This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft File: OTipB3cqWf31n2L5rZC-UCFxlG4.mft (raw, json) Hash identifier: aHhGDq4Owrvt2psPbvPf9wlEpLC1CuwGhnuPfamUg1w= Subject key identifier: 04:62:57:58:05:4F:8B:9E:76:26:5B:B8:F8:F0:15:29:99:97:DB:B7 Authority key identifier: 39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E Certificate issuer: /CN=3938a907772a59fdf59f62f9ad90be502171946e Certificate serial: 019AF6F8C4524629BD13E72FB7F7509AFA34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft Manifest number: 0ABB Signing time: Sun 07 Dec 2025 04:01:29 +0000 Manifest this update: Sun 07 Dec 2025 04:01:29 +0000 Manifest next update: Mon 08 Dec 2025 04:01:29 +0000 Files and hashes: 1: OTipB3cqWf31n2L5rZC-UCFxlG4.crl (hash: jO2ekQBMbY6/klngGO9Gj3fo05VtET7VU6NfjT5JzZs=) 2: R2rdc7iEL-QEpfpveQ8XLi794UY.roa (hash: NOUYuQT3ToD/1aYOE1fR2p8arsC0PmHYqq5MEGhXZLs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f8:c4:52:46:29:bd:13:e7:2f:b7:f7:50:9a:fa:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3938a907772a59fdf59f62f9ad90be502171946e Validity Not Before: Dec 7 04:01:29 2025 GMT Not After : Dec 8 04:01:29 2025 GMT Subject: CN=04625758054f8b9e76265bb8f8f015299997dbb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:34:72:75:4b:81:b1:a2:93:a3:ad:27:3a:ae: 81:de:af:10:b2:93:1f:2c:8e:9d:7c:9f:c5:e5:8c: 37:a4:f5:ec:2b:63:93:26:b1:cb:5c:ef:61:c8:73: ad:45:a8:2b:49:c6:c2:6e:8d:32:a8:b7:c7:8d:0e: 35:1d:47:06:79:9c:58:b8:47:53:65:ad:f2:d0:ae: ae:89:20:59:ca:2e:74:81:8d:c1:92:39:1f:08:df: d0:04:3c:97:34:a6:fc:6f:9b:6c:4c:49:d7:01:8f: a3:5e:72:35:33:3a:5e:6f:de:c4:e0:1c:f1:15:e2: e2:30:93:73:e4:21:28:55:80:f6:a4:0a:33:c8:40: 45:48:93:83:39:05:22:99:f4:71:2d:f7:e6:b5:eb: 76:c4:ab:c1:d7:59:1a:e9:b7:4d:45:e4:73:02:1f: c4:00:a2:fa:10:cf:ab:8b:e4:57:d8:c8:7a:1a:95: 26:b8:ed:7e:e8:0f:58:67:8c:a6:9d:48:dd:88:62: 29:20:d0:a2:ed:a7:a1:cb:ee:8d:7e:6c:4a:0f:02: 86:d9:eb:96:e2:5a:96:6a:c0:42:65:40:45:f1:70: 36:a9:b3:09:1a:fd:d0:30:c8:1e:cb:e5:a5:a2:5f: 1b:08:00:71:d5:08:ed:e7:cf:47:c1:4e:a5:a8:01: 46:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:62:57:58:05:4F:8B:9E:76:26:5B:B8:F8:F0:15:29:99:97:DB:B7 X509v3 Authority Key Identifier: keyid:39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:61:cc:14:16:20:e2:78:3e:71:01:96:9d:50:3c:90:c3:32: 9c:fa:56:92:17:0c:b7:51:aa:7f:1c:86:97:bd:0b:d9:88:a4: 