This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft File: Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft (raw, json) Hash identifier: UWw8PpnF1RRO+bG008rIKsstzJcEshH/YUqmUcGKPX0= Subject key identifier: 77:D8:05:51:E1:F2:0E:45:73:C1:7C:C3:0E:86:21:9C:1E:02:82:6F Authority key identifier: 3A:DE:A4:B7:AF:8C:CE:5C:FD:37:75:CB:01:FB:97:C4:F9:51:A9:A2 Certificate issuer: /CN=3adea4b7af8cce5cfd3775cb01fb97c4f951a9a2 Certificate serial: 019AF5777763CAF63C0F8671926440FC0F37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft Manifest number: 02FF Signing time: Sat 06 Dec 2025 21:00:38 +0000 Manifest this update: Sat 06 Dec 2025 21:00:38 +0000 Manifest next update: Sun 07 Dec 2025 21:00:38 +0000 Files and hashes: 1: NR0WsT059Uu9ocKkEY9pXlrin1E.roa (hash: VV0hNdxr41R7/bkmPoA35nvmhlKGJglGwfeyHr+U+LY=) 2: Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl (hash: DuNj879UmqY6VksjptqBxfnT+cy8x+3sYxrIqFJvR3E=) 3: SEh_0GqoSaiRBqWseUujp9ajyxU.roa (hash: 4qBD/oh8RDMtbEgS97ZhV1TCABNjw7BvgNSejlDS+ZM=) 4: g6a9uq2KRc9wYONVhtFPPZGaBr4.roa (hash: Jcii24w5hELShXLMXhNP2/DuSUjwnJEfN84e/8CYORI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:77:63:ca:f6:3c:0f:86:71:92:64:40:fc:0f:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3adea4b7af8cce5cfd3775cb01fb97c4f951a9a2 Validity Not Before: Dec 6 21:00:38 2025 GMT Not After : Dec 7 21:00:38 2025 GMT Subject: CN=77d80551e1f20e4573c17cc30e86219c1e02826f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:43:42:da:89:21:34:4e:70:68:80:b5:6d:ba: 9d:14:0d:23:8b:0a:c2:b3:be:2e:42:06:f5:88:dc: 7f:d5:e3:29:f9:7e:ee:f5:5e:ca:4a:07:1c:ce:4e: 1e:e7:02:65:c4:c4:bf:2a:38:4d:b0:da:6b:c3:b1: bb:d7:24:44:4f:c9:0a:64:9c:06:68:7d:5c:80:64: 5a:43:80:f1:33:0b:35:9d:03:39:3d:31:eb:41:44: 66:d1:54:bf:02:ce:d2:d3:e4:82:c1:c8:b3:4f:07: fc:b5:8a:f2:c4:4c:a1:05:09:36:e2:9d:68:59:50: 28:65:34:f7:11:96:ba:2b:a0:ac:fe:4d:09:b4:fe: 54:48:c6:7f:4a:d9:55:1b:a9:d7:55:c1:a0:dd:d7: f7:0b:ac:2f:a8:d0:02:0f:d2:33:84:ce:01:2a:4e: cc:b5:6c:14:3e:2a:57:22:bc:7b:de:50:6c:74:ce: c2:aa:bc:98:35:1c:c7:5a:b9:bd:47:fb:b6:a9:c2: e8:73:40:bc:4d:c9:5c:19:7f:84:dd:fd:16:ff:6b: 16:33:bb:46:67:5c:4e:28:f0:d2:96:6e:30:02:8b: e4:74:fb:f2:1c:e2:71:07:ec:44:38:5b:15:72:82: 68:4b:9e:3f:00:0c:1e:0e:04:ac:bb:66:9c:26:60: 06:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D8:05:51:E1:F2:0E:45:73:C1:7C:C3:0E:86:21:9C:1E:02:82:6F X509v3 Authority Key Identifier: