This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft File: ot5KBypby3TSDpLdu9f2R3w8j84.mft (raw, json) Hash identifier: NDDJk9RvrxuRA1Zrt8Ir+p4saf9IX8um87MIwAZ+Dl4= Subject key identifier: 29:12:A0:F4:3B:8C:99:0C:91:EA:18:D2:1E:3F:F6:7C:1C:3E:6F:86 Authority key identifier: A2:DE:4A:07:2A:5B:CB:74:D2:0E:92:DD:BB:D7:F6:47:7C:3C:8F:CE Certificate issuer: /CN=a2de4a072a5bcb74d20e92ddbbd7f6477c3c8fce Certificate serial: 019B3D59EE7931DA49EF138B9CDCDD9C3439 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 20:01:02 +0000 Manifest this update: Sat 20 Dec 2025 20:01:02 +0000 Manifest next update: Sun 21 Dec 2025 20:01:02 +0000 Files and hashes: 1: cXzh2EByibI6pp16VOl9xphGioo.roa (hash: it2xcMVeYRReFR9yZ4UbpAh0VY8UGfjt29+46hCCzeU=) 2: ot5KBypby3TSDpLdu9f2R3w8j84.crl (hash: ZfRlDz8EQ534YMVFrQgDzb0z7s07LQyIbcZbfZuXmxU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.crl rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:ee:79:31:da:49:ef:13:8b:9c:dc:dd:9c:34:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2de4a072a5bcb74d20e92ddbbd7f6477c3c8fce Validity Not Before: Dec 20 20:01:02 2025 GMT Not After : Dec 21 20:01:02 2025 GMT Subject: CN=2912a0f43b8c990c91ea18d21e3ff67c1c3e6f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:13:41:a2:28:37:8b:f7:ee:d4:63:2c:a7:82: 2d:4e:cf:bd:7b:1a:f2:fe:57:cd:d9:24:7d:15:21: 5f:61:6d:d7:be:13:e2:ae:5b:e4:df:81:53:14:e9: b4:49:fe:9e:88:ae:5f:23:c4:0b:47:01:4f:3d:55: 7a:b8:30:a8:10:2a:b8:45:0d:c0:e5:6f:33:d8:07: 9a:78:59:33:e1:62:89:b2:8f:aa:a2:60:c4:a0:b9: 6a:83:b8:e8:5c:0d:43:f3:7f:32:2a:cd:0e:4e:57: 4b:d0:89:12:c4:3d:43:56:ed:2d:0e:97:9f:3e:b9: 93:ef:29:c9:c5:3b:f8:06:33:c5:29:bb:4f:be:66: 29:03:33:31:b5:a2:0e:1b:d7:e2:71:9c:e3:39:b4: 0a:0a:8e:7e:f0:74:ec:29:ca:cd:67:97:d1:40:42: 4b:78:70:5b:7b:36:36:90:4b:d7:00:ac:6c:e3:04: 37:f6:f2:95:6f:26:dc:ad:ef:5a:80:b6:47:d6:0d: cc:f3:62:6d:8b:98:75:8b:c7:8c:62:0f:e1:fe:2f: 76:aa:11:f4:29:de:26:f3:b8:9c:10:33:10:42:1a: 67:b4:e7:f1:0c:61:f1:0b:5d:15:eb:7f:66:4e:0f: b3:37:8e:3c:6d:d6:87:e5:42:d7:1b:8d:76:18:c9: 67:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:12:A0:F4:3B:8C:99:0C:91:EA:18:D2:1E:3F:F6:7C:1C:3E:6F:86 X509v3 Authority Key Identifier: keyid:A2:DE:4A:07:2A:5B:CB:74:D2:0E:92:DD:BB:D7:F6:47:7C:3C:8F:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:85:32:e1:36:c9:0c:74:a6:0e:1e:18:6b:9f:46:ea:be:7f: d1:b4:b6:e3:7c:0d:7a:4f:0c:ce:42:0f:2f:de:67:82:65:a4: 61:d4:b2:b1:ed:76:d9:f1:4f:9e:f4:82:ba:7e:41:ad:d1:6b: ad:df:5a:86:d2:b2:f2:59:43:ed:07:b5:e5:6a:73:e6:01:c6: 59:48:74:17:fe:b5:34:fe:bc:db:fc:86:8a:67:72:29:1e:47: fa:33:57:78:64:3b:73:5d:bc:79:ed:81:35:e3:2f:85:21:ca: 64:9a:39:4d:f7:1d:91:95:a7:96:68:b2:e9:60:0b:09:b5:3e: 2e:80:b4:27:04:b1:09:ce:ec:3f:fe:b6:b2:af:83:2e:5d:d0: b3:04:51:57:ee:18:3c:42:51:28:a7:5a:51:7c:51:c6:1e:7e: 3c:f1:1c:ef:42:22:45:9b:89:93:c1:bf:66:39:0d:58:20:50: 10:62:0d:69:af:c3:bf:4d:5b:87:55:4f:e0:21:7a:7c:a7:c9: f7:82:49:d9:a5:d5:ee:1d:2c:ea:58:09:0d:b7:e9:17:dc:e4: cf:dc:3b:0d:39:23:9e:49:e8:a3:77:57:cb:df:b7:27:0e:68: 6d:46:a9:93:fd:a0:61:ad:3c:26:87:6b:ab:03:c7:b8:ea:1b: f9:7b:df:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9We55MdpJ7xOLnNzdnDQ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZGU0YTA3MmE1YmNiNzRkMjBlOTJkZGJiZDdmNjQ3N2Mz YzhmY2UwHhcNMjUxMjIwMjAwMTAyWhcNMjUxMjIxMjAwMTAyWjAzMTEwLwYDVQQD EygyOTEyYTBmNDNiOGM5OTBjOTFlYTE4ZDIxZTNmZjY3YzFjM2U2Zjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhNBoig3i/fu1GMsp4ItTs+9exry /lfN2SR9FSFfYW3XvhPirlvk34FTFOm0Sf6eiK5fI8QLRwFPPVV6uDCoECq4RQ3A 5W8z2AeaeFkz4WKJso+qomDEoLlqg7joXA1D838yKs0OTldL0IkSxD1DVu0tDpef PrmT7ynJxTv4BjPFKbtPvmYpAzMxtaIOG9ficZzjObQKCo5+8HTsKcrNZ5fRQEJL eHBbezY2kEvXAKxs4wQ39vKVbybcre9agLZH1g3M82Jti5h1i8eMYg/h/i92qhH0 Kd4m87icEDMQQhpntOfxDGHxC10V639mTg+zN448bdaH5ULXG412GMlnyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCkSoPQ7jJkMkeoY0h4/9nwcPm+GMB8GA1UdIwQY MBaAFKLeSgcqW8t00g6S3bvX9kd8PI/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3Q1S0J5cGJ5M1RTRHBMZHU5ZjJSM3c4ajg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lMDVhM2EtMTMwNy00MWNiLWI0YzEt NjRhNTYwNDZiY2E3LzEvb3Q1S0J5cGJ5M1RTRHBMZHU5ZjJSM3c4ajg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9lMDVhM2EtMTMwNy00MWNiLWI0YzEtNjRhNTYwNDZiY2E3 LzEvb3Q1S0J5cGJ5M1RTRHBMZHU5ZjJSM3c4ajg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk4Uy4TbJ DHSmDh4Ya59G6r5/0bS243wNek8MzkIPL95ngmWkYdSyse122fFPnvSCun5BrdFr rd9ahtKy8llD7Qe15Wpz5gHGWUh0F/61NP682/yGimdyKR5H+jNXeGQ7c128ee2B NeMvhSHKZJo5TfcdkZWnlmiy6WALCbU+LoC0JwSxCc7sP/62sq+DLl3QswRRV+4Y PEJRKKdaUXxRxh5+PPEc70IiRZuJk8G/ZjkNWCBQEGINaa/Dv01bh1VP4CF6fKfJ 94JJ2aXV7h0s6lgJDbfpF9zkz9w7DTkjnknoo3dXy9+3Jw5obUapk/2gYa08Jodr qwPHuOob+XvfPQ== -----END CERTIFICATE-----Generated at Sun Dec 21 00:16:20 2025 by rpki-client