This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft File: OtL3zCdTMJgzAxuolGSagM_7E-g.mft (raw, json) Hash identifier: BQcPGIXqPAvNgjvBjT6AjHjbVlRLtlmwxzWWzl/GMqk= Subject key identifier: 79:5D:C9:3F:89:71:6E:FE:73:97:52:38:69:CB:DE:81:60:59:F3:EB Authority key identifier: 3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8 Certificate issuer: /CN=3ad2f7cc2753309833031ba894649a80cffb13e8 Certificate serial: 019B4F2953F7C9FF789ECB14A66AB5CD9031 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft Manifest number: 1791 Signing time: Wed 24 Dec 2025 07:01:07 +0000 Manifest this update: Wed 24 Dec 2025 07:01:07 +0000 Manifest next update: Thu 25 Dec 2025 07:01:07 +0000 Files and hashes: 1: OtL3zCdTMJgzAxuolGSagM_7E-g.crl (hash: DhOPPSc08vmEYnui1bU6QLqth6Zhb+pdObxqQ74+/2E=) 2: u1VOczY0GtYqmMxkx1bvtbbyBno.roa (hash: ZYoGR8269MdLBwkunDrMw1B9ylh+XJUv3tEqHGtF+N8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 07:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:29:53:f7:c9:ff:78:9e:cb:14:a6:6a:b5:cd:90:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad2f7cc2753309833031ba894649a80cffb13e8 Validity Not Before: Dec 24 07:01:07 2025 GMT Not After : Dec 25 07:01:07 2025 GMT Subject: CN=795dc93f89716efe7397523869cbde816059f3eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:22:76:5d:df:ae:d8:53:c1:b8:ee:16:b8:da: da:aa:fa:b6:6c:69:7a:92:51:23:50:00:95:fd:81: 4b:d1:b6:56:18:b6:fb:a7:5b:a9:f6:36:f6:b1:b8: 45:56:dd:c9:a8:5a:5a:68:b9:3b:f2:a8:1b:34:17: bb:8d:64:14:78:3d:7b:90:54:58:fa:34:1e:91:57: 51:fc:54:7f:d9:2d:2f:1d:5f:5f:f5:2f:33:7f:e8: a2:21:82:ac:6a:95:be:2a:21:85:5c:42:27:a7:ec: c3:36:95:6d:4d:0f:04:d1:bc:b2:c8:0e:7a:65:42: 48:b2:da:85:82:a0:73:04:2a:c1:c4:0f:97:d0:d0: 16:b4:45:46:44:bf:3d:df:20:17:50:53:dc:24:ab: ab:d3:f2:87:2a:61:6d:d0:47:c6:21:e3:5c:4e:e5: 51:04:82:f0:56:a1:75:fc:02:e2:8a:f1:4e:f5:4e: 16:e3:c8:67:12:94:a2:e3:60:77:be:e4:85:ec:0e: fd:96:d6:7e:86:e6:ec:38:1c:44:13:9d:ee:95:4c: 0f:99:c6:44:12:07:57:bc:fb:ce:d6:c2:8b:b4:9d: 17:18:f0:88:ee:ab:b7:68:12:56:42:74:36:db:91: ab:4b:84:78:d8:84:02:e7:82:b3:69:74:32:b3:1d: 00:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:5D:C9:3F:89:71:6E:FE:73:97:52:38:69:CB:DE:81:60:59:F3:EB X509v3 Authority Key Identifier: keyid:3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:ff:c2:33:0e:1d:58:ec:84:fc:cf:16:a1:32:60:76:9f:8f: