This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft File: OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft (raw, json) Hash identifier: J7av7ijADArokHGKLXPL0Bk3t1wbCxs47MRZaWmOztU= Subject key identifier: 52:B0:67:93:2E:50:30:1E:C2:C9:44:16:AD:1E:97:38:BD:D8:AC:05 Authority key identifier: 39:39:F9:2B:82:5C:E1:10:90:3C:31:D5:22:B0:F5:0C:AF:D7:4A:6F Certificate issuer: /CN=3939f92b825ce110903c31d522b0f50cafd74a6f Certificate serial: 019B3A5865C33D6CD0DBF106388B20A20C00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft Manifest number: 0744 Signing time: Sat 20 Dec 2025 06:00:30 +0000 Manifest this update: Sat 20 Dec 2025 06:00:30 +0000 Manifest next update: Sun 21 Dec 2025 06:00:30 +0000 Files and hashes: 1: OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl (hash: nMtxX3DuRabbhbPDkHZHO8yBcmoSTASUDIuf3esrQKk=) 2: kqIK4ViX12p6eIuBG0T4dHMIIHI.roa (hash: PaO/dVKACGH2GQrFFW5fxxz+R4Obi2vhR9vhB2cSwQc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:58:65:c3:3d:6c:d0:db:f1:06:38:8b:20:a2:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3939f92b825ce110903c31d522b0f50cafd74a6f Validity Not Before: Dec 20 06:00:30 2025 GMT Not After : Dec 21 06:00:30 2025 GMT Subject: CN=52b067932e50301ec2c94416ad1e9738bdd8ac05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:df:1e:df:b6:8c:7d:90:b7:dc:d2:39:ad:5c: 25:16:0a:09:47:7c:79:75:0f:bc:80:69:0e:0d:3f: 9c:3d:d0:39:97:83:73:13:c5:78:2f:94:5b:10:ff: c8:be:03:73:c8:7a:4e:49:64:36:2d:36:e4:5e:ca: b6:69:18:61:0d:5a:8e:bc:ec:ce:66:ee:46:1d:5a: 35:01:eb:1a:eb:3e:18:c0:55:0c:f4:01:a6:fa:45: fa:89:86:df:3f:ab:ce:59:a6:19:47:7c:54:27:42: 86:5a:fe:6f:2f:18:e8:78:e0:70:f1:e2:f8:a2:b9: 58:00:90:aa:c6:e8:29:9a:dd:40:63:ba:99:13:6b: 31:7c:68:8b:de:c8:68:8f:5c:16:02:fd:b6:29:e0: 9e:ad:3f:bc:f1:1d:27:b4:45:77:24:6e:13:b6:e3: d0:be:e6:40:40:c2:66:ce:42:4c:9b:ef:ce:04:a5: f8:d4:62:59:ba:05:72:55:1d:41:57:d1:38:5d:4d: 5a:36:e1:10:2d:cc:60:ab:53:be:be:09:1e:ab:d2: 30:56:2d:93:1b:88:e0:fc:a5:1f:57:5a:63:2a:c6: e9:7e:c5:c6:af:7c:50:af:06:f9:d0:a2:1e:53:72: 5f:5d:0e:9f:4a:30:94:16:bc:88:95:c6:a0:38:3f: 16:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B0:67:93:2E:50:30:1E:C2:C9:44:16:AD:1E:97:38:BD:D8:AC:05 X509v3 Authority Key Identifier: keyid:39:39:F9:2B:82:5C:E1:10:90:3C:31:D5:22:B0:F5:0C:AF:D7:4A:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:d1:fb:c3:e6:c0:45:71:ce:95:ca:99:eb:54:1d:b8:82:0c: 