This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft File: OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft (raw, json) Hash identifier: JAC8TnO+DeDOsqpZz24tJE0rJV7mTcuDsZWKwMbmOtM= Subject key identifier: 96:62:9D:98:1F:31:27:68:62:23:4D:7E:0E:68:B3:C7:A1:55:DA:9C Authority key identifier: 39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37 Certificate issuer: /CN=393d2f0a96199a060856cf67e2105fda2cb93d37 Certificate serial: 019AF0BF10814C50BA43E5883062AF56FCD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft Manifest number: 175E Signing time: Fri 05 Dec 2025 23:00:44 +0000 Manifest this update: Fri 05 Dec 2025 23:00:44 +0000 Manifest next update: Sat 06 Dec 2025 23:00:44 +0000 Files and hashes: 1: 2ksl-0DaqqPMJOIcVSjRYw3oowo.roa (hash: bR5/CsRer/6UzbcdOln79yAgzHl3TX5cZlnxevkQmfk=) 2: NeDUni-C3uHplhagAy2lf9i4WwQ.roa (hash: tf9wG40bSRlg1tIcGU3dfENffu94T3Q0YSHKTzWPt14=) 3: OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl (hash: tgBHa2yM3GnPzg++wteiLmp9Ov3dFrMn4PerHGXjnNE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:10:81:4c:50:ba:43:e5:88:30:62:af:56:fc:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=393d2f0a96199a060856cf67e2105fda2cb93d37 Validity Not Before: Dec 5 23:00:44 2025 GMT Not After : Dec 6 23:00:44 2025 GMT Subject: CN=96629d981f31276862234d7e0e68b3c7a155da9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f8:91:94:74:96:98:ab:17:9f:ae:35:e2:28: c5:80:f8:2d:a1:49:5e:72:cd:88:8d:c5:e3:e5:b6: 82:e5:bc:4e:37:f3:24:e4:87:da:3b:9a:e8:4d:c9: f7:0c:90:4d:85:76:b6:be:e5:07:07:56:48:ea:79: ac:59:55:91:5d:20:6d:a3:ba:0e:f2:c6:79:de:08: b8:eb:75:59:92:45:b4:27:ed:99:f5:2c:49:54:7d: 52:7c:3c:e1:bd:a8:fc:c9:67:00:b9:32:a3:76:d9: 0f:a7:9b:57:40:c5:95:21:36:27:f7:76:46:8e:7a: 7a:31:d7:87:7a:ae:08:6a:41:97:68:79:46:58:38: 71:9b:b0:c7:12:13:f9:ab:5c:5f:09:5c:12:e0:0a: f1:16:d1:72:cc:6a:40:53:51:17:5e:23:22:5b:7e: d9:2b:90:c2:fe:04:99:02:75:5c:8c:30:08:db:ce: b5:d1:6d:40:7f:ba:eb:6a:a3:17:a8:90:0d:17:c4: 1e:f0:0f:11:aa:d0:1a:5b:a8:aa:87:70:d2:ef:df: 93:88:b2:e4:85:06:0e:5c:d5:57:e1:fa:b2:13:41: 9c:c2:bd:51:ec:02:b8:d8:28:4a:f5:a3:54:3a:f5: e6:22:72:b7:28:1e:d2:97:58:31:3f:d2:f8:ce:a5: 07:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:62:9D:98:1F:31:27:68:62:23:4D:7E:0E:68:B3:C7:A1:55:DA:9C X509v3 Authority Key Identifier: keyid:39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:13:53:60:26:61:e7:69:09:1b:7d:54:d3:26:bb:54:e3:f4: 