This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft File: ot2usWTjmCFKFxoEEOawIy1kL1A.mft (raw, json) Hash identifier: c8emiswFdYOo4nLL626Y6Q4z1zzyzeTcfwljUdR4l0Y= Subject key identifier: 48:5D:9A:F4:2D:D4:90:98:7F:0F:14:27:7A:62:31:09:13:3F:C5:99 Authority key identifier: A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50 Certificate issuer: /CN=a2ddaeb164e398214a171a0410e6b0232d642f50 Certificate serial: 019B2BF833424E523D22C264DEA27F250ABE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft Manifest number: 177D Signing time: Wed 17 Dec 2025 11:00:44 +0000 Manifest this update: Wed 17 Dec 2025 11:00:44 +0000 Manifest next update: Thu 18 Dec 2025 11:00:44 +0000 Files and hashes: 1: Oe84aJcNETymHO5Mo5MDcXOYnLw.roa (hash: OSImBq5p2iXVjmA+adUzN+gaePAu0L2EyhD+yCsF6YQ=) 2: cQexL6krMjfc-1q8FYIof7PMMrw.roa (hash: C8+OwS0ajCdtALbwYVsZUHXZFfWLyCs4+m/HFUeB+J0=) 3: ot2usWTjmCFKFxoEEOawIy1kL1A.crl (hash: 8FP6SANkOmk1rRPvBmS/qCBQV5CTCfGmvXt4zkQU1Ic=) 4: pXLAo5W-uViqoy6VRn7xh63-Zkc.roa (hash: yBl1r2cJ0Cow5+Dq2JidUHqYW1mvqRNbPSpwmQ9U1AQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:33:42:4e:52:3d:22:c2:64:de:a2:7f:25:0a:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2ddaeb164e398214a171a0410e6b0232d642f50 Validity Not Before: Dec 17 11:00:44 2025 GMT Not After : Dec 18 11:00:44 2025 GMT Subject: CN=485d9af42dd490987f0f14277a623109133fc599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fa:0d:71:d8:3e:c4:9b:ca:c6:aa:ee:80:12: af:63:ed:d7:15:35:70:90:81:ce:b9:df:d4:9c:cc: 28:d7:ba:5d:d8:87:78:a0:32:45:96:cd:3e:3c:3e: c9:4a:3f:0e:c6:d8:22:d9:c9:79:ab:38:89:f9:ad: 7a:83:6f:51:d4:f1:88:ac:f2:58:4a:4e:91:d6:14: 8a:0f:74:76:5f:d8:f9:f1:e5:d7:0b:40:21:7f:2a: 6f:99:e6:3b:9e:97:dc:4d:c7:29:81:8a:11:a8:a3: 01:2b:32:44:7c:44:38:90:ac:7b:04:e2:fa:c0:dc: 32:9f:92:56:d4:cb:6a:e3:fa:c4:0e:c7:27:be:1c: 52:77:1d:e1:61:6a:ee:8b:76:00:95:dd:86:bc:c2: 36:11:87:c0:d0:8a:d8:d6:ce:07:be:da:c7:09:6a: 21:8c:d1:ee:06:f3:59:9b:00:51:2f:dd:36:2e:57: cf:59:b0:4d:d8:4c:c4:c5:3a:85:15:e8:7a:9b:d1: 9a:fc:09:39:6c:5d:e1:b8:0a:d4:77:7c:13:0c:28: 3b:e4:6e:0d:a4:7b:a9:22:60:24:9a:4a:78:a6:a7: 65:31:e3:e6:8e:26:63:aa:44:90:4c:4f:f0:ba:eb: de:b4:74:0d:62:fe:1f:91:93:75:4f:cf:08:50:f2: 33:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:5D:9A:F4:2D:D4:90:98:7F:0F:14:27:7A:62:31:09:13:3F:C5:99 X509v3 Authority Key Identifier: keyid:A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:a0:08:c0:32:2c:a6:56:10:d3:8e:4d:a3:af:14:7d:c9:f3: 