This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft File: Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft (raw, json) Hash identifier: JVjA1p0zhauerSs251BI7oNeubUN6pxi0XuUhHVC1z4= Subject key identifier: 39:BC:23:8A:A2:4D:50:59:14:CA:9B:24:AF:E9:A6:2B:99:16:80:0A Authority key identifier: 3A:DE:A4:B7:AF:8C:CE:5C:FD:37:75:CB:01:FB:97:C4:F9:51:A9:A2 Certificate issuer: /CN=3adea4b7af8cce5cfd3775cb01fb97c4f951a9a2 Certificate serial: 019B42B6FAA40733849BD34BF683A8120C2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft Manifest number: 0327 Signing time: Sun 21 Dec 2025 21:00:46 +0000 Manifest this update: Sun 21 Dec 2025 21:00:46 +0000 Manifest next update: Mon 22 Dec 2025 21:00:46 +0000 Files and hashes: 1: NR0WsT059Uu9ocKkEY9pXlrin1E.roa (hash: VV0hNdxr41R7/bkmPoA35nvmhlKGJglGwfeyHr+U+LY=) 2: Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl (hash: yuEzsY4wKCnCUiWw88BEqdqY/SEk4DQIhkGjJPM7SIk=) 3: SEh_0GqoSaiRBqWseUujp9ajyxU.roa (hash: 4qBD/oh8RDMtbEgS97ZhV1TCABNjw7BvgNSejlDS+ZM=) 4: g6a9uq2KRc9wYONVhtFPPZGaBr4.roa (hash: Jcii24w5hELShXLMXhNP2/DuSUjwnJEfN84e/8CYORI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b6:fa:a4:07:33:84:9b:d3:4b:f6:83:a8:12:0c:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3adea4b7af8cce5cfd3775cb01fb97c4f951a9a2 Validity Not Before: Dec 21 21:00:46 2025 GMT Not After : Dec 22 21:00:46 2025 GMT Subject: CN=39bc238aa24d505914ca9b24afe9a62b9916800a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6c:a9:89:fd:b8:a8:ba:99:86:c2:1e:8c:4e: bd:6c:ba:df:26:76:64:2c:87:3c:b1:06:5c:69:78: 10:c1:39:3b:cc:cb:9f:5f:95:dc:2e:60:91:4d:ac: 51:08:8b:e7:44:29:f5:3b:da:ac:f3:db:49:80:ea: d4:1a:f3:25:49:e1:35:c4:a0:00:b5:5d:3a:ce:ff: 3d:e4:0d:a0:d5:04:31:5b:57:cb:ff:ac:84:72:de: 69:99:f0:ee:be:99:6e:fb:24:18:29:4f:44:b5:82: 80:ec:e1:6d:7b:58:69:f7:18:e1:92:2d:35:9b:86: ae:68:09:00:d5:9c:f5:9d:a6:69:4d:78:4f:8f:8a: 57:0a:d4:0d:22:fc:a7:0c:fa:a9:c8:ca:d2:d9:4f: 4b:3c:63:2b:1e:5d:71:67:15:ad:04:63:c3:b7:70: df:e3:8d:74:ee:c3:58:e5:4a:a4:2e:d7:bd:ef:a1: 4f:95:fa:c5:01:82:88:a5:a0:86:12:d9:92:e8:42: 95:0d:da:7c:23:03:6d:0b:a5:50:e9:2f:28:98:cc: c7:0f:40:37:58:13:0b:3e:6e:7f:d7:22:67:3d:ee: a4:2e:8e:b9:33:dc:28:2a:84:b0:d1:d2:0b:02:8f: f2:2e:fc:aa:ae:00:fc:85:07:63:65:a3:8c:f2:6a: a4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:BC:23:8A:A2:4D:50:59:14:CA:9B:24:AF:E9:A6:2B:99:16:80:0A X509v3 Authority Key Identifier: