This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft File: OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft (raw, json) Hash identifier: /JTOK/5jiufrNX1WkKnle1QvXm4k5nd1sZQF2vXb6fg= Subject key identifier: CB:5C:95:0A:22:4D:64:96:D1:F8:1A:A2:16:7F:F7:04:F2:07:76:92 Authority key identifier: 3A:DA:5B:AA:05:8C:40:95:65:FF:2A:C8:76:A2:2E:E6:37:7B:50:3B Certificate issuer: /CN=3ada5baa058c409565ff2ac876a22ee6377b503b Certificate serial: 019B4EBB70BF88385C33327FF6F1786DA68E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft Manifest number: 0279 Signing time: Wed 24 Dec 2025 05:01:05 +0000 Manifest this update: Wed 24 Dec 2025 05:01:05 +0000 Manifest next update: Thu 25 Dec 2025 05:01:05 +0000 Files and hashes: 1: 0pKhUeDAG_MOdW5Y02JeMiWhQ-c.roa (hash: vlnGP89vn7MHQd69bqsZgk5M40XUxWUgsHsylZhCKms=) 2: 3-fP9p4N-Js1uWY2EPsUDn2Ta0Y.roa (hash: 3KgZqAhwrFXDW/vYa1+gIOYPmnsUMBf4mPAqrTO23HI=) 3: OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl (hash: ozALE6YoNGGxRA5rd3GeQDqiHh6wBnzJxlhW/V44hSs=) 4: mrvN1q3z6mxLj5OwmYo4SI68-6w.roa (hash: FCwb+wuvGG1lKyfztmthIAYgGwpmTKUMJbN1dMopTWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 05:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:bb:70:bf:88:38:5c:33:32:7f:f6:f1:78:6d:a6:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ada5baa058c409565ff2ac876a22ee6377b503b Validity Not Before: Dec 24 05:01:05 2025 GMT Not After : Dec 25 05:01:05 2025 GMT Subject: CN=cb5c950a224d6496d1f81aa2167ff704f2077692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:51:0c:d7:6a:d2:42:6f:23:d5:eb:10:01:5b: f4:13:24:cc:66:98:6d:c1:df:a9:2c:89:f6:71:91: b7:5c:d9:f5:16:3c:cb:ca:03:ca:b3:75:0c:21:82: 3d:32:fb:69:db:80:17:24:ad:d8:39:66:54:c0:ff: 7b:90:82:32:fa:ca:2d:35:70:5f:94:94:c5:a4:5f: 4f:30:35:0b:a9:9e:e6:84:56:56:76:27:25:34:29: d0:9b:d5:89:c7:97:ef:9a:c8:8a:ce:a9:dd:5f:9a: a6:5d:58:8b:83:b8:59:34:0b:34:ea:8a:1b:78:34: a0:db:82:c0:ff:e1:71:0e:11:2a:4b:6f:31:5c:83: 13:40:21:9e:22:2b:dd:52:d5:cd:6d:5d:29:20:03: 43:be:ca:7e:71:96:f7:a7:d9:ad:38:34:9b:46:18: 11:42:dd:6e:6b:16:7f:b7:9b:b3:f6:66:1f:e7:b5: cc:76:bb:6e:ed:4f:fe:80:1a:df:e4:f8:60:54:64: 0e:29:c5:01:f6:fb:1e:e6:a0:8d:9f:2d:40:1c:d3: 39:3a:3d:93:69:5d:fc:b9:ad:d2:3e:9c:f3:ca:76: 45:39:6d:ff:fe:42:ac:93:23:6b:bf:07:ad:0c:35: cf:fd:52:dd:da:ee:71:8a:f9:1d:92:3f:d6:76:1a: 4c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:5C:95:0A:22:4D:64:96:D1:F8:1A:A2:16:7F:F7:04:F2:07:76:92 X509v3 Authority Key Identifier: keyid:3A:DA:5B:AA:05:8C:40:95:65:FF:2A:C8:76:A2:2E:E6:37:7B:50:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:e9:82:9a:28:ce:54:1c:aa:16:1d:81:a7:94:01:ce:5d:7c: 74:be:d8:5f:79:63:4d:a3:e4:ec:82:bd:c3:49:69:1e:6b:5e: 5d:2c:ef:1c:f8:94:b7:20:fe:c7:23:74:b7:bb:42:18:30:02: b9:b5:8a:db:d2:63:49:91:95:8b:ec:27:fd:9f:4c:e0:68:37: 81:41:c0:9e:70:1a:79:9e:8e:63:7c:52:b6:c5:71:7f:0e:59: 08:8e:e0:9c:e2:90:6c:ab:26:0b:c8:aa:f9:15:13:5a:da:89: 0a:e6:be:ed:eb:12:72:e9:da:b4:2f:bf:9f:0f:ab:cb:3d:95: aa:88:fb:1d:fd:83:13:e4:48:eb:c1:dc:fb:de:9c:15:ac:2b: d8:cb:92:44:a0:10:41:b2:93:fd:df:b3:36:27:39:ff:96:ae: ac:51:43:ba:92:d1:63:7f:a3:91:c6:0f:3e:d3:dd:44:e9:a0: 13:40:fb:de:30:84:1a:47:90:e2:eb:07:29:9a:22:d4:3a:80: d4:18:c1:2e:db:a2:2d:d4:ca:29:e3:17:01:43:d7:ef:10:db: 51:b6:d5:e8:8c:cd:55:a0:ca:df:dc:a5:a4:3b:15:81:e9:21: 9b:c7:f8:a8:4e:3a:9e:d7:c9:fc:fb:85:ab:90:60:9d:a4:3f: 02:9f:65:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOu3C/iDhcMzJ/9vF4baaOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZGE1YmFhMDU4YzQwOTU2NWZmMmFjODc2YTIyZWU2Mzc3 YjUwM2IwHhcNMjUxMjI0MDUwMTA1WhcNMjUxMjI1MDUwMTA1WjAzMTEwLwYDVQQD EyhjYjVjOTUwYTIyNGQ2NDk2ZDFmODFhYTIxNjdmZjcwNGYyMDc3NjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVEM12rSQm8j1esQAVv0EyTMZpht wd+pLIn2cZG3XNn1FjzLygPKs3UMIYI9Mvtp24AXJK3YOWZUwP97kIIy+sotNXBf lJTFpF9PMDULqZ7mhFZWdiclNCnQm9WJx5fvmsiKzqndX5qmXViLg7hZNAs06oob eDSg24LA/+FxDhEqS28xXIMTQCGeIivdUtXNbV0pIANDvsp+cZb3p9mtODSbRhgR Qt1uaxZ/t5uz9mYf57XMdrtu7U/+gBrf5PhgVGQOKcUB9vse5qCNny1AHNM5Oj2T aV38ua3SPpzzynZFOW3//kKskyNrvwetDDXP/VLd2u5xivkdkj/WdhpM3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMtclQoiTWSW0fgaohZ/9wTyB3aSMB8GA1UdIwQY MBaAFDraW6oFjECVZf8qyHaiLuY3e1A7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RwYnFnV01RSlZsX3lySWRxSXU1amQ3VURzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lNjYzZGQtM2Y4Zi00ZWFkLWI0Yzkt OWMxYjJhZDU1OWFiLzEvT3RwYnFnV01RSlZsX3lySWRxSXU1amQ3VURzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9lNjYzZGQtM2Y4Zi00ZWFkLWI0YzktOWMxYjJhZDU1OWFi LzEvT3RwYnFnV01RSlZsX3lySWRxSXU1amQ3VURzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV+mCmijO VByqFh2Bp5QBzl18dL7YX3ljTaPk7IK9w0lpHmteXSzvHPiUtyD+xyN0t7tCGDAC ubWK29JjSZGVi+wn/Z9M4Gg3gUHAnnAaeZ6OY3xStsVxfw5ZCI7gnOKQbKsmC8iq +RUTWtqJCua+7esScunatC+/nw+ryz2Vqoj7Hf2DE+RI68Hc+96cFawr2MuSRKAQ QbKT/d+zNic5/5aurFFDupLRY3+jkcYPPtPdROmgE0D73jCEGkeQ4usHKZoi1DqA 1BjBLtuiLdTKKeMXAUPX7xDbUbbV6IzNVaDK39ylpDsVgekhm8f4qE46ntfJ/PuF q5BgnaQ/Ap9lRw== -----END CERTIFICATE-----Generated at Wed Dec 24 10:55:21 2025 by rpki-client