This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft File: oSCGrcccvsWuoqH4lU36ZCtTDDs.mft (raw, json) Hash identifier: 6a0jpBAQ+dDDNvB4zQLeLoVQ/dVG5WLzIJwGmAVDDUo= Subject key identifier: 14:AB:96:5D:B4:08:F9:2D:32:BF:A0:47:22:EC:F8:C0:F4:44:B7:29 Authority key identifier: A1:20:86:AD:C7:1C:BE:C5:AE:A2:A1:F8:95:4D:FA:64:2B:53:0C:3B Certificate issuer: /CN=a12086adc71cbec5aea2a1f8954dfa642b530c3b Certificate serial: 019B334469B5A9F738A0D2FFCB351B938223 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft Manifest number: 1785 Signing time: Thu 18 Dec 2025 21:01:19 +0000 Manifest this update: Thu 18 Dec 2025 21:01:19 +0000 Manifest next update: Fri 19 Dec 2025 21:01:19 +0000 Files and hashes: 1: _C22KYJjbT7k9Y0F086sSatuYjQ.roa (hash: sGeEeSXLg1Z6VuPUdF3Kx1VfqYaLdwKkzR5hHIgdTMo=) 2: oSCGrcccvsWuoqH4lU36ZCtTDDs.crl (hash: 3i9tqZxpjV86tV9D97kLGs06vnxw7fPuej5ZIyz+0XI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:69:b5:a9:f7:38:a0:d2:ff:cb:35:1b:93:82:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a12086adc71cbec5aea2a1f8954dfa642b530c3b Validity Not Before: Dec 18 21:01:19 2025 GMT Not After : Dec 19 21:01:19 2025 GMT Subject: CN=14ab965db408f92d32bfa04722ecf8c0f444b729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e8:35:32:11:93:3b:50:ea:88:48:ad:63:8c: a7:c0:92:db:27:5e:cc:91:ee:7f:24:ee:d8:9a:46: bd:e9:b1:24:e2:10:da:70:4b:97:bc:bd:02:5b:ec: a4:9d:6f:0e:58:13:10:af:cb:a4:40:5d:2f:1e:ba: f5:24:95:51:fb:c2:e2:09:1f:84:68:2f:bb:82:ca: e0:4d:25:77:20:23:7e:f0:4d:ea:0e:34:e2:e8:91: 8d:48:6b:85:5b:c6:fc:d1:6f:7e:a6:af:b1:0c:b1: 5b:02:b9:8c:34:ad:88:b6:f2:e9:2e:40:52:15:d2: f6:8d:de:6c:6f:aa:ff:f4:3b:0d:54:9d:87:de:d9: 72:29:dd:81:b5:c7:43:10:ed:1d:b0:71:e3:71:a5: f9:8b:e5:71:eb:dc:77:8e:eb:fa:76:64:0f:0f:ef: 7c:57:0e:66:e4:dd:09:ba:91:ca:52:72:07:e0:fc: cf:c4:73:77:04:61:64:44:79:d2:1f:36:ef:6d:3c: b3:15:8f:34:f0:8a:34:5b:0b:8b:c7:36:8f:1e:7d: 1a:56:6b:9b:ec:50:f2:75:27:c1:82:a4:fe:9f:89: f5:2f:ff:44:18:97:47:1a:7b:aa:03:89:95:be:1d: 04:7a:f3:71:3a:8f:70:cf:35:7a:9f:a2:4d:68:47: cf:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:AB:96:5D:B4:08:F9:2D:32:BF:A0:47:22:EC:F8:C0:F4:44:B7:29 X509v3 Authority Key Identifier: keyid:A1:20:86:AD:C7:1C:BE:C5:AE:A2:A1:F8:95:4D:FA:64:2B:53:0C:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:1e:16:30:54:f3:13:13:1b:03:17:57:14:2c:3e:4c:fd:96: 