This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft File: otlSJFuzTkDNq11LCQFDwNhYE5A.mft (raw, json) Hash identifier: AUe0cyhKbNyeoap3AnT04vySTwLsC+LnkZM31xS39dU= Subject key identifier: C9:4D:80:23:21:DE:D9:98:87:E3:6B:20:27:AC:8C:3B:B5:2C:8E:5D Authority key identifier: A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90 Certificate issuer: /CN=a2d952245bb34e40cdab5d4b090143c0d8581390 Certificate serial: 019B3D598A9A1896B8B3F5BA8EBE2C79DE8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 20:00:36 +0000 Manifest this update: Sat 20 Dec 2025 20:00:36 +0000 Manifest next update: Sun 21 Dec 2025 20:00:36 +0000 Files and hashes: 1: 3HWzcOaTDrdG94i3xjE6Qq-tfnk.roa (hash: 10l24Yg/npX27cx+ImjzGfcJeOU0IJssFEQ4Du2ScJQ=) 2: 6NvbAT4RMJYDBf6360dj0cmbOC4.roa (hash: tpHQQELFe4AosbNjooax9dsLwDFzjHfeb9ASXozivq8=) 3: cn7xlpxUU_sjrheBrcxBDUwIFZM.roa (hash: rjBABCp1JK8gkLVNNwhPnYtWrojXtWHlNh1PMd//BKI=) 4: otlSJFuzTkDNq11LCQFDwNhYE5A.crl (hash: mnUrdlwdUIEd7j2M/I30SSCRZzBMfjPB+ZOIkDj22I8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:8a:9a:18:96:b8:b3:f5:ba:8e:be:2c:79:de:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2d952245bb34e40cdab5d4b090143c0d8581390 Validity Not Before: Dec 20 20:00:36 2025 GMT Not After : Dec 21 20:00:36 2025 GMT Subject: CN=c94d802321ded99887e36b2027ac8c3bb52c8e5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:27:8d:93:ab:4b:ad:37:85:11:76:85:b9:31: 20:eb:55:c5:40:02:f3:dc:28:4b:d0:46:61:ed:85: 35:40:e1:49:98:c6:c5:c8:5d:84:66:1f:e0:36:34: 3f:c6:63:2a:80:d7:fb:8a:ea:53:c5:bc:b1:3f:99: 92:41:3c:95:36:1e:ba:ae:ad:42:0a:00:77:af:9e: 00:ff:00:b4:30:69:c6:7a:a7:bc:7e:3e:47:6f:22: 9c:0e:ae:07:fb:dc:6c:b2:5c:ce:8c:39:bf:69:49: d1:d9:ee:f5:3c:b5:50:a5:9b:ef:93:2b:f5:0a:05: db:df:e1:83:19:75:e6:13:03:7a:e8:f0:82:31:5a: f4:ea:a1:ba:e6:58:43:a5:80:4a:5f:69:f1:50:54: eb:90:0c:ca:77:04:14:e1:d2:ab:f1:52:b2:77:24: b7:ae:f9:86:79:a9:a2:91:ad:3e:fa:4d:ac:11:ed: dc:44:e8:e7:ba:92:39:1f:6b:5a:01:53:57:8c:ca: 39:e1:1b:f4:77:e7:c8:14:e8:2d:70:fa:73:e5:f4: 2b:7d:ac:33:cd:ff:c5:4f:64:54:e5:12:8e:49:aa: 92:28:43:55:f5:ab:30:cc:24:5d:a0:d6:dc:9a:8d: 29:fd:d2:a7:2f:c6:26:11:d2:e4:a6:a6:d1:41:1f: 0f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:4D:80:23:21:DE:D9:98:87:E3:6B:20:27:AC:8C:3B:B5:2C:8E:5D X509v3 Authority Key Identifier: keyid:A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:db:81:e1:2a:39:3e:79:ba:4c:1e:3f:99:a5:07:97:da:66: 