This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft File: ot5KBypby3TSDpLdu9f2R3w8j84.mft (raw, json) Hash identifier: 9Z2CaiEgNny+AQTlGeRXkiAZLcQC7rZh6WMaRLRvFc0= Subject key identifier: AF:EF:A2:BA:03:65:D2:BF:75:BF:7A:0E:D8:4B:E1:F8:D7:25:07:03 Authority key identifier: A2:DE:4A:07:2A:5B:CB:74:D2:0E:92:DD:BB:D7:F6:47:7C:3C:8F:CE Certificate issuer: /CN=a2de4a072a5bcb74d20e92ddbbd7f6477c3c8fce Certificate serial: 019B65E784078C0A09753F83628813E212C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft Manifest number: 179E Signing time: Sun 28 Dec 2025 17:00:29 +0000 Manifest this update: Sun 28 Dec 2025 17:00:29 +0000 Manifest next update: Mon 29 Dec 2025 17:00:29 +0000 Files and hashes: 1: cXzh2EByibI6pp16VOl9xphGioo.roa (hash: it2xcMVeYRReFR9yZ4UbpAh0VY8UGfjt29+46hCCzeU=) 2: ot5KBypby3TSDpLdu9f2R3w8j84.crl (hash: nr1uE5EvSZgb4fjUd+AOqolpIrB6iAsgoWN3Q+6Ckq0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.crl rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:e7:84:07:8c:0a:09:75:3f:83:62:88:13:e2:12:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2de4a072a5bcb74d20e92ddbbd7f6477c3c8fce Validity Not Before: Dec 28 17:00:29 2025 GMT Not After : Dec 29 17:00:29 2025 GMT Subject: CN=afefa2ba0365d2bf75bf7a0ed84be1f8d7250703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5e:77:f0:10:c2:c1:88:86:7f:35:1c:23:67: d3:d9:96:12:51:16:bf:21:86:f5:4d:17:5c:e2:30: ca:ef:26:68:b8:fa:be:27:6d:ed:75:9b:cb:2b:87: 37:5f:42:66:7c:66:44:ab:f9:80:25:ba:1b:89:64: c1:a7:9a:c5:05:72:01:5b:29:76:6b:67:ee:4b:95: 48:ed:7f:56:2e:9c:69:28:e2:82:92:cb:1b:35:4f: 6a:aa:d1:3b:a0:bc:3c:22:91:32:29:82:58:4d:67: e6:bf:f2:bc:1c:29:76:0b:f3:89:e6:0f:b4:27:a2: 36:34:9a:4a:77:3a:8a:1a:a9:8a:ea:4d:c8:73:e8: 0f:68:43:45:66:99:88:71:d6:4d:18:05:99:83:27: 07:ac:22:df:52:ea:c7:53:f4:d0:fd:d6:27:56:d6: 92:e5:e4:e3:bf:3d:a2:7c:68:d9:9a:8e:2d:e2:e9: 29:b3:1c:20:a5:4a:b5:cd:1a:b3:c6:78:09:0d:bc: 62:08:b8:64:b9:b2:24:04:ab:8d:83:34:fb:2f:82: 5a:59:72:6b:2e:6c:2d:95:3b:10:56:2e:da:6f:f1: fe:65:89:8b:e0:dc:a5:59:fe:c6:1a:23:1b:90:e9: 80:f1:5f:06:86:69:20:2c:77:8e:7f:8c:50:d3:75: 12:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:EF:A2:BA:03:65:D2:BF:75:BF:7A:0E:D8:4B:E1:F8:D7:25:07:03 X509v3 Authority Key Identifier: keyid:A2:DE:4A:07:2A:5B:CB:74:D2:0E:92:DD:BB:D7:F6:47:7C:3C:8F:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:80:7a:77:d4:e9:85:c0:e9:64:8a:4b:86:dc:00:12:d9:9e: 