This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft File: OTdAGaVNS94j8NooolIVDVy0c60.mft (raw, json) Hash identifier: 5sbnTRfunBAi4n4OVlWyxVEWYyMtBIOjJ+IJGOh4Ad8= Subject key identifier: 94:81:6A:CD:2D:8B:AA:91:5B:E8:22:56:2E:5B:7C:B0:EE:39:B7:F4 Authority key identifier: 39:37:40:19:A5:4D:4B:DE:23:F0:DA:28:A2:52:15:0D:5C:B4:73:AD Certificate issuer: /CN=39374019a54d4bde23f0da28a252150d5cb473ad Certificate serial: 019B33E895BF10B9D70CF3651D09DE33C49D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft Manifest number: 1028 Signing time: Fri 19 Dec 2025 00:00:39 +0000 Manifest this update: Fri 19 Dec 2025 00:00:39 +0000 Manifest next update: Sat 20 Dec 2025 00:00:39 +0000 Files and hashes: 1: OTdAGaVNS94j8NooolIVDVy0c60.crl (hash: F32jxFfdv2repw78lhR8wQsxL5kSnVuYOkrD/uhAg0g=) 2: ma10kWI1PiUmBnjZZdsu20JVWcE.roa (hash: jNRh+1s+kkx04U4sH3v3rSIpTBgL5T0X08vSRFsU6Qk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.crl rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:95:bf:10:b9:d7:0c:f3:65:1d:09:de:33:c4:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39374019a54d4bde23f0da28a252150d5cb473ad Validity Not Before: Dec 19 00:00:39 2025 GMT Not After : Dec 20 00:00:39 2025 GMT Subject: CN=94816acd2d8baa915be822562e5b7cb0ee39b7f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:52:09:79:af:0c:71:20:79:9e:c9:76:0a:ef: 06:ca:49:ab:ff:67:f4:63:8f:a7:46:4b:2c:33:02: 47:6b:a2:b0:9d:a0:a8:ac:8b:c6:ca:e2:d5:a3:45: 01:0c:69:e8:8d:35:24:5e:85:b9:31:93:56:71:5b: 82:ee:dc:40:91:01:8e:ba:bf:d6:09:7a:f8:98:fc: c1:9d:a6:18:50:60:d5:0d:0a:7d:af:e6:cb:e0:72: 7c:55:80:00:3a:c1:c8:2a:6a:38:60:6d:39:71:04: c7:8d:c2:ad:cd:47:57:5b:cc:c6:88:c5:1a:b8:3a: 5f:15:d7:fa:59:ad:d5:39:e1:45:99:09:31:92:77: 1e:ef:66:3b:8f:5c:ba:c9:72:51:37:7f:71:72:7d: 1f:91:a8:5d:55:6f:94:94:67:a8:6f:dd:af:55:2b: 29:66:fe:82:de:82:bb:e7:d5:c6:d3:19:aa:a7:cd: 04:b4:27:22:6a:a6:24:58:4c:7d:d3:cb:84:13:e9: 3c:e3:89:4a:5a:a5:5b:84:d6:1e:00:61:2f:9a:56: b4:18:09:9a:9a:6f:34:6f:df:d9:98:19:57:c6:28: 6f:33:95:47:d1:4d:4e:40:76:5d:9b:27:bd:b8:3b: 51:16:a1:a8:93:ab:a5:0e:df:4b:67:0d:7f:72:2a: a4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:81:6A:CD:2D:8B:AA:91:5B:E8:22:56:2E:5B:7C:B0:EE:39:B7:F4 X509v3 Authority Key Identifier: keyid:39:37:40:19:A5:4D:4B:DE:23:F0:DA:28:A2:52:15:0D:5C:B4:73:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:2d:47:2c:7c:5e:d7:27:1a:77:21:35:cd:64:d5:c8:b8:5f: 