3b:0d:4d:23:5e:95:5d:29:f5:cb:fd:9f:11:ab:73:f8:ec:eb: f8:19:92:79:c4:d4:83:1e:72:3d:e5:f4:e5:66:3f:5e:73:bc: 70:87:52:c2:d5:3d:4b:e4:5b:4c:fd:d1:a5:3a:f2:80:66:f0: 80:01:5a:e9:82:d7:47:86:56:72:12:20:1b:0f:14:46:44:a9: 27:cd:d2:84:94:2e:63:d8:f1:c2:99:fa:50:de:7d:1b:11:4b: 3c:39:38:5c:81:56:77:b2:59:5f:00:0a:1b:1d:2e:b6:55:08: 43:f2:42:41:47:bc:9d:2a:09:d6:e2:79:84:9f:9e:21:66:1f: 99:72:39:11:19:ca:71:54:ac:b9:ae:94:35:a1:1f:f3:84:65: bc:57:f6:a7:3f:01:43:cd:db:fb:0e:6f:fe:e8:a4:2e:48:92: 38:e0:cb:d4:3a:c0:c0:3b:1d:10:ef:c0:ca:99:46:5f:04:be: 5a:80:ec:f0:ef:7b:f3:96:c4:9f:c1:7a:7a:11:ff:31:ce:49: df:ff:db:62:e3:d8:5d:21:25:fb:59:c5:9b:5d:6a:af:de:36: fc:b3:90:9d:88:25:51:e4:dd:04:59:76:97:6e:71:24:2d:35: 88:37:93:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRGm1qfc4oNL/yzUbk4IjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMjA4NmFkYzcxY2JlYzVhZWEyYTFmODk1NGRmYTY0MmI1 MzBjM2IwHhcNMjUxMjE4MjEwMTE5WhcNMjUxMjE5MjEwMTE5WjAzMTEwLwYDVQQD EygxNGFiOTY1ZGI0MDhmOTJkMzJiZmEwNDcyMmVjZjhjMGY0NDRiNzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeg1MhGTO1DqiEitY4ynwJLbJ17M ke5/JO7Ymka96bEk4hDacEuXvL0CW+yknW8OWBMQr8ukQF0vHrr1JJVR+8LiCR+E aC+7gsrgTSV3ICN+8E3qDjTi6JGNSGuFW8b80W9+pq+xDLFbArmMNK2ItvLpLkBS FdL2jd5sb6r/9DsNVJ2H3tlyKd2BtcdDEO0dsHHjcaX5i+Vx69x3juv6dmQPD+98 Vw5m5N0JupHKUnIH4PzPxHN3BGFkRHnSHzbvbTyzFY808Io0WwuLxzaPHn0aVmub 7FDydSfBgqT+n4n1L/9EGJdHGnuqA4mVvh0EevNxOo9wzzV6n6JNaEfPVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBSrll20CPktMr+gRyLs+MD0RLcpMB8GA1UdIwQY MBaAFKEghq3HHL7FrqKh+JVN+mQrUww7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1NDR3JjY2N2c1d1b3FINGxVMzZaQ3RURERzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC82ZDlhMDItZTQyZC00MmUzLWFmMTMt NDg1YTkyYmI5YmEzLzEvb1NDR3JjY2N2c1d1b3FINGxVMzZaQ3RURERzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC82ZDlhMDItZTQyZC00MmUzLWFmMTMtNDg1YTkyYmI5YmEz LzEvb1NDR3JjY2N2c1d1b3FINGxVMzZaQ3RURERzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALR4WMFTz ExMbAxdXFCw+TP2WOw1NI16VXSn1y/2fEatz+Ozr+BmSecTUgx5yPeX05WY/XnO8 cIdSwtU9S+RbTP3RpTrygGbwgAFa6YLXR4ZWchIgGw8URkSpJ83ShJQuY9jxwpn6 UN59GxFLPDk4XIFWd7JZXwAKGx0utlUIQ/JCQUe8nSoJ1uJ5hJ+eIWYfmXI5ERnK cVSsua6UNaEf84RlvFf2pz8BQ83b+w5v/uikLkiSOODL1DrAwDsdEO/AyplGXwS+ WoDs8O9785bEn8F6ehH/Mc5J3//bYuPYXSEl+1nFm11qr942/LOQnYglUeTdBFl2 l25xJC01iDeT2Q== -----END CERTIFICATE-----Generated at Fri Dec 19 03:43:17 2025 by rpki-client