6e:94:bc:79:01:51:04:be:84:97:e6:2b:cc:16:1b:1c:52:d0: 49:31:2e:92:b3:c0:e3:42:da:4e:a6:13:35:01:4f:60:1e:55: 9d:fc:0d:5b:fe:32:85:1f:9c:cf:b4:5c:6a:d3:39:a7:b0:ad: 9e:7a:4e:fc:08:47:09:f1:d6:cf:bc:a1:68:3f:02:b2:b4:dc: b5:5c:fd:ce:11:e5:1c:84:ff:46:79:36:23:dc:a6:da:53:d9: d1:03:84:a0:cc:1c:74:9c:df:3b:b6:5c:23:ff:2d:b9:a8:0a: f5:29:ec:a1:22:82:21:a6:9b:70:25:80:7d:ef:24:01:91:6a: 30:f4:93:b9:dc:ee:8d:82:ee:c8:55:c6:21:7a:4c:ed:95:cb: 7a:47:07:47:82:69:b7:d0:e8:e4:69:57:9a:89:f1:22:36:34: 25:77:56:69:1b:e1:f0:a1:a6:89:97:10:02:9a:9f:9c:45:cd: 46:4a:7f:6c:b7:52:be:96:38:e1:6d:c0:5c:49:8a:86:ca:ec: ad:40:dd:d8:b2:4e:d2:e0:23:57:1f:d5:5e:69:65:18:9a:d6: 18:30:59:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+MRSRim9E+cvt/dQmvo0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MzhhOTA3NzcyYTU5ZmRmNTlmNjJmOWFkOTBiZTUwMjE3 MTk0NmUwHhcNMjUxMjA3MDQwMTI5WhcNMjUxMjA4MDQwMTI5WjAzMTEwLwYDVQQD EygwNDYyNTc1ODA1NGY4YjllNzYyNjViYjhmOGYwMTUyOTk5OTdkYmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDRydUuBsaKTo60nOq6B3q8QspMf LI6dfJ/F5Yw3pPXsK2OTJrHLXO9hyHOtRagrScbCbo0yqLfHjQ41HUcGeZxYuEdT Za3y0K6uiSBZyi50gY3BkjkfCN/QBDyXNKb8b5tsTEnXAY+jXnI1Mzpeb97E4Bzx FeLiMJNz5CEoVYD2pAozyEBFSJODOQUimfRxLffmtet2xKvB11ka6bdNReRzAh/E AKL6EM+ri+RX2Mh6GpUmuO1+6A9YZ4ymnUjdiGIpINCi7aehy+6NfmxKDwKG2euW 4lqWasBCZUBF8XA2qbMJGv3QMMgey+Wlol8bCABx1Qjt589HwU6lqAFGOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFARiV1gFT4uediZbuPjwFSmZl9u3MB8GA1UdIwQY MBaAFDk4qQd3Kln99Z9i+a2QvlAhcZRuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1RpcEIzY3FXZjMxbjJMNXJaQy1VQ0Z4bEc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi84MThlMTAtNDA5Yi00NTFhLTgyYjct ZTVjMWM2MmNmZTM3LzEvT1RpcEIzY3FXZjMxbjJMNXJaQy1VQ0Z4bEc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi84MThlMTAtNDA5Yi00NTFhLTgyYjctZTVjMWM2MmNmZTM3 LzEvT1RpcEIzY3FXZjMxbjJMNXJaQy1VQ0Z4bEc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr2HMFBYg 4ng+cQGWnVA8kMMynPpWkhcMt1GqfxyGl70L2YikbpS8eQFRBL6El+YrzBYbHFLQ STEukrPA40LaTqYTNQFPYB5VnfwNW/4yhR+cz7RcatM5p7CtnnpO/AhHCfHWz7yh aD8CsrTctVz9zhHlHIT/Rnk2I9ym2lPZ0QOEoMwcdJzfO7ZcI/8tuagK9SnsoSKC IaabcCWAfe8kAZFqMPSTudzujYLuyFXGIXpM7ZXLekcHR4Jpt9Do5GlXmonxIjY0 JXdWaRvh8KGmiZcQApqfnEXNRkp/bLdSvpY44W3AXEmKhsrsrUDd2LJO0uAjVx/V XmllGJrWGDBZkw== -----END CERTIFICATE-----Generated at Sun Dec 7 08:11:28 2025 by rpki-client