9d:20:1c:82:2b:27:96:dd:97:b9:a1:47:23:8a:62:c3:4e:52: f8:6d:7c:04:ff:2b:ed:87:e8:10:6f:d5:53:b6:52:67:d6:ec: 1f:50:cb:39:9f:b8:95:70:dd:fa:0e:ea:69:32:2d:e4:27:a4: f6:aa:8a:7e:53:69:a5:dd:97:63:be:4d:e3:1c:58:d9:ac:ff: 77:de:96:7d:c5:ca:4d:7f:37:62:b5:fe:8a:88:37:72:b5:36: a3:19:ad:1b:5c:eb:eb:31:53:fb:8a:92:59:6d:a1:6c:7b:3f: 34:17:7a:01:64:1e:c5:83:77:b0:ab:fb:45:7f:4f:1e:36:ea: 35:cd:98:f5:7c:de:4e:19:7a:32:1c:e8:f4:46:a2:d2:8f:03: 6d:48:8a:45:16:0f:ec:72:73:d1:60:a3:a6:09:67:58:2c:f9: 3c:8c:ab:66:11:b5:21:9f:16:16:5f:36:7e:f3:72:31:9c:3c: 06:fc:9b:a2:d6:f8:0a:86:f0:f3:e8:47:e3:7f:2b:fa:6e:49: 7f:e4:12:7f:60:f1:d7:16:8a:9b:3c:3f:5d:0d:3b:72:0d:fd: ee:c7:5a:62:60:e8:c1:21:84:37:af:fe:69:27:a8:90:59:95: 22:19:a2:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6JW/ELnXDPNlHQneM8SdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5Mzc0MDE5YTU0ZDRiZGUyM2YwZGEyOGEyNTIxNTBkNWNi NDczYWQwHhcNMjUxMjE5MDAwMDM5WhcNMjUxMjIwMDAwMDM5WjAzMTEwLwYDVQQD Eyg5NDgxNmFjZDJkOGJhYTkxNWJlODIyNTYyZTViN2NiMGVlMzliN2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFIJea8McSB5nsl2Cu8Gykmr/2f0 Y4+nRkssMwJHa6KwnaCorIvGyuLVo0UBDGnojTUkXoW5MZNWcVuC7txAkQGOur/W CXr4mPzBnaYYUGDVDQp9r+bL4HJ8VYAAOsHIKmo4YG05cQTHjcKtzUdXW8zGiMUa uDpfFdf6Wa3VOeFFmQkxknce72Y7j1y6yXJRN39xcn0fkahdVW+UlGeob92vVSsp Zv6C3oK759XG0xmqp80EtCciaqYkWEx908uEE+k844lKWqVbhNYeAGEvmla0GAma mm80b9/ZmBlXxihvM5VH0U1OQHZdmye9uDtRFqGok6ulDt9LZw1/ciqkQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJSBas0ti6qRW+giVi5bfLDuObf0MB8GA1UdIwQY MBaAFDk3QBmlTUveI/DaKKJSFQ1ctHOtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1RkQUdhVk5TOTRqOE5vb29sSVZEVnkwYzYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny81MDU3NTUtYzRhYi00OTA1LThiNDgt YmJkMWFkNTNkYTQzLzEvT1RkQUdhVk5TOTRqOE5vb29sSVZEVnkwYzYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny81MDU3NTUtYzRhYi00OTA1LThiNDgtYmJkMWFkNTNkYTQz LzEvT1RkQUdhVk5TOTRqOE5vb29sSVZEVnkwYzYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUC1HLHxe 1ycadyE1zWTVyLhfnSAcgisnlt2XuaFHI4piw05S+G18BP8r7YfoEG/VU7ZSZ9bs H1DLOZ+4lXDd+g7qaTIt5Cek9qqKflNppd2XY75N4xxY2az/d96WfcXKTX83YrX+ iog3crU2oxmtG1zr6zFT+4qSWW2hbHs/NBd6AWQexYN3sKv7RX9PHjbqNc2Y9Xze Thl6Mhzo9Eai0o8DbUiKRRYP7HJz0WCjpglnWCz5PIyrZhG1IZ8WFl82fvNyMZw8 Bvybotb4Cobw8+hH438r+m5Jf+QSf2Dx1xaKmzw/XQ07cg397sdaYmDowSGEN6/+ aSeokFmVIhmi8A== -----END CERTIFICATE-----Generated at Fri Dec 19 07:36:08 2025 by rpki-client