This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft File: Otc0z5DHc0KIBrloIJUVuRSDGp0.mft (raw, json) Hash identifier: w62hFqpbop84kqvp5nBan7+VwSjqNtl14LzxzSfDpxk= Subject key identifier: 49:44:34:CC:AB:B2:8D:67:C5:86:60:54:8F:39:CC:C7:EA:58:77:39 Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d Certificate serial: 019B6C8E8C4B51309427A7FE39DA2E9EA96B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft Manifest number: 17BE Signing time: Tue 30 Dec 2025 00:00:39 +0000 Manifest this update: Tue 30 Dec 2025 00:00:39 +0000 Manifest next update: Wed 31 Dec 2025 00:00:39 +0000 Files and hashes: 1: 2NYdjjFKUwwAHXr7ubSJv8Kzg8g.roa (hash: kjplcNAq1JXoQgnY61zJpj1+5jIDXxWAT5fT5oin7qk=) 2: AF-KFPYoLrR_wnL0SE_zW6WshRE.roa (hash: z49PjeXPIBQhRQUNgU9fm0U8o2Eum7mravj6VvfHLII=) 3: Otc0z5DHc0KIBrloIJUVuRSDGp0.crl (hash: YOFiTbHsTfsKbYm1Qz6dDidk8jHcrBlIzgMYnJM7+mM=) 4: VIvJR-ELjPDDNwtDAs7jPXPRVS8.roa (hash: xlYWOAlcQ9qUm1X3p6cNrDPlijzSwOQVXOe0gD7Wm78=) 5: WCC9rTSbJ_Cq0gmrQEQG46tRbpQ.roa (hash: VkHV+4ebPs26e57T+NHLP6p9bqcsmEKUplaKOzXFS/4=) 6: apLqK898oR7RE-dAFEvdyErBOzE.roa (hash: 7wPWjmBIQU48S3GSQT90DN//sDuxGXlKRA7f0n/Hjc8=) 7: beYTq1ZSU6CkOYAx7ryqD6bd3cM.roa (hash: x3+IsuLxOdLQwSExJVIL+EzcT73OO7RISZtN+IgQDrQ=) 8: d3jC5FrVCU6deYGz56A8xH8Tz24.roa (hash: EEf3EKHXGl/MGjvhaDBjNExCSWB1bA3J+U/K+9OLzcQ=) 9: eFAtBNJzls8AgaaXT8fjcCX17mA.roa (hash: GPQ9iMR4UR3PGXp7FlfdeNJSrFumQ8WzN02VnHoIJ84=) 10: fmuUqwHIE4LJQQIBDK_3JI3axjw.roa (hash: jgYvNn+KWNnN7BXATe+H2BiIlAYgwP4SHTyKXfV03HU=) 11: m8epfX6ALey9mozyTLJ0ovC6F2E.roa (hash: nEswDzlmuc7WOVjzf1OqhYzhCng69m/AkqBFVEn5Jd8=) 12: uQXqHDwD39ncADiPwLCFwCaOFoE.roa (hash: 6dohaywgNPrlc422aBBS3H3acbsvFO8x4A1z0WMis3g=) 13: vpHvJjjgw4O3Rz8r2ZFr25OMuek.roa (hash: DjXvcuXor+t9vZEtEo50/bWiWyQCM6LNcDnznEPg0tw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:8e:8c:4b:51:30:94:27:a7:fe:39:da:2e:9e:a9:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad734cf90c773428806b968209515b914831a9d Validity Not Before: Dec 30 00:00:39 2025 GMT Not After : Dec 31 00:00:39 2025 GMT Subject: CN=494434ccabb28d67c58660548f39ccc7ea587739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a3:65:69:34:02:5d:87:53:d7:dd:d3:98:a3: 80:0d:47:14:6a:49:33:ac:20:40:6b:c9:0b:c8:91: 22:23:f0:95:cc:f7:7b:16:be:79:6f:53:5e:df:45: fb:d8:f1:e1:17:a7:7b:ec:64:b4:ed:ba:8e:af:05: 9d:2d:62:3b:44:a7:a4:46:43:13:2c:9e:d0:4f:bd: d7:69:4d:45:82:8f:ac:57:a7:2e:f6:15:e1:3f:bc: 0a:ff:d8:df:65:b8:6d:9c:37:8c:54:a8:c9:46:7a: 5c:30:ce:04:5b:20:a4:95:d2:19:e5:19:1e:5f:9e: 93:e4:5c:b1:7d:4f:52:9a:5c:c5:4e:fd:f8:c2:9b: b7:f5:ec:db:07:a9:2b:16:cf:2a:08:1e:16:69:70: e1:d5:32:d0:cd:7e:b7:54:cf:22:77:56:ea:aa:15: 83:26:60:2a:3e:53:f4:27:3e:e1:ba:5d:d7:0a:2d: b7:39:51:37:05:1a:8b:9f:24:be:72:33:1f:f8:9d: 7f:f3:f7:9f:2f:a6:55:08:4a:5c:49:bf:f2:61:6c: 88:db:f3:d7:47:bb:7b:f8:a4:0b:2b:86:01:2a:83: b3:c6:a4:6b:e1:84:af:02:51:47:71:16:b4:36:18: 5c:86:3e:fc:44:8e:30:14:c6:8f:ed:a7:7b:3a:27: 0a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:44:34:CC:AB:B2:8D:67:C5:86:60:54:8F:39:CC:C7:EA:58:77:39 X509v3 Authority Key Identifier: keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:da:a7:f9:4c:d1:2e:51:ac:46:c0:43:46:83:d3:b1:6c:0b: 2e:aa:5f:1b:cd:79:71:d9:bc:1b:8c:4f:45:93:8b:49:d2:eb: d1:f1:ad:48:07:00:bd:c4:0c:a8:c1:ab:b5:55:7d:7c:7f:c3: 99:67:29:cb:8f:e6:43:63:f6:e8:bd:2e:ff:3b:97:9e:33:03: a6:05:25:ee:b8:bc:2b:d6:e5:ac:2c:4b:02:15:df:00:b8:6d: 7a:a9:45:b7:cc:4c:0f:19:e7:1a:33:54:f8:65:54:12:cd:48: 06:ee:0d:ef:a6:b2:93:74:8d:7b:b0:77:10:39:eb:1f:f7:7a: b1:74:b6:7b:fd:b5:14:81:0d:4c:cf:76:70:79:70:b4:ee:36: 9e:c6:b8:c8:19:f0:a7:79:83:f2:d5:1f:86:72:1c:33:52:fb: 8a:e8:b1:a1:d4:e4:c5:ec:f1:0f:28:f3:c0:3e:c0:cf:33:ff: 3e:c4:9e:0d:81:51:32:92:1f:f2:0a:c1:a7:4b:6b:5f:f2:b7: a1:15:5f:d9:86:49:ae:3b:f7:fb:94:64:9f:ae:c9:e3:38:4b: 49:6a:47:22:61:84:a0:eb:cb:19:4d:30:1d:66:e2:8e:00:7b: ef:0c:c9:8c:16:7c:17:c0:eb:f5:03:8c:69:24:84:3c:a9:3a: 5b:39:3b:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsjoxLUTCUJ6f+OdounqlrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDczNGNmOTBjNzczNDI4ODA2Yjk2ODIwOTUxNWI5MTQ4 MzFhOWQwHhcNMjUxMjMwMDAwMDM5WhcNMjUxMjMxMDAwMDM5WjAzMTEwLwYDVQQD Eyg0OTQ0MzRjY2FiYjI4ZDY3YzU4NjYwNTQ4ZjM5Y2NjN2VhNTg3NzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6NlaTQCXYdT193TmKOADUcUakkz rCBAa8kLyJEiI/CVzPd7Fr55b1Ne30X72PHhF6d77GS07bqOrwWdLWI7RKekRkMT LJ7QT73XaU1Fgo+sV6cu9hXhP7wK/9jfZbhtnDeMVKjJRnpcMM4EWyCkldIZ5Rke X56T5FyxfU9SmlzFTv34wpu39ezbB6krFs8qCB4WaXDh1TLQzX63VM8id1bqqhWD JmAqPlP0Jz7hul3XCi23OVE3BRqLnyS+cjMf+J1/8/efL6ZVCEpcSb/yYWyI2/PX R7t7+KQLK4YBKoOzxqRr4YSvAlFHcRa0Nhhchj78RI4wFMaP7ad7OicKpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFElENMyrso1nxYZgVI85zMfqWHc5MB8GA1UdIwQY MBaAFDrXNM+Qx3NCiAa5aCCVFbkUgxqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMt NzZhMWQ0ZDgzMTk3LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMtNzZhMWQ0ZDgzMTk3 LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXNqn+UzR LlGsRsBDRoPTsWwLLqpfG815cdm8G4xPRZOLSdLr0fGtSAcAvcQMqMGrtVV9fH/D mWcpy4/mQ2P26L0u/zuXnjMDpgUl7ri8K9blrCxLAhXfALhteqlFt8xMDxnnGjNU +GVUEs1IBu4N76ayk3SNe7B3EDnrH/d6sXS2e/21FIENTM92cHlwtO42nsa4yBnw p3mD8tUfhnIcM1L7iuixodTkxezxDyjzwD7AzzP/PsSeDYFRMpIf8grBp0trX/K3 oRVf2YZJrjv3+5Rkn67J4zhLSWpHImGEoOvLGU0wHWbijgB77wzJjBZ8F8Dr9QOM aSSEPKk6Wzk7jg== -----END CERTIFICATE-----Generated at Tue Dec 30 10:32:13 2025 by rpki-client