This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft File: OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft (raw, json) Hash identifier: t8qTHZbAIPyfQO3vlMjkOOQbPq1cPQCKIh346BRvMek= Subject key identifier: 94:E0:53:39:88:4D:05:A2:19:8E:74:0C:44:A7:69:BD:21:77:79:D0 Authority key identifier: 39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37 Certificate issuer: /CN=393d2f0a96199a060856cf67e2105fda2cb93d37 Certificate serial: 019B4B83234140CE9754FA88EA36603DC691 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft Manifest number: 178D Signing time: Tue 23 Dec 2025 14:00:43 +0000 Manifest this update: Tue 23 Dec 2025 14:00:43 +0000 Manifest next update: Wed 24 Dec 2025 14:00:43 +0000 Files and hashes: 1: 2ksl-0DaqqPMJOIcVSjRYw3oowo.roa (hash: bR5/CsRer/6UzbcdOln79yAgzHl3TX5cZlnxevkQmfk=) 2: NeDUni-C3uHplhagAy2lf9i4WwQ.roa (hash: tf9wG40bSRlg1tIcGU3dfENffu94T3Q0YSHKTzWPt14=) 3: OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl (hash: prYgD5J2Z/zTHbkkg9qQ022MZAXlnCZIdcDYLec23mY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 14:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:83:23:41:40:ce:97:54:fa:88:ea:36:60:3d:c6:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=393d2f0a96199a060856cf67e2105fda2cb93d37 Validity Not Before: Dec 23 14:00:43 2025 GMT Not After : Dec 24 14:00:43 2025 GMT Subject: CN=94e05339884d05a2198e740c44a769bd217779d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:03:41:d3:e4:77:f2:2f:ac:17:5d:9b:32:80: 90:3c:b1:12:1c:33:bf:0f:c2:07:53:00:bd:49:60: 7b:d7:02:bb:92:b2:36:6b:8d:2e:a6:68:e2:a6:3f: fd:ab:92:c0:d2:22:e3:95:a5:56:d4:8b:46:28:a6: 97:d4:2d:0c:03:b7:2a:cd:1b:a2:4f:79:0a:e1:ac: 0d:d2:21:c9:87:d3:04:31:11:e2:e1:30:46:1d:08: 4e:fa:c9:e7:04:79:d1:dd:67:d8:dc:cf:40:8a:32: 74:f0:7c:78:ee:bf:82:2e:36:8b:62:9d:e6:c1:2c: 31:77:bd:10:ac:e3:1b:2c:59:27:b0:29:d3:af:0e: 7c:3f:3c:c8:22:53:e9:c3:c7:88:5b:5b:c2:c9:13: 7b:10:3a:71:0a:91:a6:12:18:aa:42:ef:8a:9a:9a: b4:ef:87:ae:34:3b:77:db:cb:e5:40:27:84:6f:e1: e7:d6:c9:f3:ad:5f:bc:38:b0:0f:8a:aa:db:8c:42: 3e:4f:c3:eb:6f:3f:71:8c:40:99:9b:b4:a8:f1:42: ee:85:e1:5f:4b:4a:0e:42:6b:89:18:87:8b:e1:1c: b8:53:c6:36:60:ae:5f:0a:24:19:a1:49:dd:38:65: 27:a5:82:64:f8:1c:f8:c1:0d:3c:d2:c3:35:c3:ff: ae:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:E0:53:39:88:4D:05:A2:19:8E:74:0C:44:A7:69:BD:21:77:79:D0 X509v3 Authority Key Identifier: keyid:39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:da:9c:32:bf:87:45:fc:20:dd:c4:e8:9e:ff:c1:8b:a6:71: 