This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft File: OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft (raw, json) Hash identifier: lZjjWcmgDRs9ZaoH8guUi0XN/Xbpu4Scekc4ISFECZE= Subject key identifier: 63:0C:70:33:E7:87:A4:CE:3B:BD:99:B2:F0:EE:49:44:F8:A0:61:FF Authority key identifier: 39:39:F9:2B:82:5C:E1:10:90:3C:31:D5:22:B0:F5:0C:AF:D7:4A:6F Certificate issuer: /CN=3939f92b825ce110903c31d522b0f50cafd74a6f Certificate serial: 019AF6C0ECB889D27197412B37F4F71188FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft Manifest number: 0721 Signing time: Sun 07 Dec 2025 03:00:29 +0000 Manifest this update: Sun 07 Dec 2025 03:00:29 +0000 Manifest next update: Mon 08 Dec 2025 03:00:29 +0000 Files and hashes: 1: OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl (hash: bSKRtnRdB0TNB4viW0Ne9qxPRv+T++RP3V2GGhkqMD4=) 2: kqIK4ViX12p6eIuBG0T4dHMIIHI.roa (hash: PaO/dVKACGH2GQrFFW5fxxz+R4Obi2vhR9vhB2cSwQc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:c0:ec:b8:89:d2:71:97:41:2b:37:f4:f7:11:88:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3939f92b825ce110903c31d522b0f50cafd74a6f Validity Not Before: Dec 7 03:00:29 2025 GMT Not After : Dec 8 03:00:29 2025 GMT Subject: CN=630c7033e787a4ce3bbd99b2f0ee4944f8a061ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8c:1d:10:28:f3:28:19:ae:05:d8:5e:09:47: fc:bf:2e:10:2e:40:f8:ed:d2:1f:97:c0:38:0c:7a: 4d:b9:e6:84:5f:2b:57:8c:fe:a5:15:7f:ba:2f:3e: 52:2d:cc:85:a0:58:51:ce:bb:01:5d:a4:25:4e:51: dd:93:67:97:2f:89:c4:3e:48:49:d8:ee:b2:cf:fb: d6:2f:02:5e:d4:42:cf:bd:10:a9:5c:5d:24:62:11: f1:42:fb:73:33:54:63:e2:14:57:bf:cc:9a:fd:aa: 1d:bf:ec:2e:4a:55:42:67:24:60:73:4a:9b:91:de: de:77:5b:df:0c:d8:35:8f:36:a7:45:70:6e:32:3e: 7a:f9:3d:d6:61:d4:81:41:b6:c2:f2:ff:e9:a4:a2: d5:7f:ce:10:0b:68:cf:60:f3:20:6a:bc:f4:ac:77: 19:76:b2:3c:98:b7:85:fb:41:56:d0:74:60:85:fb: fb:52:6d:74:80:16:9b:16:ac:71:d8:66:d9:b4:5a: 66:7c:b5:95:cd:92:6d:ba:72:58:e0:b7:d1:76:b5: b5:7d:97:f3:ac:94:e9:d6:9b:df:3f:66:21:8b:2d: b7:e5:3a:19:06:94:c8:3d:5d:1e:db:bb:1f:c7:8a: f3:c6:e0:19:9a:e5:1f:bb:86:7a:23:01:13:00:33: c9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:0C:70:33:E7:87:A4:CE:3B:BD:99:B2:F0:EE:49:44:F8:A0:61:FF X509v3 Authority Key Identifier: keyid:39:39:F9:2B:82:5C:E1:10:90:3C:31:D5:22:B0:F5:0C:AF:D7:4A:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:68:81:41:8b:0a:57:76:d0:7d:31:89:37:63:90:92:cc:23: c4:34:57:9c:91:ab:97:4e:1a:2a:3a:c8:ea:63:bd:93:dd:ba: cd:77:74:62:b6:ee:85:3a:d9:67:a3:cc:b4:1f:82:af:8c:56: b9:06:40:4b:cf:96:da:af:de:c9:12:29:0a:38:fd:df:ea:ed: 9f:11:e5:ae:2d:e9:d6:73:c0:7d:b3:63:f7:eb:13:d5:59:ba: 53:b6:b6:56:28:2c:9f:e6:40:53:97:34:12:44:85:0b:fa:c8: 4c:19:9a:40:a4:28:f8:da:f2:b2:05:bf:f0:a3:42:9a:56:d2: 3a:49:84:44:28:a6:03:8b:21:3f:7c:a0:94:b3:c3:56:5d:e8: 77:23:a4:23:32:da:9e:39:33:61:f2:dd:b4:ad:ba:40:f9:7e: 15:79:a7:d7:69:ca:0b:ea:eb:92:1b:ae:a5:6b:72:1d:7d:a4: 05:03:86:29:cf:f2:75:b4:b5:de:e6:9b:98:28:65:c8:c7:e6: 1b:65:b7:13:e7:fd:e1:20:0f:14:cd:c6:77:72:61:5d:9e:91: 4e:a8:a9:87:4a:b6:65:6f:36:c2:05:47:4d:3e:40:e7:69:3c: c7:82:c4:4b:c5:25:79:ee:2b:08:48:3f:45:39:94:16:51:3d: a9:30:13:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2wOy4idJxl0ErN/T3EYj6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MzlmOTJiODI1Y2UxMTA5MDNjMzFkNTIyYjBmNTBjYWZk NzRhNmYwHhcNMjUxMjA3MDMwMDI5WhcNMjUxMjA4MDMwMDI5WjAzMTEwLwYDVQQD Eyg2MzBjNzAzM2U3ODdhNGNlM2JiZDk5YjJmMGVlNDk0NGY4YTA2MWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YwdECjzKBmuBdheCUf8vy4QLkD4 7dIfl8A4DHpNueaEXytXjP6lFX+6Lz5SLcyFoFhRzrsBXaQlTlHdk2eXL4nEPkhJ 2O6yz/vWLwJe1ELPvRCpXF0kYhHxQvtzM1Rj4hRXv8ya/aodv+wuSlVCZyRgc0qb kd7ed1vfDNg1jzanRXBuMj56+T3WYdSBQbbC8v/ppKLVf84QC2jPYPMgarz0rHcZ drI8mLeF+0FW0HRghfv7Um10gBabFqxx2GbZtFpmfLWVzZJtunJY4LfRdrW1fZfz rJTp1pvfP2Yhiy235ToZBpTIPV0e27sfx4rzxuAZmuUfu4Z6IwETADPJXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGMMcDPnh6TOO72ZsvDuSUT4oGH/MB8GA1UdIwQY MBaAFDk5+SuCXOEQkDwx1SKw9Qyv10pvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1RuNUs0SmM0UkNRUERIVklyRDFES19YU204LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9lNzVlNDEtYTgyOC00ZGM1LThlZDMt OWZjMzY0MTFhY2NjLzEvT1RuNUs0SmM0UkNRUERIVklyRDFES19YU204Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9lNzVlNDEtYTgyOC00ZGM1LThlZDMtOWZjMzY0MTFhY2Nj LzEvT1RuNUs0SmM0UkNRUERIVklyRDFES19YU204LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQGiBQYsK V3bQfTGJN2OQkswjxDRXnJGrl04aKjrI6mO9k926zXd0YrbuhTrZZ6PMtB+Cr4xW uQZAS8+W2q/eyRIpCjj93+rtnxHlri3p1nPAfbNj9+sT1Vm6U7a2Vigsn+ZAU5c0 EkSFC/rITBmaQKQo+NrysgW/8KNCmlbSOkmERCimA4shP3yglLPDVl3odyOkIzLa njkzYfLdtK26QPl+FXmn12nKC+rrkhuupWtyHX2kBQOGKc/ydbS13uabmChlyMfm G2W3E+f94SAPFM3Gd3JhXZ6RTqiph0q2ZW82wgVHTT5A52k8x4LES8Ulee4rCEg/ RTmUFlE9qTATmQ== -----END CERTIFICATE-----Generated at Sun Dec 7 06:58:38 2025 by rpki-client