This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft File: otXHrn5FwAc077zJE6Gx6j6WS0A.mft (raw, json) Hash identifier: NcEYIeHUGRMW1gkmvPz4/Oc3NslJPvW4YAB+8esIzCQ= Subject key identifier: E2:3B:7A:B0:20:B8:F7:1B:E6:03:DD:64:9E:68:C4:F2:53:42:82:04 Authority key identifier: A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40 Certificate issuer: /CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40 Certificate serial: 019B39EB31561CDD231ABC7BD3448D1F1252 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft Manifest number: 05E4 Signing time: Sat 20 Dec 2025 04:01:13 +0000 Manifest this update: Sat 20 Dec 2025 04:01:13 +0000 Manifest next update: Sun 21 Dec 2025 04:01:13 +0000 Files and hashes: 1: BAHKXXDGf4FkpvGLoVJvz4ZQS9g.roa (hash: QG7io9HlNrI6xyBwfXvDwRjbZbOdJXrpGi6XSOhyDS8=) 2: Xa4rA7s8Ly9UJZgVYi-Jv5tyXbE.roa (hash: B0/EUa4/ThW3bg+w4c9UI/ZQv1E86GHArXlsrfN6HzQ=) 3: otXHrn5FwAc077zJE6Gx6j6WS0A.crl (hash: WoXQ483tUor85TQhngybTUuyFNwY6VN81NEmtSMKJJA=) 4: p4F6VDWGlGgiZn3yBJi7M3fVpVg.roa (hash: TIMfRy8SxAVXXi0h232Rvp4fEAYndvsGejpfbPavyrQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:31:56:1c:dd:23:1a:bc:7b:d3:44:8d:1f:12:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40 Validity Not Before: Dec 20 04:01:13 2025 GMT Not After : Dec 21 04:01:13 2025 GMT Subject: CN=e23b7ab020b8f71be603dd649e68c4f253428204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:94:79:98:16:4a:2a:28:f3:90:93:6b:06:c0: 4e:88:4d:4a:1d:df:6c:b8:37:3a:30:f6:e8:e0:48: 7d:e3:4e:36:cc:7a:5d:4b:1f:45:0a:af:eb:eb:72: e4:d6:56:12:22:59:70:e5:73:85:51:a4:79:b3:5a: b4:39:9f:0e:f3:0f:14:9d:fd:31:3c:ff:35:96:59: dd:fc:6b:ab:05:03:91:04:45:21:92:23:b3:52:bf: 48:83:6f:40:c8:c6:5e:47:58:b5:17:e1:72:c8:81: bc:75:d8:6c:8f:ed:6f:20:9f:9a:cb:0d:25:96:6c: 9a:4b:86:c5:0f:04:e2:8b:99:72:64:0f:55:92:83: 6b:b0:ec:e6:55:50:79:ed:4a:8e:a4:3d:1e:62:e7: 0f:27:87:7b:d3:fc:17:3f:f5:cb:6d:31:73:bb:33: dd:aa:10:e0:3c:7d:a2:6a:69:5f:45:ab:c1:61:6b: b3:cc:82:7a:a3:97:cc:28:57:c8:fb:d5:48:8e:8c: ea:58:32:68:f4:09:33:74:e1:7a:02:e5:e9:3b:95: f8:b1:3d:be:71:26:3a:ad:fd:de:d1:4b:ec:72:ac: 36:fe:37:22:24:03:57:d2:99:9d:3c:ec:67:5e:72: ea:9e:2f:3f:9d:4c:b1:9a:61:46:2c:31:9a:bd:9d: 0a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:3B:7A:B0:20:B8:F7:1B:E6:03:DD:64:9E:68:C4:F2:53:42:82:04 X509v3 Authority Key Identifier: keyid:A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:2b:10:5a:69:4f:6f:68:c0:4b:4f:0d:84:67:ef:d1:a8:cb: c8:1a:04:45:c2:1c:14:06:81:4d:0e:af:f6:7b:00:80:bb:da: cb:14:53:2a:fb:7b:8f:43:42:11:43:68:c2:8a:a6:a9:2b:a6: 30:0f:59:81:ff:3f:56:3c:62:ee:af:7b:92:bf:e2:cc:25:82: 47:24:d4:86:1e:ac:28:fb:7e:9c:1a:80:e7:cb:72:9d:5d:3a: d9:f5:f7:40:46:e2:32:0d:a2:74:48:02:05:3a:9f:e1:87:8d: 9c:44:f7:8e:84:47:a3:19:78:43:d4:75:01:f0:da:52:9f:c2: cb:21:59:ea:29:e6:59:dd:b9:aa:a0:6c:eb:e7:b1:fc:95:bd: 0c:bc:6f:df:4c:aa:0e:b1:4c:79:39:46:3c:01:02:27:ef:38: 43:90:3f:5f:ad:0c:22:d3:5b:8a:32:b3:7f:e8:09:da:21:3b: 2a:ae:2a:68:85:68:2c:b9:2b:f9:27:ec:65:58:c1:50:fd:ca: bc:84:b8:ef:d9:7e:c6:52:22:5d:c0:2a:1f:0a:30:23:de:e6: 7e:7d:d4:77:8f:72:9c:ce:b4:ea:2f:7b:a8:c1:38:61:23:8e: a0:27:ab:a9:37:b7:49:6b:34:bc:45:39:9f:bc:1f:70:72:9a: 6f:06:1b:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56zFWHN0jGrx700SNHxJSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZDVjN2FlN2U0NWMwMDczNGVmYmNjOTEzYTFiMWVhM2U5 NjRiNDAwHhcNMjUxMjIwMDQwMTEzWhcNMjUxMjIxMDQwMTEzWjAzMTEwLwYDVQQD EyhlMjNiN2FiMDIwYjhmNzFiZTYwM2RkNjQ5ZTY4YzRmMjUzNDI4MjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspR5mBZKKijzkJNrBsBOiE1KHd9s uDc6MPbo4Eh94042zHpdSx9FCq/r63Lk1lYSIllw5XOFUaR5s1q0OZ8O8w8Unf0x PP81llnd/GurBQORBEUhkiOzUr9Ig29AyMZeR1i1F+FyyIG8ddhsj+1vIJ+ayw0l lmyaS4bFDwTii5lyZA9VkoNrsOzmVVB57UqOpD0eYucPJ4d70/wXP/XLbTFzuzPd qhDgPH2iamlfRavBYWuzzIJ6o5fMKFfI+9VIjozqWDJo9AkzdOF6AuXpO5X4sT2+ cSY6rf3e0Uvscqw2/jciJANX0pmdPOxnXnLqni8/nUyxmmFGLDGavZ0KcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOI7erAguPcb5gPdZJ5oxPJTQoIEMB8GA1UdIwQY MBaAFKLVx65+RcAHNO+8yROhseo+lktAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3RYSHJuNUZ3QWMwNzd6SkU2R3g2ajZXUzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81MGYzNGMtMzM4ZC00ZmNlLTgxOTMt ZWMxNjczNWEzMzgyLzEvb3RYSHJuNUZ3QWMwNzd6SkU2R3g2ajZXUzBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC81MGYzNGMtMzM4ZC00ZmNlLTgxOTMtZWMxNjczNWEzMzgy LzEvb3RYSHJuNUZ3QWMwNzd6SkU2R3g2ajZXUzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcisQWmlP b2jAS08NhGfv0ajLyBoERcIcFAaBTQ6v9nsAgLvayxRTKvt7j0NCEUNowoqmqSum MA9Zgf8/Vjxi7q97kr/izCWCRyTUhh6sKPt+nBqA58tynV062fX3QEbiMg2idEgC BTqf4YeNnET3joRHoxl4Q9R1AfDaUp/CyyFZ6inmWd25qqBs6+ex/JW9DLxv30yq DrFMeTlGPAECJ+84Q5A/X60MItNbijKzf+gJ2iE7Kq4qaIVoLLkr+SfsZVjBUP3K vIS479l+xlIiXcAqHwowI97mfn3Ud49ynM606i97qME4YSOOoCerqTe3SWs0vEU5 n7wfcHKabwYbKA== -----END CERTIFICATE-----Generated at Sat Dec 20 10:01:31 2025 by rpki-client