This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft File: wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft (raw, json) Hash identifier: 5CLH6bIl5VjcF1p6B4J4R4z55uFL2RUIlH7m0ZPO0tM= Subject key identifier: 2A:07:38:7B:7F:DC:FE:56:A7:60:6A:0D:FC:88:3F:5E:5B:FA:2F:2D Authority key identifier: C0:EB:66:8B:73:5A:18:39:37:4E:48:F7:9C:B2:43:6D:BF:41:7C:AA Certificate issuer: /CN=c0eb668b735a1839374e48f79cb2436dbf417caa Certificate serial: 019B2B8A849438F46011DAA05F53F2FC6674 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft Manifest number: 115B Signing time: Wed 17 Dec 2025 09:00:56 +0000 Manifest this update: Wed 17 Dec 2025 09:00:56 +0000 Manifest next update: Thu 18 Dec 2025 09:00:56 +0000 Files and hashes: 1: HwLDpTIt6plI2sCVLbeUjnqOAJc.roa (hash: yvIMoIjc3gOAvuIICfd6lLbgjDWXL7Ecab2rJN91n/I=) 2: wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl (hash: Oco9kFfiNGy6N8NjJogmh4MV4sSyCkrHWbBWhfnaf24=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:84:94:38:f4:60:11:da:a0:5f:53:f2:fc:66:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0eb668b735a1839374e48f79cb2436dbf417caa Validity Not Before: Dec 17 09:00:56 2025 GMT Not After : Dec 18 09:00:56 2025 GMT Subject: CN=2a07387b7fdcfe56a7606a0dfc883f5e5bfa2f2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:77:dd:e7:23:e5:fe:80:83:90:57:7f:f0:f3: 95:ec:2d:41:f0:5e:82:1a:73:2b:78:98:5f:46:6c: f7:f3:77:40:5a:b6:95:3c:dd:cd:26:b4:ce:d2:24: b9:17:7e:a4:3d:cc:ec:98:9d:5b:85:9b:0a:e9:88: 76:c8:80:23:62:d5:e2:32:ef:15:38:be:ba:35:67: 17:89:1d:e8:9b:85:56:88:a4:18:5d:2c:55:a2:fd: 3b:6d:e9:c7:a3:5e:11:8c:ad:98:24:84:81:56:de: d2:7b:25:25:fd:cb:76:49:66:5a:23:c2:cb:97:c6: 85:ea:57:21:f0:6c:b5:1d:29:0f:29:57:6f:14:b2: 8b:f2:1f:74:45:ec:02:cf:d1:91:43:a7:42:26:8b: 6b:33:59:df:57:f2:43:0b:96:a8:8c:06:95:5a:6c: 45:66:73:e3:a3:8b:b8:91:87:63:79:cc:9a:a6:f3: d0:9b:15:dd:bd:9f:df:b7:95:43:54:e0:c7:22:c5: 37:5d:3d:26:75:a3:da:5f:56:36:0e:9f:97:0c:e7: 7a:20:be:37:9c:d8:e3:3b:56:ae:6a:e4:18:0f:2c: fe:4a:e5:53:9b:25:48:23:8b:5a:21:f6:6b:54:51: 72:d4:ea:fa:5a:ce:d1:65:46:a8:86:c2:ff:9e:63: a5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:07:38:7B:7F:DC:FE:56:A7:60:6A:0D:FC:88:3F:5E:5B:FA:2F:2D X509v3 Authority Key Identifier: keyid:C0:EB:66:8B:73:5A:18:39:37:4E:48:F7:9C:B2:43:6D:BF:41:7C:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:4f:fe:a0:22:31:4d:3a:a7:43:64:7a:ee:fd:7e:a4:2d:36: 