This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft File: OTdAGaVNS94j8NooolIVDVy0c60.mft (raw, json) Hash identifier: 8B4F7j0PDaAZckyTRjD23cJWNvsw6Za3rQNUnk/yRxA= Subject key identifier: B3:13:70:D6:AE:A6:08:E9:E6:0C:50:65:85:B2:A3:0D:9C:13:E1:5D Authority key identifier: 39:37:40:19:A5:4D:4B:DE:23:F0:DA:28:A2:52:15:0D:5C:B4:73:AD Certificate issuer: /CN=39374019a54d4bde23f0da28a252150d5cb473ad Certificate serial: 019B3D906D46B44CEA3C002DE3B588AE5845 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft Manifest number: 102D Signing time: Sat 20 Dec 2025 21:00:33 +0000 Manifest this update: Sat 20 Dec 2025 21:00:33 +0000 Manifest next update: Sun 21 Dec 2025 21:00:33 +0000 Files and hashes: 1: OTdAGaVNS94j8NooolIVDVy0c60.crl (hash: fxzRAz7VVSYYbToJdwGy+VWaxi0i7AEfgBXLNPk7/aY=) 2: ma10kWI1PiUmBnjZZdsu20JVWcE.roa (hash: jNRh+1s+kkx04U4sH3v3rSIpTBgL5T0X08vSRFsU6Qk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.crl rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:6d:46:b4:4c:ea:3c:00:2d:e3:b5:88:ae:58:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39374019a54d4bde23f0da28a252150d5cb473ad Validity Not Before: Dec 20 21:00:33 2025 GMT Not After : Dec 21 21:00:33 2025 GMT Subject: CN=b31370d6aea608e9e60c506585b2a30d9c13e15d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:30:d9:dd:ed:bf:fe:42:44:3b:47:a6:6f:67: 4f:21:e1:67:8f:ec:b0:65:40:07:1f:cc:7d:a1:db: 13:fb:c2:68:df:a0:b3:a3:fc:b6:28:29:64:f0:61: 41:ef:cf:d6:d9:4e:ff:13:31:94:50:95:7f:6e:93: b1:00:13:fd:55:30:7f:85:db:1c:c2:65:3e:77:68: 5e:af:f2:ff:94:02:18:be:59:f0:6c:7b:e9:98:96: 2c:14:ea:62:a7:dd:de:c0:12:4c:99:50:cd:bd:c8: b0:a6:42:2b:e2:29:9a:0a:9f:ca:5a:7b:ca:f6:ab: 2f:67:bd:53:67:3d:51:4e:07:3b:6a:a0:84:37:d6: 3f:5d:81:63:fd:11:35:fe:43:34:75:59:33:2e:1d: da:b6:ac:c2:1f:2d:64:2d:ed:41:df:64:32:ae:db: 14:bc:ad:a0:80:5f:2e:9d:f5:16:13:b1:cc:c4:12: 2b:84:90:8c:df:8a:41:20:8d:a1:44:27:cc:2c:f3: 8f:78:44:cd:30:61:08:25:d0:03:21:48:4b:05:0b: da:02:48:45:11:fc:02:cc:86:46:89:bf:45:8e:ac: 8b:8f:5e:a4:67:a2:7a:0c:d9:96:93:89:45:e5:6d: 8c:99:86:c9:b2:cf:8f:7c:2b:99:d5:36:d3:20:08: 4c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:13:70:D6:AE:A6:08:E9:E6:0C:50:65:85:B2:A3:0D:9C:13:E1:5D X509v3 Authority Key Identifier: keyid:39:37:40:19:A5:4D:4B:DE:23:F0:DA:28:A2:52:15:0D:5C:B4:73:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:28:55:fd:2c:b5:01:ac:6d:3e:26:a9:a3:fa:73:64:2f:df: 