04:43:48:5c:72:ae:a2:2c:8e:3b:eb:6f:bd:f1:ba:2e:d2:ac: 41:52:a3:b6:d8:ce:fd:bc:ae:5e:51:41:38:dc:7a:38:ff:f9: d4:df:23:4e:82:09:a8:ee:3d:57:15:cd:b7:a2:fd:64:24:b7: c1:d2:fc:81:22:1b:d7:f6:3c:0e:47:97:4c:19:19:b2:d4:6a: 96:80:2a:29:e8:c2:ee:10:a9:f6:4d:d2:80:0d:29:07:3a:22: d8:0b:8b:04:c4:19:39:52:a3:19:94:c8:69:17:13:b2:cf:17: 97:21:ce:9c:ef:85:76:65:af:9d:9d:be:f8:87:d6:d8:92:21: 8b:39:09:c2:89:b1:e3:ee:a2:f6:65:3d:56:cf:c2:b2:f5:6b: e9:c1:df:59:c1:cf:39:85:05:f2:ae:41:51:ca:e8:c4:a2:82: 9d:e6:41:66:45:e7:cd:41:f3:58:da:a2:9c:df:fd:6d:ce:5e: 6b:f9:50:e7:ed:b7:fd:fa:03:1a:94:d7:4c:22:e9:e8:b0:a0: ec:89:1c:80:cd:fc:30:9f:2c:f5:ad:fc:d8:fc:8c:2b:55:c4: b4:0b:af:d0:60:9d:95:d9:bf:45:8a:4c:ae:e2:1f:d8:bb:03: 64:a2:4c:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+DNCTlI9IsJk3qJ/JQq+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZGRhZWIxNjRlMzk4MjE0YTE3MWEwNDEwZTZiMDIzMmQ2 NDJmNTAwHhcNMjUxMjE3MTEwMDQ0WhcNMjUxMjE4MTEwMDQ0WjAzMTEwLwYDVQQD Eyg0ODVkOWFmNDJkZDQ5MDk4N2YwZjE0Mjc3YTYyMzEwOTEzM2ZjNTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvoNcdg+xJvKxqrugBKvY+3XFTVw kIHOud/UnMwo17pd2Id4oDJFls0+PD7JSj8Oxtgi2cl5qziJ+a16g29R1PGIrPJY Sk6R1hSKD3R2X9j58eXXC0AhfypvmeY7npfcTccpgYoRqKMBKzJEfEQ4kKx7BOL6 wNwyn5JW1Mtq4/rEDscnvhxSdx3hYWrui3YAld2GvMI2EYfA0IrY1s4HvtrHCWoh jNHuBvNZmwBRL902LlfPWbBN2EzExTqFFeh6m9Ga/Ak5bF3huArUd3wTDCg75G4N pHupImAkmkp4pqdlMePmjiZjqkSQTE/wuuvetHQNYv4fkZN1T88IUPIzKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEhdmvQt1JCYfw8UJ3piMQkTP8WZMB8GA1UdIwQY MBaAFKLdrrFk45ghShcaBBDmsCMtZC9QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3QydXNXVGptQ0ZLRnhvRUVPYXdJeTFrTDFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS80YWZkYTctODI5Yy00ODgwLWEwYzkt MTEyZTExM2JiN2I3LzEvb3QydXNXVGptQ0ZLRnhvRUVPYXdJeTFrTDFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS80YWZkYTctODI5Yy00ODgwLWEwYzktMTEyZTExM2JiN2I3 LzEvb3QydXNXVGptQ0ZLRnhvRUVPYXdJeTFrTDFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ6AIwDIs plYQ045No68UfcnzBENIXHKuoiyOO+tvvfG6LtKsQVKjttjO/byuXlFBONx6OP/5 1N8jToIJqO49VxXNt6L9ZCS3wdL8gSIb1/Y8DkeXTBkZstRqloAqKejC7hCp9k3S gA0pBzoi2AuLBMQZOVKjGZTIaRcTss8XlyHOnO+FdmWvnZ2++IfW2JIhizkJwomx 4+6i9mU9Vs/CsvVr6cHfWcHPOYUF8q5BUcroxKKCneZBZkXnzUHzWNqinN/9bc5e a/lQ5+23/foDGpTXTCLp6LCg7IkcgM38MJ8s9a382PyMK1XEtAuv0GCdldm/RYpM ruIf2LsDZKJM8A== -----END CERTIFICATE-----Generated at Wed Dec 17 15:14:58 2025 by rpki-client