This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft File: OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft (raw, json) Hash identifier: id8CYyRMIxGaHOpBsfH10Lzyt1Kqt8pjtnmql9N+gzA= Subject key identifier: E3:AF:9D:16:44:2C:43:6E:0F:0D:4C:68:91:77:04:A4:A5:F5:1F:B5 Authority key identifier: 3A:D5:D7:C7:BE:91:26:50:D7:14:23:CD:3C:25:16:DA:94:09:ED:B6 Certificate issuer: /CN=3ad5d7c7be912650d71423cd3c2516da9409edb6 Certificate serial: 019B5FE62E95DA3F9C5E954192B74052760F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft Manifest number: 05DC Signing time: Sat 27 Dec 2025 13:01:19 +0000 Manifest this update: Sat 27 Dec 2025 13:01:19 +0000 Manifest next update: Sun 28 Dec 2025 13:01:19 +0000 Files and hashes: 1: 1r8kB5Z6z_RNw4FuCZ-nelK6Npw.roa (hash: n6aAyuQfPwHavwhm028DG/DEDv2en3wM9tRCOWmzyME=) 2: OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl (hash: Mv7Zq8kx+d7UX4bAjD4zoRUyxRQYtCnOAZstoKSJpLU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 08:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:e6:2e:95:da:3f:9c:5e:95:41:92:b7:40:52:76:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad5d7c7be912650d71423cd3c2516da9409edb6 Validity Not Before: Dec 27 13:01:19 2025 GMT Not After : Dec 28 13:01:19 2025 GMT Subject: CN=e3af9d16442c436e0f0d4c68917704a4a5f51fb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4e:90:2c:d4:14:0e:30:c6:cf:b6:45:48:c6: 93:5d:4b:25:89:6d:35:3d:f5:ef:ab:9c:a0:83:a1: e5:9d:2f:51:04:35:31:f7:77:b8:58:e4:45:47:f6: 3d:39:5a:18:9d:7c:2a:60:9f:aa:dd:48:78:11:29: 11:f1:56:e5:11:28:d5:ef:65:1b:68:ca:38:3b:d6: a8:cf:92:10:25:f9:fc:26:6f:6c:0f:fd:c1:b4:28: 0b:ff:a0:37:cf:b4:f0:95:1f:dd:d4:c8:c7:8c:0e: 81:6c:c8:03:d0:e1:72:30:25:9e:ee:a1:be:10:f3: 54:55:6f:10:09:f5:8d:a2:92:94:81:91:5f:7d:28: 3a:c7:94:24:ca:74:dc:8a:f4:74:4e:4c:da:f6:85: 87:06:fa:32:de:e5:8f:0d:ff:92:c1:62:5c:c4:d6: 74:94:e5:5d:6d:31:a2:30:6c:d4:44:38:8e:a3:14: 8b:6b:74:bc:00:0b:65:6b:23:c2:0d:d4:69:43:bd: 08:a5:2f:e4:82:87:1f:fe:6a:ef:c4:33:8b:99:c3: a9:a3:e1:33:30:57:b5:c7:7b:bb:a0:be:e4:d5:bd: d5:4a:86:e1:1c:1a:f7:c4:67:11:c6:71:fb:6f:d5: 8e:0c:24:15:21:9c:95:76:6a:4f:b7:7a:8e:4a:53: 4d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:AF:9D:16:44:2C:43:6E:0F:0D:4C:68:91:77:04:A4:A5:F5:1F:B5 X509v3 Authority Key Identifier: keyid:3A:D5:D7:C7:BE:91:26:50:D7:14:23:CD:3C:25:16:DA:94:09:ED:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:3d:f6:f9:a6:79:46:32:62:1b:84:8c:26:09:f3:8c:07:e2: 