This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft File: OtL3zCdTMJgzAxuolGSagM_7E-g.mft (raw, json) Hash identifier: e0roYddmB+3KIC66Eu03B4KG7AugwT1M+k/uKdbENZY= Subject key identifier: B8:12:17:01:A8:09:4E:4D:37:3B:3D:5D:CF:D7:94:FB:3D:C1:5E:FB Authority key identifier: 3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8 Certificate issuer: /CN=3ad2f7cc2753309833031ba894649a80cffb13e8 Certificate serial: 019AF276BFED1B25492688A108F2CD7ED014 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 07:00:59 +0000 Manifest this update: Sat 06 Dec 2025 07:00:59 +0000 Manifest next update: Sun 07 Dec 2025 07:00:59 +0000 Files and hashes: 1: OtL3zCdTMJgzAxuolGSagM_7E-g.crl (hash: eda1r7n45N5NM+UfF3QeT29MMfG+nehJPU3BEtersHo=) 2: u1VOczY0GtYqmMxkx1bvtbbyBno.roa (hash: ZYoGR8269MdLBwkunDrMw1B9ylh+XJUv3tEqHGtF+N8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:bf:ed:1b:25:49:26:88:a1:08:f2:cd:7e:d0:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad2f7cc2753309833031ba894649a80cffb13e8 Validity Not Before: Dec 6 07:00:59 2025 GMT Not After : Dec 7 07:00:59 2025 GMT Subject: CN=b8121701a8094e4d373b3d5dcfd794fb3dc15efb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c1:b3:3a:e9:4f:b5:91:87:54:f4:db:92:7b: 32:43:a4:f6:de:07:94:28:6a:f3:69:51:9e:04:05: 85:13:1d:c5:af:fa:ac:95:d9:45:cb:b4:1d:8b:d2: 14:7a:e6:a5:de:72:f0:9f:08:bd:84:20:b5:23:76: 6e:c2:e0:03:73:d3:96:86:eb:c2:58:1e:33:81:d6: 83:67:25:7f:0a:c5:41:eb:76:76:b1:9d:d0:d8:78: ea:06:f2:38:b4:20:1d:45:0b:fe:9e:94:ce:94:27: c2:0a:ca:5e:1e:10:c3:58:53:81:80:ac:39:95:95: 72:fb:08:21:e0:ea:3a:41:8d:5f:9c:13:e1:de:a6: a5:99:93:b0:a3:ad:5d:0a:32:03:ea:01:9a:2d:79: 37:4a:70:aa:f5:8b:c4:82:25:23:76:59:16:22:42: 0c:d0:fc:e0:e5:dd:48:3f:cd:f2:1a:32:60:b0:9a: d6:8b:42:a9:1c:b9:e2:97:c8:5f:1f:37:1d:6c:7e: 26:ce:a4:2b:de:d7:c0:a9:6d:10:ef:99:10:24:30: 35:63:89:7d:2a:aa:17:ed:0c:9f:f5:4e:39:d0:10: 0b:33:c3:13:0b:1f:83:c7:85:6d:50:a0:c5:85:1b: 9f:89:f6:64:55:18:c1:ca:09:55:d5:5b:7c:3d:42: a9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:12:17:01:A8:09:4E:4D:37:3B:3D:5D:CF:D7:94:FB:3D:C1:5E:FB X509v3 Authority Key Identifier: keyid:3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:3b:e2:4e:8e:6a:fe:cc:eb:40:d9:68:fc:96:54:54:c6:ab: 7b:d8:30:98:48:22:df:36:68:2d:40:59:49:c7:12:34:2d:8f: 