16:5d:22:f1:e3:0c:74:16:9b:c4:97:0e:f3:fd:5c:d1:ec:22: 26:80:8e:83:49:0f:0e:b5:f7:b2:5e:b8:bf:eb:31:60:f2:84: ae:5c:88:da:61:ca:86:73:ec:27:8f:76:9c:96:4e:66:1b:2c: 46:d7:12:30:ea:e3:02:da:54:6c:75:7f:b2:98:90:08:54:58: db:0c:22:bd:20:a6:67:a1:e8:ad:c4:77:6e:45:a8:74:10:44: 30:2c:6e:d7:13:85:04:02:c5:78:24:69:62:0f:ee:d9:80:85: e2:72:94:10:fa:70:ad:8e:f8:e8:0f:4b:8a:90:b4:6c:2c:46: c9:92:20:1b:20:57:b9:1a:c6:de:8d:fc:90:a1:60:90:98:83: fe:36:bc:74:54:78:07:a9:75:4a:09:e2:7e:19:83:cd:1c:da: e8:bc:15:53:58:d4:0b:cf:d1:dd:d4:6b:41:52:c8:bd:db:65: 24:9d:62:f5:77:95:ae:a5:b3:ab:d5:c9:c7:29:84:a4:0c:61: 4e:ca:3e:32:ea:55:9f:84:01:62:50:81:1c:bb:2d:9f:e2:df: 0f:05:3c:60:90:c7:38:6e:d0:9c:fc:df:3f:69:22:43:f5:32: b3:8d:5b:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtl54QHjAoJdT+DYogT4hLCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZGU0YTA3MmE1YmNiNzRkMjBlOTJkZGJiZDdmNjQ3N2Mz YzhmY2UwHhcNMjUxMjI4MTcwMDI5WhcNMjUxMjI5MTcwMDI5WjAzMTEwLwYDVQQD EyhhZmVmYTJiYTAzNjVkMmJmNzViZjdhMGVkODRiZTFmOGQ3MjUwNzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzV538BDCwYiGfzUcI2fT2ZYSURa/ IYb1TRdc4jDK7yZouPq+J23tdZvLK4c3X0JmfGZEq/mAJbobiWTBp5rFBXIBWyl2 a2fuS5VI7X9WLpxpKOKCkssbNU9qqtE7oLw8IpEyKYJYTWfmv/K8HCl2C/OJ5g+0 J6I2NJpKdzqKGqmK6k3Ic+gPaENFZpmIcdZNGAWZgycHrCLfUurHU/TQ/dYnVtaS 5eTjvz2ifGjZmo4t4ukpsxwgpUq1zRqzxngJDbxiCLhkubIkBKuNgzT7L4JaWXJr LmwtlTsQVi7ab/H+ZYmL4NylWf7GGiMbkOmA8V8GhmkgLHeOf4xQ03USsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/voroDZdK/db96DthL4fjXJQcDMB8GA1UdIwQY MBaAFKLeSgcqW8t00g6S3bvX9kd8PI/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3Q1S0J5cGJ5M1RTRHBMZHU5ZjJSM3c4ajg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lMDVhM2EtMTMwNy00MWNiLWI0YzEt NjRhNTYwNDZiY2E3LzEvb3Q1S0J5cGJ5M1RTRHBMZHU5ZjJSM3c4ajg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9lMDVhM2EtMTMwNy00MWNiLWI0YzEtNjRhNTYwNDZiY2E3 LzEvb3Q1S0J5cGJ5M1RTRHBMZHU5ZjJSM3c4ajg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkIB6d9Tp hcDpZIpLhtwAEtmeFl0i8eMMdBabxJcO8/1c0ewiJoCOg0kPDrX3sl64v+sxYPKE rlyI2mHKhnPsJ492nJZOZhssRtcSMOrjAtpUbHV/spiQCFRY2wwivSCmZ6HorcR3 bkWodBBEMCxu1xOFBALFeCRpYg/u2YCF4nKUEPpwrY746A9LipC0bCxGyZIgGyBX uRrG3o38kKFgkJiD/ja8dFR4B6l1SgnifhmDzRza6LwVU1jUC8/R3dRrQVLIvdtl JJ1i9XeVrqWzq9XJxymEpAxhTso+MupVn4QBYlCBHLstn+LfDwU8YJDHOG7QnPzf P2kiQ/Uys41bgw== -----END CERTIFICATE-----Generated at Mon Dec 29 00:46:18 2025 by rpki-client