This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft File: _otJRFUnf_UwAlzvLVHffquORRA.mft (raw, json) Hash identifier: W+Vbf9CcnmUWeOk/D8e4R3/rjZ9U08wgagfE6KmO8zQ= Subject key identifier: 52:7D:5C:6F:D1:22:9E:56:F3:5B:C8:B2:37:99:7D:AC:D4:1D:BC:BF Authority key identifier: FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10 Certificate issuer: /CN=fe8b494455277ff530025cef2d51df7eab8e4510 Certificate serial: 019AF1641E61AA202A9086DA814D37786BF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft Manifest number: 0B48 Signing time: Sat 06 Dec 2025 02:01:01 +0000 Manifest this update: Sat 06 Dec 2025 02:01:01 +0000 Manifest next update: Sun 07 Dec 2025 02:01:01 +0000 Files and hashes: 1: Oc5Exwy6ZGrRe3cJEpFcoAoZ8LY.roa (hash: GCIh2gF/E3yjQMebTbwaKQU3aGp4E0TQ+qUjMjQObt4=) 2: _otJRFUnf_UwAlzvLVHffquORRA.crl (hash: f+3mIwQWSbGyVbHJk6vn2cFlTphriuJyYxNpRP+cCbc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.crl rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:1e:61:aa:20:2a:90:86:da:81:4d:37:78:6b:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe8b494455277ff530025cef2d51df7eab8e4510 Validity Not Before: Dec 6 02:01:01 2025 GMT Not After : Dec 7 02:01:01 2025 GMT Subject: CN=527d5c6fd1229e56f35bc8b237997dacd41dbcbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:68:bb:32:db:a6:2a:6f:c9:a6:ca:a4:6b:e4: 14:38:84:0b:22:c2:bf:90:ee:67:08:62:12:0d:bd: 8d:ed:cd:e2:ab:69:39:8e:73:4c:42:4d:9d:f8:d7: 8d:aa:43:82:91:75:25:83:9e:3b:d8:1c:fd:19:07: ff:b2:15:68:65:36:88:38:b3:6a:ca:5f:0c:ba:5c: e1:74:1f:a3:5c:54:86:10:a6:69:85:7a:c9:72:45: 6b:41:f6:5a:2f:a1:6a:42:4c:3d:d8:b0:42:c1:df: 3f:67:77:5c:0f:9a:38:21:bb:95:4c:08:f8:86:62: dd:28:a8:3d:9d:22:4d:3e:13:a1:67:0d:cb:a4:14: 1d:d6:8e:d5:cf:57:9b:ce:6e:31:04:2d:12:d2:13: ee:9a:54:71:74:99:76:c8:bb:92:39:b5:c9:b7:b4: a7:8e:e5:1c:ca:a0:99:73:ed:61:3b:7a:c9:06:27: bc:da:87:15:98:4e:da:3f:41:b3:b1:f6:d5:9e:af: 6c:a1:67:30:31:f0:1c:71:72:d1:e6:d6:ba:50:05: 50:55:2f:93:cb:17:52:0b:10:c3:e6:6a:d0:b8:b0: 8d:a8:3a:3d:be:1d:5c:dc:d1:c7:98:21:ac:69:9c: 27:b6:72:f4:a5:c9:49:7f:28:4c:99:48:6a:2d:d0: f7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:7D:5C:6F:D1:22:9E:56:F3:5B:C8:B2:37:99:7D:AC:D4:1D:BC:BF X509v3 Authority Key Identifier: keyid:FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:f0:8b:f7:ee:8a:60:bc:03:6d:8a:86:68:bc:ec:fc:58:89: f0:5d:8a:a0:e0:09:43:a6:7d:d8:09:c8:e0:63:f5:7e:95:5e: 76:ed:ee:8b:1b:7e:dd:76:48:39:ef:c5:f0:de:0b:fb:4c:3b: 55:c2:c9:11:3b:f2:04:c7:89:ae:25:58:83:b8:8e:3a:e7:14: c2:99:15:1b:e9:de:8d:66:0e:60:94:06:22:e7:22:21:32:20: b8:4f:9b:00:b5:14:11:99:21:70:98:17:f7:4f:04:ed:85:12: 36:1f:f6:0f:1d:44:c0:75:3a:d9:8e:5e:d1:61:d9:e7:25:f1: f7:8c:d1:d8:b3:a2:21:82:bc:15:d2:5b:b7:64:d8:fb:38:25: 8e:10:4c:5a:06:6f:16:6e:2b:1c:3b:7b:2b:d8:0d:5c:3e:4e: 8a:7b:06:4b:0a:7c:6e:c8:6f:aa:27:12:58:b5:86:92:1b:45: b3:2c:3f:6c:30:38:c2:b2:79:6d:9c:ea:08:ab:c7:aa:44:13: e6:64:8e:a5:5b:97:89:be:ef:05:6f:83:c8:3b:42:37:04:8c: a1:9c:60:48:15:f7:cc:cd:95:ef:58:4c:02:5c:38:20:e8:b5: 34:34:3f:fc:f6:3e:1f:77:b6:a1:1b:80:33:5a:69:68:c9:9e: 21:63:89:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZB5hqiAqkIbagU03eGv5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlOGI0OTQ0NTUyNzdmZjUzMDAyNWNlZjJkNTFkZjdlYWI4 ZTQ1MTAwHhcNMjUxMjA2MDIwMTAxWhcNMjUxMjA3MDIwMTAxWjAzMTEwLwYDVQQD Eyg1MjdkNWM2ZmQxMjI5ZTU2ZjM1YmM4YjIzNzk5N2RhY2Q0MWRiY2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGi7MtumKm/Jpsqka+QUOIQLIsK/ kO5nCGISDb2N7c3iq2k5jnNMQk2d+NeNqkOCkXUlg5472Bz9GQf/shVoZTaIOLNq yl8MulzhdB+jXFSGEKZphXrJckVrQfZaL6FqQkw92LBCwd8/Z3dcD5o4IbuVTAj4 hmLdKKg9nSJNPhOhZw3LpBQd1o7Vz1ebzm4xBC0S0hPumlRxdJl2yLuSObXJt7Sn juUcyqCZc+1hO3rJBie82ocVmE7aP0GzsfbVnq9soWcwMfAccXLR5ta6UAVQVS+T yxdSCxDD5mrQuLCNqDo9vh1c3NHHmCGsaZwntnL0pclJfyhMmUhqLdD3QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJ9XG/RIp5W81vIsjeZfazUHby/MB8GA1UdIwQY MBaAFP6LSURVJ3/1MAJc7y1R336rjkUQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX290SlJGVW5mX1V3QWx6dkxWSGZmcXVPUlJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My83NjFhM2UtODgwZS00ZjdjLTkzNjYt YzhjYzViMmQwYWVkLzEvX290SlJGVW5mX1V3QWx6dkxWSGZmcXVPUlJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My83NjFhM2UtODgwZS00ZjdjLTkzNjYtYzhjYzViMmQwYWVk LzEvX290SlJGVW5mX1V3QWx6dkxWSGZmcXVPUlJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg/CL9+6K YLwDbYqGaLzs/FiJ8F2KoOAJQ6Z92AnI4GP1fpVedu3uixt+3XZIOe/F8N4L+0w7 VcLJETvyBMeJriVYg7iOOucUwpkVG+nejWYOYJQGIuciITIguE+bALUUEZkhcJgX 908E7YUSNh/2Dx1EwHU62Y5e0WHZ5yXx94zR2LOiIYK8FdJbt2TY+zgljhBMWgZv Fm4rHDt7K9gNXD5OinsGSwp8bshvqicSWLWGkhtFsyw/bDA4wrJ5bZzqCKvHqkQT 5mSOpVuXib7vBW+DyDtCNwSMoZxgSBX3zM2V71hMAlw4IOi1NDQ//PY+H3e2oRuA M1ppaMmeIWOJ7Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:53 2025 by rpki-client