keyid:3A:DE:A4:B7:AF:8C:CE:5C:FD:37:75:CB:01:FB:97:C4:F9:51:A9:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:85:3a:e3:00:7a:2f:f2:63:a4:dd:58:b5:1d:09:79:f9:ed: cd:0c:ea:58:40:1b:a4:42:61:c0:36:aa:94:c2:f8:fc:00:d9: 98:41:43:11:08:c0:33:f3:a8:c3:20:f1:2b:8a:8d:2f:32:3f: 33:58:06:4c:50:5a:68:48:fc:5e:63:61:1f:cb:14:a9:02:2b: 3c:6c:ea:c1:98:47:4b:31:70:77:63:16:e2:6d:3b:be:22:72: 9c:b1:9e:20:68:d0:c4:ea:41:b4:8c:71:53:75:24:3a:05:de: 47:34:6d:ec:fe:23:cb:7e:8d:bd:57:b6:de:69:7a:37:dc:1f: 9a:d3:d3:62:35:e3:a6:05:50:10:21:9e:4c:4e:ee:9a:af:e3: fb:cb:e1:d3:19:a0:99:7a:1a:79:29:f2:d1:3e:be:0a:c9:01: 29:12:9c:25:e3:e3:14:1a:6e:27:f8:39:5b:5d:76:57:65:30: 30:e3:5d:a2:2c:b1:42:8b:f2:d9:1a:15:02:cc:d5:e0:29:05: d0:d2:ce:90:3e:10:7a:d4:70:23:16:35:cd:83:5c:bb:a1:e3: 2c:cf:2c:c3:ce:f7:9e:5f:00:80:66:4d:57:e2:35:9f:19:c4: 9e:95:31:2a:87:5e:03:57:fd:76:47:4f:e3:48:4f:d1:f3:30: 1b:45:30:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCtvqkBzOEm9NL9oOoEgwsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZGVhNGI3YWY4Y2NlNWNmZDM3NzVjYjAxZmI5N2M0Zjk1 MWE5YTIwHhcNMjUxMjIxMjEwMDQ2WhcNMjUxMjIyMjEwMDQ2WjAzMTEwLwYDVQQD EygzOWJjMjM4YWEyNGQ1MDU5MTRjYTliMjRhZmU5YTYyYjk5MTY4MDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGypif24qLqZhsIejE69bLrfJnZk LIc8sQZcaXgQwTk7zMufX5XcLmCRTaxRCIvnRCn1O9qs89tJgOrUGvMlSeE1xKAA tV06zv895A2g1QQxW1fL/6yEct5pmfDuvplu+yQYKU9EtYKA7OFte1hp9xjhki01 m4auaAkA1Zz1naZpTXhPj4pXCtQNIvynDPqpyMrS2U9LPGMrHl1xZxWtBGPDt3Df 44107sNY5UqkLte976FPlfrFAYKIpaCGEtmS6EKVDdp8IwNtC6VQ6S8omMzHD0A3 WBMLPm5/1yJnPe6kLo65M9woKoSw0dILAo/yLvyqrgD8hQdjZaOM8mqk4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDm8I4qiTVBZFMqbJK/ppiuZFoAKMB8GA1UdIwQY MBaAFDrepLevjM5c/Td1ywH7l8T5UamiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3Q2a3Q2LU16bHo5TjNYTEFmdVh4UGxScWFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8xMjMxMjQtZWY2Ni00OGQxLTkxZDAt ZjBkMTE5YzUyN2ZmLzEvT3Q2a3Q2LU16bHo5TjNYTEFmdVh4UGxScWFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8xMjMxMjQtZWY2Ni00OGQxLTkxZDAtZjBkMTE5YzUyN2Zm LzEvT3Q2a3Q2LU16bHo5TjNYTEFmdVh4UGxScWFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYU64wB6 L/JjpN1YtR0JefntzQzqWEAbpEJhwDaqlML4/ADZmEFDEQjAM/OowyDxK4qNLzI/ M1gGTFBaaEj8XmNhH8sUqQIrPGzqwZhHSzFwd2MW4m07viJynLGeIGjQxOpBtIxx U3UkOgXeRzRt7P4jy36NvVe23ml6N9wfmtPTYjXjpgVQECGeTE7umq/j+8vh0xmg mXoaeSny0T6+CskBKRKcJePjFBpuJ/g5W112V2UwMONdoiyxQovy2RoVAszV4CkF 0NLOkD4QetRwIxY1zYNcu6HjLM8sw873nl8AgGZNV+I1nxnEnpUxKodeA1f9dkdP 40hP0fMwG0UwPw== -----END CERTIFICATE-----Generated at Mon Dec 22 02:53:58 2025 by rpki-client