6b:2e:c9:6b:6b:4d:a9:da:2e:47:ec:c2:0c:2c:3d:cc:92:d9: b2:aa:54:6a:2f:c8:f1:19:ac:81:12:a5:86:aa:3c:33:a4:07: d9:5c:63:7e:1f:4f:3b:4e:32:1b:4b:22:a9:e3:38:56:b9:68: d2:8b:8c:94:0d:c0:df:10:7b:89:62:6e:55:fd:fd:75:2d:82: ae:ae:0c:56:ad:e5:33:d3:05:2f:81:58:11:49:b0:bd:2a:ab: b1:1a:aa:cd:b1:26:86:1b:82:a2:3b:a2:e3:57:48:70:6b:dc: 27:60:5c:06:63:ab:c8:dc:ae:f1:6e:af:3e:d1:b9:74:ab:5e: 6f:6a:fb:03:ed:ae:c9:62:e9:72:76:c6:5e:4e:26:14:b8:fe: 63:02:d1:14:87:76:4f:b1:91:cb:9d:00:f4:90:48:18:f4:16: be:a5:29:9e:49:9b:85:89:4b:91:52:60:08:af:ca:03:6b:4e: 34:64:d7:46:da:7c:4c:aa:cd:ef:33:bd:3a:db:6c:70:2d:70: f7:72:03:5b:40:76:ab:e8:5d:1f:b9:e0:50:df:56:f0:45:53: c5:b4:39:25:9d:20:a5:a5:dc:be:55:48:2c:cb:82:78:7e:e8: 4a:55:dd:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrioSUOPRgEdqgX1Py/GZ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZWI2NjhiNzM1YTE4MzkzNzRlNDhmNzljYjI0MzZkYmY0 MTdjYWEwHhcNMjUxMjE3MDkwMDU2WhcNMjUxMjE4MDkwMDU2WjAzMTEwLwYDVQQD EygyYTA3Mzg3YjdmZGNmZTU2YTc2MDZhMGRmYzg4M2Y1ZTViZmEyZjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnfd5yPl/oCDkFd/8POV7C1B8F6C GnMreJhfRmz383dAWraVPN3NJrTO0iS5F36kPczsmJ1bhZsK6Yh2yIAjYtXiMu8V OL66NWcXiR3om4VWiKQYXSxVov07benHo14RjK2YJISBVt7SeyUl/ct2SWZaI8LL l8aF6lch8Gy1HSkPKVdvFLKL8h90RewCz9GRQ6dCJotrM1nfV/JDC5aojAaVWmxF ZnPjo4u4kYdjecyapvPQmxXdvZ/ft5VDVODHIsU3XT0mdaPaX1Y2Dp+XDOd6IL43 nNjjO1auauQYDyz+SuVTmyVII4taIfZrVFFy1Or6Ws7RZUaohsL/nmOlXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCoHOHt/3P5Wp2BqDfyIP15b+i8tMB8GA1UdIwQY MBaAFMDrZotzWhg5N05I95yyQ22/QXyqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd090bWkzTmFHRGszVGtqM25MSkRiYjlCZktvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC82OGI1MjEtYzc5MC00OTU3LTllNTIt MmQyNmYxYjU2ZTIwLzEvd090bWkzTmFHRGszVGtqM25MSkRiYjlCZktvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC82OGI1MjEtYzc5MC00OTU3LTllNTItMmQyNmYxYjU2ZTIw LzEvd090bWkzTmFHRGszVGtqM25MSkRiYjlCZktvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxk/+oCIx TTqnQ2R67v1+pC02ay7Ja2tNqdouR+zCDCw9zJLZsqpUai/I8RmsgRKlhqo8M6QH 2Vxjfh9PO04yG0siqeM4Vrlo0ouMlA3A3xB7iWJuVf39dS2Crq4MVq3lM9MFL4FY EUmwvSqrsRqqzbEmhhuCojui41dIcGvcJ2BcBmOryNyu8W6vPtG5dKteb2r7A+2u yWLpcnbGXk4mFLj+YwLRFId2T7GRy50A9JBIGPQWvqUpnkmbhYlLkVJgCK/KA2tO NGTXRtp8TKrN7zO9OttscC1w93IDW0B2q+hdH7ngUN9W8EVTxbQ5JZ0gpaXcvlVI LMuCeH7oSlXdEQ== -----END CERTIFICATE-----Generated at Wed Dec 17 18:12:50 2025 by rpki-client