This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc19cc-0f53-4d10-af93-dc01a19b2856/1/otCM3GpDDvDaiCmRcla2rY0KNvk.mft File: otCM3GpDDvDaiCmRcla2rY0KNvk.mft (raw, json) Hash identifier: xz3J1S1MjmgtCKdBKUULJY85cC+SkZI88NNW9neprrM= Subject key identifier: 89:98:5C:E7:65:FE:96:24:3D:C3:27:8C:61:1E:67:EC:35:39:5C:BB Authority key identifier: A2:D0:8C:DC:6A:43:0E:F0:DA:88:29:91:72:56:B6:AD:8D:0A:36:F9 Certificate issuer: /CN=a2d08cdc6a430ef0da8829917256b6ad8d0a36f9 Certificate serial: 019B32D75CFA679DD35FB869E5A2BE833002 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otCM3GpDDvDaiCmRcla2rY0KNvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc19cc-0f53-4d10-af93-dc01a19b2856/1/otCM3GpDDvDaiCmRcla2rY0KNvk.mft Manifest number: 09A6 Signing time: Thu 18 Dec 2025 19:02:13 +0000 Manifest this update: Thu 18 Dec 2025 19:02:13 +0000 Manifest next update: Fri 19 Dec 2025 19:02:13 +0000 Files and hashes: 1: otCM3GpDDvDaiCmRcla2rY0KNvk.crl (hash: 6Jty3TpNcmGkQU8wus1zXBA1JSZ+56AHenOLgPR8kvA=) 2: uWHHQqBwsm-RgF6BGlPrCIiU5u8.roa (hash: c70DUe86Dscr+BOk1RbQf+gmFBszpSvbzYy8111R1f4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc19cc-0f53-4d10-af93-dc01a19b2856/1/otCM3GpDDvDaiCmRcla2rY0KNvk.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/bc19cc-0f53-4d10-af93-dc01a19b2856/1/otCM3GpDDvDaiCmRcla2rY0KNvk.mft rsync://rpki.ripe.net/repository/DEFAULT/otCM3GpDDvDaiCmRcla2rY0KNvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:5c:fa:67:9d:d3:5f:b8:69:e5:a2:be:83:30:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2d08cdc6a430ef0da8829917256b6ad8d0a36f9 Validity Not Before: Dec 18 19:02:13 2025 GMT Not After : Dec 19 19:02:13 2025 GMT Subject: CN=89985ce765fe96243dc3278c611e67ec35395cbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b8:6d:0f:92:ad:bc:fa:61:85:85:d5:3a:eb: e0:3c:b0:b5:54:ba:ce:f5:4e:8a:82:8e:ff:32:c7: 65:73:c5:79:c7:6c:09:3f:9b:60:a9:42:c1:da:a4: da:f4:45:c2:50:b7:8c:83:51:6a:bd:ca:dd:c5:4a: 69:c1:23:44:f8:ad:bd:ab:fc:b0:ae:51:72:d4:54: 0e:2a:74:a4:de:0d:c4:26:ed:71:7d:48:99:46:83: 34:3c:51:5c:d1:4a:f9:2c:cb:d4:5e:b0:8a:86:44: 81:d6:6c:d5:67:c8:4d:21:e0:75:2f:67:8c:6b:9f: e8:3a:a0:8a:5a:c8:94:ef:10:1a:9f:29:34:58:62: 4b:c3:0e:fd:e3:48:2b:ae:64:bd:31:97:a5:d7:f0: 35:82:d8:dd:74:06:da:3b:ce:2d:8a:90:9f:8a:68: 75:ef:79:e9:af:84:83:aa:05:03:6a:9c:4c:79:ec: 67:08:71:87:ee:ed:d3:83:71:8b:61:61:95:3e:9c: b4:b3:d5:80:0a:e9:fa:8d:67:49:bd:c8:40:c2:6d: b7:68:5e:f5:1b:7b:f5:71:be:ff:b4:58:6d:1d:74: 0f:49:16:cc:b9:21:3d:e1:d0:36:2f:6e:73:a2:df: 94:8f:f7:46:c9:21:5f:56:32:15:46:76:6e:40:d2: 37:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:98:5C:E7:65:FE:96:24:3D:C3:27:8C:61:1E:67:EC:35:39:5C:BB X509v3 Authority Key Identifier: keyid:A2:D0:8C:DC:6A:43:0E:F0:DA:88:29:91:72:56:B6:AD:8D:0A:36:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otCM3GpDDvDaiCmRcla2rY0KNvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc19cc-0f53-4d10-af93-dc01a19b2856/1/otCM3GpDDvDaiCmRcla2rY0KNvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc19cc-0f53-4d10-af93-dc01a19b2856/1/otCM3GpDDvDaiCmRcla2rY0KNvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:67:0b:6e:71:94:6b:bc:65:2e:f2:ba:d0:41:f1:9f:12:54: c1:cd:79:64:f6:59:b3:ae:a0:2c:74:fb:88:b8:ef:10:77:1a: 66:42:8a:ba:95:00:74:e5:9c:90:7c:ba:b8:b1:24:e7:11:22: 11:9d:a5:15:22:c7:09:39:79:e3:b6:8f:4e:47:7e:fe:67:a0: 78:f9:82:fa:3d:6d:93:fc:10:87:cb:f5:bc:95:05:f2:cb:aa: 73:e5:49:a7:bd:97:9f:3c:6a:a9:6d:5d:90:bb:c8:7a:8d:55: dd:9e:ee:9c:a5:4b:e6:02:62:4c:58:a5:45:53:ed:fc:24:68: a3:98:99:7a:54:99:e8:87:73:ed:4c:34:45:33:f4:ee:fc:ce: cc:52:bb:66:36:94:64:bb:34:54:19:e5:0c:a7:cf:0b:63:e4: 42:01:26:75:2e:e1:3c:d5:ea:8d:68:93:8d:1d:e3:6d:14:bf: 99:77:c4:1e:38:bc:b3:29:1f:1e:5d:57:5f:a5:27:c7:f0:71: a5:09:d8:88:0d:51:57:06:e9:b1:4b:41:3c:63:84:71:24:01: 3c:4b:5d:eb:05:9a:c7:c1:22:e3:9d:40:35:5c:c2:c0:e9:2e: 05:ee:e5:a7:9d:54:45:b2:76:7d:98:a2:21:e0:77:8a:3b:4a: 94:75:0e:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy11z6Z53TX7hp5aK+gzACMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZDA4Y2RjNmE0MzBlZjBkYTg4Mjk5MTcyNTZiNmFkOGQw YTM2ZjkwHhcNMjUxMjE4MTkwMjEzWhcNMjUxMjE5MTkwMjEzWjAzMTEwLwYDVQQD Eyg4OTk4NWNlNzY1ZmU5NjI0M2RjMzI3OGM2MTFlNjdlYzM1Mzk1Y2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLhtD5KtvPphhYXVOuvgPLC1VLrO 9U6Kgo7/Msdlc8V5x2wJP5tgqULB2qTa9EXCULeMg1FqvcrdxUppwSNE+K29q/yw rlFy1FQOKnSk3g3EJu1xfUiZRoM0PFFc0Ur5LMvUXrCKhkSB1mzVZ8hNIeB1L2eM a5/oOqCKWsiU7xAanyk0WGJLww7940grrmS9MZel1/A1gtjddAbaO84tipCfimh1 73npr4SDqgUDapxMeexnCHGH7u3Tg3GLYWGVPpy0s9WACun6jWdJvchAwm23aF71 G3v1cb7/tFhtHXQPSRbMuSE94dA2L25zot+Uj/dGySFfVjIVRnZuQNI33QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFImYXOdl/pYkPcMnjGEeZ+w1OVy7MB8GA1UdIwQY MBaAFKLQjNxqQw7w2ogpkXJWtq2NCjb5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3RDTTNHcEREdkRhaUNtUmNsYTJyWTBLTnZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9iYzE5Y2MtMGY1My00ZDEwLWFmOTMt ZGMwMWExOWIyODU2LzEvb3RDTTNHcEREdkRhaUNtUmNsYTJyWTBLTnZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9iYzE5Y2MtMGY1My00ZDEwLWFmOTMtZGMwMWExOWIyODU2 LzEvb3RDTTNHcEREdkRhaUNtUmNsYTJyWTBLTnZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI2cLbnGU a7xlLvK60EHxnxJUwc15ZPZZs66gLHT7iLjvEHcaZkKKupUAdOWckHy6uLEk5xEi EZ2lFSLHCTl547aPTkd+/megePmC+j1tk/wQh8v1vJUF8suqc+VJp72XnzxqqW1d kLvIeo1V3Z7unKVL5gJiTFilRVPt/CRoo5iZelSZ6Idz7Uw0RTP07vzOzFK7ZjaU ZLs0VBnlDKfPC2PkQgEmdS7hPNXqjWiTjR3jbRS/mXfEHji8sykfHl1XX6Unx/Bx pQnYiA1RVwbpsUtBPGOEcSQBPEtd6wWax8Ei451ANVzCwOkuBe7lp51URbJ2fZii IeB3ijtKlHUODA== -----END CERTIFICATE-----Generated at Fri Dec 19 01:24:32 2025 by rpki-client