This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft File: OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft (raw, json) Hash identifier: JyLzF7+sNae3BsljZ07A7xetSgk/o8TyBlrl3aIJ3PQ= Subject key identifier: 7F:A0:AE:C0:ED:97:0C:2B:D3:D8:53:4E:F8:95:6C:0E:EE:1F:65:FB Authority key identifier: 3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26 Certificate issuer: /CN=3ad65216812ed24fd1c719871a59a971dec30a26 Certificate serial: 019AF276B0686A31E4C6F64D77CE2593EDC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft Manifest number: 1278 Signing time: Sat 06 Dec 2025 07:00:55 +0000 Manifest this update: Sat 06 Dec 2025 07:00:55 +0000 Manifest next update: Sun 07 Dec 2025 07:00:55 +0000 Files and hashes: 1: 4iN5nDTRDVV1CTGuGlGWY0Ybm9Y.roa (hash: EMh2tz4i0xV1ZX0fHy8PWh0LdLWVBXB/z2TGKHCydUo=) 2: CBZTZIxMDDoFTLtkXWpJNkPAyZA.roa (hash: cXql8AeIQAC8BMZkK4SJLIjChz+/Hte6gi3o/bh7lrE=) 3: OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl (hash: FhocaPLvQTMitCg3ti0yfJWHzwtYoFTgonQuAQiItiQ=) 4: TyU9koBZ-FfwUjRzFMgXymhIcdc.roa (hash: PuygGCOb3s6Y5+fEOZlXXly4EGutd8BVkQrZLC3GUys=) 5: rYkWvcE_3GQZ3jkaDTUiqjj986g.roa (hash: FOkCN5CJZuWhjjVzqhCAbEwhLO4+xpDqIO3h/0CpxnA=) 6: xvMwGEntPrsPSijtn7qckfPF1Lw.roa (hash: cfgqt0GeV7LUHA50FIbHHM6KEXg5Xmqps/DGbUwBUAM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:b0:68:6a:31:e4:c6:f6:4d:77:ce:25:93:ed:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad65216812ed24fd1c719871a59a971dec30a26 Validity Not Before: Dec 6 07:00:55 2025 GMT Not After : Dec 7 07:00:55 2025 GMT Subject: CN=7fa0aec0ed970c2bd3d8534ef8956c0eee1f65fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:60:3a:41:98:92:d7:d3:cd:e7:7d:53:10:36: 17:7c:24:94:bd:39:6a:d1:cd:1c:f4:e6:05:de:94: 2d:3d:25:26:49:de:67:56:53:c4:82:68:7f:39:a8: f0:3f:15:aa:b9:ac:4e:52:77:6a:34:0a:c1:9a:0a: c1:5b:1e:14:5c:1f:ff:1b:79:8c:93:67:d9:64:36: 3d:54:eb:5f:56:1c:1b:4a:e8:f3:b6:83:39:b7:72: 75:15:50:32:21:12:1f:f2:9b:83:f7:7b:86:ad:55: 8a:86:53:38:84:3e:77:27:00:5e:2f:03:c9:85:f9: 0a:fc:44:6d:2a:24:3f:3f:4e:72:a6:0a:56:98:a3: 6d:fb:ac:8f:36:e2:bc:96:4d:b9:59:f6:6d:e1:be: 60:c6:a7:d1:b7:71:26:7d:1a:18:e7:d1:ac:f5:14: a5:6c:0f:e2:fb:27:5f:c0:36:58:79:af:aa:a0:0d: 66:f7:b1:2b:3d:2d:39:08:ce:5e:23:59:0d:83:fb: 7b:3a:93:f2:1b:97:68:6b:71:fa:5d:fe:ed:ad:13: 22:9e:ba:f6:8c:8c:32:ab:e1:94:d0:41:87:66:b3: ed:36:b2:c3:b4:69:55:28:92:31:b9:c9:fd:f1:6e: eb:23:aa:17:18:da:6c:dc:c6:a5:59:a8:96:27:1e: 63:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:A0:AE:C0:ED:97:0C:2B:D3:D8:53:4E:F8:95:6C:0E:EE:1F:65:FB