This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft File: OtEfbBeesxQqSO5ksulM3p3TYXM.mft (raw, json) Hash identifier: 9xnqVRJ01E9ZplLtYvh/TP65sR37fsLOAbCtsCSeNz0= Subject key identifier: F4:17:79:26:91:47:22:7B:CD:5C:56:D8:2C:32:2F:62:8F:CA:06:BD Authority key identifier: 3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73 Certificate issuer: /CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173 Certificate serial: 019B424A5FF8D7997603103C28FC9C988A66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 19:02:09 +0000 Manifest this update: Sun 21 Dec 2025 19:02:09 +0000 Manifest next update: Mon 22 Dec 2025 19:02:09 +0000 Files and hashes: 1: OtEfbBeesxQqSO5ksulM3p3TYXM.crl (hash: +U3NUqIHGyPkdi51utJj1EUOwVA8NRIzHf4/ZfXSBuM=) 2: UcqTmJ89l8NUNjKYfDLMA156xvg.roa (hash: vHYUpfnZxXjHkU7oFNbi+l4QCTaNKF/HLN9VYPGDanA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:5f:f8:d7:99:76:03:10:3c:28:fc:9c:98:8a:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173 Validity Not Before: Dec 21 19:02:09 2025 GMT Not After : Dec 22 19:02:09 2025 GMT Subject: CN=f41779269147227bcd5c56d82c322f628fca06bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:42:82:c7:cd:f5:15:d8:72:2b:c2:1a:b9:f1: 31:85:2d:a8:74:09:b3:12:13:c5:98:4d:0c:9d:8d: 29:f5:f2:e2:aa:22:1e:07:b2:3f:38:42:dc:74:6e: c0:ac:9b:f0:7f:56:67:4f:4a:20:0d:a8:e3:ae:ce: 2b:21:5f:6b:60:4b:d9:17:81:76:41:f0:f0:46:b6: 40:fb:ac:f2:89:ae:8b:9a:7b:5d:f6:8b:13:96:0a: b5:c8:6f:43:bf:50:ee:3a:32:9a:f4:e0:5d:5c:96: 89:f0:c4:46:42:ff:ff:ae:6c:93:2b:15:41:e2:c4: 67:08:07:dc:c3:a3:62:e0:b9:a5:db:c5:be:09:e7: 47:7e:69:3b:25:a6:be:a1:a7:a1:1a:fa:8e:75:5c: 41:69:00:be:0e:03:a9:29:61:11:f9:22:31:23:5c: 5c:56:31:ff:1e:28:ac:61:f7:fb:72:98:5c:30:e4: df:78:35:41:c4:58:ec:6c:2e:9e:33:7c:ee:a5:2d: ed:5d:9f:ce:27:29:d9:59:be:43:31:c8:5c:11:69: 05:dd:a2:fe:80:e0:98:4d:60:71:1a:a4:e2:b9:63: a8:16:91:f0:a4:c3:14:d8:05:50:07:cc:cf:7b:cb: 64:97:9a:20:22:43:c8:8a:9a:6e:03:58:ff:4a:13: f4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:17:79:26:91:47:22:7B:CD:5C:56:D8:2C:32:2F:62:8F:CA:06:BD X509v3 Authority Key Identifier: keyid:3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:ba:b3:65:1c:b7:90:f9:fc:03:8e:a5:73:7c:5e:85:51:f5: 15:6e:6b:98:5e:f0:65:80:82:0a:cc:bd:73:91:f4:76:27:2c: cd:0d:de:d2:f5:00:a0:f4:89:9a:21:1e:af:41:20:68:46:56: ce:80:2e:ce:64:94:89:ed:fb:ef:43:92:6d:3c:77:33:13:cf: d9:6d:89:fc:e6:c8:bc:b9:74:81:e6:b8:b9:e4:5d:1d:6c:64: 85:2a:73:66:40:5a:e6:7d:54:82:be:4f:68:5e:f0:26:4f:e5: de:7e:9e:99:f5:fd:05:e7:fd:bb:2c:ac:8a:28:87:04:08:73: f1:5f:45:f3:da:3a:31:ee:57:9c:d3:0d:ae:87:4d:d1:c1:aa: 2d:6f:d1:6a:89:bf:68:3c:f3:d4:8d:6d:64:02:96:30:40:f1: 80:d8:09:a0:73:bb:b1:64:c8:c0:17:1e:1e:0f:9b:16:78:79: a3:6f:0c:8d:10:ac:8e:d4:f4:0a:8a:20:c7:ca:83:6c:3d:66: a6:6b:c3:0b:54:7e:2b:b1:ef:67:4b:ed:95:58:95:b5:e4:3c: f0:74:2b:ae:33:f6:c4:f3:b8:f1:74:f5:6b:f9:ff:93:0b:ad: 0c:ae:76:db:dd:50:c2:db:d7:29:50:6c:10:eb:2c:46:8e:cd: b5:8b:62:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSl/415l2AxA8KPycmIpmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDExZjZjMTc5ZWIzMTQyYTQ4ZWU2NGIyZTk0Y2RlOWRk MzYxNzMwHhcNMjUxMjIxMTkwMjA5WhcNMjUxMjIyMTkwMjA5WjAzMTEwLwYDVQQD EyhmNDE3NzkyNjkxNDcyMjdiY2Q1YzU2ZDgyYzMyMmY2MjhmY2EwNmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkKCx831FdhyK8IaufExhS2odAmz EhPFmE0MnY0p9fLiqiIeB7I/OELcdG7ArJvwf1ZnT0ogDajjrs4rIV9rYEvZF4F2 QfDwRrZA+6zyia6Lmntd9osTlgq1yG9Dv1DuOjKa9OBdXJaJ8MRGQv//rmyTKxVB 4sRnCAfcw6Ni4Lml28W+CedHfmk7Jaa+oaehGvqOdVxBaQC+DgOpKWER+SIxI1xc VjH/HiisYff7cphcMOTfeDVBxFjsbC6eM3zupS3tXZ/OJynZWb5DMchcEWkF3aL+ gOCYTWBxGqTiuWOoFpHwpMMU2AVQB8zPe8tkl5ogIkPIippuA1j/ShP0CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQXeSaRRyJ7zVxW2CwyL2KPyga9MB8GA1UdIwQY MBaAFDrRH2wXnrMUKkjuZLLpTN6d02FzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RFZmJCZWVzeFFxU081a3N1bE0zcDNUWVhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy83ZGJmMzYtMjQ4NS00OTM1LWEwYzct ZWY5MWQ4YjViMDgxLzEvT3RFZmJCZWVzeFFxU081a3N1bE0zcDNUWVhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy83ZGJmMzYtMjQ4NS00OTM1LWEwYzctZWY5MWQ4YjViMDgx LzEvT3RFZmJCZWVzeFFxU081a3N1bE0zcDNUWVhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHLqzZRy3 kPn8A46lc3xehVH1FW5rmF7wZYCCCsy9c5H0dicszQ3e0vUAoPSJmiEer0EgaEZW zoAuzmSUie3770OSbTx3MxPP2W2J/ObIvLl0gea4ueRdHWxkhSpzZkBa5n1Ugr5P aF7wJk/l3n6emfX9Bef9uyysiiiHBAhz8V9F89o6Me5XnNMNrodN0cGqLW/Raom/ aDzz1I1tZAKWMEDxgNgJoHO7sWTIwBceHg+bFnh5o28MjRCsjtT0Coogx8qDbD1m pmvDC1R+K7HvZ0vtlViVteQ88HQrrjP2xPO48XT1a/n/kwutDK52291QwtvXKVBs EOssRo7NtYtiUg== -----END CERTIFICATE-----Generated at Mon Dec 22 00:49:23 2025 by rpki-client