This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c34e04-f7ac-41eb-a561-dde83151ba76/1/otGlH74MLlJmesWiVSySo3nOre4.mft File: otGlH74MLlJmesWiVSySo3nOre4.mft (raw, json) Hash identifier: dhP0XQs55miSkzgSLjSJd1K+ZfNWY7xzs3ieQ8z9i1s= Subject key identifier: 96:82:40:84:49:0E:C1:E3:7C:C2:DE:5D:A0:B1:DF:C7:C9:84:FD:93 Authority key identifier: A2:D1:A5:1F:BE:0C:2E:52:66:7A:C5:A2:55:2C:92:A3:79:CE:AD:EE Certificate issuer: /CN=a2d1a51fbe0c2e52667ac5a2552c92a379ceadee Certificate serial: 019B2E8B9BAB26D54C46016EF63640110469 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otGlH74MLlJmesWiVSySo3nOre4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c34e04-f7ac-41eb-a561-dde83151ba76/1/otGlH74MLlJmesWiVSySo3nOre4.mft Manifest number: 035A Signing time: Wed 17 Dec 2025 23:00:59 +0000 Manifest this update: Wed 17 Dec 2025 23:00:59 +0000 Manifest next update: Thu 18 Dec 2025 23:00:59 +0000 Files and hashes: 1: otGlH74MLlJmesWiVSySo3nOre4.crl (hash: rS/g9bnRDOc98bfR1HY5rbFlTGQwPsozvD5SXEkk93g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c34e04-f7ac-41eb-a561-dde83151ba76/1/otGlH74MLlJmesWiVSySo3nOre4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c34e04-f7ac-41eb-a561-dde83151ba76/1/otGlH74MLlJmesWiVSySo3nOre4.mft rsync://rpki.ripe.net/repository/DEFAULT/otGlH74MLlJmesWiVSySo3nOre4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:8b:9b:ab:26:d5:4c:46:01:6e:f6:36:40:11:04:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2d1a51fbe0c2e52667ac5a2552c92a379ceadee Validity Not Before: Dec 17 23:00:59 2025 GMT Not After : Dec 18 23:00:59 2025 GMT Subject: CN=96824084490ec1e37cc2de5da0b1dfc7c984fd93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c6:b0:7d:c2:41:49:8a:4d:4f:60:9b:aa:bb: 48:78:fb:9f:af:f6:ba:2a:b9:24:d1:6e:29:a2:e6: 92:37:6d:6b:06:32:4a:b8:2a:5d:3f:cf:24:30:2d: af:49:7a:bc:a2:85:28:a0:82:66:70:bd:be:dd:d5: da:a1:9d:42:75:7e:ec:e2:96:ae:b0:9a:b4:ac:10: bf:8b:d0:c1:d7:b2:7a:c6:8a:df:ea:f2:bd:17:c5: 5f:f7:af:f8:3e:ab:e6:f8:f0:5e:04:5e:ff:e0:6a: 0b:4e:21:b2:56:cb:df:f7:5c:57:03:af:b5:db:b1: 19:82:e4:16:80:11:c1:c5:83:6e:63:71:ac:66:5b: 6a:50:c9:38:18:0e:75:57:c2:ed:3d:d8:34:08:2b: 54:bb:fe:ba:6b:b0:29:23:83:f9:8a:7e:76:f2:c1: 82:d3:bb:a3:09:52:c6:c6:0a:90:d8:8d:f0:d6:9e: c3:93:ff:59:85:5a:7e:99:c4:2f:c9:18:b1:72:38: a5:a7:e1:b4:a5:eb:6c:f0:76:90:b0:25:92:ba:50: 6d:6b:80:1e:fb:d7:9d:fe:39:49:45:2e:81:72:96: 7f:4a:02:88:56:11:05:c0:10:c7:2f:7a:ad:94:a5: ca:fc:67:ec:88:80:33:cb:aa:e6:a6:79:e5:60:e8: f7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:82:40:84:49:0E:C1:E3:7C:C2:DE:5D:A0:B1:DF:C7:C9:84:FD:93 X509v3 Authority Key Identifier: keyid:A2:D1:A5:1F:BE:0C:2E:52:66:7A:C5:A2:55:2C:92:A3:79:CE:AD:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otGlH74MLlJmesWiVSySo3nOre4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c34e04-f7ac-41eb-a561-dde83151ba76/1/otGlH74MLlJmesWiVSySo3nOre4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c34e04-f7ac-41eb-a561-dde83151ba76/1/otGlH74MLlJmesWiVSySo3nOre4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:6e:6e:ed:d4:88:26:8c:e5:c5:20:b9:ce:a7:63:79:67:51: 53:78:98:32:e9:a7:ea:68:f9:1b:8e:21:a3:f3:cc:ce:42:f6: 5b:65:ec:b0:c0:91:37:b7:fd:92:d8:f7:95:de:b4:93:13:57: 66:ac:58:1a:ab:c6:ed:c2:31:d7:84:c7:05:ad:0c:94:80:68: 67:4c:2b:58:44:d6:23:db:ae:73:bd:04:35:c8:c0:16:b0:aa: 4b:b2:e9:c7:c9:d4:16:07:1d:0f:c4:f8:94:26:d2:76:69:01: a5:4a:25:8c:74:80:7c:8e:ca:65:a2:99:56:92:05:53:b0:2c: 03:cd:bf:87:48:41:08:72:8f:6e:05:2d:88:b1:14:9f:9a:9b: 8b:30:c7:f5:36:75:8a:03:02:21:09:be:57:5e:31:cc:27:d5: bb:95:e6:77:2c:e6:b6:10:db:6f:45:67:44:bb:3a:61:89:d8: 33:c0:42:5f:ff:63:96:0a:3c:b5:41:b0:0e:e2:e8:23:a3:0a: dd:6b:47:00:0d:24:45:af:c2:8a:2e:e6:e4:9a:34:3c:c7:30: a0:36:02:d8:c0:0a:35:96:cf:56:98:07:55:0d:f5:44:4b:bd: e8:bf:bd:6f:68:0f:e8:08:ec:08:89:dc:a9:0a:5c:2e:ea:e7: 0f:f0:66:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsui5urJtVMRgFu9jZAEQRpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZDFhNTFmYmUwYzJlNTI2NjdhYzVhMjU1MmM5MmEzNzlj ZWFkZWUwHhcNMjUxMjE3MjMwMDU5WhcNMjUxMjE4MjMwMDU5WjAzMTEwLwYDVQQD Eyg5NjgyNDA4NDQ5MGVjMWUzN2NjMmRlNWRhMGIxZGZjN2M5ODRmZDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8awfcJBSYpNT2CbqrtIePufr/a6 Krkk0W4pouaSN21rBjJKuCpdP88kMC2vSXq8ooUooIJmcL2+3dXaoZ1CdX7s4pau sJq0rBC/i9DB17J6xorf6vK9F8Vf96/4Pqvm+PBeBF7/4GoLTiGyVsvf91xXA6+1 27EZguQWgBHBxYNuY3GsZltqUMk4GA51V8LtPdg0CCtUu/66a7ApI4P5in528sGC 07ujCVLGxgqQ2I3w1p7Dk/9ZhVp+mcQvyRixcjilp+G0pets8HaQsCWSulBta4Ae +9ed/jlJRS6BcpZ/SgKIVhEFwBDHL3qtlKXK/GfsiIAzy6rmpnnlYOj3BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJaCQIRJDsHjfMLeXaCx38fJhP2TMB8GA1UdIwQY MBaAFKLRpR++DC5SZnrFolUskqN5zq3uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3RHbEg3NE1MbEptZXNXaVZTeVNvM25PcmU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jMzRlMDQtZjdhYy00MWViLWE1NjEt ZGRlODMxNTFiYTc2LzEvb3RHbEg3NE1MbEptZXNXaVZTeVNvM25PcmU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jMzRlMDQtZjdhYy00MWViLWE1NjEtZGRlODMxNTFiYTc2 LzEvb3RHbEg3NE1MbEptZXNXaVZTeVNvM25PcmU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWm5u7dSI JozlxSC5zqdjeWdRU3iYMumn6mj5G44ho/PMzkL2W2XssMCRN7f9ktj3ld60kxNX ZqxYGqvG7cIx14THBa0MlIBoZ0wrWETWI9uuc70ENcjAFrCqS7Lpx8nUFgcdD8T4 lCbSdmkBpUoljHSAfI7KZaKZVpIFU7AsA82/h0hBCHKPbgUtiLEUn5qbizDH9TZ1 igMCIQm+V14xzCfVu5XmdyzmthDbb0VnRLs6YYnYM8BCX/9jlgo8tUGwDuLoI6MK 3WtHAA0kRa/Cii7m5Jo0PMcwoDYC2MAKNZbPVpgHVQ31REu96L+9b2gP6AjsCInc qQpcLurnD/BmOg== -----END CERTIFICATE-----Generated at Thu Dec 18 05:46:06 2025 by rpki-client