36:ba:be:2b:86:f3:ba:a0:da:34:0a:e4:41:c2:f4:70:4d:06: 63:27:94:72:20:a5:a6:fe:a3:32:63:bb:a5:06:15:de:04:8b: 5c:0f:44:43:76:f1:9f:a1:bf:b8:4a:bf:c2:52:e4:aa:24:f3: 17:01:1f:e9:48:15:c2:af:9a:93:6c:1f:eb:ab:f9:65:16:40: 85:b7:f3:64:85:97:96:cd:12:50:c9:3f:e7:a2:06:77:de:ee: 8e:2c:42:72:28:f2:83:7e:58:a6:71:14:de:7f:01:72:4d:65: 08:e8:34:df:fc:18:60:18:49:83:e8:ad:8a:ec:e1:fe:c1:2a: f2:9a:30:b2:18:de:ed:0e:76:57:f0:51:8b:14:79:7c:1f:c3: 5a:06:48:03:fb:0a:55:44:b0:b3:67:07:cd:8f:29:66:79:2a: 50:4a:ff:1f:82:dd:5d:e3:cd:84:ab:1b:a4:86:24:1e:5b:c8: 63:0b:45:94:9b:5f:4c:31:3d:ee:bd:da:2d:1b:f4:d2:9c:05: f2:37:20:de:af:9b:30:b2:74:83:00:10:10:aa:c5:eb:7d:db: d5:c5:b7:49:52:07:4e:f3:ba:db:c7:5b:4f:81:1c:57:ef:38: d3:94:12:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6WGXDPWzQ2/EGOIsgogwAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MzlmOTJiODI1Y2UxMTA5MDNjMzFkNTIyYjBmNTBjYWZk NzRhNmYwHhcNMjUxMjIwMDYwMDMwWhcNMjUxMjIxMDYwMDMwWjAzMTEwLwYDVQQD Eyg1MmIwNjc5MzJlNTAzMDFlYzJjOTQ0MTZhZDFlOTczOGJkZDhhYzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAot8e37aMfZC33NI5rVwlFgoJR3x5 dQ+8gGkODT+cPdA5l4NzE8V4L5RbEP/IvgNzyHpOSWQ2LTbkXsq2aRhhDVqOvOzO Zu5GHVo1Aesa6z4YwFUM9AGm+kX6iYbfP6vOWaYZR3xUJ0KGWv5vLxjoeOBw8eL4 orlYAJCqxugpmt1AY7qZE2sxfGiL3shoj1wWAv22KeCerT+88R0ntEV3JG4TtuPQ vuZAQMJmzkJMm+/OBKX41GJZugVyVR1BV9E4XU1aNuEQLcxgq1O+vgkeq9IwVi2T G4jg/KUfV1pjKsbpfsXGr3xQrwb50KIeU3JfXQ6fSjCUFryIlcagOD8WuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKwZ5MuUDAewslEFq0elzi92KwFMB8GA1UdIwQY MBaAFDk5+SuCXOEQkDwx1SKw9Qyv10pvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1RuNUs0SmM0UkNRUERIVklyRDFES19YU204LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9lNzVlNDEtYTgyOC00ZGM1LThlZDMt OWZjMzY0MTFhY2NjLzEvT1RuNUs0SmM0UkNRUERIVklyRDFES19YU204Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9lNzVlNDEtYTgyOC00ZGM1LThlZDMtOWZjMzY0MTFhY2Nj LzEvT1RuNUs0SmM0UkNRUERIVklyRDFES19YU204LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAetH7w+bA RXHOlcqZ61QduIIMNrq+K4bzuqDaNArkQcL0cE0GYyeUciClpv6jMmO7pQYV3gSL XA9EQ3bxn6G/uEq/wlLkqiTzFwEf6UgVwq+ak2wf66v5ZRZAhbfzZIWXls0SUMk/ 56IGd97ujixCcijyg35YpnEU3n8Bck1lCOg03/wYYBhJg+itiuzh/sEq8powshje 7Q52V/BRixR5fB/DWgZIA/sKVUSws2cHzY8pZnkqUEr/H4LdXePNhKsbpIYkHlvI YwtFlJtfTDE97r3aLRv00pwF8jcg3q+bMLJ0gwAQEKrF633b1cW3SVIHTvO628db T4EcV+8405QSZQ== -----END CERTIFICATE-----Generated at Sat Dec 20 13:05:55 2025 by rpki-client