This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft File: OsVr3pY-73wlC8hDxpXKP-B_usQ.mft (raw, json) Hash identifier: ID5qK5zTPIG6Qmg7TYhpbrmHCBf2BFFPp82Z0P5k9qM= Subject key identifier: F1:19:02:21:AB:C6:F4:25:D2:8F:F3:DB:A7:49:65:26:14:14:9B:7E Authority key identifier: 3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4 Certificate issuer: /CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4 Certificate serial: 019AABDE16BC276D720AB3B97A04C06DE357 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft Manifest number: 0822 Signing time: Sat 22 Nov 2025 14:00:49 +0000 Manifest this update: Sat 22 Nov 2025 14:00:49 +0000 Manifest next update: Sun 23 Nov 2025 14:00:49 +0000 Files and hashes: 1: 0CQ87gtDkmQ-YdioNl7SCmI2_Jg.roa (hash: vbvFk3kiJv5WUL7DS9QfsY/2+9s/5EIx/LnubRQ+4yA=) 2: OCRKDcURj8xaIImY8cNKFLg3_eE.roa (hash: HUOGD3LHhRpZmpPeYppPKP+b2mI5WdrLoJBrL3wQ2O0=) 3: OsVr3pY-73wlC8hDxpXKP-B_usQ.crl (hash: VHTq6OnDcCeejtqcZm0tbvbFbqBW6r9Cg91jYlIgEZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ab:de:16:bc:27:6d:72:0a:b3:b9:7a:04:c0:6d:e3:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4 Validity Not Before: Nov 22 14:00:49 2025 GMT Not After : Nov 23 14:00:49 2025 GMT Subject: CN=f1190221abc6f425d28ff3dba749652614149b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:54:37:36:ea:26:9c:af:ec:77:1d:d8:53:de: 16:8c:90:af:e3:71:68:0f:db:13:d8:11:9e:6d:88: fc:31:0f:fd:4e:9a:bd:14:15:4d:93:21:e0:92:e2: 81:3d:b6:ef:34:73:07:69:ac:ee:54:b2:dd:1c:95: 4e:12:b2:0f:8d:8e:00:57:13:34:3f:7c:dd:85:72: 53:48:4f:3b:24:38:53:14:47:4c:a2:78:9f:c8:c0: 10:1c:c4:c4:61:d5:58:c7:59:7a:c0:e1:a2:17:6c: 53:ab:b7:a9:4c:d3:71:7c:5e:5e:1d:75:76:62:9b: e8:e3:ab:7f:64:22:6c:c5:1f:2c:ed:91:9c:bf:74: 83:65:bd:e8:2d:16:06:35:04:8c:23:67:bf:65:04: 32:70:a5:08:f1:fa:af:d7:6b:94:d3:64:93:ef:c0: 00:f2:50:1e:dd:41:65:8e:d3:5a:b1:5e:79:10:af: 31:31:1c:15:9e:76:83:b3:ab:5c:dc:00:97:14:99: 20:ef:f8:58:fe:66:7d:4a:86:ed:56:68:82:4c:9b: c8:27:26:5f:49:6e:b7:b8:82:c3:c4:09:16:1b:07: b4:8e:d3:d5:ff:79:0d:d9:fd:1a:07:e2:c6:83:d9: 97:8a:57:6a:1d:c8:11:7d:27:0c:79:4d:d7:cc:0b: 85:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:19:02:21:AB:C6:F4:25:D2:8F:F3:DB:A7:49:65:26:14:14:9B:7E X509v3 Authority Key Identifier: keyid:3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:d9:0d:a7:b3:23:12:38:19:01:2e:23:6c:b5:9b:57:fc:f7: