00:49 +0000 Manifest this update: Fri 19 Dec 2025 23:00:49 +0000 Manifest next update: Sat 20 Dec 2025 23:00:49 +0000 Files and hashes: 1: ETzMLJ9E8ekQKvTuSVRndgg_ftE.roa (hash: zxZL9sGsfFQCpFwlHr+nLeuc9weJmZjmaUU+udBc04c=) 2: O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl (hash: Zqt+EUmON2ccForLXRmXCllNG09hxyM+DjVJJv5veUU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:2d:1e:a7:40:3a:06:6f:de:39:9b:b6:ff:3b:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f Validity Not Before: Dec 19 23:00:49 2025 GMT Not After : Dec 20 23:00:49 2025 GMT Subject: CN=cdbf0bb956eb3a95fcf1680063a5d7800fa8b2ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5b:9b:ee:71:0e:80:c6:70:4f:07:20:43:c1: 3b:f8:60:ea:73:71:5e:4f:cb:67:df:df:54:dd:9d: ea:9d:af:df:42:d4:2c:04:dc:ea:32:b8:76:ed:e7: 8c:a3:48:00:d1:2f:16:79:8e:81:92:e1:bd:9c:7e: d9:8c:da:97:0c:b4:92:69:82:ec:9f:6d:a8:d7:a7: d8:27:4a:02:cf:15:52:bd:2f:e9:3d:ac:47:c6:5f: d2:3c:8c:f3:4a:a2:f3:e0:75:2f:e1:aa:b2:0f:21: c4:dd:02:c7:31:73:61:22:b6:b9:37:9a:13:47:4f: fe:57:9f:78:08:d7:67:7e:2c:0b:f2:a1:ac:1d:d0: 62:b1:fc:37:26:52:7d:85:e2:a7:87:72:56:f4:90: 0e:46:9b:a7:3e:88:8e:e1:1f:24:53:bd:fc:a3:c4: 0a:7f:57:50:21:ef:ef:cf:0c:7f:80:f2:c1:88:e6: 05:aa:36:e4:2a:c0:4b:8a:a3:69:56:44:ed:d4:4d: a6:ef:c1:d4:c9:53:49:55:d0:e2:21:8e:11:2e:87: ea:e6:77:a1:6e:ec:15:d9:41:74:63:3b:05:f9:11: ac:9b:a9:e9:b1:e0:1a:35:3d:ab:a4:f9:73:fb:61: 82:2b:e1:1e:f6:fb:84:a2:87:cf:7f:a9:04:fb:84: 18:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:BF:0B:B9:56:EB:3A:95:FC:F1:68:00:63:A5:D7:80:0F:A8:B2:CA X509v3 Authority Key Identifier: keyid:3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:c9:31:06:52:99:1e:4f:1f:6f:af:7c:9c:0d:52:ce:18:fe: 5a:34:b9:7d:36:1b:94:6c:a2:dc:38:19:16:30:07:de:50:64: 32:20:e9:66:e9:15:50:78:75:a3:43:f7:38:dd:a0:87:1e:20: ff:e0:bb:a4:97:d9:98:09:22:c3:ac:5f:bb:ee:c9:40:b1:e1: 76:bd:02:04:f8:ed:52:1d:64:23:6c:ab:1f:c8:e8:41:a8:fe: b6:0b:eb:28:d1:6c:fe:25:1e:ac:2c:9a:37:fb:a5:14:70:7c: 29:b8:39:84:8d:e7:5c:85:82:6e:10:fb:54:af:c8:a9:f2:db: 9b:25:e5:d9:5d:e1:2a:8a:ef:de:00:30:49:f8:a8:3e:2d:51: dd:ae:d9:92:e8:a5:11:df:44:9b:50:05:11:09:f7:95:63:a4: 94:f8:4d:fa:45:59:de:8f:14:fe:48:b1:29:b4:5d:49:cd:d0: 07:39:63:03:e1:92:37:92:ca:58:0b:dd:72:30:6c:c4:dc:8c: 54:76:11:da:cc:d9:b7:de:62:43:5f:d8:c7:e9:dd:63:fe:e6: 4d:fb:9d:9e:7e:e8:70:dd:81:43:f5:0c:a8:b8:af:01:f2:e0: 6d:94:77:28:9a:51:54:7a:7f:e9:f4:f8:d8:04:be:48:e9:7d: 88:66:7c:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42C0ep0A6Bm/eOZu2/zuOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiOTRhMWQ4ODFkZDRiZWIyZmQzMWI3NmZhMGQ1ZDU4NWE5 YjIzOGYwHhcNMjUxMjE5MjMwMDQ5WhcNMjUxMjIwMjMwMDQ5WjAzMTEwLwYDVQQD EyhjZGJmMGJiOTU2ZWIzYTk1ZmNmMTY4MDA2M2E1ZDc4MDBmYThiMmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFub7nEOgMZwTwcgQ8E7+GDqc3Fe T8tn399U3Z3qna/fQtQsBNzqMrh27eeMo0gA0S8WeY6BkuG9nH7ZjNqXDLSSaYLs n22o16fYJ0oCzxVSvS/pPaxHxl/SPIzzSqLz4HUv4aqyDyHE3QLHMXNhIra5N5oT R0/+V594CNdnfiwL8qGsHdBisfw3JlJ9heKnh3JW9JAORpunPoiO4R8kU738o8QK f1dQIe/vzwx/gPLBiOYFqjbkKsBLiqNpVkTt1E2m78HUyVNJVdDiIY4RLofq5neh buwV2UF0YzsF+RGsm6npseAaNT2rpPlz+2GCK+Ee9vuEoofPf6kE+4QYfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2/C7lW6zqV/PFoAGOl14APqLLKMB8GA1UdIwQY MBaAFDuUodiB3UvrL9MbdvoNXVhamyOPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzVTaDJJSGRTLXN2MHh0Mi1nMWRXRnFiSTQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS83YzZiMmQtYWM0Mi00ODdlLTljMTkt MTYxODc3NmJkYWFlLzEvTzVTaDJJSGRTLXN2MHh0Mi1nMWRXRnFiSTQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS83YzZiMmQtYWM0Mi00ODdlLTljMTktMTYxODc3NmJkYWFl LzEvTzVTaDJJSGRTLXN2MHh0Mi1nMWRXRnFiSTQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI8kxBlKZ Hk8fb698nA1Szhj+WjS5fTYblGyi3DgZFjAH3lBkMiDpZukVUHh1o0P3ON2ghx4g /+C7pJfZmAkiw6xfu+7JQLHhdr0CBPjtUh1kI2yrH8joQaj+tgvrKNFs/iUerCya N/ulFHB8Kbg5hI3nXIWCbhD7VK/IqfLbmyXl2V3hKorv3gAwSfioPi1R3a7Zkuil Ed9Em1AFEQn3lWOklPhN+kVZ3o8U/kixKbRdSc3QBzljA+GSN5LKWAvdcjBsxNyM VHYR2szZt95iQ1/Yx+ndY/7mTfudnn7ocN2BQ/UMqLivAfLgbZR3KJpRVHp/6fT4 2AS+SOl9iGZ8QA== -----END CERTIFICATE-----Generated at Sat Dec 20 01:54:19 2025 by rpki-client