This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft File: 1OTgFewB2mrn2EkW_RrUyqkE3E4.mft (raw, json) Hash identifier: Lrv9X7dyL99heYDdXaCwp1sjIiPRWDp4SsmjoKW8ISo= Subject key identifier: 53:57:C2:4C:80:E2:20:12:9C:E7:C2:F8:C4:CE:BD:37:43:5A:0A:3D Authority key identifier: D4:E4:E0:15:EC:01:DA:6A:E7:D8:49:16:FD:1A:D4:CA:A9:04:DC:4E Certificate issuer: /CN=d4e4e015ec01da6ae7d84916fd1ad4caa904dc4e Certificate serial: 019AF0885D4FA57787A8DDF82FA17F09E324 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft Manifest number: 0E30 Signing time: Fri 05 Dec 2025 22:00:59 +0000 Manifest this update: Fri 05 Dec 2025 22:00:59 +0000 Manifest next update: Sat 06 Dec 2025 22:00:59 +0000 Files and hashes: 1: 1OTgFewB2mrn2EkW_RrUyqkE3E4.crl (hash: 7vUGwLTb6JvtbcQ/Batqt5yiS1nFGQ2mAQfhziriP3c=) 2: Cg7qlLFT5Tw2Rj89YI6LNGMAVC8.roa (hash: RUt6pQHc+8RuyWicYb+I1y3SWfel5InfTPhk0ybD+Y4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.crl rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:5d:4f:a5:77:87:a8:dd:f8:2f:a1:7f:09:e3:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4e4e015ec01da6ae7d84916fd1ad4caa904dc4e Validity Not Before: Dec 5 22:00:59 2025 GMT Not After : Dec 6 22:00:59 2025 GMT Subject: CN=5357c24c80e220129ce7c2f8c4cebd37435a0a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:61:64:42:62:d4:dc:f8:3d:80:07:7b:fd:8f: 65:27:cc:7b:d2:17:41:6a:84:ac:0a:0d:d0:c7:fc: e0:94:a6:f6:9b:26:8e:8a:81:0b:dc:61:ce:19:6d: 8b:64:61:7c:e7:a0:46:c8:62:03:c1:a1:6a:f9:d4: 33:7f:ae:e7:ef:b8:58:a1:8e:ae:ea:08:79:64:6b: e3:27:04:0e:f1:a8:14:73:8b:84:9f:a0:e0:44:65: a8:cc:7d:69:e5:2f:31:1e:7e:0a:2e:fe:dc:f8:fb: 7b:a4:de:8d:67:dc:c0:e0:c5:e3:b0:d4:bc:e9:16: 73:a3:f0:ea:9f:d7:43:25:d8:f9:4b:cf:73:5b:24: 74:c1:a5:f3:9c:64:80:87:a0:39:1f:be:2b:2b:c6: ee:e6:04:b3:1c:0b:36:99:1a:9c:a3:16:04:0c:66: 92:20:a8:22:39:91:ad:ee:cc:47:04:cc:ee:22:4c: 62:da:89:d6:23:1f:68:6c:f0:60:c9:40:44:1a:28: 8d:f1:42:2a:f8:02:4a:23:59:7e:6f:4d:a8:46:d6: 9f:19:a7:0e:31:9b:4e:fd:40:06:6d:d5:d8:15:c4: 3a:e6:88:77:dc:16:32:b3:2d:25:88:1a:a1:ce:c9: 80:5e:d9:d2:59:b3:3c:f2:50:86:87:f1:54:7d:81: 40:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:57:C2:4C:80:E2:20:12:9C:E7:C2:F8:C4:CE:BD:37:43:5A:0A:3D X509v3 Authority Key Identifier: keyid:D4:E4:E0:15:EC:01:DA:6A:E7:D8:49:16:FD:1A:D4:CA:A9:04:DC:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:3c:65:c4:23:61:fb:56:e2:b9:f2:c9:be:6a:d4:99:b2:03: