This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft File: OtL3zCdTMJgzAxuolGSagM_7E-g.mft (raw, json) Hash identifier: qpKLE9ggjyg5elyYl8yLpQs8pCtxKfSO41IrjfxgPp8= Subject key identifier: F3:51:35:89:3E:E1:A4:93:EC:62:18:4D:B8:BE:BC:98:56:84:5D:47 Authority key identifier: 3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8 Certificate issuer: /CN=3ad2f7cc2753309833031ba894649a80cffb13e8 Certificate serial: 019B360E570DB03EE27BDB2B3ADBA72B66C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 10:01:07 +0000 Manifest this update: Fri 19 Dec 2025 10:01:07 +0000 Manifest next update: Sat 20 Dec 2025 10:01:07 +0000 Files and hashes: 1: OtL3zCdTMJgzAxuolGSagM_7E-g.crl (hash: dYRjdBF7dWoeq1VrtRqdHx18mAJtN+N0Yb8FX58l2VI=) 2: u1VOczY0GtYqmMxkx1bvtbbyBno.roa (hash: ZYoGR8269MdLBwkunDrMw1B9ylh+XJUv3tEqHGtF+N8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:57:0d:b0:3e:e2:7b:db:2b:3a:db:a7:2b:66:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad2f7cc2753309833031ba894649a80cffb13e8 Validity Not Before: Dec 19 10:01:07 2025 GMT Not After : Dec 20 10:01:07 2025 GMT Subject: CN=f35135893ee1a493ec62184db8bebc9856845d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:23:52:8d:d0:24:21:4e:dc:d7:fd:a8:0e:4b: fa:23:f9:3d:3c:0d:b4:6d:12:fd:73:72:70:ff:e8: 2d:41:02:45:9b:fb:60:b1:24:44:78:fb:d7:1b:58: 40:b0:a9:4f:5b:ce:2f:7e:e7:9c:ac:d7:02:e4:c2: 06:ba:aa:28:e1:24:a3:2a:4d:13:29:db:46:62:e1: 02:91:8b:a3:ed:92:04:6a:aa:59:52:ed:8f:44:06: 9a:19:e9:78:76:59:32:91:53:8f:4c:16:5a:c7:3d: 0a:08:b5:10:bb:32:db:b1:ce:6e:c1:19:4b:ae:2d: d0:ca:ea:c5:27:ab:27:ec:ba:20:b5:89:ac:a7:64: 4d:ef:00:85:41:0b:c4:b9:33:fc:83:2e:e9:fc:4e: 71:93:77:23:88:f8:5d:cf:67:14:eb:a8:e6:e4:cd: 19:63:7d:22:f6:dc:cb:4d:e9:6d:ad:57:cb:d8:5c: 91:b1:d7:56:36:9e:26:2e:8c:9c:33:c7:0f:c5:57: ec:2a:36:6a:3b:19:43:f6:39:e9:a4:3d:aa:a9:9e: d9:32:4a:12:9f:e9:84:5d:81:8b:63:1f:b1:cc:1d: 74:3f:28:7e:21:76:1c:94:c6:99:b6:b2:17:a0:01: 7c:80:5b:69:8b:e8:75:8b:ac:03:d5:05:34:c5:85: 17:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:51:35:89:3E:E1:A4:93:EC:62:18:4D:B8:BE:BC:98:56:84:5D:47 X509v3 Authority Key Identifier: keyid:3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:6d:ac:b5:87:94:8a:11:a9:7a:4b:c3:19:8c:31:3c:ab:06: bd:c2:5d:eb:c0:66:e9:7c:80:cf:19:41:fb:70:c1:75:d2:a7: 