This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft File: Otc0z5DHc0KIBrloIJUVuRSDGp0.mft (raw, json) Hash identifier: QLEJCWUdf0gr+k8PWa7zTferixUYeS2Cq7P/LUr8sWM= Subject key identifier: B7:6B:47:86:F3:46:9C:85:B2:83:9C:24:A1:24:33:00:42:FE:B1:74 Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d Certificate serial: 019AF2E42675083C0209DF2D474EA026DF82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft Manifest number: 177F Signing time: Sat 06 Dec 2025 09:00:29 +0000 Manifest this update: Sat 06 Dec 2025 09:00:29 +0000 Manifest next update: Sun 07 Dec 2025 09:00:29 +0000 Files and hashes: 1: 2NYdjjFKUwwAHXr7ubSJv8Kzg8g.roa (hash: kjplcNAq1JXoQgnY61zJpj1+5jIDXxWAT5fT5oin7qk=) 2: AF-KFPYoLrR_wnL0SE_zW6WshRE.roa (hash: z49PjeXPIBQhRQUNgU9fm0U8o2Eum7mravj6VvfHLII=) 3: Otc0z5DHc0KIBrloIJUVuRSDGp0.crl (hash: KF8AUHILwEj3M33g068EzTXdySgc57G0ozyYOiI0PEo=) 4: VIvJR-ELjPDDNwtDAs7jPXPRVS8.roa (hash: xlYWOAlcQ9qUm1X3p6cNrDPlijzSwOQVXOe0gD7Wm78=) 5: WCC9rTSbJ_Cq0gmrQEQG46tRbpQ.roa (hash: VkHV+4ebPs26e57T+NHLP6p9bqcsmEKUplaKOzXFS/4=) 6: apLqK898oR7RE-dAFEvdyErBOzE.roa (hash: 7wPWjmBIQU48S3GSQT90DN//sDuxGXlKRA7f0n/Hjc8=) 7: beYTq1ZSU6CkOYAx7ryqD6bd3cM.roa (hash: x3+IsuLxOdLQwSExJVIL+EzcT73OO7RISZtN+IgQDrQ=) 8: d3jC5FrVCU6deYGz56A8xH8Tz24.roa (hash: EEf3EKHXGl/MGjvhaDBjNExCSWB1bA3J+U/K+9OLzcQ=) 9: eFAtBNJzls8AgaaXT8fjcCX17mA.roa (hash: GPQ9iMR4UR3PGXp7FlfdeNJSrFumQ8WzN02VnHoIJ84=) 10: fmuUqwHIE4LJQQIBDK_3JI3axjw.roa (hash: jgYvNn+KWNnN7BXATe+H2BiIlAYgwP4SHTyKXfV03HU=) 11: m8epfX6ALey9mozyTLJ0ovC6F2E.roa (hash: nEswDzlmuc7WOVjzf1OqhYzhCng69m/AkqBFVEn5Jd8=) 12: uQXqHDwD39ncADiPwLCFwCaOFoE.roa (hash: 6dohaywgNPrlc422aBBS3H3acbsvFO8x4A1z0WMis3g=) 13: vpHvJjjgw4O3Rz8r2ZFr25OMuek.roa (hash: DjXvcuXor+t9vZEtEo50/bWiWyQCM6LNcDnznEPg0tw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:26:75:08:3c:02:09:df:2d:47:4e:a0:26:df:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad734cf90c773428806b968209515b914831a9d Validity Not Before: Dec 6 09:00:29 2025 GMT Not After : Dec 7 09:00:29 2025 GMT Subject: CN=b76b4786f3469c85b2839c24a124330042feb174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d9:90:ae:3d:9b:f1:97:be:8a:8a:ed:96:7d: 77:08:56:8f:d8:a9:a7:c9:ae:76:68:68:b5:25:10: 97:15:c4:fb:10:ea:af:b9:ab:66:ae:e2:03:cc:4e: 19:81:d5:0a:6d:9f:24:7e:5e:40:9d:f1:95:7b:34: c7:76:6d:dc:87:9a:a6:94:46:8a:97:5b:26:17:d8: 05:38:71:61:32:ac:06:a7:35:8a:13:ec:52:41:60: 14:cc:d0:37:e9:4a:56:52:09:60:30:c7:48:14:39: b7:36:78:23:2c:cc:c1:0d:a9:9d:f8:77:cf:5e:9f: c6:38:94:17:fd:33:31:11:6d:75:31:ee:c0:b6:bf: ef:36:8a:34:f1:6e:85:4c:5a:f7:24:9d:03:f7:1e: 55:4a:25:30:40:e1:47:0b:31:93:8c:38:31:36:fb: 7f:7e:a3:63:c6:ac:01:2e:ab:d3:c5:1b:ed:33:58: a5:ca:06:fe:6e:dc:a0:f2:07:cc:4e:a0:e4:cf:93: 2e:8c:8e:c8:0d:79:98:7e:3d:1c:ed:d0:43:4d:7e: f0:0c:18:dc:1e:3d:a6:5f:2d:23:f2:b1:3b:fe:c7: 87:06:31:7c:46:7e:ee:5d:8a:22:79:85:a8:a0:69: b3:62:64:e5:24:d3:38:ed:97:0a:4a:31:2d:02:bb: 12:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:6B:47:86:F3:46:9C:85:B2:83:9C:24:A1:24:33:00:42:FE:B1:74 X509v3 Authority Key Identifier: keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:6b:d9:9a:3b:87:84:12:1a:63:74:1d:18:ff:47:39:1f:a8: 9d:cf:5c:52:a0:d4:0d:04:95:4b:c7:84:de:0b:39:4e:ff:97: 02:9f:d1:68:64:81:2f:22:31:cb:51:b4:ad:d7:12:e0:b5:79: b3:d3:d1:e8:e0:05:1e:d2:ef:88:2a:68:01:9e:a5:9f:cf:97: d7:0e:e6:24:4e:d6:92:6d:38:1c:1e:15:0b:5e:fe:64:b6:34: bf:7e:63:1a:d2:ef:51:7a:3e:81:0c:c4:56:83:64:23:3e:76: af:49:4a:58:21:3d:84:3d:80:d1:1a:64:a7:93:da:54:ed:e9: 19:6b:6f:a4:3e:47:a5:eb:de:3d:3c:2d:df:c4:1e:ab:ee:55: 45:77:b3:07:63:6f:1a:2d:f8:e6:0f:ba:71:db:2c:5c:a0:51: 60:75:7c:bb:e7:3b:a3:7b:77:e1:08:54:2a:4e:7a:d5:7c:d1: ed:8d:d5:30:04:3e:44:b6:6d:dc:d6:41:9a:1d:13:d1:ae:b7: fc:45:e1:cc:1e:aa:c9:3e:01:09:75:dd:35:7b:9e:85:fa:a7: 77:c3:4c:21:75:df:d5:44:a1:35:e0:0c:70:71:a8:12:ce:0f: 9e:4a:93:3a:4f:58:80:75:96:6b:6d:6c:e0:54:18:e0:3a:69: 43:4c:b8:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5CZ1CDwCCd8tR06gJt+CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDczNGNmOTBjNzczNDI4ODA2Yjk2ODIwOTUxNWI5MTQ4 MzFhOWQwHhcNMjUxMjA2MDkwMDI5WhcNMjUxMjA3MDkwMDI5WjAzMTEwLwYDVQQD EyhiNzZiNDc4NmYzNDY5Yzg1YjI4MzljMjRhMTI0MzMwMDQyZmViMTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNmQrj2b8Ze+iortln13CFaP2Kmn ya52aGi1JRCXFcT7EOqvuatmruIDzE4ZgdUKbZ8kfl5AnfGVezTHdm3ch5qmlEaK l1smF9gFOHFhMqwGpzWKE+xSQWAUzNA36UpWUglgMMdIFDm3NngjLMzBDamd+HfP Xp/GOJQX/TMxEW11Me7Atr/vNoo08W6FTFr3JJ0D9x5VSiUwQOFHCzGTjDgxNvt/ fqNjxqwBLqvTxRvtM1ilygb+btyg8gfMTqDkz5MujI7IDXmYfj0c7dBDTX7wDBjc Hj2mXy0j8rE7/seHBjF8Rn7uXYoieYWooGmzYmTlJNM47ZcKSjEtArsSqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLdrR4bzRpyFsoOcJKEkMwBC/rF0MB8GA1UdIwQY MBaAFDrXNM+Qx3NCiAa5aCCVFbkUgxqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMt NzZhMWQ0ZDgzMTk3LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMtNzZhMWQ0ZDgzMTk3 LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUWvZmjuH hBIaY3QdGP9HOR+onc9cUqDUDQSVS8eE3gs5Tv+XAp/RaGSBLyIxy1G0rdcS4LV5 s9PR6OAFHtLviCpoAZ6ln8+X1w7mJE7Wkm04HB4VC17+ZLY0v35jGtLvUXo+gQzE VoNkIz52r0lKWCE9hD2A0Rpkp5PaVO3pGWtvpD5HpevePTwt38Qeq+5VRXezB2Nv Gi345g+6cdssXKBRYHV8u+c7o3t34QhUKk561XzR7Y3VMAQ+RLZt3NZBmh0T0a63 /EXhzB6qyT4BCXXdNXuehfqnd8NMIXXf1UShNeAMcHGoEs4PnkqTOk9YgHWWa21s 4FQY4DppQ0y4YQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:10:42 2025 by rpki-client