This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c34e04-f7ac-41eb-a561-dde83151ba76/1/otGlH74MLlJmesWiVSySo3nOre4.mft File: otGlH74MLlJmesWiVSySo3nOre4.mft (raw, json) Hash identifier: 8D8UhrvCgjv9yEmO9qwHAqal05Ngw/ZcllH5+R8PcsQ= Subject key identifier: 11:68:6F:57:6D:69:8A:51:46:2F:7F:6F:EB:F8:25:98:9D:B5:F5:8D Authority key identifier: A2:D1:A5:1F:BE:0C:2E:52:66:7A:C5:A2:55:2C:92:A3:79:CE:AD:EE Certificate issuer: /CN=a2d1a51fbe0c2e52667ac5a2552c92a379ceadee Certificate serial: 019AF0BEDCFFC2F0C0A8931898EA27FDE50C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otGlH74MLlJmesWiVSySo3nOre4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c34e04-f7ac-41eb-a561-dde83151ba76/1/otGlH74MLlJmesWiVSySo3nOre4.mft Manifest number: 033A Signing time: Fri 05 Dec 2025 23:00:31 +0000 Manifest this update: Fri 05 Dec 2025 23:00:31 +0000 Manifest next update: Sat 06 Dec 2025 23:00:31 +0000 Files and hashes: 1: otGlH74MLlJmesWiVSySo3nOre4.crl (hash: D6FMRWvjBcyu3k63FWtbJK811eBV3AEgIRvIB4TSYCc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c34e04-f7ac-41eb-a561-dde83151ba76/1/otGlH74MLlJmesWiVSySo3nOre4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c34e04-f7ac-41eb-a561-dde83151ba76/1/otGlH74MLlJmesWiVSySo3nOre4.mft rsync://rpki.ripe.net/repository/DEFAULT/otGlH74MLlJmesWiVSySo3nOre4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:dc:ff:c2:f0:c0:a8:93:18:98:ea:27:fd:e5:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2d1a51fbe0c2e52667ac5a2552c92a379ceadee Validity Not Before: Dec 5 23:00:31 2025 GMT Not After : Dec 6 23:00:31 2025 GMT Subject: CN=11686f576d698a51462f7f6febf825989db5f58d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:10:83:83:ad:40:a7:af:82:7e:7f:1a:87:3d: e2:1a:76:f7:72:6d:29:2b:8e:b3:a3:79:d1:c1:44: d9:26:3f:b6:e9:b5:a9:58:b2:18:6b:af:1d:aa:d8: 6a:2c:fa:cf:31:3a:e0:59:24:c7:b5:47:13:a2:05: 36:a3:97:38:ac:c4:c4:10:7c:1d:c5:c0:51:4f:ca: fb:0d:9a:7f:63:03:10:7e:c0:59:1a:9b:a0:f6:21: 84:8c:5a:17:b4:c1:bb:48:ac:f9:e7:c0:a1:7f:8a: f9:a6:73:b5:76:78:e1:d2:b5:46:24:d2:35:cc:91: 83:85:61:46:b8:32:3b:12:10:02:51:c3:40:af:d3: d2:19:ec:28:5c:af:6f:83:43:8d:19:76:e4:84:96: 22:7a:c8:fe:46:e9:bc:2e:6d:af:b0:2f:41:00:f8: d0:fb:44:29:d4:ac:10:96:2b:0e:83:c1:29:6b:cf: b0:25:27:8b:45:c0:13:b2:c3:74:a3:e8:5c:3e:9d: d7:5c:d1:2c:41:9f:8a:0c:f3:3e:6e:1d:5a:7f:c8: 08:15:a3:47:86:6d:fd:4c:da:68:67:87:9a:02:7a: f3:3c:d0:65:67:cf:2f:b7:1c:32:5f:a8:f5:f6:32: 63:a8:0e:22:52:08:2b:25:e4:bf:e9:9a:55:38:a2: 80:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:68:6F:57:6D:69:8A:51:46:2F:7F:6F:EB:F8:25:98:9D:B5:F5:8D X509v3 Authority Key Identifier: keyid:A2:D1:A5:1F:BE:0C:2E:52:66:7A:C5:A2:55:2C:92:A3:79:CE:AD:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otGlH74MLlJmesWiVSySo3nOre4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c34e04-f7ac-41eb-a561-dde83151ba76/1/otGlH74MLlJmesWiVSySo3nOre4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c34e04-f7ac-41eb-a561-dde83151ba76/1/otGlH74MLlJmesWiVSySo3nOre4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:7e:37:d3:6a:53:b9:14:0e:50:4b:b5:94:87:49:21:b5:68: dc:f7:60:79:e6:16:51:6f:4b:60:d9:2c:6f:d1:ef:3c:44:de: e9:38:76:3f:1e:d8:fe:a7:f2:51:b7:af:df:e1:bf:e9:81:1a: 6d:41:c9:f9:91:6f:a1:bc:19:f3:18:5f:12:8b:01:ef:2b:d8: 90:ce:8f:a2:3e:0c:b2:74:09:71:28:9d:00:0b:fe:a0:8d:15: 08:e9:8b:86:b1:d7:8c:ad:79:ff:2e:b6:61:e5:c4:ad:8b:1c: 2a:2b:51:ab:93:46:05:1c:49:a4:65:ae:e2:ad:3b:e2:f5:53: fc:0b:2c:58:32:54:72:85:6d:83:3e:e3:a9:98:b7:72:66:bb: 1c:2a:47:b9:07:38:eb:94:3c:65:e9:72:29:8b:78:65:4a:32: 16:3b:cf:75:de:da:8d:d3:ba:30:c2:e4:64:0f:87:f2:bc:9e: a5:d5:24:ca:5e:d6:e4:c1:3f:c3:82:d2:c7:52:55:b7:38:08: 3a:38:29:68:23:53:73:3a:4d:ff:8e:e7:ea:39:ef:42:39:ec: d1:29:ca:5b:b7:50:bd:78:df:63:3b:6d:a2:3a:96:37:fa:f3: 1b:21:6f:bb:34:d6:ca:4b:f1:3f:bb:b6:24:77:40:15:1a:33: 53:26:d2:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvtz/wvDAqJMYmOon/eUMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZDFhNTFmYmUwYzJlNTI2NjdhYzVhMjU1MmM5MmEzNzlj ZWFkZWUwHhcNMjUxMjA1MjMwMDMxWhcNMjUxMjA2MjMwMDMxWjAzMTEwLwYDVQQD EygxMTY4NmY1NzZkNjk4YTUxNDYyZjdmNmZlYmY4MjU5ODlkYjVmNThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBCDg61Ap6+Cfn8ahz3iGnb3cm0p K46zo3nRwUTZJj+26bWpWLIYa68dqthqLPrPMTrgWSTHtUcTogU2o5c4rMTEEHwd xcBRT8r7DZp/YwMQfsBZGpug9iGEjFoXtMG7SKz558Chf4r5pnO1dnjh0rVGJNI1 zJGDhWFGuDI7EhACUcNAr9PSGewoXK9vg0ONGXbkhJYiesj+Rum8Lm2vsC9BAPjQ +0Qp1KwQlisOg8Epa8+wJSeLRcATssN0o+hcPp3XXNEsQZ+KDPM+bh1af8gIFaNH hm39TNpoZ4eaAnrzPNBlZ88vtxwyX6j19jJjqA4iUggrJeS/6ZpVOKKASwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFob1dtaYpRRi9/b+v4JZidtfWNMB8GA1UdIwQY MBaAFKLRpR++DC5SZnrFolUskqN5zq3uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3RHbEg3NE1MbEptZXNXaVZTeVNvM25PcmU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jMzRlMDQtZjdhYy00MWViLWE1NjEt ZGRlODMxNTFiYTc2LzEvb3RHbEg3NE1MbEptZXNXaVZTeVNvM25PcmU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jMzRlMDQtZjdhYy00MWViLWE1NjEtZGRlODMxNTFiYTc2 LzEvb3RHbEg3NE1MbEptZXNXaVZTeVNvM25PcmU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQn4302pT uRQOUEu1lIdJIbVo3PdgeeYWUW9LYNksb9HvPETe6Th2Px7Y/qfyUbev3+G/6YEa bUHJ+ZFvobwZ8xhfEosB7yvYkM6Poj4MsnQJcSidAAv+oI0VCOmLhrHXjK15/y62 YeXErYscKitRq5NGBRxJpGWu4q074vVT/AssWDJUcoVtgz7jqZi3cma7HCpHuQc4 65Q8ZelyKYt4ZUoyFjvPdd7ajdO6MMLkZA+H8ryepdUkyl7W5ME/w4LSx1JVtzgI OjgpaCNTczpN/47n6jnvQjns0SnKW7dQvXjfYzttojqWN/rzGyFvuzTWykvxP7u2 JHdAFRozUybSEg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:57 2025 by rpki-client