This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft File: OTipB3cqWf31n2L5rZC-UCFxlG4.mft (raw, json) Hash identifier: 6LEUONDRqpeLGAMUp7leoQc8P5YEEkLZgM6UZ0H70+s= Subject key identifier: 4D:26:F6:5B:1F:A0:60:6C:A5:A6:88:4E:88:A6:FB:8A:79:35:78:91 Authority key identifier: 39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E Certificate issuer: /CN=3938a907772a59fdf59f62f9ad90be502171946e Certificate serial: 019B559AAD25F192081E18CDCEF20FEAEF7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft Manifest number: 0AEC Signing time: Thu 25 Dec 2025 13:02:38 +0000 Manifest this update: Thu 25 Dec 2025 13:02:38 +0000 Manifest next update: Fri 26 Dec 2025 13:02:38 +0000 Files and hashes: 1: OTipB3cqWf31n2L5rZC-UCFxlG4.crl (hash: IUCpZM7mDIgyxtksCZ/NbIW3xcYDoJRzFWvLiRjLYBE=) 2: R2rdc7iEL-QEpfpveQ8XLi794UY.roa (hash: NOUYuQT3ToD/1aYOE1fR2p8arsC0PmHYqq5MEGhXZLs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:9a:ad:25:f1:92:08:1e:18:cd:ce:f2:0f:ea:ef:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3938a907772a59fdf59f62f9ad90be502171946e Validity Not Before: Dec 25 13:02:38 2025 GMT Not After : Dec 26 13:02:38 2025 GMT Subject: CN=4d26f65b1fa0606ca5a6884e88a6fb8a79357891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:95:20:ad:98:e9:a7:ea:33:d9:e1:91:77:c6: c3:a5:76:57:f4:57:21:db:ba:a1:5e:e7:d6:ec:9a: 6e:e5:c0:7b:2d:3a:85:eb:b7:c0:da:0c:0a:fe:f2: 77:73:24:95:f7:ae:c4:ad:15:9b:b3:ad:a2:79:86: b2:14:3a:9a:68:a7:be:6b:2c:e5:12:b4:59:c8:bf: 66:fa:87:9c:23:37:13:6a:d2:54:8a:45:20:e4:de: 8e:62:20:f5:96:fa:9e:4f:d3:93:2b:0d:a1:c4:ae: 64:eb:c6:a2:69:d8:6a:86:cc:62:4b:75:97:2d:70: 41:50:31:e6:8e:c9:ad:12:d1:3d:09:7d:1a:47:94: 80:5c:ce:66:1e:31:ae:b5:84:d9:99:11:60:90:69: 9f:4a:89:fa:d1:e0:cf:94:1b:95:41:7a:d6:99:b1: 34:cb:12:2a:a6:67:51:6f:dd:d5:9b:bc:88:44:dd: 7e:c4:dd:e7:99:0a:65:e4:b7:7b:09:55:60:1e:7a: 39:9e:b9:76:68:9c:9d:2e:cf:5b:f9:2b:f9:e2:55: 76:a5:ef:5e:e1:e5:5c:bc:8c:d9:07:5f:cb:6e:11: b1:65:02:ae:d2:fa:7e:12:29:7e:c9:82:6d:d7:a6: 42:80:0f:44:14:18:aa:e5:8e:37:b3:dc:8a:03:35: 75:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:26:F6:5B:1F:A0:60:6C:A5:A6:88:4E:88:A6:FB:8A:79:35:78:91 X509v3 Authority Key Identifier: keyid:39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:c0:35:7b:e8:90:f2:9c:f2:4a:8c:b1:07:f2:7d:2a:e5:25: 34:7b:dc:a5:d3:3a:db:a7:5d:0c:a9:ff:37:3a:03:42:fb:b2: 