This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft File: oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft (raw, json) Hash identifier: KwjKqKoZruV1bBY62vrrekPa/FeRtp9gqBLvVwJflyw= Subject key identifier: 4D:E2:18:5B:A6:09:2E:5F:29:81:E0:99:C9:1D:34:9A:EF:DC:54:B6 Authority key identifier: A1:37:89:1D:D4:F3:DF:83:77:2D:7C:FE:71:83:84:3C:BF:F4:4D:54 Certificate issuer: /CN=a137891dd4f3df83772d7cfe7183843cbff44d54 Certificate serial: 019AF50AB2AB5B46E2A7D136FAA9EDD1B143 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft Manifest number: 1205 Signing time: Sat 06 Dec 2025 19:01:50 +0000 Manifest this update: Sat 06 Dec 2025 19:01:50 +0000 Manifest next update: Sun 07 Dec 2025 19:01:50 +0000 Files and hashes: 1: c7xqGqZ0KnoVgSHP1uxqIn-gcow.roa (hash: fgA4jW+G01sd+KIFTnm2o/eJLY8zge2zWEftjWqJRcE=) 2: oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl (hash: FxZzferCQqiUI6491Qa5iiAcqmHqU1I4xs6xpXmUScc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:b2:ab:5b:46:e2:a7:d1:36:fa:a9:ed:d1:b1:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a137891dd4f3df83772d7cfe7183843cbff44d54 Validity Not Before: Dec 6 19:01:50 2025 GMT Not After : Dec 7 19:01:50 2025 GMT Subject: CN=4de2185ba6092e5f2981e099c91d349aefdc54b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0b:8f:5a:97:15:6e:cc:c8:d9:05:dc:87:fa: 01:3b:20:f3:c9:f0:85:5d:56:2e:d7:54:10:87:fd: c2:ef:3b:9e:1f:bf:1b:28:ac:cd:5f:fe:cc:7b:58: 9f:ee:a6:0b:82:9a:86:41:87:a5:79:e8:55:5f:3c: c3:04:9b:1e:a5:a1:04:b2:15:e0:90:97:31:76:a7: 37:2f:e1:77:eb:29:ac:50:d6:15:fe:60:a8:78:dd: 13:d7:48:50:93:b8:68:9a:54:76:61:cd:8a:24:35: 63:96:32:b5:35:af:1a:c9:0b:14:8e:11:dd:be:ab: a2:8f:3f:68:c8:8c:64:94:a0:6e:ce:78:69:15:42: 90:e2:92:3f:4f:58:2c:86:93:5d:ef:e2:d9:88:c1: 7a:38:08:75:74:db:62:34:2e:26:7f:80:76:b1:b6: 80:fb:a3:76:5d:89:b7:7c:33:8c:fe:93:0e:c7:ad: 38:1d:94:49:50:b9:ee:dc:c1:0c:fd:8b:2d:1b:23: 0d:5e:14:cc:f9:64:a6:14:a0:97:22:a4:a8:d9:e3: b7:1c:ba:cf:1a:aa:99:a7:bf:a4:2f:71:cf:45:7f: 19:f4:f1:42:60:9d:f8:27:c5:54:df:70:a9:b3:74: 5a:67:bf:53:4b:65:cc:e9:6d:d5:da:04:db:05:ce: 9a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E2:18:5B:A6:09:2E:5F:29:81:E0:99:C9:1D:34:9A:EF:DC:54:B6 X509v3 Authority Key Identifier: keyid:A1:37:89:1D:D4:F3:DF:83:77:2D:7C:FE:71:83:84:3C:BF:F4:4D:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:0d:70:21:03:8c:be:cf:98:b7:bb:b2:a0:88:ed:9c:ec:68: 