X509v3 Authority Key Identifier: keyid:3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:72:c2:fe:c9:b7:f1:61:0c:65:dd:17:0d:43:7e:72:f3:89: 8b:a7:81:c0:a0:2f:eb:6e:bd:8c:ff:4e:4c:0e:ea:9b:0b:9d: 2a:0c:56:f6:67:a5:d6:b6:f9:8f:af:9e:64:25:32:88:e9:21: c4:e6:e2:ed:e4:7d:91:d1:a0:38:9d:a7:20:4c:01:ac:ea:4e: 27:e0:ad:de:47:d3:f4:73:0e:87:2c:ac:8c:24:3e:02:84:13: 1f:af:88:da:df:b0:0a:cf:c8:90:b8:10:bc:c6:ed:7f:de:85: f4:85:38:a8:5a:87:d6:91:c5:2b:b7:e8:c5:eb:07:e2:69:42: 6d:fa:dc:5d:65:1a:2a:a2:84:97:61:79:29:34:32:ae:09:55: af:21:28:4a:5e:36:ce:45:d8:5b:4b:11:4a:f5:79:38:a9:6d: 9c:1a:cb:8f:6a:0d:80:1b:7f:43:5a:41:f6:56:76:a3:ed:cc: 79:5a:25:31:af:dc:60:6f:e4:7c:c0:c8:87:17:25:db:50:c4: f3:88:c7:89:7e:fe:0b:ad:b4:8e:06:45:93:f4:25:8f:1c:8f: 44:e4:17:28:4d:e2:21:e7:29:39:e6:c2:60:2a:7a:db:15:ee: 95:71:89:0c:b0:fb:e6:0e:de:41:62:36:23:58:9e:e7:8c:d5: 3c:5b:1b:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydrBoajHkxvZNd84lk+3JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDY1MjE2ODEyZWQyNGZkMWM3MTk4NzFhNTlhOTcxZGVj MzBhMjYwHhcNMjUxMjA2MDcwMDU1WhcNMjUxMjA3MDcwMDU1WjAzMTEwLwYDVQQD Eyg3ZmEwYWVjMGVkOTcwYzJiZDNkODUzNGVmODk1NmMwZWVlMWY2NWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWA6QZiS19PN531TEDYXfCSUvTlq 0c0c9OYF3pQtPSUmSd5nVlPEgmh/OajwPxWquaxOUndqNArBmgrBWx4UXB//G3mM k2fZZDY9VOtfVhwbSujztoM5t3J1FVAyIRIf8puD93uGrVWKhlM4hD53JwBeLwPJ hfkK/ERtKiQ/P05ypgpWmKNt+6yPNuK8lk25WfZt4b5gxqfRt3EmfRoY59Gs9RSl bA/i+ydfwDZYea+qoA1m97ErPS05CM5eI1kNg/t7OpPyG5doa3H6Xf7trRMinrr2 jIwyq+GU0EGHZrPtNrLDtGlVKJIxucn98W7rI6oXGNps3MalWaiWJx5jSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+grsDtlwwr09hTTviVbA7uH2X7MB8GA1UdIwQY MBaAFDrWUhaBLtJP0ccZhxpZqXHewwomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RaU0ZvRXUwa19SeHhtSEdsbXBjZDdEQ2lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9iOGNhZTQtYjVhZi00MzgwLTk4MTct NDY1MzhjYTUzODNjLzEvT3RaU0ZvRXUwa19SeHhtSEdsbXBjZDdEQ2lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9iOGNhZTQtYjVhZi00MzgwLTk4MTctNDY1MzhjYTUzODNj LzEvT3RaU0ZvRXUwa19SeHhtSEdsbXBjZDdEQ2lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfHLC/sm3 8WEMZd0XDUN+cvOJi6eBwKAv6269jP9OTA7qmwudKgxW9mel1rb5j6+eZCUyiOkh xObi7eR9kdGgOJ2nIEwBrOpOJ+Ct3kfT9HMOhyysjCQ+AoQTH6+I2t+wCs/IkLgQ vMbtf96F9IU4qFqH1pHFK7foxesH4mlCbfrcXWUaKqKEl2F5KTQyrglVryEoSl42 zkXYW0sRSvV5OKltnBrLj2oNgBt/Q1pB9lZ2o+3MeVolMa/cYG/kfMDIhxcl21DE 84jHiX7+C620jgZFk/QljxyPROQXKE3iIecpOebCYCp62xXulXGJDLD75g7eQWI2 I1ie54zVPFsbiA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:43:07 2025 by rpki-client