47:64:a1:55:fa:4d:f7:31:dd:09:ef:6e:33:81:ac:dd:3a:34: 6f:27:d1:d4:68:42:bf:6c:4c:7e:fa:fe:c7:15:80:68:7b:57: 61:94:4d:3d:29:63:f4:ed:91:24:e8:f9:88:4c:4c:dc:f8:6e: 35:e1:47:0c:4c:2e:db:f9:69:7f:a7:f9:a1:87:ba:3b:48:e4: 59:b3:ed:42:5e:d7:74:08:4c:f3:b0:d6:a1:e6:e5:33:0f:24: 80:c4:ff:37:4c:ac:88:90:8f:b8:3d:c9:05:4a:1b:8f:63:cf: b1:e0:74:e9:eb:83:2b:1d:16:9f:43:9f:36:3a:7b:97:b6:6a: 7e:17:af:57:4a:39:bd:9a:7e:73:0b:7f:a4:79:eb:91:ce:c4: 38:b5:e2:7a:34:75:2d:af:a7:55:7c:74:55:9d:95:3a:fb:56: b3:f2:99:ce:fb:c4:07:e7:63:92:75:e1:da:a3:6e:bc:08:7c: ca:1d:40:03:29:16:29:2b:a8:08:ff:fc:58:a1:21:04:f4:62: fc:0b:1a:84:43:4d:e7:4d:c3:d2:69:2b:8b:07:0e:68:61:bb: b5:63:49:0a:29:b7:96:0d:a2:75:9f:e9:97:10:3c:6f:ed:93: dc:5d:01:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtf5i6V2j+cXpVBkrdAUnYPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDVkN2M3YmU5MTI2NTBkNzE0MjNjZDNjMjUxNmRhOTQw OWVkYjYwHhcNMjUxMjI3MTMwMTE5WhcNMjUxMjI4MTMwMTE5WjAzMTEwLwYDVQQD EyhlM2FmOWQxNjQ0MmM0MzZlMGYwZDRjNjg5MTc3MDRhNGE1ZjUxZmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwU6QLNQUDjDGz7ZFSMaTXUsliW01 PfXvq5ygg6HlnS9RBDUx93e4WORFR/Y9OVoYnXwqYJ+q3Uh4ESkR8VblESjV72Ub aMo4O9aoz5IQJfn8Jm9sD/3BtCgL/6A3z7TwlR/d1MjHjA6BbMgD0OFyMCWe7qG+ EPNUVW8QCfWNopKUgZFffSg6x5QkynTcivR0Tkza9oWHBvoy3uWPDf+SwWJcxNZ0 lOVdbTGiMGzURDiOoxSLa3S8AAtlayPCDdRpQ70IpS/kgocf/mrvxDOLmcOpo+Ez MFe1x3u7oL7k1b3VSobhHBr3xGcRxnH7b9WODCQVIZyVdmpPt3qOSlNN9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOOvnRZELENuDw1MaJF3BKSl9R+1MB8GA1UdIwQY MBaAFDrV18e+kSZQ1xQjzTwlFtqUCe22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RYWHg3NlJKbERYRkNQTlBDVVcycFFKN2JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9lNjg0ZjYtMjRlZi00MDk5LWJmOTYt MWM2M2RhY2FiZGU5LzEvT3RYWHg3NlJKbERYRkNQTlBDVVcycFFKN2JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9lNjg0ZjYtMjRlZi00MDk5LWJmOTYtMWM2M2RhY2FiZGU5 LzEvT3RYWHg3NlJKbERYRkNQTlBDVVcycFFKN2JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADD32+aZ5 RjJiG4SMJgnzjAfiR2ShVfpN9zHdCe9uM4Gs3To0byfR1GhCv2xMfvr+xxWAaHtX YZRNPSlj9O2RJOj5iExM3PhuNeFHDEwu2/lpf6f5oYe6O0jkWbPtQl7XdAhM87DW oeblMw8kgMT/N0ysiJCPuD3JBUobj2PPseB06euDKx0Wn0OfNjp7l7ZqfhevV0o5 vZp+cwt/pHnrkc7EOLXiejR1La+nVXx0VZ2VOvtWs/KZzvvEB+djknXh2qNuvAh8 yh1AAykWKSuoCP/8WKEhBPRi/AsahENN503D0mkriwcOaGG7tWNJCim3lg2idZ/p lxA8b+2T3F0B+w== -----END CERTIFICATE-----Generated at Sat Dec 27 16:10:23 2025 by rpki-client