This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft File: OTe1pRVrXHL_wPnAtxBLsYjby7w.mft (raw, json) Hash identifier: be2JEybQPKpEVkwVQpZ2af48mBy4kQeTHbZviKgimcE= Subject key identifier: 15:F0:FB:D1:92:1F:DF:1D:8E:19:D4:F5:51:31:C3:D7:A7:34:49:8A Authority key identifier: 39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC Certificate issuer: /CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc Certificate serial: 019B3F11D49A67D34FF2117FFE9B9E2F80F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft Manifest number: 171D Signing time: Sun 21 Dec 2025 04:01:31 +0000 Manifest this update: Sun 21 Dec 2025 04:01:31 +0000 Manifest next update: Mon 22 Dec 2025 04:01:31 +0000 Files and hashes: 1: OTe1pRVrXHL_wPnAtxBLsYjby7w.crl (hash: cNngY9PU3X1q4wUz/yZa/mhgwOxfAXtffdXh8r8FsmM=) 2: o1Ho1AoDVivcPIuSoHTiqdRiLsw.roa (hash: 2VRi6zWzRrWILpFGgvS4R1+SnUUqoGeAipP4Ra7rcD4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:d4:9a:67:d3:4f:f2:11:7f:fe:9b:9e:2f:80:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc Validity Not Before: Dec 21 04:01:31 2025 GMT Not After : Dec 22 04:01:31 2025 GMT Subject: CN=15f0fbd1921fdf1d8e19d4f55131c3d7a734498a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:66:56:90:f2:59:72:c6:a8:2a:78:80:c5:04: b6:07:ec:54:bf:c7:96:b9:ba:ee:84:b5:dd:c1:a7: b9:32:50:95:4d:24:83:8f:ac:d6:8a:59:b7:66:ab: 37:98:22:14:c0:1d:bd:1c:02:95:ea:e7:82:1c:31: 02:43:59:f1:05:83:25:05:85:8c:2e:2e:ba:38:6e: 3a:7a:15:09:e9:b5:4a:53:c7:c9:75:06:87:dd:24: 37:51:6a:67:61:f8:29:98:a2:fe:d8:41:42:29:c2: 4c:b9:51:01:33:05:8d:fc:14:1f:cc:3b:49:6c:20: 0a:ab:e8:39:f5:a1:ba:6c:96:ff:21:92:f7:04:f9: bc:21:1b:0a:34:61:5b:5b:fc:57:85:cb:e7:77:73: 01:b8:e8:42:b0:00:85:e4:55:42:ac:fe:a0:76:51: 86:e8:0e:8e:7b:cd:e8:c2:a4:b6:54:bb:a6:20:b6: b3:1d:95:bf:b6:b4:b3:33:b7:af:3b:f1:67:2b:69: 14:be:70:4d:d2:45:10:6e:94:a8:35:c5:53:d5:f1: 19:f2:51:fb:3f:01:b3:82:f6:d2:08:d7:7b:bf:d6: 42:f4:c6:03:32:23:be:7b:3b:7b:0e:70:7c:cf:42: aa:7c:ff:57:37:9f:dc:d1:08:79:4d:b5:3b:50:67: 03:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F0:FB:D1:92:1F:DF:1D:8E:19:D4:F5:51:31:C3:D7:A7:34:49:8A X509v3 Authority Key Identifier: keyid:39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:fa:8f:f2:4f:1d:9c:79:4f:53:07:c3:8e:3c:f1:d4:7a:2b: a9:bd:b0:1b:96:ae:d7:e7:7d:46:0b:c5:2d:8e:49:4b:aa:16: cf:6c:68:e2:34:04:23:6d:4f:0b:4c:fe:7a:5b:82:37:7c:94: 3a:8d:d1:21:4b:c4:56:c1:dc:df:01:01:8e:6c:86:8c:42:91: 4b:b5:b8:9e:79:e6:b5:76:ba:68:39:71:74:71:7c:00:c1:90: 3a:3f:ac:e9:93:3f:c3:f8:ae:03:5e:81:06:67:17:58:f1:c0: 8d:02:76:a2:f4:13:19:b4:99:92:d9:61:85:24:80:77:2e:bb: 7d:07:78:13:a9:8e:8e:09:a4:6d:09:1b:96:bb:43:ed:d0:4d: 2e:cb:df:c5:47:88:d9:f3:15:c6:ae:fb:6b:f6:0f:db:92:34: 59:0f:2d:9f:2f:b9:c4:f9:5f:92:e1:b9:69:25:55:f3:3c:79: 92:5d:47:5d:19:c6:77:ae:79:f2:d3:64:e0:54:e4:88:4f:eb: b0:d8:f8:c7:d3:ee:ae:c6:72:a3:e9:b3:23:6d:42:74:ad:c9: 74:07:d8:1c:60:70:ee:99:1b:b3:ca:76:b9:1c:c1:d8:ba:f6: 35:05:56:36:3d:de:61:2a:4f:a0:ea:f7:29:b1:20:b5:32:5a: 96:e4:0b:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EdSaZ9NP8hF//pueL4D1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MzdiNWE1MTU2YjVjNzJmZmMwZjljMGI3MTA0YmIxODhk YmNiYmMwHhcNMjUxMjIxMDQwMTMxWhcNMjUxMjIyMDQwMTMxWjAzMTEwLwYDVQQD EygxNWYwZmJkMTkyMWZkZjFkOGUxOWQ0ZjU1MTMxYzNkN2E3MzQ0OThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2ZWkPJZcsaoKniAxQS2B+xUv8eW ubruhLXdwae5MlCVTSSDj6zWilm3Zqs3mCIUwB29HAKV6ueCHDECQ1nxBYMlBYWM Li66OG46ehUJ6bVKU8fJdQaH3SQ3UWpnYfgpmKL+2EFCKcJMuVEBMwWN/BQfzDtJ bCAKq+g59aG6bJb/IZL3BPm8IRsKNGFbW/xXhcvnd3MBuOhCsACF5FVCrP6gdlGG 6A6Oe83owqS2VLumILazHZW/trSzM7evO/FnK2kUvnBN0kUQbpSoNcVT1fEZ8lH7 PwGzgvbSCNd7v9ZC9MYDMiO+ezt7DnB8z0KqfP9XN5/c0Qh5TbU7UGcDWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXw+9GSH98djhnU9VExw9enNEmKMB8GA1UdIwQY MBaAFDk3taUVa1xy/8D5wLcQS7GI28u8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1RlMXBSVnJYSExfd1BuQXR4QkxzWWpieTd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9kMjE3NzgtMTkzYy00ZjRjLTgxMTkt ZGQxNDJhMTMzNWYwLzEvT1RlMXBSVnJYSExfd1BuQXR4QkxzWWpieTd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9kMjE3NzgtMTkzYy00ZjRjLTgxMTktZGQxNDJhMTMzNWYw LzEvT1RlMXBSVnJYSExfd1BuQXR4QkxzWWpieTd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARvqP8k8d nHlPUwfDjjzx1Horqb2wG5au1+d9RgvFLY5JS6oWz2xo4jQEI21PC0z+eluCN3yU Oo3RIUvEVsHc3wEBjmyGjEKRS7W4nnnmtXa6aDlxdHF8AMGQOj+s6ZM/w/iuA16B BmcXWPHAjQJ2ovQTGbSZktlhhSSAdy67fQd4E6mOjgmkbQkblrtD7dBNLsvfxUeI 2fMVxq77a/YP25I0WQ8tny+5xPlfkuG5aSVV8zx5kl1HXRnGd6558tNk4FTkiE/r sNj4x9PursZyo+mzI21CdK3JdAfYHGBw7pkbs8p2uRzB2Lr2NQVWNj3eYSpPoOr3 KbEgtTJaluQLKQ== -----END CERTIFICATE-----Generated at Sun Dec 21 13:04:35 2025 by rpki-client