This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft File: oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft (raw, json) Hash identifier: uyrpQ90bx7y+UN7Cf6q6nzmLKutOVHc09UlG3r7fSRQ= Subject key identifier: 71:F1:53:83:8A:EE:75:5D:EB:21:C4:37:10:30:76:7C:9B:E2:FB:29 Authority key identifier: A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A Certificate issuer: /CN=a13042d137fbb03beba6421f33a8525b52a88f7a Certificate serial: 019B3C1079E720308E0673CBFC2BF077CB59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft Manifest number: 178D Signing time: Sat 20 Dec 2025 14:01:11 +0000 Manifest this update: Sat 20 Dec 2025 14:01:11 +0000 Manifest next update: Sun 21 Dec 2025 14:01:11 +0000 Files and hashes: 1: DzilDttcXqE3Xvb3haJFRQwF9zk.asa (hash: nycTvypKFoAuxTdfFZ5SN111a0MioZNUXo+uz4SVtks=) 2: XdV6SY8eOUx_p4Bq7xrcrr0zqOY.roa (hash: 7cspMQngJkatFfDKEQAGiJKWs/aZIdZmZ6eN4nTqmW8=) 3: oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl (hash: U2UsBudPmUIf2kYPlKbPPxZCc5erDMtwRCQmwNwH3MU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:79:e7:20:30:8e:06:73:cb:fc:2b:f0:77:cb:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a13042d137fbb03beba6421f33a8525b52a88f7a Validity Not Before: Dec 20 14:01:11 2025 GMT Not After : Dec 21 14:01:11 2025 GMT Subject: CN=71f153838aee755deb21c4371030767c9be2fb29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9f:d0:41:a1:5a:5c:33:22:ab:47:5e:29:e1: 82:2b:d6:af:c2:a4:2f:56:f3:95:f3:2c:68:4e:88: ae:67:ff:dd:cb:b4:9f:cf:7b:3b:0d:b2:fd:84:a2: 89:bd:1f:df:96:4d:96:b1:f9:59:ca:58:12:ef:ad: 00:73:54:c2:61:ea:32:de:7f:6b:bd:fc:87:32:a3: 05:6e:86:a2:cb:c3:85:f0:45:b2:7a:60:66:e5:72: 03:a6:d9:3d:7d:09:92:3c:e2:6e:12:46:94:ce:2f: 5a:82:1c:20:37:06:7b:10:34:ea:0b:34:3a:64:41: 39:20:a7:07:85:30:27:39:ac:f0:bd:f6:27:ac:2a: 45:02:59:c3:86:16:28:7b:af:42:dc:79:9a:e5:04: 6c:8c:93:32:13:7f:0e:7b:3d:8f:6e:40:ea:46:1a: 6d:14:cb:b6:21:d2:b2:7f:40:51:0c:27:1d:e4:99: 34:5a:db:e9:fe:a7:52:2f:d8:f7:a9:ef:6d:13:fd: 3d:ab:ed:1d:37:16:b9:81:f2:14:4c:cc:10:13:eb: ac:47:a7:fb:d4:8c:14:6f:76:9c:f8:d9:ff:b2:ec: 3f:ff:cc:94:2f:d0:a2:de:ae:88:31:f9:77:3a:7c: f8:8a:74:c8:4d:f9:2a:18:89:98:0b:d3:14:61:04: 11:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F1:53:83:8A:EE:75:5D:EB:21:C4:37:10:30:76:7C:9B:E2:FB:29 X509v3 Authority Key Identifier: keyid:A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:3e:7d:3c:51:d5:39:46:31:82:3d:b1:80:21:76:e4:21:5f: 