keyid:3A:DE:A4:B7:AF:8C:CE:5C:FD:37:75:CB:01:FB:97:C4:F9:51:A9:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:b7:60:7e:1f:06:87:16:16:1b:e5:6b:13:a0:b3:ec:ea:94: 36:14:af:da:45:5d:47:ab:0e:b6:f5:9c:d1:72:61:8b:31:85: f1:11:3c:17:c0:25:48:74:a2:08:5d:22:cb:d7:85:05:be:70: b0:93:46:3f:7a:9d:fe:34:55:c4:f5:41:71:37:d7:68:c2:e2: 03:01:bf:a1:62:cd:4e:bc:e6:82:7a:47:d7:b3:2e:c1:7d:0c: 19:8b:a1:d4:c0:50:7b:cf:ba:62:da:71:ad:fd:a1:21:07:c5: 9d:76:bb:78:a1:24:5e:df:ca:59:33:4b:c5:e3:74:e7:d0:77: 81:77:00:bf:48:6b:ca:f8:30:1b:a2:5b:87:5b:b4:12:7d:b7: b7:c9:44:9f:30:d2:63:62:76:f3:bd:aa:99:0d:3f:85:d2:e4: 99:ac:4b:a7:94:32:f4:b2:37:3e:8c:09:3c:92:d2:1c:22:e5: 0f:94:51:48:13:2d:b4:98:c6:a0:4c:46:b0:7e:d9:90:ab:ff: 67:61:5a:8c:2c:26:6c:99:c6:51:4b:c6:ac:b3:c6:3b:86:fa: ca:c9:ec:19:f7:55:a6:fe:be:97:4a:68:d2:30:9f:42:12:c9: 2a:ed:72:00:69:87:91:3c:fc:e7:18:48:b1:9f:37:3c:fe:4d: ae:d8:b0:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d3djyvY8D4ZxkmRA/A83MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZGVhNGI3YWY4Y2NlNWNmZDM3NzVjYjAxZmI5N2M0Zjk1 MWE5YTIwHhcNMjUxMjA2MjEwMDM4WhcNMjUxMjA3MjEwMDM4WjAzMTEwLwYDVQQD Eyg3N2Q4MDU1MWUxZjIwZTQ1NzNjMTdjYzMwZTg2MjE5YzFlMDI4MjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA70NC2okhNE5waIC1bbqdFA0jiwrC s74uQgb1iNx/1eMp+X7u9V7KSgcczk4e5wJlxMS/KjhNsNprw7G71yRET8kKZJwG aH1cgGRaQ4DxMws1nQM5PTHrQURm0VS/As7S0+SCwcizTwf8tYryxEyhBQk24p1o WVAoZTT3EZa6K6Cs/k0JtP5USMZ/StlVG6nXVcGg3df3C6wvqNACD9IzhM4BKk7M tWwUPipXIrx73lBsdM7CqryYNRzHWrm9R/u2qcLoc0C8TclcGX+E3f0W/2sWM7tG Z1xOKPDSlm4wAovkdPvyHOJxB+xEOFsVcoJoS54/AAweDgSsu2acJmAGxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHfYBVHh8g5Fc8F8ww6GIZweAoJvMB8GA1UdIwQY MBaAFDrepLevjM5c/Td1ywH7l8T5UamiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3Q2a3Q2LU16bHo5TjNYTEFmdVh4UGxScWFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8xMjMxMjQtZWY2Ni00OGQxLTkxZDAt ZjBkMTE5YzUyN2ZmLzEvT3Q2a3Q2LU16bHo5TjNYTEFmdVh4UGxScWFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8xMjMxMjQtZWY2Ni00OGQxLTkxZDAtZjBkMTE5YzUyN2Zm LzEvT3Q2a3Q2LU16bHo5TjNYTEFmdVh4UGxScWFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhLdgfh8G hxYWG+VrE6Cz7OqUNhSv2kVdR6sOtvWc0XJhizGF8RE8F8AlSHSiCF0iy9eFBb5w sJNGP3qd/jRVxPVBcTfXaMLiAwG/oWLNTrzmgnpH17MuwX0MGYuh1MBQe8+6Ytpx rf2hIQfFnXa7eKEkXt/KWTNLxeN059B3gXcAv0hryvgwG6Jbh1u0En23t8lEnzDS Y2J2872qmQ0/hdLkmaxLp5Qy9LI3PowJPJLSHCLlD5RRSBMttJjGoExGsH7ZkKv/ Z2FajCwmbJnGUUvGrLPGO4b6ysnsGfdVpv6+l0po0jCfQhLJKu1yAGmHkTz85xhI sZ83PP5NrtiwSA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:24:19 2025 by rpki-client