This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft File: OSR_d6OuCvcerAMlZEn10pLP_XQ.mft (raw, json) Hash identifier: zaSbaYX8e3yMtk+Af6XV+1bklFoF1/M3PlU0yizGo8k= Subject key identifier: 36:14:4C:B3:9D:65:A1:AB:F9:99:9B:68:03:A3:6E:B1:29:A1:92:AD Authority key identifier: 39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74 Certificate issuer: /CN=39247f77a3ae0af71eac03256449f5d292cffd74 Certificate serial: 019B2363C5C2420DC0DC0F15B071EEE78D3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft Manifest number: 07F7 Signing time: Mon 15 Dec 2025 19:01:39 +0000 Manifest this update: Mon 15 Dec 2025 19:01:39 +0000 Manifest next update: Tue 16 Dec 2025 19:01:39 +0000 Files and hashes: 1: A52HcjjVvjURrnqIKzVJffIr5pg.roa (hash: 0khgPx2sOeKgtKjIWQMCspv9EOJEwLPaIfkqJUfbIZI=) 2: OSR_d6OuCvcerAMlZEn10pLP_XQ.crl (hash: 27oaVQKhWguDSoSuoEduDP2OH9tdED8/2M5F9VvaJuQ=) 3: hbbnLuZpD5go-VUHqMX6cwP0VYE.roa (hash: nw4SsVKZtCMAF0Lk44Bca7n8JsrQ2D2s1YmNiP6JfI0=) 4: m07MDAfpyBy-79ZtRPrjp1nHgUM.roa (hash: nt5wNRLp/3eGdwl0jwqVp6q4VVV8Q+vzoY7sROczSbU=) 5: teZ2j_hniWXjQJK5Wyibz3szGe4.roa (hash: AAisqmOnDvymL41tgHnrdsHw2NsaGEhx42Vrfhr3Fe8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 19:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:63:c5:c2:42:0d:c0:dc:0f:15:b0:71:ee:e7:8d:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39247f77a3ae0af71eac03256449f5d292cffd74 Validity Not Before: Dec 15 19:01:39 2025 GMT Not After : Dec 16 19:01:39 2025 GMT Subject: CN=36144cb39d65a1abf9999b6803a36eb129a192ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:21:f5:f2:25:a6:4b:73:14:86:db:a5:a3:f2: 47:bf:b3:f1:d1:21:3f:95:70:20:88:4e:93:6d:53: a7:53:17:13:3c:44:ec:b3:b4:70:bf:0f:30:6d:07: 51:42:3e:2a:09:46:1d:8c:a2:42:01:9d:b4:75:83: da:4f:28:f2:76:76:52:aa:5c:07:de:e4:4d:9b:0f: 88:b6:70:d9:c6:0f:33:d4:60:95:b4:8f:c6:6c:9e: e0:3c:e7:67:67:ab:d3:00:0a:38:48:78:a9:f9:b9: d1:50:e6:7d:7e:78:5e:89:ec:5e:69:1d:d3:c6:99: ef:5a:6d:c0:e0:8a:29:46:42:cb:bb:75:81:01:a1: 1e:90:30:4d:13:ff:4d:90:ed:4e:1d:91:09:e4:b1: 1f:66:40:81:67:8c:9c:b9:41:6b:a5:26:6f:47:3e: b1:5f:9e:ec:5f:6e:a9:1e:8a:c9:5f:be:15:3c:6b: fe:d2:09:19:35:65:a4:9d:b7:d4:98:30:05:f8:09: 60:6d:06:81:94:05:2f:df:b5:e2:9b:55:c7:54:0b: b7:c0:c2:38:55:16:51:0c:1f:09:bf:4f:ad:32:5f: 3f:3d:b2:62:79:ad:6b:54:5c:87:d9:c1:78:91:1c: 64:0d:fa:20:2c:61:c8:63:72:25:41:d9:85:ac:94: 95:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:14:4C:B3:9D:65:A1:AB:F9:99:9B:68:03:A3:6E:B1:29:A1:92:AD X509v3 Authority Key Identifier: keyid:39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:21:1c:45:ed:b4:3a:c2:8a:25:4b:55:5b:33:42:c5:21:7d: 6b:20:59:d5:af:b0:c8:ab:64:8c:2d:9c:d9:2b:45:32:01:68: 35:8f:93:05:65:f3:2f:d1:04:df:cf:eb:ce:79:9a:86:61:1f: 24:05:e9:31:b8:55:cc:09:da:90:76:f6:3b:2b:54:72:93:b0: 76:e5:61:17:c3:82:f9:b2:3c:5b:b3:3c:30:9a:29:57:02:08: 12:e1:b1:f1:4a:80:24:ec:a2:e9:38:d5:47:09:bc:cb:7b:53: ae:80:e9:8b:4f:45:83:5e:36:4f:56:4d:95:c7:96:3b:8d:47: e8:b1:fc:45:98:56:27:6f:d4:5d:e1:a8:e4:af:af:1d:73:8b: 39:b3:b0:20:75:3c:d6:ab:54:35:32:d9:0b:fc:38:6b:ea:80: 13:4b:ca:89:65:c4:cc:de:cd:9e:06:52:a0:b7:e4:78:02:a8: 9c:88:3e:49:59:b8:8c:b4:0b:13:4c:87:5b:52:aa:78:5e:47: 47:75:28:23:4d:c3:7e:92:57:33:bd:84:ec:c8:7a:a0:92:d2: 01:c5:28:bb:96:c1:18:f0:f5:f7:8a:ab:57:a9:96:1b:7f:90: bb:e5:7d:18:6e:a1:db:8e:25:53:aa:13:cd:83:5a:bc:19:eb: a1:45:02:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjY8XCQg3A3A8VsHHu5406MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MjQ3Zjc3YTNhZTBhZjcxZWFjMDMyNTY0NDlmNWQyOTJj ZmZkNzQwHhcNMjUxMjE1MTkwMTM5WhcNMjUxMjE2MTkwMTM5WjAzMTEwLwYDVQQD EygzNjE0NGNiMzlkNjVhMWFiZjk5OTliNjgwM2EzNmViMTI5YTE5MmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSH18iWmS3MUhtulo/JHv7Px0SE/ lXAgiE6TbVOnUxcTPETss7Rwvw8wbQdRQj4qCUYdjKJCAZ20dYPaTyjydnZSqlwH 3uRNmw+ItnDZxg8z1GCVtI/GbJ7gPOdnZ6vTAAo4SHip+bnRUOZ9fnheiexeaR3T xpnvWm3A4IopRkLLu3WBAaEekDBNE/9NkO1OHZEJ5LEfZkCBZ4ycuUFrpSZvRz6x X57sX26pHorJX74VPGv+0gkZNWWknbfUmDAF+AlgbQaBlAUv37Xim1XHVAu3wMI4 VRZRDB8Jv0+tMl8/PbJiea1rVFyH2cF4kRxkDfogLGHIY3IlQdmFrJSVEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDYUTLOdZaGr+ZmbaAOjbrEpoZKtMB8GA1UdIwQY MBaAFDkkf3ejrgr3HqwDJWRJ9dKSz/10MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1NSX2Q2T3VDdmNlckFNbFpFbjEwcExQX1hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84MmVkOWMtN2MxMy00OGI5LWE4ODYt Y2Q2NmFkNTM0ODEyLzEvT1NSX2Q2T3VDdmNlckFNbFpFbjEwcExQX1hRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi84MmVkOWMtN2MxMy00OGI5LWE4ODYtY2Q2NmFkNTM0ODEy LzEvT1NSX2Q2T3VDdmNlckFNbFpFbjEwcExQX1hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGiEcRe20 OsKKJUtVWzNCxSF9ayBZ1a+wyKtkjC2c2StFMgFoNY+TBWXzL9EE38/rznmahmEf JAXpMbhVzAnakHb2OytUcpOwduVhF8OC+bI8W7M8MJopVwIIEuGx8UqAJOyi6TjV Rwm8y3tTroDpi09Fg142T1ZNlceWO41H6LH8RZhWJ2/UXeGo5K+vHXOLObOwIHU8 1qtUNTLZC/w4a+qAE0vKiWXEzN7NngZSoLfkeAKonIg+SVm4jLQLE0yHW1KqeF5H R3UoI03DfpJXM72E7Mh6oJLSAcUou5bBGPD194qrV6mWG3+Qu+V9GG6h244lU6oT zYNavBnroUUC/w== -----END CERTIFICATE-----Generated at Tue Dec 16 04:03:26 2025 by rpki-client