06:d0:0d:c5:fc:65:ed:4a:6c:ac:76:b3:31:90:0c:81:76:94: 66:1a:19:db:e3:c3:53:e4:6b:0d:bb:3b:fe:97:40:57:e5:8d: 56:e6:62:6d:e9:3b:b5:2d:34:06:eb:81:6e:0c:0d:cd:17:fc: 96:db:fe:7e:15:84:82:e3:48:bc:de:94:b9:9e:07:50:08:27: db:14:2d:ec:08:45:95:3b:46:44:b3:56:19:5e:cd:f2:68:87: 3a:5c:b2:00:b8:64:d5:2f:b2:2e:b5:91:2f:44:6f:9c:12:ee: 17:33:4b:3a:81:25:c9:fa:a2:a2:62:01:34:6e:f5:75:a6:40: 46:c7:68:09:8b:f6:f0:a8:cf:93:57:e0:c3:95:42:a8:a2:d4: ed:4a:59:34:cc:67:34:9f:30:84:73:a8:9a:b7:54:d9:6c:c0: 95:21:18:e6:c1:78:7f:45:92:74:b6:3d:24:fd:46:c0:3f:d7: 28:5f:cb:7e:4c:61:ea:3f:c9:1d:57:1a:a2:ce:84:ae:fa:56: 67:e6:99:74:89:67:48:63:d0:7e:0d:76:d7:18:3d:81:9a:50: 9d:78:d7:a0:18:01:4b:2d:91:a3:3c:24:7c:ee:87:84:76:86: 8b:16:da:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLgyNBQM6XVPqI6jZgPcaRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5M2QyZjBhOTYxOTlhMDYwODU2Y2Y2N2UyMTA1ZmRhMmNi OTNkMzcwHhcNMjUxMjIzMTQwMDQzWhcNMjUxMjI0MTQwMDQzWjAzMTEwLwYDVQQD Eyg5NGUwNTMzOTg4NGQwNWEyMTk4ZTc0MGM0NGE3NjliZDIxNzc3OWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArANB0+R38i+sF12bMoCQPLESHDO/ D8IHUwC9SWB71wK7krI2a40upmjipj/9q5LA0iLjlaVW1ItGKKaX1C0MA7cqzRui T3kK4awN0iHJh9MEMRHi4TBGHQhO+snnBHnR3WfY3M9AijJ08Hx47r+CLjaLYp3m wSwxd70QrOMbLFknsCnTrw58PzzIIlPpw8eIW1vCyRN7EDpxCpGmEhiqQu+Kmpq0 74euNDt328vlQCeEb+Hn1snzrV+8OLAPiqrbjEI+T8Prbz9xjECZm7So8ULuheFf S0oOQmuJGIeL4Ry4U8Y2YK5fCiQZoUndOGUnpYJk+Bz4wQ080sM1w/+uzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJTgUzmITQWiGY50DESnab0hd3nQMB8GA1UdIwQY MBaAFDk9LwqWGZoGCFbPZ+IQX9osuT03MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1QwdkNwWVptZ1lJVnM5bjRoQmYyaXk1UFRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wMzY1ZGUtODAwOC00NzEzLWFiOTkt NjE5ZmE4MGI4ZDc0LzEvT1QwdkNwWVptZ1lJVnM5bjRoQmYyaXk1UFRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8wMzY1ZGUtODAwOC00NzEzLWFiOTktNjE5ZmE4MGI4ZDc0 LzEvT1QwdkNwWVptZ1lJVnM5bjRoQmYyaXk1UFRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa9qcMr+H Rfwg3cTonv/Bi6ZxBtANxfxl7UpsrHazMZAMgXaUZhoZ2+PDU+RrDbs7/pdAV+WN VuZibek7tS00BuuBbgwNzRf8ltv+fhWEguNIvN6UuZ4HUAgn2xQt7AhFlTtGRLNW GV7N8miHOlyyALhk1S+yLrWRL0RvnBLuFzNLOoElyfqiomIBNG71daZARsdoCYv2 8KjPk1fgw5VCqKLU7UpZNMxnNJ8whHOomrdU2WzAlSEY5sF4f0WSdLY9JP1GwD/X KF/Lfkxh6j/JHVcaos6ErvpWZ+aZdIlnSGPQfg121xg9gZpQnXjXoBgBSy2Rozwk fO6HhHaGixbadw== -----END CERTIFICATE-----Generated at Tue Dec 23 22:39:25 2025 by rpki-client