This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft File: 2OtznG09xxpiBsjzcSQm_1MqCv4.mft (raw, json) Hash identifier: bpWk7CJf+k0eC9TuC4ktsHs7F9m2nT/8Y0RExDnXXpE= Subject key identifier: 45:99:36:A6:14:E3:A2:C4:35:1E:FE:31:4A:A2:6A:A1:08:E8:0A:BF Authority key identifier: D8:EB:73:9C:6D:3D:C7:1A:62:06:C8:F3:71:24:26:FF:53:2A:0A:FE Certificate issuer: /CN=d8eb739c6d3dc71a6206c8f3712426ff532a0afe Certificate serial: 019AF164667FA0847957724EB974BDD60D20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft Manifest number: D1 Signing time: Sat 06 Dec 2025 02:01:20 +0000 Manifest this update: Sat 06 Dec 2025 02:01:20 +0000 Manifest next update: Sun 07 Dec 2025 02:01:20 +0000 Files and hashes: 1: 2OtznG09xxpiBsjzcSQm_1MqCv4.crl (hash: p9C8t+O8QxQRhrBeK2cE0G3XfzJ3vH9TctNWHNTwHcQ=) 2: wuqKrfx0UPDoVQxdKV8k97AGu4E.roa (hash: QvAJVSN4EtHNESjcwxnKTv7sFwnj2Nb91/xIZcXw158=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.crl rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:66:7f:a0:84:79:57:72:4e:b9:74:bd:d6:0d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8eb739c6d3dc71a6206c8f3712426ff532a0afe Validity Not Before: Dec 6 02:01:20 2025 GMT Not After : Dec 7 02:01:20 2025 GMT Subject: CN=459936a614e3a2c4351efe314aa26aa108e80abf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1c:f1:1d:57:a5:91:5a:1a:a3:44:2e:a3:64: 36:39:26:67:83:09:40:fc:25:28:47:a3:cf:f8:99: 90:07:af:64:72:1b:6e:57:93:51:85:c7:68:d4:c3: ee:0c:ad:ed:c4:18:0a:9d:b6:4f:7b:34:82:c7:82: 70:6b:fe:c7:6b:8b:ac:72:7f:87:67:dc:c6:24:f8: 9b:84:ae:c7:19:e8:51:28:8f:83:52:bf:9a:e2:bf: f7:43:73:69:f9:1b:04:52:66:0a:4f:8a:f4:39:99: 9c:f4:dd:e2:dd:3e:d5:aa:7e:48:c5:f9:29:25:2d: 9d:52:5f:d7:14:aa:8d:cb:4a:87:e0:3f:c3:b6:3a: ec:0b:6a:3f:19:0b:52:47:9d:a6:79:9d:14:0a:7e: 27:dd:1e:3f:a4:6a:89:e9:0a:72:27:cb:8f:5c:96: 20:95:dd:1f:e0:d3:51:cd:24:1e:13:b3:91:cf:98: 05:3d:8e:77:4c:9b:46:84:ac:26:2d:9d:76:a9:7c: c8:b8:5b:fc:81:17:de:96:06:45:64:30:6d:a7:1a: f2:81:6d:d3:5a:9b:5c:c1:d9:9d:54:51:ef:d7:39: 0b:9e:21:13:f2:0e:1c:b8:be:9c:1d:ec:e0:63:0a: f7:ef:e2:cb:d6:76:5c:0c:ec:f6:7d:93:56:31:fa: f6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:99:36:A6:14:E3:A2:C4:35:1E:FE:31:4A:A2:6A:A1:08:E8:0A:BF X509v3 Authority Key Identifier: keyid:D8:EB:73:9C:6D:3D:C7:1A:62:06:C8:F3:71:24:26:FF:53:2A:0A:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:71:88:83:e3:ec:87:77:b4:32:10:7f:b3:e3:29:e0:47:cd: d4:27:fa:9b:04:e2:68:67:1a:f7:f7:80:30:e3:84:42:28:9a: 39:2d:be:28:19:b5:cc:c0:08:62:da:5a:a0:fd:0d:0c:71:ce: 50:c6:3c:3d:7a:16:0d:32:47:88:ee:87:8d:69:45:59:0f:f4: 1a:05:16:fa:23:d2:7b:a8:15:75:de:7e:39:be:3a:69:54:d9: 89:1e:a2:c9:ac:e9:e8:c0:7b:b1:e6:4a:33:d9:54:17:fe:cf: 02:0e:8b:55:f5:89:f2:6f:3a:7c:2c:dd:82:85:32:cb:fe:a2: ed:08:9d:a8:0a:01:44:f7:c9:8c:43:b3:3a:08:fc:5a:57:6b: de:46:d5:c7:ba:26:6f:97:ef:e3:09:f9:da:9f:28:c9:77:75: 17:77:d4:a0:11:87:d1:18:5d:49:a1:4a:b3:f7:24:a4:a4:22: be:ae:65:55:c7:bb:30:99:c8:08:22:9e:ac:e6:a3:6e:3e:12: b1:52:8d:d9:f1:f1:ba:8e:1b:74:5e:28:45:f9:74:b6:9e:56: 06:a8:54:fc:70:c2:ec:41:02:1e:fe:ef:ab:cf:d2:51:d3:bb: f3:ce:26:1c:04:b3:16:3b:8e:22:1a:31:fb:29:d0:a0:cf:7f: 90:92:5a:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZGZ/oIR5V3JOuXS91g0gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ZWI3MzljNmQzZGM3MWE2MjA2YzhmMzcxMjQyNmZmNTMy YTBhZmUwHhcNMjUxMjA2MDIwMTIwWhcNMjUxMjA3MDIwMTIwWjAzMTEwLwYDVQQD Eyg0NTk5MzZhNjE0ZTNhMmM0MzUxZWZlMzE0YWEyNmFhMTA4ZTgwYWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRzxHVelkVoao0Quo2Q2OSZngwlA /CUoR6PP+JmQB69kchtuV5NRhcdo1MPuDK3txBgKnbZPezSCx4Jwa/7Ha4uscn+H Z9zGJPibhK7HGehRKI+DUr+a4r/3Q3Np+RsEUmYKT4r0OZmc9N3i3T7Vqn5Ixfkp JS2dUl/XFKqNy0qH4D/DtjrsC2o/GQtSR52meZ0UCn4n3R4/pGqJ6QpyJ8uPXJYg ld0f4NNRzSQeE7ORz5gFPY53TJtGhKwmLZ12qXzIuFv8gRfelgZFZDBtpxrygW3T WptcwdmdVFHv1zkLniET8g4cuL6cHezgYwr37+LL1nZcDOz2fZNWMfr2EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEWZNqYU46LENR7+MUqiaqEI6Aq/MB8GA1UdIwQY MBaAFNjrc5xtPccaYgbI83EkJv9TKgr+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk90em5HMDl4eHBpQnNqemNTUW1fMU1xQ3Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8wMTgxZjgtNGZhNC00Njk3LWEyNzIt MzMzYjZkNGVhNDViLzEvMk90em5HMDl4eHBpQnNqemNTUW1fMU1xQ3Y0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8wMTgxZjgtNGZhNC00Njk3LWEyNzItMzMzYjZkNGVhNDVi LzEvMk90em5HMDl4eHBpQnNqemNTUW1fMU1xQ3Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVXGIg+Ps h3e0MhB/s+Mp4EfN1Cf6mwTiaGca9/eAMOOEQiiaOS2+KBm1zMAIYtpaoP0NDHHO UMY8PXoWDTJHiO6HjWlFWQ/0GgUW+iPSe6gVdd5+Ob46aVTZiR6iyazp6MB7seZK M9lUF/7PAg6LVfWJ8m86fCzdgoUyy/6i7QidqAoBRPfJjEOzOgj8Wldr3kbVx7om b5fv4wn52p8oyXd1F3fUoBGH0RhdSaFKs/ckpKQivq5lVce7MJnICCKerOajbj4S sVKN2fHxuo4bdF4oRfl0tp5WBqhU/HDC7EECHv7vq8/SUdO7884mHASzFjuOIhox +ynQoM9/kJJasg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:17:52 2025 by rpki-client