cb:79:19:85:0a:e0:3a:1e:84:fe:ae:2d:0b:c2:88:5c:10:2f: 69:5a:6e:90:12:2c:af:59:3a:88:cc:d8:f8:82:a5:c8:8e:c2: c7:ce:e6:e1:c9:fe:4d:61:68:e2:ec:5b:a5:d7:6f:26:2c:5c: 22:49:2e:ec:cb:f1:d2:62:31:0a:1b:c9:6f:20:e3:62:35:d8: 8b:06:dd:ee:4e:1a:8c:af:ea:eb:fc:4e:34:df:cd:7c:ce:33: 0b:b6:29:73:90:8e:9f:ca:50:b1:2a:4c:35:61:e7:5c:3c:7e: 30:03:5c:f4:9d:0f:9b:c2:4f:f0:05:b8:9e:03:fc:de:66:db: 5b:71:2c:ff:d1:6e:f4:98:8b:e3:a9:ab:c1:d7:ed:8e:d0:e1: 35:1b:75:b5:fd:2c:7a:0c:66:57:9d:b1:84:be:b1:42:aa:57: e8:42:a7:c5:a8:23:0e:29:11:3f:0f:0d:f9:57:31:c7:a4:4b: 1e:33:11:7f:18:06:49:5b:cf:41:8b:f3:34:3e:65:6d:de:31: 25:0e:01:a2:8b:0c:ac:02:b7:24:9e:4d:b9:6f:18:a8:18:5e: 9a:e1:92:96:31:34:35:7a:61:9a:bd:32:f0:9a:4b:b4:54:35: 91:d4:df:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqr3ha8J21yCrO5egTAbeNXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhYzU2YmRlOTYzZWVmN2MyNTBiYzg0M2M2OTVjYTNmZTA3 ZmJhYzQwHhcNMjUxMTIyMTQwMDQ5WhcNMjUxMTIzMTQwMDQ5WjAzMTEwLwYDVQQD EyhmMTE5MDIyMWFiYzZmNDI1ZDI4ZmYzZGJhNzQ5NjUyNjE0MTQ5YjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVQ3NuomnK/sdx3YU94WjJCv43Fo D9sT2BGebYj8MQ/9Tpq9FBVNkyHgkuKBPbbvNHMHaazuVLLdHJVOErIPjY4AVxM0 P3zdhXJTSE87JDhTFEdMonifyMAQHMTEYdVYx1l6wOGiF2xTq7epTNNxfF5eHXV2 Ypvo46t/ZCJsxR8s7ZGcv3SDZb3oLRYGNQSMI2e/ZQQycKUI8fqv12uU02ST78AA 8lAe3UFljtNasV55EK8xMRwVnnaDs6tc3ACXFJkg7/hY/mZ9SobtVmiCTJvIJyZf SW63uILDxAkWGwe0jtPV/3kN2f0aB+LGg9mXildqHcgRfScMeU3XzAuFJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPEZAiGrxvQl0o/z26dJZSYUFJt+MB8GA1UdIwQY MBaAFDrFa96WPu98JQvIQ8aVyj/gf7rEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3NWcjNwWS03M3dsQzhoRHhwWEtQLUJfdXNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8wZGNmOTgtYThkMi00NmMwLWI3Y2It Y2U5YzlmM2FhODU1LzEvT3NWcjNwWS03M3dsQzhoRHhwWEtQLUJfdXNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8wZGNmOTgtYThkMi00NmMwLWI3Y2ItY2U5YzlmM2FhODU1 LzEvT3NWcjNwWS03M3dsQzhoRHhwWEtQLUJfdXNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX9kNp7Mj EjgZAS4jbLWbV/z3y3kZhQrgOh6E/q4tC8KIXBAvaVpukBIsr1k6iMzY+IKlyI7C x87m4cn+TWFo4uxbpddvJixcIkku7Mvx0mIxChvJbyDjYjXYiwbd7k4ajK/q6/xO NN/NfM4zC7Ypc5COn8pQsSpMNWHnXDx+MANc9J0Pm8JP8AW4ngP83mbbW3Es/9Fu 9JiL46mrwdftjtDhNRt1tf0segxmV52xhL6xQqpX6EKnxagjDikRPw8N+Vcxx6RL HjMRfxgGSVvPQYvzND5lbd4xJQ4BoosMrAK3JJ5NuW8YqBhemuGSljE0NXphmr0y 8JpLtFQ1kdTfSw== -----END CERTIFICATE-----Generated at Sat Nov 22 21:44:53 2025 by rpki-client