2f:93:a2:b0:3d:b4:e1:46:c2:33:e3:9c:0d:24:e4:b3:2e:d0: 4f:73:a1:ac:f8:e3:5d:93:4e:b9:ea:0f:a1:5c:29:3b:69:73: d8:7e:c1:d7:d4:0a:d1:de:97:40:cc:a9:10:01:99:85:9a:a6: a8:d2:e9:3a:27:a7:de:21:b5:eb:f9:c5:8b:18:8f:ea:e1:56: 12:86:00:1d:27:04:31:f0:2a:e5:d7:16:27:9b:36:85:c0:42: 52:da:ca:82:36:9b:15:1d:69:8b:84:f8:4a:6d:a4:bd:80:ca: 21:c1:ed:77:ac:f0:11:1f:66:0a:ea:4e:e8:99:1e:71:76:4d: 5f:39:05:b4:33:11:b0:d5:42:17:2e:0b:93:e5:c7:9c:02:f9: 3e:61:41:4e:27:8e:64:04:9b:0a:82:6c:7a:0d:62:98:8c:af: 67:b8:2e:b6:18:f7:44:d7:72:3b:6a:00:fd:db:b9:c7:b4:87: 28:39:13:3f:fb:a4:fb:9d:8b:eb:a7:e1:b4:44:90:72:70:f6: b2:f4:d1:a3:95:48:57:3e:3e:8a:75:72:f0:3d:fe:7b:96:57: 32:05:e2:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DlcNsD7ie9srOtunK2bCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDJmN2NjMjc1MzMwOTgzMzAzMWJhODk0NjQ5YTgwY2Zm YjEzZTgwHhcNMjUxMjE5MTAwMTA3WhcNMjUxMjIwMTAwMTA3WjAzMTEwLwYDVQQD EyhmMzUxMzU4OTNlZTFhNDkzZWM2MjE4NGRiOGJlYmM5ODU2ODQ1ZDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiNSjdAkIU7c1/2oDkv6I/k9PA20 bRL9c3Jw/+gtQQJFm/tgsSREePvXG1hAsKlPW84vfuecrNcC5MIGuqoo4SSjKk0T KdtGYuECkYuj7ZIEaqpZUu2PRAaaGel4dlkykVOPTBZaxz0KCLUQuzLbsc5uwRlL ri3QyurFJ6sn7LogtYmsp2RN7wCFQQvEuTP8gy7p/E5xk3cjiPhdz2cU66jm5M0Z Y30i9tzLTeltrVfL2FyRsddWNp4mLoycM8cPxVfsKjZqOxlD9jnppD2qqZ7ZMkoS n+mEXYGLYx+xzB10Pyh+IXYclMaZtrIXoAF8gFtpi+h1i6wD1QU0xYUXowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPNRNYk+4aST7GIYTbi+vJhWhF1HMB8GA1UdIwQY MBaAFDrS98wnUzCYMwMbqJRkmoDP+xPoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RMM3pDZFRNSmd6QXh1b2xHU2FnTV83RS1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82ZWJjMWMtNDJhYi00NTU5LTg0YjEt ZjZhZDkzMzBjNGIwLzEvT3RMM3pDZFRNSmd6QXh1b2xHU2FnTV83RS1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS82ZWJjMWMtNDJhYi00NTU5LTg0YjEtZjZhZDkzMzBjNGIw LzEvT3RMM3pDZFRNSmd6QXh1b2xHU2FnTV83RS1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIG2stYeU ihGpekvDGYwxPKsGvcJd68Bm6XyAzxlB+3DBddKnL5OisD204UbCM+OcDSTksy7Q T3OhrPjjXZNOueoPoVwpO2lz2H7B19QK0d6XQMypEAGZhZqmqNLpOien3iG16/nF ixiP6uFWEoYAHScEMfAq5dcWJ5s2hcBCUtrKgjabFR1pi4T4Sm2kvYDKIcHtd6zw ER9mCupO6JkecXZNXzkFtDMRsNVCFy4Lk+XHnAL5PmFBTieOZASbCoJseg1imIyv Z7guthj3RNdyO2oA/du5x7SHKDkTP/uk+52L66fhtESQcnD2svTRo5VIVz4+inVy 8D3+e5ZXMgXiPg== -----END CERTIFICATE-----Generated at Fri Dec 19 12:55:37 2025 by rpki-client