04:48:dd:01:b5:cd:3a:a8:9f:27:e3:1a:14:d9:94:77:f9:56: 3e:1b:71:c5:18:08:ec:4e:9c:e0:28:ab:2b:d0:0c:d4:ba:37: 3c:1a:a8:95:39:86:95:a9:fc:76:18:d8:e7:a5:83:16:22:80: 68:9a:6d:00:d7:16:6c:1a:4f:ec:85:c9:7a:8a:1d:25:3c:8b: 7c:64:05:cd:ca:c8:97:a4:f8:33:38:4c:8a:42:65:d7:a3:dc: fe:e7:1f:f5:e9:42:b2:01:6b:e4:e8:14:f3:8d:d9:68:0d:aa: 17:f6:f5:e5:bd:71:12:50:67:06:ee:49:32:c4:d7:03:aa:74: 50:10:c3:35:28:d7:f5:ae:e0:13:4b:99:f5:e9:1a:88:d9:8f: 37:06:25:74:30:69:d5:ae:f6:b1:0b:2e:d9:2e:db:19:90:ff: 11:5f:52:07:31:b2:2a:80:57:1e:bf:44:d7:9d:05:18:69:6f: d5:97:f7:f3:7b:0c:ad:22:79:00:b1:87:2a:f0:e1:98:c4:47: e3:d0:e2:e5:18:78:cb:c6:03:33:2c:68:58:12:c2:d8:fb:37: 48:fe:b4:0c:a7:07:8b:cf:87:d2:3e:33:cf:ed:2c:ed:40:fd: 43:56:5e:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kG1GtEzqPAAt47WIrlhFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5Mzc0MDE5YTU0ZDRiZGUyM2YwZGEyOGEyNTIxNTBkNWNi NDczYWQwHhcNMjUxMjIwMjEwMDMzWhcNMjUxMjIxMjEwMDMzWjAzMTEwLwYDVQQD EyhiMzEzNzBkNmFlYTYwOGU5ZTYwYzUwNjU4NWIyYTMwZDljMTNlMTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszDZ3e2//kJEO0emb2dPIeFnj+yw ZUAHH8x9odsT+8Jo36Czo/y2KClk8GFB78/W2U7/EzGUUJV/bpOxABP9VTB/hdsc wmU+d2her/L/lAIYvlnwbHvpmJYsFOpip93ewBJMmVDNvciwpkIr4imaCp/KWnvK 9qsvZ71TZz1RTgc7aqCEN9Y/XYFj/RE1/kM0dVkzLh3atqzCHy1kLe1B32QyrtsU vK2ggF8unfUWE7HMxBIrhJCM34pBII2hRCfMLPOPeETNMGEIJdADIUhLBQvaAkhF EfwCzIZGib9FjqyLj16kZ6J6DNmWk4lF5W2MmYbJss+PfCuZ1TbTIAhMwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLMTcNaupgjp5gxQZYWyow2cE+FdMB8GA1UdIwQY MBaAFDk3QBmlTUveI/DaKKJSFQ1ctHOtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1RkQUdhVk5TOTRqOE5vb29sSVZEVnkwYzYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny81MDU3NTUtYzRhYi00OTA1LThiNDgt YmJkMWFkNTNkYTQzLzEvT1RkQUdhVk5TOTRqOE5vb29sSVZEVnkwYzYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny81MDU3NTUtYzRhYi00OTA1LThiNDgtYmJkMWFkNTNkYTQz LzEvT1RkQUdhVk5TOTRqOE5vb29sSVZEVnkwYzYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlChV/Sy1 AaxtPiapo/pzZC/fBEjdAbXNOqifJ+MaFNmUd/lWPhtxxRgI7E6c4CirK9AM1Lo3 PBqolTmGlan8dhjY56WDFiKAaJptANcWbBpP7IXJeoodJTyLfGQFzcrIl6T4MzhM ikJl16Pc/ucf9elCsgFr5OgU843ZaA2qF/b15b1xElBnBu5JMsTXA6p0UBDDNSjX 9a7gE0uZ9ekaiNmPNwYldDBp1a72sQsu2S7bGZD/EV9SBzGyKoBXHr9E150FGGlv 1Zf383sMrSJ5ALGHKvDhmMRH49Di5Rh4y8YDMyxoWBLC2Ps3SP60DKcHi8+H0j4z z+0s7UD9Q1ZeyA== -----END CERTIFICATE-----Generated at Sun Dec 21 01:12:32 2025 by rpki-client