This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft File: Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft (raw, json) Hash identifier: 14De/ACZF36XdRrohLsyGqDHbxU8RORx19XX/ARE9t4= Subject key identifier: DA:95:64:56:C5:29:09:C0:F9:63:EC:17:AB:B2:78:68:3A:DF:AA:2D Authority key identifier: 3A:DE:A4:B7:AF:8C:CE:5C:FD:37:75:CB:01:FB:97:C4:F9:51:A9:A2 Certificate issuer: /CN=3adea4b7af8cce5cfd3775cb01fb97c4f951a9a2 Certificate serial: 019B4693A12F6C4BFAFCC861CADAAB7FCA41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft Manifest number: 0329 Signing time: Mon 22 Dec 2025 15:00:38 +0000 Manifest this update: Mon 22 Dec 2025 15:00:38 +0000 Manifest next update: Tue 23 Dec 2025 15:00:38 +0000 Files and hashes: 1: NR0WsT059Uu9ocKkEY9pXlrin1E.roa (hash: VV0hNdxr41R7/bkmPoA35nvmhlKGJglGwfeyHr+U+LY=) 2: Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl (hash: KBKrN0cepJSlMvvFllUIsstgogxRb0dqyPU6wvQboOA=) 3: SEh_0GqoSaiRBqWseUujp9ajyxU.roa (hash: 4qBD/oh8RDMtbEgS97ZhV1TCABNjw7BvgNSejlDS+ZM=) 4: g6a9uq2KRc9wYONVhtFPPZGaBr4.roa (hash: Jcii24w5hELShXLMXhNP2/DuSUjwnJEfN84e/8CYORI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:93:a1:2f:6c:4b:fa:fc:c8:61:ca:da:ab:7f:ca:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3adea4b7af8cce5cfd3775cb01fb97c4f951a9a2 Validity Not Before: Dec 22 15:00:38 2025 GMT Not After : Dec 23 15:00:38 2025 GMT Subject: CN=da956456c52909c0f963ec17abb278683adfaa2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:09:d7:a3:5b:07:e7:ea:ed:f8:ec:00:5d:ab: fb:be:73:2d:c9:b8:09:80:a6:62:b2:0e:2b:d7:e0: a2:cd:a1:ca:c0:51:55:b4:cf:22:26:ab:52:27:3c: 9a:82:56:57:eb:09:e9:b1:6d:99:d7:30:5d:e9:f1: 5f:f3:2b:95:ae:9d:10:e0:61:9e:13:98:c2:42:ec: 71:c7:d6:8f:17:96:ad:23:54:38:61:49:93:c3:05: 22:e5:13:bd:d8:f6:fe:64:a8:10:16:9f:fc:27:63: 85:88:22:cd:7a:bf:d1:bd:52:53:e0:8e:47:94:e0: 0f:d9:a3:13:87:e7:74:28:29:a1:89:df:f5:b6:be: ae:1b:df:d7:f7:1f:29:94:e0:ce:0e:fc:b8:b2:bc: 54:d6:54:19:fc:54:3d:7b:ff:b8:e1:76:35:29:c3: b3:e4:84:e9:16:4b:de:75:ff:6c:f3:f0:ce:fa:c3: ac:2b:ee:e0:2a:c7:e8:62:e0:6a:a3:4d:a1:bb:d1: b4:c3:ac:d6:91:ba:fd:d5:e8:e6:e1:5e:39:7b:fb: ee:a4:aa:ee:ac:ab:f0:fa:35:ef:95:df:16:88:e0: ba:e2:13:5f:ef:d3:f9:a3:66:f0:bb:c5:52:86:b3: 21:2d:3e:e4:d4:24:c9:9b:f1:7e:de:d1:ab:ec:a6: 04:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:95:64:56:C5:29:09:C0:F9:63:EC:17:AB:B2:78:68:3A:DF:AA:2D X509v3 Authority Key Identifier: keyid:3A:DE:A4:B7:AF:8C:CE:5C:FD:37:75:CB:01:FB:97:C4:F9:51:A9:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:d3:f0:d7:6e:21:6e:f6:6c:6f:f4:d5:7b:28:cf:85:de:29: a9:6b:19:9f:41:a5:bd:02:82:c6:ee:d6:df:ca:e0:d1:3f:b1: 08:22:ff:4e:58:8f:c2:24:a6:c4:af:4c:0a:05:40:ff:08:09: 34:69:bc:7d:f0:93:2d:5c:57:d0:03:8e:86:0e:95:ee:1b:1d: e2:94:e6:55:a3:78:27:45:cb:e5:da:ab:a2:a9:50:63:14:e4: db:44:d8:5c:50:80:96:a3:02:ab:86:e8:43:15:cc:83:ff:87: 45:27:74:7b:6b:5e:2a:76:74:91:02:8d:4c:aa:4f:f0:43:49: cf:63:89:9a:8e:be:1b:ef:24:a4:56:6a:12:ca:98:99:7e:11: 0f:d4:62:4f:dd:8b:b7:13:24:5f:02:6f:2c:3e:f9:07:a1:21: 91:15:6f:89:e9:24:2f:66:93:af:a8:fe:ce:60:7c:05:c9:90: c2:3a:a8:ba:91:af:d6:11:f8:7b:d1:47:66:8e:8a:fe:6a:ee: a9:0c:e1:17:93:58:47:aa:11:3f:92:0d:94:68:86:c9:c2:7e: b5:98:f4:4d:02:e7:ec:bd:42:92:81:34:7c:37:67:d6:1e:cb: f8:ad:47:44:8e:99:ea:c4:fb:c3:48:49:54:55:8d:1f:71:27: 20:2a:e8:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGk6EvbEv6/Mhhytqrf8pBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZGVhNGI3YWY4Y2NlNWNmZDM3NzVjYjAxZmI5N2M0Zjk1 MWE5YTIwHhcNMjUxMjIyMTUwMDM4WhcNMjUxMjIzMTUwMDM4WjAzMTEwLwYDVQQD EyhkYTk1NjQ1NmM1MjkwOWMwZjk2M2VjMTdhYmIyNzg2ODNhZGZhYTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQnXo1sH5+rt+OwAXav7vnMtybgJ gKZisg4r1+CizaHKwFFVtM8iJqtSJzyaglZX6wnpsW2Z1zBd6fFf8yuVrp0Q4GGe E5jCQuxxx9aPF5atI1Q4YUmTwwUi5RO92Pb+ZKgQFp/8J2OFiCLNer/RvVJT4I5H lOAP2aMTh+d0KCmhid/1tr6uG9/X9x8plODODvy4srxU1lQZ/FQ9e/+44XY1KcOz 5ITpFkvedf9s8/DO+sOsK+7gKsfoYuBqo02hu9G0w6zWkbr91ejm4V45e/vupKru rKvw+jXvld8WiOC64hNf79P5o2bwu8VShrMhLT7k1CTJm/F+3tGr7KYEwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNqVZFbFKQnA+WPsF6uyeGg636otMB8GA1UdIwQY MBaAFDrepLevjM5c/Td1ywH7l8T5UamiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3Q2a3Q2LU16bHo5TjNYTEFmdVh4UGxScWFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8xMjMxMjQtZWY2Ni00OGQxLTkxZDAt ZjBkMTE5YzUyN2ZmLzEvT3Q2a3Q2LU16bHo5TjNYTEFmdVh4UGxScWFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8xMjMxMjQtZWY2Ni00OGQxLTkxZDAtZjBkMTE5YzUyN2Zm LzEvT3Q2a3Q2LU16bHo5TjNYTEFmdVh4UGxScWFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtdPw124h bvZsb/TVeyjPhd4pqWsZn0GlvQKCxu7W38rg0T+xCCL/TliPwiSmxK9MCgVA/wgJ NGm8ffCTLVxX0AOOhg6V7hsd4pTmVaN4J0XL5dqroqlQYxTk20TYXFCAlqMCq4bo QxXMg/+HRSd0e2teKnZ0kQKNTKpP8ENJz2OJmo6+G+8kpFZqEsqYmX4RD9RiT92L txMkXwJvLD75B6EhkRVviekkL2aTr6j+zmB8BcmQwjqoupGv1hH4e9FHZo6K/mru qQzhF5NYR6oRP5INlGiGycJ+tZj0TQLn7L1CkoE0fDdn1h7L+K1HRI6Z6sT7w0hJ VFWNH3EnICrouA== -----END CERTIFICATE-----Generated at Tue Dec 23 00:03:28 2025 by rpki-client