This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft File: otlSJFuzTkDNq11LCQFDwNhYE5A.mft (raw, json) Hash identifier: peHz+t+5MgOrl/OmJM1uT6+EeahhbziFf8geoJqp9Fk= Subject key identifier: 11:A4:F0:A9:0F:2A:96:2B:DD:77:54:24:F6:14:0A:D4:A4:CC:9D:5A Authority key identifier: A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90 Certificate issuer: /CN=a2d952245bb34e40cdab5d4b090143c0d8581390 Certificate serial: 019AF3F70674318B8C8D074834A38C30E404 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 14:00:43 +0000 Manifest this update: Sat 06 Dec 2025 14:00:43 +0000 Manifest next update: Sun 07 Dec 2025 14:00:43 +0000 Files and hashes: 1: 3HWzcOaTDrdG94i3xjE6Qq-tfnk.roa (hash: 10l24Yg/npX27cx+ImjzGfcJeOU0IJssFEQ4Du2ScJQ=) 2: 6NvbAT4RMJYDBf6360dj0cmbOC4.roa (hash: tpHQQELFe4AosbNjooax9dsLwDFzjHfeb9ASXozivq8=) 3: cn7xlpxUU_sjrheBrcxBDUwIFZM.roa (hash: rjBABCp1JK8gkLVNNwhPnYtWrojXtWHlNh1PMd//BKI=) 4: otlSJFuzTkDNq11LCQFDwNhYE5A.crl (hash: eP3Svfbq392kl9lTiiQezRKCZw7lELSUwH6LmLEzpZ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:06:74:31:8b:8c:8d:07:48:34:a3:8c:30:e4:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2d952245bb34e40cdab5d4b090143c0d8581390 Validity Not Before: Dec 6 14:00:43 2025 GMT Not After : Dec 7 14:00:43 2025 GMT Subject: CN=11a4f0a90f2a962bdd775424f6140ad4a4cc9d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bd:c5:9c:69:cc:89:bb:18:c6:e9:18:8f:27: 86:2a:6e:fb:e0:95:82:10:f4:58:e8:56:10:3a:e4: cf:87:90:1b:ea:92:83:32:9a:be:b4:17:0b:5d:df: 45:e4:eb:1a:7b:9e:c4:44:11:88:d9:02:ca:c9:26: 0f:17:36:f5:b9:eb:9b:c0:f2:86:23:f6:ea:9a:44: ca:eb:e7:05:d7:1f:da:8e:c5:67:dc:62:4e:f0:e5: 07:35:a1:8d:02:d6:d5:ed:92:04:b5:4d:61:fe:ff: c9:a8:77:cb:53:d9:0d:e5:2f:e1:96:30:4c:60:40: 13:b1:9b:00:78:dc:18:90:04:99:46:fe:20:b6:1f: 14:1c:9b:13:60:52:41:e7:67:c9:b4:b5:cc:3a:7f: d8:12:95:22:06:b5:28:f7:62:62:f7:f4:ea:8d:ef: a6:67:86:1e:3c:28:83:55:3f:fd:69:9c:77:e7:3a: 27:0d:37:33:ae:f5:a0:8d:7a:a0:ef:06:4f:4b:20: b5:53:1b:f3:90:59:1e:55:4d:df:3c:b1:5b:5a:c2: 52:4e:31:54:e7:df:39:7a:0f:3c:06:3d:b2:1c:c3: 0d:db:0f:a8:89:5e:01:f7:a2:70:a5:5b:f6:81:c6: c9:b4:8e:c8:17:3b:4f:6c:ed:ed:c9:d8:c7:1a:b7: 7d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A4:F0:A9:0F:2A:96:2B:DD:77:54:24:F6:14:0A:D4:A4:CC:9D:5A X509v3 Authority Key Identifier: keyid:A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:99:08:c5:e6:b3:5a:33:a5:5e:0a:7e:4d:29:b6:9d:f3:af: ce:d4:77:5a:c1:e0:b5:59:e7:7a:b3:5c:4e:f2:bb:2c:84:a6: 49:f6:d8:4c:90:36:e2:11:a5:4e:cb:e2:d5:b6:d2:d4:0c:ef: 7d:ec:ff:da:64:33:28:8e:57:3e:cf:1a:fc:12:d9:d9:ec:fc: 37:03:ce:e6:e1:7d:f3:1e:aa:70:bf:ef:27:89:81:3f:2d:6b: 8c:31:89:48:54:21:70:cf:17:b7:4e:cd:a3:69:f5:b9:8b:ea: 59:7c:be:cc:bc:33:7e:f3:1a:87:cb:3c:bc:9f:31:71:2d:07: 30:ed:e2:1d:a1:9e:8e:01:1a:f5:4b:e4:a5:22:4b:2e:f9:33: a5:5a:71:3d:46:2b:a0:26:a6:58:4c:6a:6f:a1:36:61:e0:56: 43:99:ab:90:fa:75:9d:5b:d8:f6:af:ae:2c:41:9c:9e:9c:ec: f4:79:e1:32:60:fe:eb:ff:66:b1:61:de:2e:16:eb:d4:85:77: 60:3e:fe:66:b1:22:92:5a:24:c8:a8:54:3b:cf:06:b3:85:44: 8b:8d:81:e9:2b:c3:c9:dd:d3:c3:8c:f5:2b:2e:ce:0b:3a:69: 98:bf:f4:5a:7a:ae:4f:b4:f6:76:fd:cc:5f:34:76:3f:ca:ca: 3e:45:3e:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9wZ0MYuMjQdINKOMMOQEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZDk1MjI0NWJiMzRlNDBjZGFiNWQ0YjA5MDE0M2MwZDg1 ODEzOTAwHhcNMjUxMjA2MTQwMDQzWhcNMjUxMjA3MTQwMDQzWjAzMTEwLwYDVQQD EygxMWE0ZjBhOTBmMmE5NjJiZGQ3NzU0MjRmNjE0MGFkNGE0Y2M5ZDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvb3FnGnMibsYxukYjyeGKm774JWC EPRY6FYQOuTPh5Ab6pKDMpq+tBcLXd9F5Osae57ERBGI2QLKySYPFzb1ueubwPKG I/bqmkTK6+cF1x/ajsVn3GJO8OUHNaGNAtbV7ZIEtU1h/v/JqHfLU9kN5S/hljBM YEATsZsAeNwYkASZRv4gth8UHJsTYFJB52fJtLXMOn/YEpUiBrUo92Ji9/Tqje+m Z4YePCiDVT/9aZx35zonDTczrvWgjXqg7wZPSyC1UxvzkFkeVU3fPLFbWsJSTjFU 5985eg88Bj2yHMMN2w+oiV4B96JwpVv2gcbJtI7IFztPbO3tydjHGrd9PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBGk8KkPKpYr3XdUJPYUCtSkzJ1aMB8GA1UdIwQY MBaAFKLZUiRbs05AzatdSwkBQ8DYWBOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3RsU0pGdXpUa0ROcTExTENRRkR3TmhZRTVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC80YjFhODAtNGU1Zi00OWU3LWI1MDIt YTIyZmZlZTRhNTE1LzEvb3RsU0pGdXpUa0ROcTExTENRRkR3TmhZRTVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC80YjFhODAtNGU1Zi00OWU3LWI1MDItYTIyZmZlZTRhNTE1 LzEvb3RsU0pGdXpUa0ROcTExTENRRkR3TmhZRTVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE5kIxeaz WjOlXgp+TSm2nfOvztR3WsHgtVnnerNcTvK7LISmSfbYTJA24hGlTsvi1bbS1Azv fez/2mQzKI5XPs8a/BLZ2ez8NwPO5uF98x6qcL/vJ4mBPy1rjDGJSFQhcM8Xt07N o2n1uYvqWXy+zLwzfvMah8s8vJ8xcS0HMO3iHaGejgEa9UvkpSJLLvkzpVpxPUYr oCamWExqb6E2YeBWQ5mrkPp1nVvY9q+uLEGcnpzs9HnhMmD+6/9msWHeLhbr1IV3 YD7+ZrEiklokyKhUO88Gs4VEi42B6SvDyd3Tw4z1Ky7OCzppmL/0WnquT7T2dv3M XzR2P8rKPkU+lg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:36:35 2025 by rpki-client