1b:d6:4c:90:61:8c:a7:55:2d:fd:9d:2b:a6:2f:8e:76:2c:2f: 48:b0:db:65:b9:bd:fd:7d:de:10:88:54:83:04:4d:73:1e:7b: 12:14:03:af:b1:cf:91:5e:85:7b:c5:55:33:96:f2:7d:a7:53: bd:f2:29:6c:4e:fa:0b:77:08:e2:23:3d:09:59:a0:bc:d0:66: fe:9d:b0:34:8e:ab:eb:65:33:4b:8c:fe:b3:07:58:52:5f:36: 33:c7:e0:bf:14:49:39:23:c9:79:95:b7:91:61:4b:24:09:c8: 2d:c8:2c:53:67:f5:b8:38:e4:bf:48:15:fb:15:7a:9b:91:f7: 10:50:0d:de:f9:63:db:8b:64:d8:b7:ee:9e:72:d7:73:0e:c2: e8:56:6f:41:01:aa:4b:d7:62:10:25:fe:99:f4:7f:a8:61:db: 35:ed:7a:e4:85:1c:97:eb:4d:ad:37:3a:57:e8:e7:88:88:4b: f5:66:ae:1f:32:ab:6a:36:dc:25:1c:91:56:b9:b2:d1:4e:0b: ce:c1:43:3c:90:3c:26:3a:df:77:4e:0c:f8:eb:4f:5d:9a:13: 8b:4a:c4:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVmq0l8ZIIHhjNzvIP6u9/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MzhhOTA3NzcyYTU5ZmRmNTlmNjJmOWFkOTBiZTUwMjE3 MTk0NmUwHhcNMjUxMjI1MTMwMjM4WhcNMjUxMjI2MTMwMjM4WjAzMTEwLwYDVQQD Eyg0ZDI2ZjY1YjFmYTA2MDZjYTVhNjg4NGU4OGE2ZmI4YTc5MzU3ODkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZUgrZjpp+oz2eGRd8bDpXZX9Fch 27qhXufW7Jpu5cB7LTqF67fA2gwK/vJ3cySV967ErRWbs62ieYayFDqaaKe+ayzl ErRZyL9m+oecIzcTatJUikUg5N6OYiD1lvqeT9OTKw2hxK5k68aiadhqhsxiS3WX LXBBUDHmjsmtEtE9CX0aR5SAXM5mHjGutYTZmRFgkGmfSon60eDPlBuVQXrWmbE0 yxIqpmdRb93Vm7yIRN1+xN3nmQpl5Ld7CVVgHno5nrl2aJydLs9b+Sv54lV2pe9e 4eVcvIzZB1/LbhGxZQKu0vp+Eil+yYJt16ZCgA9EFBiq5Y43s9yKAzV1LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0m9lsfoGBspaaIToim+4p5NXiRMB8GA1UdIwQY MBaAFDk4qQd3Kln99Z9i+a2QvlAhcZRuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1RpcEIzY3FXZjMxbjJMNXJaQy1VQ0Z4bEc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi84MThlMTAtNDA5Yi00NTFhLTgyYjct ZTVjMWM2MmNmZTM3LzEvT1RpcEIzY3FXZjMxbjJMNXJaQy1VQ0Z4bEc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi84MThlMTAtNDA5Yi00NTFhLTgyYjctZTVjMWM2MmNmZTM3 LzEvT1RpcEIzY3FXZjMxbjJMNXJaQy1VQ0Z4bEc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWsA1e+iQ 8pzySoyxB/J9KuUlNHvcpdM626ddDKn/NzoDQvuyG9ZMkGGMp1Ut/Z0rpi+Odiwv SLDbZbm9/X3eEIhUgwRNcx57EhQDr7HPkV6Fe8VVM5byfadTvfIpbE76C3cI4iM9 CVmgvNBm/p2wNI6r62UzS4z+swdYUl82M8fgvxRJOSPJeZW3kWFLJAnILcgsU2f1 uDjkv0gV+xV6m5H3EFAN3vlj24tk2LfunnLXcw7C6FZvQQGqS9diECX+mfR/qGHb Ne165IUcl+tNrTc6V+jniIhL9WauHzKrajbcJRyRVrmy0U4LzsFDPJA8Jjrfd04M +OtPXZoTi0rE5Q== -----END CERTIFICATE-----Generated at Thu Dec 25 16:07:17 2025 by rpki-client