This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft File: Otc0z5DHc0KIBrloIJUVuRSDGp0.mft (raw, json) Hash identifier: GwgO4KMvDEgJTFdHcwtCLd70C0tXVYOx+0asWkczTg8= Subject key identifier: F8:D6:FB:64:52:97:E5:06:98:5B:E6:26:16:32:8D:77:1D:9E:45:EC Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d Certificate serial: 019B3A587CC17170AA9CD6F9E52FFAAEF6C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft Manifest number: 17A4 Signing time: Sat 20 Dec 2025 06:00:36 +0000 Manifest this update: Sat 20 Dec 2025 06:00:36 +0000 Manifest next update: Sun 21 Dec 2025 06:00:36 +0000 Files and hashes: 1: 2NYdjjFKUwwAHXr7ubSJv8Kzg8g.roa (hash: kjplcNAq1JXoQgnY61zJpj1+5jIDXxWAT5fT5oin7qk=) 2: AF-KFPYoLrR_wnL0SE_zW6WshRE.roa (hash: z49PjeXPIBQhRQUNgU9fm0U8o2Eum7mravj6VvfHLII=) 3: Otc0z5DHc0KIBrloIJUVuRSDGp0.crl (hash: vPHu6aHTFQDXE6oxXujjgRjVNuEC23MAAZyZOkSOqkk=) 4: VIvJR-ELjPDDNwtDAs7jPXPRVS8.roa (hash: xlYWOAlcQ9qUm1X3p6cNrDPlijzSwOQVXOe0gD7Wm78=) 5: WCC9rTSbJ_Cq0gmrQEQG46tRbpQ.roa (hash: VkHV+4ebPs26e57T+NHLP6p9bqcsmEKUplaKOzXFS/4=) 6: apLqK898oR7RE-dAFEvdyErBOzE.roa (hash: 7wPWjmBIQU48S3GSQT90DN//sDuxGXlKRA7f0n/Hjc8=) 7: beYTq1ZSU6CkOYAx7ryqD6bd3cM.roa (hash: x3+IsuLxOdLQwSExJVIL+EzcT73OO7RISZtN+IgQDrQ=) 8: d3jC5FrVCU6deYGz56A8xH8Tz24.roa (hash: EEf3EKHXGl/MGjvhaDBjNExCSWB1bA3J+U/K+9OLzcQ=) 9: eFAtBNJzls8AgaaXT8fjcCX17mA.roa (hash: GPQ9iMR4UR3PGXp7FlfdeNJSrFumQ8WzN02VnHoIJ84=) 10: fmuUqwHIE4LJQQIBDK_3JI3axjw.roa (hash: jgYvNn+KWNnN7BXATe+H2BiIlAYgwP4SHTyKXfV03HU=) 11: m8epfX6ALey9mozyTLJ0ovC6F2E.roa (hash: nEswDzlmuc7WOVjzf1OqhYzhCng69m/AkqBFVEn5Jd8=) 12: uQXqHDwD39ncADiPwLCFwCaOFoE.roa (hash: 6dohaywgNPrlc422aBBS3H3acbsvFO8x4A1z0WMis3g=) 13: vpHvJjjgw4O3Rz8r2ZFr25OMuek.roa (hash: DjXvcuXor+t9vZEtEo50/bWiWyQCM6LNcDnznEPg0tw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:58:7c:c1:71:70:aa:9c:d6:f9:e5:2f:fa:ae:f6:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad734cf90c773428806b968209515b914831a9d Validity Not Before: Dec 20 06:00:36 2025 GMT Not After : Dec 21 06:00:36 2025 GMT Subject: CN=f8d6fb645297e506985be62616328d771d9e45ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:bb:a5:28:a7:2b:eb:e5:03:90:1c:5e:e2:b4: 3f:3d:16:de:b9:86:6e:d5:f3:74:3a:49:b1:c9:35: dc:99:98:2d:cf:16:33:49:26:57:e1:2e:f7:d6:7f: 15:b7:b6:8c:a8:cd:2e:29:25:2e:19:dc:b2:d8:74: fe:7d:65:ee:da:f7:2f:6e:7d:2c:90:ca:db:84:aa: 2e:8f:9f:50:9e:3b:fe:27:1b:fa:00:e6:52:58:1e: b9:cb:79:4a:56:88:37:62:2c:fb:a8:8d:61:b7:a4: 3e:2d:0a:d9:86:32:f8:55:d5:ab:32:1a:a8:e7:ea: 85:d5:18:1a:f1:8f:88:be:70:18:80:5f:c0:3e:0b: 18:84:bb:48:69:9e:0b:e2:a2:8b:c9:ff:a6:3f:0f: 8a:f2:7c:21:5e:60:c6:6a:36:fc:7d:88:90:85:cf: de:04:79:0f:b2:f8:54:56:33:a6:98:f2:0d:ad:28: 