4d:e6:9e:1b:51:e3:86:27:1d:32:4d:8a:47:fc:e6:e5:37:67: 89:1c:00:56:fb:83:52:81:43:af:84:73:b2:00:45:3d:ee:27: 97:18:45:c3:79:ac:76:65:7d:22:4f:9b:53:58:04:2b:c0:11: dc:d8:1e:9f:63:b9:38:9c:0a:6f:2f:e7:b2:10:e7:75:d7:2b: ef:fc:98:bc:02:10:eb:65:43:8d:b6:f7:fa:be:47:c2:f8:97: 71:f3:f7:55:3b:f9:3b:9c:f5:fc:53:d8:f4:06:bb:eb:d3:8a: 8c:49:92:64:8b:43:36:93:52:8f:87:24:b0:24:de:8c:57:c6: 11:50:9e:da:28:ef:9b:55:1d:6d:6e:ed:d0:5b:f1:5a:36:63: 43:ac:25:ce:cc:09:10:5f:27:5d:60:06:e9:5b:5a:c2:1d:7e: 5f:17:99:09:d6:01:8a:95:07:fe:16:32:2b:70:e0:0f:87:15: a1:ac:1e:94:d4:18:32:72:d2:a3:d2:d5:08:67:e2:31:34:24: 05:ae:39:ed:93:f7:f5:93:23:c4:ec:24:64:52:e0:48:20:3a: 29:56:6c:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydr/tGyVJJoihCPLNftAUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDJmN2NjMjc1MzMwOTgzMzAzMWJhODk0NjQ5YTgwY2Zm YjEzZTgwHhcNMjUxMjA2MDcwMDU5WhcNMjUxMjA3MDcwMDU5WjAzMTEwLwYDVQQD EyhiODEyMTcwMWE4MDk0ZTRkMzczYjNkNWRjZmQ3OTRmYjNkYzE1ZWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sGzOulPtZGHVPTbknsyQ6T23geU KGrzaVGeBAWFEx3Fr/qsldlFy7Qdi9IUeual3nLwnwi9hCC1I3ZuwuADc9OWhuvC WB4zgdaDZyV/CsVB63Z2sZ3Q2HjqBvI4tCAdRQv+npTOlCfCCspeHhDDWFOBgKw5 lZVy+wgh4Oo6QY1fnBPh3qalmZOwo61dCjID6gGaLXk3SnCq9YvEgiUjdlkWIkIM 0Pzg5d1IP83yGjJgsJrWi0KpHLnil8hfHzcdbH4mzqQr3tfAqW0Q75kQJDA1Y4l9 KqoX7Qyf9U450BALM8MTCx+Dx4VtUKDFhRufifZkVRjByglV1Vt8PUKpnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLgSFwGoCU5NNzs9Xc/XlPs9wV77MB8GA1UdIwQY MBaAFDrS98wnUzCYMwMbqJRkmoDP+xPoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RMM3pDZFRNSmd6QXh1b2xHU2FnTV83RS1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82ZWJjMWMtNDJhYi00NTU5LTg0YjEt ZjZhZDkzMzBjNGIwLzEvT3RMM3pDZFRNSmd6QXh1b2xHU2FnTV83RS1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS82ZWJjMWMtNDJhYi00NTU5LTg0YjEtZjZhZDkzMzBjNGIw LzEvT3RMM3pDZFRNSmd6QXh1b2xHU2FnTV83RS1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJTviTo5q /szrQNlo/JZUVMare9gwmEgi3zZoLUBZSccSNC2PTeaeG1HjhicdMk2KR/zm5Tdn iRwAVvuDUoFDr4RzsgBFPe4nlxhFw3msdmV9Ik+bU1gEK8AR3Ngen2O5OJwKby/n shDnddcr7/yYvAIQ62VDjbb3+r5HwviXcfP3VTv5O5z1/FPY9Aa769OKjEmSZItD NpNSj4cksCTejFfGEVCe2ijvm1UdbW7t0FvxWjZjQ6wlzswJEF8nXWAG6Vtawh1+ XxeZCdYBipUH/hYyK3DgD4cVoawelNQYMnLSo9LVCGfiMTQkBa457ZP39ZMjxOwk ZFLgSCA6KVZsrw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:23:07 2025 by rpki-client