77:a8:b2:43:bf:44:93:93:55:82:57:24:72:c4:97:b7:e4:d0: dd:32:fb:0e:6a:9b:78:be:ab:c5:d2:f4:34:31:9d:ba:6c:d4: 88:2e:e2:67:fe:e3:97:eb:84:da:79:58:b1:f2:9a:10:98:63: 1a:c9:2d:fd:10:27:63:74:14:61:1f:24:63:bc:a2:ea:98:75: f5:2b:8c:27:f5:ca:7f:23:d4:3c:02:e7:44:d6:8f:95:4f:d1: 92:62:74:b6:f5:1b:5e:a3:68:bc:4a:a2:1a:b9:08:b2:50:77: da:0d:39:6d:a2:9e:0e:27:9c:00:50:e2:2e:10:ec:06:5b:c0: 91:5a:f1:8b:4f:df:6c:7b:3e:26:a3:3b:4d:66:fa:23:a3:b7: 9f:96:ea:e5:e2:be:de:c1:75:e6:f0:0e:c5:bf:51:b9:4f:c5: 78:35:e6:df:3b:8e:0a:38:25:fc:1a:98:0d:4c:2b:77:a1:ba: 6a:6b:22:ae:c7:6c:6e:cc:03:fd:2f:0b:57:82:26:e9:46:74: 53:c0:36:5c:f3:08:78:4d:f7:21:69:8b:03:6b:28:3d:26:06: 78:d9:01:77:db:46:e3:22:a9:9a:64:e8:f0:7f:88:7e:f2:1a: ba:a3:e1:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvxCBTFC6Q+WIMGKvVvzVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5M2QyZjBhOTYxOTlhMDYwODU2Y2Y2N2UyMTA1ZmRhMmNi OTNkMzcwHhcNMjUxMjA1MjMwMDQ0WhcNMjUxMjA2MjMwMDQ0WjAzMTEwLwYDVQQD Eyg5NjYyOWQ5ODFmMzEyNzY4NjIyMzRkN2UwZTY4YjNjN2ExNTVkYTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofiRlHSWmKsXn6414ijFgPgtoUle cs2IjcXj5baC5bxON/Mk5IfaO5roTcn3DJBNhXa2vuUHB1ZI6nmsWVWRXSBto7oO 8sZ53gi463VZkkW0J+2Z9SxJVH1SfDzhvaj8yWcAuTKjdtkPp5tXQMWVITYn93ZG jnp6MdeHeq4IakGXaHlGWDhxm7DHEhP5q1xfCVwS4ArxFtFyzGpAU1EXXiMiW37Z K5DC/gSZAnVcjDAI28610W1Af7rraqMXqJANF8Qe8A8RqtAaW6iqh3DS79+TiLLk hQYOXNVX4fqyE0Gcwr1R7AK42ChK9aNUOvXmInK3KB7Sl1gxP9L4zqUHRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJZinZgfMSdoYiNNfg5os8ehVdqcMB8GA1UdIwQY MBaAFDk9LwqWGZoGCFbPZ+IQX9osuT03MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1QwdkNwWVptZ1lJVnM5bjRoQmYyaXk1UFRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wMzY1ZGUtODAwOC00NzEzLWFiOTkt NjE5ZmE4MGI4ZDc0LzEvT1QwdkNwWVptZ1lJVnM5bjRoQmYyaXk1UFRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8wMzY1ZGUtODAwOC00NzEzLWFiOTktNjE5ZmE4MGI4ZDc0 LzEvT1QwdkNwWVptZ1lJVnM5bjRoQmYyaXk1UFRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAhNTYCZh 52kJG31U0ya7VOP0d6iyQ79Ek5NVglckcsSXt+TQ3TL7DmqbeL6rxdL0NDGdumzU iC7iZ/7jl+uE2nlYsfKaEJhjGskt/RAnY3QUYR8kY7yi6ph19SuMJ/XKfyPUPALn RNaPlU/RkmJ0tvUbXqNovEqiGrkIslB32g05baKeDiecAFDiLhDsBlvAkVrxi0/f bHs+JqM7TWb6I6O3n5bq5eK+3sF15vAOxb9RuU/FeDXm3zuOCjgl/BqYDUwrd6G6 amsirsdsbswD/S8LV4Im6UZ0U8A2XPMIeE33IWmLA2soPSYGeNkBd9tG4yKpmmTo 8H+IfvIauqPhPg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:20 2025 by rpki-client