2b:7d:f5:98:ed:34:d8:e8:df:36:24:06:55:ed:62: 40:90:fd:5c:0d:56:bc:e2:78:7c:cc:8e:c2:e5:3b: f0:ec:0b:a1:44:86:8c:bc:d7:e4:13:05:8b:c0:1e: 92:9f:fd:35:66:49:ab:21:25:fd:f3:49:c7:1a:61: b3:28:10:6d:2e:68:ca:18:85:af:ab:25:e5:3b:23: 99:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D6:FB:64:52:97:E5:06:98:5B:E6:26:16:32:8D:77:1D:9E:45:EC X509v3 Authority Key Identifier: keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:e7:a4:75:2e:54:3a:21:ae:dc:19:3b:24:b7:b7:11:73:bf: c4:57:15:d7:85:0f:4e:dd:b7:dd:34:8c:2c:9b:fd:6d:48:ae: 21:e9:d8:58:30:ad:0b:7a:1c:64:c0:db:b3:48:e8:cd:6b:38: ce:a9:b7:ca:28:d4:ef:65:fe:10:a9:29:46:16:bd:95:05:74: e9:b0:5d:e0:dc:df:e1:99:00:67:57:06:7f:df:0c:c3:8a:5b: 33:a9:3c:5e:9b:f2:a8:64:f6:f3:78:6e:88:5e:1d:ea:25:60: 0a:c4:22:02:e9:87:09:2d:ce:af:f6:eb:2e:dd:af:6e:b3:75: d3:27:3f:a2:6b:76:83:7a:5a:8f:d4:cb:f3:b1:69:fe:d0:bd: 88:ce:32:69:a9:90:81:03:00:3a:2c:90:e9:c6:1b:cb:23:07: ad:4e:21:47:01:5d:19:ab:6f:50:0c:7d:f5:8d:93:9a:a6:b4: f2:4a:aa:aa:ae:5d:02:79:cf:88:f7:8a:6a:e4:10:31:7c:92: b9:d5:e1:fe:51:70:c3:e7:71:87:cb:64:c2:1c:10:b4:97:9a: bd:6c:a1:52:97:ff:70:89:3d:f6:a6:61:aa:d4:9a:ea:61:93: fc:be:ac:49:98:d4:a7:8e:2f:40:8b:2e:6d:5a:07:83:bb:1a: 16:61:19:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6WHzBcXCqnNb55S/6rvbGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDczNGNmOTBjNzczNDI4ODA2Yjk2ODIwOTUxNWI5MTQ4 MzFhOWQwHhcNMjUxMjIwMDYwMDM2WhcNMjUxMjIxMDYwMDM2WjAzMTEwLwYDVQQD EyhmOGQ2ZmI2NDUyOTdlNTA2OTg1YmU2MjYxNjMyOGQ3NzFkOWU0NWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8LulKKcr6+UDkBxe4rQ/PRbeuYZu 1fN0OkmxyTXcmZgtzxYzSSZX4S731n8Vt7aMqM0uKSUuGdyy2HT+fWXu2vcvbn0s kMrbhKouj59Qnjv+Jxv6AOZSWB65y3lKVog3Yiz7qI1ht6Q+LQrZhjL4VdWrMhqo 5+qF1Rga8Y+IvnAYgF/APgsYhLtIaZ4L4qKLyf+mPw+K8nwhXmDGajb8fYiQhc/e BHkPsvhUVjOmmPINrSgrffWY7TTY6N82JAZV7WJAkP1cDVa84nh8zI7C5Tvw7Auh RIaMvNfkEwWLwB6Sn/01ZkmrISX980nHGmGzKBBtLmjKGIWvqyXlOyOZxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPjW+2RSl+UGmFvmJhYyjXcdnkXsMB8GA1UdIwQY MBaAFDrXNM+Qx3NCiAa5aCCVFbkUgxqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMt NzZhMWQ0ZDgzMTk3LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMtNzZhMWQ0ZDgzMTk3 LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF+ekdS5U OiGu3Bk7JLe3EXO/xFcV14UPTt233TSMLJv9bUiuIenYWDCtC3ocZMDbs0jozWs4 zqm3yijU72X+EKkpRha9lQV06bBd4Nzf4ZkAZ1cGf98Mw4pbM6k8XpvyqGT283hu iF4d6iVgCsQiAumHCS3Or/brLt2vbrN10yc/omt2g3paj9TL87Fp/tC9iM4yaamQ gQMAOiyQ6cYbyyMHrU4hRwFdGatvUAx99Y2Tmqa08kqqqq5dAnnPiPeKauQQMXyS udXh/lFww+dxh8tkwhwQtJeavWyhUpf/cIk99qZhqtSa6mGT/L6sSZjUp44vQIsu bVoHg7saFmEZow== -----END CERTIFICATE-----Generated at Sat Dec 20 07:49:11 2025 by rpki-client