88:23:11:69:25:4e:9f:ea:4e:a0:87:25:eb:85:2a:59:a0:e8: 47:09:e7:b1:b2:56:ed:f8:c3:6e:27:7d:44:7c:a0:3b:ce:4e: 53:1b:bd:d3:b5:61:83:c8:fb:1f:be:32:b3:65:44:ea:b4:0e: 38:c3:26:c2:2d:d2:30:f5:3e:b2:12:6c:ea:76:8d:73:37:74: a7:6c:3f:35:39:a3:69:c5:94:14:2a:7b:8e:40:cf:f1:22:b3: 0e:30:e1:65:7c:f8:41:e0:ce:d8:79:e0:67:de:67:eb:37:50: c0:a8:71:5f:8f:29:3c:3e:03:9b:f8:e5:99:11:4d:5d:47:77: a8:a7:66:94:3f:bc:0d:34:4d:cd:84:9a:2e:b2:e1:6a:2e:f6: b4:d8:af:2e:d0:1d:89:4e:d6:71:ab:61:4b:9a:2b:ec:e4:d3: 8b:8e:e2:08:b4:4f:41:ca:a2:50:cd:a0:c9:53:2e:82:d7:e1: 95:89:05:1e:3e:5f:ec:ad:e3:d7:42:9a:83:a7:29:c6:46:71: 1e:4f:9f:4c:0c:54:53:82:67:49:87:7f:47:d3:42:51:ef:2d: c3:1b:76:76:f6:c3:6a:f6:dd:f8:9e:55:d7:6c:50:c2:0f:8c: 31:ff:b3:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WYqaGJa4s/W6jr4sed6PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZDk1MjI0NWJiMzRlNDBjZGFiNWQ0YjA5MDE0M2MwZDg1 ODEzOTAwHhcNMjUxMjIwMjAwMDM2WhcNMjUxMjIxMjAwMDM2WjAzMTEwLwYDVQQD EyhjOTRkODAyMzIxZGVkOTk4ODdlMzZiMjAyN2FjOGMzYmI1MmM4ZTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SeNk6tLrTeFEXaFuTEg61XFQALz 3ChL0EZh7YU1QOFJmMbFyF2EZh/gNjQ/xmMqgNf7iupTxbyxP5mSQTyVNh66rq1C CgB3r54A/wC0MGnGeqe8fj5HbyKcDq4H+9xsslzOjDm/aUnR2e71PLVQpZvvkyv1 CgXb3+GDGXXmEwN66PCCMVr06qG65lhDpYBKX2nxUFTrkAzKdwQU4dKr8VKydyS3 rvmGeamika0++k2sEe3cROjnupI5H2taAVNXjMo54Rv0d+fIFOgtcPpz5fQrfawz zf/FT2RU5RKOSaqSKENV9aswzCRdoNbcmo0p/dKnL8YmEdLkpqbRQR8P5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMlNgCMh3tmYh+NrICesjDu1LI5dMB8GA1UdIwQY MBaAFKLZUiRbs05AzatdSwkBQ8DYWBOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3RsU0pGdXpUa0ROcTExTENRRkR3TmhZRTVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC80YjFhODAtNGU1Zi00OWU3LWI1MDIt YTIyZmZlZTRhNTE1LzEvb3RsU0pGdXpUa0ROcTExTENRRkR3TmhZRTVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC80YjFhODAtNGU1Zi00OWU3LWI1MDItYTIyZmZlZTRhNTE1 LzEvb3RsU0pGdXpUa0ROcTExTENRRkR3TmhZRTVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANtuB4So5 Pnm6TB4/maUHl9pmiCMRaSVOn+pOoIcl64UqWaDoRwnnsbJW7fjDbid9RHygO85O Uxu907Vhg8j7H74ys2VE6rQOOMMmwi3SMPU+shJs6naNczd0p2w/NTmjacWUFCp7 jkDP8SKzDjDhZXz4QeDO2HngZ95n6zdQwKhxX48pPD4Dm/jlmRFNXUd3qKdmlD+8 DTRNzYSaLrLhai72tNivLtAdiU7WcathS5or7OTTi47iCLRPQcqiUM2gyVMugtfh lYkFHj5f7K3j10Kag6cpxkZxHk+fTAxUU4JnSYd/R9NCUe8twxt2dvbDavbd+J5V 12xQwg+MMf+zeQ== -----END CERTIFICATE-----Generated at Sun Dec 21 00:41:14 2025 by rpki-client