bd:e3:f3:81:d4:e8:76:f4:dc:20:6c:8d:38:bf:e0:3c:10:65: 60:50:06:6b:6a:67:db:b1:50:64:02:67:d3:42:31:4d:4e:f8: d8:bb:ec:79:27:79:be:22:43:d1:97:b8:bd:de:57:8b:35:49: 98:d3:e0:42:5d:1b:89:f1:4e:d3:78:59:05:20:b0:12:1e:b9: 6b:db:3a:28:f9:89:c5:ba:f8:bb:17:c9:db:c2:92:b8:09:f9: 30:ba:4d:6b:dc:34:c9:43:dd:8e:94:55:8b:9f:eb:13:c1:93: 55:58:83:3e:c9:cc:1f:3c:ad:bc:a1:d5:c1:19:e0:0d:73:38: 64:90:ee:24:9f:a6:75:b1:2c:cb:1c:4d:1c:a4:28:6e:fc:cd: c7:6c:22:62:1b:bf:79:cd:2f:53:64:3d:cf:fe:12:b7:80:c0: 48:22:f8:f8:88:3a:f4:a7:c5:e1:75:5c:5d:7d:33:4c:fb:0c: 84:0c:65:9b:4a:02:a5:4c:66:c4:4b:d6:2a:04:09:dd:dc:83: 94:30:81:5f:7b:59:2b:f2:93:8f:88:a1:e8:57:03:21:23:7b: 9b:b9:6d:6c:df:d2:db:18:ae:6e:b5:b2:5b:fb:c1:ce:dc:39: a1:ca:c9:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiF1PpXeHqN34L6F/CeMkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZTRlMDE1ZWMwMWRhNmFlN2Q4NDkxNmZkMWFkNGNhYTkw NGRjNGUwHhcNMjUxMjA1MjIwMDU5WhcNMjUxMjA2MjIwMDU5WjAzMTEwLwYDVQQD Eyg1MzU3YzI0YzgwZTIyMDEyOWNlN2MyZjhjNGNlYmQzNzQzNWEwYTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2FkQmLU3Pg9gAd7/Y9lJ8x70hdB aoSsCg3Qx/zglKb2myaOioEL3GHOGW2LZGF856BGyGIDwaFq+dQzf67n77hYoY6u 6gh5ZGvjJwQO8agUc4uEn6DgRGWozH1p5S8xHn4KLv7c+Pt7pN6NZ9zA4MXjsNS8 6RZzo/Dqn9dDJdj5S89zWyR0waXznGSAh6A5H74rK8bu5gSzHAs2mRqcoxYEDGaS IKgiOZGt7sxHBMzuIkxi2onWIx9obPBgyUBEGiiN8UIq+AJKI1l+b02oRtafGacO MZtO/UAGbdXYFcQ65oh33BYysy0liBqhzsmAXtnSWbM88lCGh/FUfYFALwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFNXwkyA4iASnOfC+MTOvTdDWgo9MB8GA1UdIwQY MBaAFNTk4BXsAdpq59hJFv0a1MqpBNxOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU9UZ0Zld0IybXJuMkVrV19SclV5cWtFM0U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9iZGQ4N2MtYTZkOS00YmMyLTlkODct MGE4MTJiYjE4ZjM1LzEvMU9UZ0Zld0IybXJuMkVrV19SclV5cWtFM0U0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9iZGQ4N2MtYTZkOS00YmMyLTlkODctMGE4MTJiYjE4ZjM1 LzEvMU9UZ0Zld0IybXJuMkVrV19SclV5cWtFM0U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqjxlxCNh +1biufLJvmrUmbIDvePzgdTodvTcIGyNOL/gPBBlYFAGa2pn27FQZAJn00IxTU74 2LvseSd5viJD0Ze4vd5XizVJmNPgQl0bifFO03hZBSCwEh65a9s6KPmJxbr4uxfJ 28KSuAn5MLpNa9w0yUPdjpRVi5/rE8GTVViDPsnMHzytvKHVwRngDXM4ZJDuJJ+m dbEsyxxNHKQobvzNx2wiYhu/ec0vU2Q9z/4St4DASCL4+Ig69KfF4XVcXX0zTPsM hAxlm0oCpUxmxEvWKgQJ3dyDlDCBX3tZK/KTj4ih6FcDISN7m7ltbN/S2xiubrWy W/vBztw5ocrJUA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:54 2025 by rpki-client