This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft File: wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft (raw, json) Hash identifier: 5cCaNniIjA+H0Y4eHW8FWBWenmLaEedwYl5JU7Fo3+4= Subject key identifier: 67:C2:F3:5C:D5:55:9C:EC:45:02:7D:02:6F:C0:8F:5C:B8:37:9C:C1 Authority key identifier: C0:EB:66:8B:73:5A:18:39:37:4E:48:F7:9C:B2:43:6D:BF:41:7C:AA Certificate issuer: /CN=c0eb668b735a1839374e48f79cb2436dbf417caa Certificate serial: 019AF19B43CFB98D0891BBBE865D41ED9775 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft Manifest number: 113D Signing time: Sat 06 Dec 2025 03:01:15 +0000 Manifest this update: Sat 06 Dec 2025 03:01:15 +0000 Manifest next update: Sun 07 Dec 2025 03:01:15 +0000 Files and hashes: 1: HwLDpTIt6plI2sCVLbeUjnqOAJc.roa (hash: yvIMoIjc3gOAvuIICfd6lLbgjDWXL7Ecab2rJN91n/I=) 2: wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl (hash: huJGuuMGbx/VpsHEAevo3DDGsg/Sl0qZanG/IUYqBDE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:43:cf:b9:8d:08:91:bb:be:86:5d:41:ed:97:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0eb668b735a1839374e48f79cb2436dbf417caa Validity Not Before: Dec 6 03:01:15 2025 GMT Not After : Dec 7 03:01:15 2025 GMT Subject: CN=67c2f35cd5559cec45027d026fc08f5cb8379cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0b:d8:b8:b4:aa:cb:02:26:d3:95:f3:cb:f7: 51:bf:88:53:0f:87:88:aa:17:1a:b8:56:f7:73:78: b7:43:2f:d1:21:6f:1a:0d:bd:6a:f3:49:59:a3:08: 39:44:e9:57:a6:1a:48:a4:a1:ef:35:ef:26:9e:3c: 3c:3c:06:ee:67:30:e3:d9:38:ff:86:24:3a:8c:1f: ab:62:58:a2:02:2b:1a:b8:c5:23:7b:11:24:d7:0e: 72:ac:23:bc:5c:64:5f:60:2c:71:d6:05:87:34:0c: 83:67:36:61:df:56:40:89:7a:26:38:e1:88:8c:08: 27:16:8f:d6:f5:e0:5f:7b:2f:66:a7:8f:04:90:aa: e7:5a:fb:58:19:01:f0:80:19:76:32:84:70:c8:db: 60:8e:71:90:57:5d:fd:2a:93:44:55:45:69:39:96: 1b:37:5c:c1:06:94:3d:8d:6c:ac:db:b1:e9:52:56: ff:99:42:b4:6d:7b:34:43:88:ab:fa:16:e6:14:be: 88:51:af:f1:86:84:99:5d:4f:02:dd:32:da:80:08: 22:67:75:8c:18:b4:72:1b:26:6d:91:8c:50:9e:02: 96:e4:07:af:69:c6:b0:98:a4:95:f2:82:34:80:4c: 1b:9d:04:3b:93:1e:ce:73:54:84:1b:6e:46:a9:7c: cb:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:C2:F3:5C:D5:55:9C:EC:45:02:7D:02:6F:C0:8F:5C:B8:37:9C:C1 X509v3 Authority Key Identifier: keyid:C0:EB:66:8B:73:5A:18:39:37:4E:48:F7:9C:B2:43:6D:BF:41:7C:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:8f:02:d2:c9:f1:41:4e:60:bf:31:21:a2:b4:3c:db:55:b5: c3:02:2e:5c:a8:50:35:a2:89:b2:7d:aa:37:38:00:3c:9e:dd: 2b:c8:6d:97:96:f9:74:1d:70:4f:09:17:39:d5:45:91:9d:eb: 0f:a7:4d:b5:dc:4e:c0:88:12:dc:3a:b7:02:be:02:49:da:08: 78:b9:23:29:ba:ad:4b:c1:71:2b:f0:e0:ce:5e:94:13:17:3c: d4:52:fd:89:e4:4f:68:4e:e1:6a:e9:60:62:67:17:52:d7:9d: 8a:38:99:16:87:2a:e6:d2:bb:93:14:3a:14:15:0a:8b:7d:01: 4c:5b:f6:1d:1b:ac:28:34:12:cb:94:ae:39:74:57:52:e6:1f: 55:eb:52:40:ae:13:09:31:bc:fb:44:6e:b0:c2:af:ff:f9:fb: a2:8c:e8:13:de:e3:74:e9:dd:15:63:c5:db:73:fb:dd:a0:7b: 5c:b9:52:90:08:a2:73:0e:c8:7d:8a:9f:57:4b:ae:de:50:6a: fc:66:14:fe:c8:ec:aa:ca:24:c4:e2:33:ee:24:4e:1b:d1:c0: d2:d6:8f:c8:3c:4a:99:dd:5d:ae:48:94:fb:66:27:9c:39:f1: 80:a4:14:04:72:f3:28:76:95:9d:d0:ab:06:15:02:df:86:e4: 69:27:49:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0PPuY0Ikbu+hl1B7Zd1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZWI2NjhiNzM1YTE4MzkzNzRlNDhmNzljYjI0MzZkYmY0 MTdjYWEwHhcNMjUxMjA2MDMwMTE1WhcNMjUxMjA3MDMwMTE1WjAzMTEwLwYDVQQD Eyg2N2MyZjM1Y2Q1NTU5Y2VjNDUwMjdkMDI2ZmMwOGY1Y2I4Mzc5Y2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQvYuLSqywIm05Xzy/dRv4hTD4eI qhcauFb3c3i3Qy/RIW8aDb1q80lZowg5ROlXphpIpKHvNe8mnjw8PAbuZzDj2Tj/ hiQ6jB+rYliiAisauMUjexEk1w5yrCO8XGRfYCxx1gWHNAyDZzZh31ZAiXomOOGI jAgnFo/W9eBfey9mp48EkKrnWvtYGQHwgBl2MoRwyNtgjnGQV139KpNEVUVpOZYb N1zBBpQ9jWys27HpUlb/mUK0bXs0Q4ir+hbmFL6IUa/xhoSZXU8C3TLagAgiZ3WM GLRyGyZtkYxQngKW5AevacawmKSV8oI0gEwbnQQ7kx7Oc1SEG25GqXzLCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGfC81zVVZzsRQJ9Am/Aj1y4N5zBMB8GA1UdIwQY MBaAFMDrZotzWhg5N05I95yyQ22/QXyqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd090bWkzTmFHRGszVGtqM25MSkRiYjlCZktvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC82OGI1MjEtYzc5MC00OTU3LTllNTIt MmQyNmYxYjU2ZTIwLzEvd090bWkzTmFHRGszVGtqM25MSkRiYjlCZktvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC82OGI1MjEtYzc5MC00OTU3LTllNTItMmQyNmYxYjU2ZTIw LzEvd090bWkzTmFHRGszVGtqM25MSkRiYjlCZktvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0I8C0snx QU5gvzEhorQ821W1wwIuXKhQNaKJsn2qNzgAPJ7dK8htl5b5dB1wTwkXOdVFkZ3r D6dNtdxOwIgS3Dq3Ar4CSdoIeLkjKbqtS8FxK/Dgzl6UExc81FL9ieRPaE7haulg YmcXUtedijiZFocq5tK7kxQ6FBUKi30BTFv2HRusKDQSy5SuOXRXUuYfVetSQK4T CTG8+0RusMKv//n7oozoE97jdOndFWPF23P73aB7XLlSkAiicw7IfYqfV0uu3lBq /GYU/sjsqsokxOIz7iROG9HA0taPyDxKmd1drkiU+2YnnDnxgKQUBHLzKHaVndCr BhUC34bkaSdJ1Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:49 2025 by rpki-client