c2:8e:98:d9:2e:b7:a0:c5:ab:7f:63:e3:90:fe:16:b4:44:8e: 42:4e:a6:53:75:47:3f:94:43:92:e5:b7:c3:24:df:60:ad:d2: 84:16:b8:45:80:66:ea:48:de:99:35:2e:b9:6a:0c:b1:54:87: 8b:18:48:7d:b0:9e:e7:6d:fc:31:98:4e:04:48:f6:c2:24:6e: 25:95:4c:e0:1b:9b:94:26:ef:be:07:a7:f0:95:4c:3c:e8:03: d2:b2:ee:c4:a8:75:56:79:72:bb:b9:f7:9e:19:d2:31:9c:4a: 2b:99:df:f5:0f:8c:77:4e:d0:30:24:22:ef:45:50:34:8d:ad: 06:2d:f4:0c:59:be:06:bb:7b:a5:7d:7b:a0:b8:91:9d:d0:38: cf:8f:84:4a:75:fe:f4:22:01:42:74:6b:56:a8:84:52:22:80: c3:3e:5b:d3:3c:e2:fd:89:64:0f:25:f7:a5:0d:c6:11:f3:a7: 8b:a8:d7:72:4d:f1:67:0f:25:97:18:f1:4e:03:46:e5:45:b8: 07:86:b9:18:f8:8e:10:ea:d1:72:26:54:d1:ea:60:dc:f1:3a: 0a:56:bf:f1:71:1e:f0:96:d0:ba:8f:33:59:31:a1:84:65:76: be:07:31:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPKVP3yf94nssUpmq1zZAxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDJmN2NjMjc1MzMwOTgzMzAzMWJhODk0NjQ5YTgwY2Zm YjEzZTgwHhcNMjUxMjI0MDcwMTA3WhcNMjUxMjI1MDcwMTA3WjAzMTEwLwYDVQQD Eyg3OTVkYzkzZjg5NzE2ZWZlNzM5NzUyMzg2OWNiZGU4MTYwNTlmM2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSJ2Xd+u2FPBuO4WuNraqvq2bGl6 klEjUACV/YFL0bZWGLb7p1up9jb2sbhFVt3JqFpaaLk78qgbNBe7jWQUeD17kFRY +jQekVdR/FR/2S0vHV9f9S8zf+iiIYKsapW+KiGFXEInp+zDNpVtTQ8E0byyyA56 ZUJIstqFgqBzBCrBxA+X0NAWtEVGRL893yAXUFPcJKur0/KHKmFt0EfGIeNcTuVR BILwVqF1/ALiivFO9U4W48hnEpSi42B3vuSF7A79ltZ+hubsOBxEE53ulUwPmcZE EgdXvPvO1sKLtJ0XGPCI7qu3aBJWQnQ225GrS4R42IQC54KzaXQysx0AzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHldyT+JcW7+c5dSOGnL3oFgWfPrMB8GA1UdIwQY MBaAFDrS98wnUzCYMwMbqJRkmoDP+xPoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RMM3pDZFRNSmd6QXh1b2xHU2FnTV83RS1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82ZWJjMWMtNDJhYi00NTU5LTg0YjEt ZjZhZDkzMzBjNGIwLzEvT3RMM3pDZFRNSmd6QXh1b2xHU2FnTV83RS1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS82ZWJjMWMtNDJhYi00NTU5LTg0YjEtZjZhZDkzMzBjNGIw LzEvT3RMM3pDZFRNSmd6QXh1b2xHU2FnTV83RS1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhP/CMw4d WOyE/M8WoTJgdp+Pwo6Y2S63oMWrf2PjkP4WtESOQk6mU3VHP5RDkuW3wyTfYK3S hBa4RYBm6kjemTUuuWoMsVSHixhIfbCe5238MZhOBEj2wiRuJZVM4BublCbvvgen 8JVMPOgD0rLuxKh1Vnlyu7n3nhnSMZxKK5nf9Q+Md07QMCQi70VQNI2tBi30DFm+ Brt7pX17oLiRndA4z4+ESnX+9CIBQnRrVqiEUiKAwz5b0zzi/YlkDyX3pQ3GEfOn i6jXck3xZw8llxjxTgNG5UW4B4a5GPiOEOrRciZU0epg3PE6Cla/8XEe8JbQuo8z WTGhhGV2vgcxWw== -----END CERTIFICATE-----Generated at Wed Dec 24 10:34:42 2025 by rpki-client