This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft File: O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft (raw, json) Hash identifier: 2pOdmE7YauGxj6CKuru2SU4QgHWsOQGjdOq0gFXYXkg= Subject key identifier: 75:41:F4:3F:28:EB:9C:FE:92:99:7A:09:12:CB:C4:C3:C1:FE:42:DB Authority key identifier: 3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F Certificate issuer: /CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f Certificate serial: 019B12384DD2C3DEBFB5F88E63BDE97B1FA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft Manifest number: 1773 Signing time: Fri 12 Dec 2025 11:00:38 +0000 Manifest this update: Fri 12 Dec 2025 11:00:38 +0000 Manifest next update: Sat 13 Dec 2025 11:00:38 +0000 Files and hashes: 1: ETzMLJ9E8ekQKvTuSVRndgg_ftE.roa (hash: zxZL9sGsfFQCpFwlHr+nLeuc9weJmZjmaUU+udBc04c=) 2: O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl (hash: tEJZe5bDrbnFtXiPwTDRnczbYCG3RmWZ1dWXaynD56g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:38:4d:d2:c3:de:bf:b5:f8:8e:63:bd:e9:7b:1f:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f Validity Not Before: Dec 12 11:00:38 2025 GMT Not After : Dec 13 11:00:38 2025 GMT Subject: CN=7541f43f28eb9cfe92997a0912cbc4c3c1fe42db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2e:91:67:c8:90:47:5d:1e:24:20:be:78:c1: 88:49:b9:12:58:2a:c1:22:81:9a:96:e2:95:06:93: 9c:45:96:f5:dc:13:1f:2f:f2:19:f1:c0:4e:3e:b0: f8:25:7a:96:48:f9:6c:9d:1b:ba:e8:9b:26:f1:c8: 5a:81:d2:fd:9d:2e:91:47:da:7d:c7:ab:9a:30:41: dd:26:cb:04:85:a6:a3:32:42:42:49:70:65:6e:68: a2:b4:7e:9a:95:af:21:da:a8:ab:3b:3e:d6:3f:3d: d1:6f:a5:95:d7:ce:4e:7e:7b:5f:95:1f:26:79:f3: 31:43:f2:f7:a4:c0:51:a8:50:b8:04:3d:d7:2d:b6: 47:a5:59:30:ae:f2:8e:55:c0:9b:e1:57:99:10:26: b6:9c:fc:0a:cb:77:16:14:28:84:ad:c6:28:64:2a: 51:f8:48:48:fc:e1:97:39:d7:93:9a:11:44:05:e1: 72:ab:73:30:3a:b5:fa:c1:2c:96:2c:a8:28:35:70: a0:0e:76:7f:36:cb:7b:8b:ec:2c:bc:98:ca:d4:5d: 8b:f6:53:92:34:a9:99:bc:ff:de:31:cd:9d:47:27: 24:63:c9:f4:b8:a6:65:72:92:4f:63:b3:13:58:80: ca:3d:27:b9:3a:c0:13:6e:68:a6:f1:3f:dc:95:48: b4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:41:F4:3F:28:EB:9C:FE:92:99:7A:09:12:CB:C4:C3:C1:FE:42:DB X509v3 Authority Key Identifier: keyid:3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:db:ba:2d:3a:58:89:9a:59:a7:fb:2e:92:27:11:45:19:db: c1:bb:b5:24:e9:00:ee:27:d3:98:f6:97:e9:23:99:2e:6a:0b: d1:e6:ee:6c:bf:e4:d2:3b:14:f1:af:84:a3:4d:6e:31:43:9b: 68:6d:16:d3:1c:ad:40:02:2e:2e:3b:8c:64:63:44:d8:2c:5c: f0:26:46:8f:6a:97:8c:87:2f:68:ff:77:41:11:37:97:c6:49: 71:05:f7:84:1e:fa:b8:35:4f:0e:1a:d6:a3:dd:35:14:f5:6a: 44:b1:44:08:26:76:84:24:8a:29:05:42:79:f4:8c:0b:7c:97: a3:21:61:5e:25:92:94:21:8a:1b:8a:6e:52:97:75:29:51:40: 87:dc:ee:43:0a:0a:1a:f1:ab:47:51:b8:e6:64:0c:70:9a:fb: 1f:d1:a9:95:98:37:60:e8:b0:e3:94:c5:c7:0b:94:9e:3c:e4: 84:28:c0:95:e7:66:13:1a:f7:0f:df:35:dd:6f:bf:64:64:f0: e4:6d:f3:c7:b1:5b:d5:32:42:d3:d5:1f:b3:09:e5:c7:99:be: 0f:43:f3:c2:aa:f0:81:ba:da:bd:ac:c2:3e:96:41:53:01:cf: 4c:b1:cf:dd:15:55:36:6a:f5:42:5a:d5:27:ca:c4:75:21:4f: 13:30:3c:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSOE3Sw96/tfiOY73pex+mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiOTRhMWQ4ODFkZDRiZWIyZmQzMWI3NmZhMGQ1ZDU4NWE5 YjIzOGYwHhcNMjUxMjEyMTEwMDM4WhcNMjUxMjEzMTEwMDM4WjAzMTEwLwYDVQQD Eyg3NTQxZjQzZjI4ZWI5Y2ZlOTI5OTdhMDkxMmNiYzRjM2MxZmU0MmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzS6RZ8iQR10eJCC+eMGISbkSWCrB IoGaluKVBpOcRZb13BMfL/IZ8cBOPrD4JXqWSPlsnRu66Jsm8chagdL9nS6RR9p9 x6uaMEHdJssEhaajMkJCSXBlbmiitH6ala8h2qirOz7WPz3Rb6WV185OfntflR8m efMxQ/L3pMBRqFC4BD3XLbZHpVkwrvKOVcCb4VeZECa2nPwKy3cWFCiErcYoZCpR +EhI/OGXOdeTmhFEBeFyq3MwOrX6wSyWLKgoNXCgDnZ/Nst7i+wsvJjK1F2L9lOS NKmZvP/eMc2dRyckY8n0uKZlcpJPY7MTWIDKPSe5OsATbmim8T/clUi0DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVB9D8o65z+kpl6CRLLxMPB/kLbMB8GA1UdIwQY MBaAFDuUodiB3UvrL9MbdvoNXVhamyOPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzVTaDJJSGRTLXN2MHh0Mi1nMWRXRnFiSTQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS83YzZiMmQtYWM0Mi00ODdlLTljMTkt MTYxODc3NmJkYWFlLzEvTzVTaDJJSGRTLXN2MHh0Mi1nMWRXRnFiSTQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS83YzZiMmQtYWM0Mi00ODdlLTljMTktMTYxODc3NmJkYWFl LzEvTzVTaDJJSGRTLXN2MHh0Mi1nMWRXRnFiSTQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVNu6LTpY iZpZp/sukicRRRnbwbu1JOkA7ifTmPaX6SOZLmoL0ebubL/k0jsU8a+Eo01uMUOb aG0W0xytQAIuLjuMZGNE2Cxc8CZGj2qXjIcvaP93QRE3l8ZJcQX3hB76uDVPDhrW o901FPVqRLFECCZ2hCSKKQVCefSMC3yXoyFhXiWSlCGKG4puUpd1KVFAh9zuQwoK GvGrR1G45mQMcJr7H9GplZg3YOiw45TFxwuUnjzkhCjAledmExr3D9813W+/ZGTw 5G3zx7Fb1TJC09Ufswnlx5m+D0PzwqrwgbravazCPpZBUwHPTLHP3RVVNmr1QlrV J8rEdSFPEzA8ZQ== -----END CERTIFICATE-----Generated at Fri Dec 12 13:21:18 2025 by rpki-client