3d:71:23:b9:1e:fa:5f:d5:69:6d:83:e0:26:79:38:ec:f8:cf: e5:b8:5b:51:27:f1:08:53:ad:8c:ce:e4:9c:d9:18:65:c0:ef: 65:20:b7:7b:82:72:40:27:0b:19:8f:56:61:7d:df:ec:24:29: 3e:ca:dd:ed:db:59:61:29:38:58:89:f5:f9:fc:85:cf:68:f0: 84:e2:ba:5a:9c:a0:e8:05:7d:96:8a:0f:22:1e:4f:42:d1:e2: 8e:15:d5:7a:cb:52:0f:c3:a5:c7:4f:c4:56:10:dd:dc:f6:78: a2:e4:de:21:38:5b:20:3b:62:95:b1:72:52:7a:0e:8a:b2:a6: 54:8a:16:48:1a:af:fd:69:30:d6:f7:3e:4c:e7:a9:89:ab:3f: 79:71:2b:fe:b0:6b:2d:79:67:5d:40:35:a0:57:21:1e:47:0b: 35:af:ea:68:50:ff:67:19:ca:0c:c6:ee:87:4a:cc:b5:1e:f3: 91:e1:ff:87:82:92:b3:c8:75:75:da:ab:f2:ec:c9:34:f3:8c: 24:e2:76:9e:75:30:e0:1d:b3:52:12:19:dd:26:77:d0:f5:28: 27:36:98:2c:0b:24:c7:1d:4b:48:34:12:c4:cf:46:70:35:b0: 5f:55:ea:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CrKrW0bip9E2+qnt0bFDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMzc4OTFkZDRmM2RmODM3NzJkN2NmZTcxODM4NDNjYmZm NDRkNTQwHhcNMjUxMjA2MTkwMTUwWhcNMjUxMjA3MTkwMTUwWjAzMTEwLwYDVQQD Eyg0ZGUyMTg1YmE2MDkyZTVmMjk4MWUwOTljOTFkMzQ5YWVmZGM1NGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqguPWpcVbszI2QXch/oBOyDzyfCF XVYu11QQh/3C7zueH78bKKzNX/7Me1if7qYLgpqGQYeleehVXzzDBJsepaEEshXg kJcxdqc3L+F36ymsUNYV/mCoeN0T10hQk7homlR2Yc2KJDVjljK1Na8ayQsUjhHd vquijz9oyIxklKBuznhpFUKQ4pI/T1gshpNd7+LZiMF6OAh1dNtiNC4mf4B2sbaA +6N2XYm3fDOM/pMOx604HZRJULnu3MEM/YstGyMNXhTM+WSmFKCXIqSo2eO3HLrP GqqZp7+kL3HPRX8Z9PFCYJ34J8VU33Cps3RaZ79TS2XM6W3V2gTbBc6aPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE3iGFumCS5fKYHgmckdNJrv3FS2MB8GA1UdIwQY MBaAFKE3iR3U89+Ddy18/nGDhDy/9E1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1RlSkhkVHozNE4zTFh6LWNZT0VQTF8wVFZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9hMmJiOTItYzU5MS00MjUwLWIyZDMt OGRkYTZjNmNhODFkLzEvb1RlSkhkVHozNE4zTFh6LWNZT0VQTF8wVFZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9hMmJiOTItYzU5MS00MjUwLWIyZDMtOGRkYTZjNmNhODFk LzEvb1RlSkhkVHozNE4zTFh6LWNZT0VQTF8wVFZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtQ1wIQOM vs+Yt7uyoIjtnOxoPXEjuR76X9VpbYPgJnk47PjP5bhbUSfxCFOtjM7knNkYZcDv ZSC3e4JyQCcLGY9WYX3f7CQpPsrd7dtZYSk4WIn1+fyFz2jwhOK6Wpyg6AV9looP Ih5PQtHijhXVestSD8Olx0/EVhDd3PZ4ouTeIThbIDtilbFyUnoOirKmVIoWSBqv /Wkw1vc+TOepias/eXEr/rBrLXlnXUA1oFchHkcLNa/qaFD/ZxnKDMbuh0rMtR7z keH/h4KSs8h1ddqr8uzJNPOMJOJ2nnUw4B2zUhIZ3SZ30PUoJzaYLAskxx1LSDQS xM9GcDWwX1XquQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:11:00 2025 by rpki-client