2e:6f:2a:20:6a:a3:56:32:6f:9c:b5:ef:8b:6d:fc:31:77:16: f2:2f:e9:56:a0:ce:c8:eb:24:26:c4:c2:1a:63:72:30:07:55: c1:e3:f4:09:17:66:bd:e8:3f:d8:c3:fd:ae:a8:42:ab:4d:a1: 4f:2b:49:ed:69:96:8e:e1:37:3f:64:b5:20:73:85:56:6f:04: 92:9a:71:f4:0d:4a:ee:d3:a7:58:0b:5a:b2:1e:01:b0:b9:99: da:3e:fc:fd:70:23:f9:b2:8b:65:58:fc:17:d1:f4:08:b6:fc: 4a:98:93:02:83:e4:cf:10:88:c8:56:05:49:02:ac:b8:b0:6a: 84:5c:77:7a:32:31:4e:bd:91:42:bb:7c:7e:43:d7:91:29:24: 7b:2e:24:9d:99:dd:f6:2e:76:73:b8:48:7f:a2:bc:8f:d3:5e: 69:e2:b5:79:2f:8f:30:77:5d:3a:42:3d:2d:0c:6b:04:69:e8: af:0e:3d:9b:be:28:c6:eb:3b:fa:28:c3:93:97:2f:03:30:93: bb:93:b9:d5:b5:1a:ce:ad:dc:d4:71:a9:e5:04:c4:cc:7f:ec: 13:4a:44:34:f2:7b:90:38:83:e2:fb:f5:c7:af:c6:17:82:5e: aa:3a:06:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EHnnIDCOBnPL/Cvwd8tZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMzA0MmQxMzdmYmIwM2JlYmE2NDIxZjMzYTg1MjViNTJh ODhmN2EwHhcNMjUxMjIwMTQwMTExWhcNMjUxMjIxMTQwMTExWjAzMTEwLwYDVQQD Eyg3MWYxNTM4MzhhZWU3NTVkZWIyMWM0MzcxMDMwNzY3YzliZTJmYjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5/QQaFaXDMiq0deKeGCK9avwqQv VvOV8yxoToiuZ//dy7Sfz3s7DbL9hKKJvR/flk2WsflZylgS760Ac1TCYeoy3n9r vfyHMqMFboaiy8OF8EWyemBm5XIDptk9fQmSPOJuEkaUzi9aghwgNwZ7EDTqCzQ6 ZEE5IKcHhTAnOazwvfYnrCpFAlnDhhYoe69C3Hma5QRsjJMyE38Oez2PbkDqRhpt FMu2IdKyf0BRDCcd5Jk0Wtvp/qdSL9j3qe9tE/09q+0dNxa5gfIUTMwQE+usR6f7 1IwUb3ac+Nn/suw//8yUL9Ci3q6IMfl3Onz4inTITfkqGImYC9MUYQQROQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHxU4OK7nVd6yHENxAwdnyb4vspMB8GA1UdIwQY MBaAFKEwQtE3+7A766ZCHzOoUltSqI96MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1RCQzBUZjdzRHZycGtJZk02aFNXMUtvajNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9hZjQ0MDctZjk4ZS00OTk0LTlmOWUt ZjZiNmMwNDkxNmExLzEvb1RCQzBUZjdzRHZycGtJZk02aFNXMUtvajNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9hZjQ0MDctZjk4ZS00OTk0LTlmOWUtZjZiNmMwNDkxNmEx LzEvb1RCQzBUZjdzRHZycGtJZk02aFNXMUtvajNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvT59PFHV OUYxgj2xgCF25CFfLm8qIGqjVjJvnLXvi238MXcW8i/pVqDOyOskJsTCGmNyMAdV weP0CRdmveg/2MP9rqhCq02hTytJ7WmWjuE3P2S1IHOFVm8Ekppx9A1K7tOnWAta sh4BsLmZ2j78/XAj+bKLZVj8F9H0CLb8SpiTAoPkzxCIyFYFSQKsuLBqhFx3ejIx Tr2RQrt8fkPXkSkkey4knZnd9i52c7hIf6K8j9NeaeK1eS+PMHddOkI9LQxrBGno rw49m74oxus7+ijDk5cvAzCTu5O51bUazq3c1HGp5QTEzH/sE0pENPJ7kDiD4vv1 x6/GF4JeqjoGrA== -----END CERTIFICATE-----Generated at Sat Dec 20 22:42:31 2025 by rpki-client