This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft File: OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft (raw, json) Hash identifier: OecO91VWA+GtgejlKi5uFC/4sT8SLjA1a/aMNu8ta6U= Subject key identifier: 54:C2:49:D4:84:56:A6:6F:B4:B2:7D:59:04:EC:35:AA:0D:79:10:57 Authority key identifier: 3A:D5:D7:C7:BE:91:26:50:D7:14:23:CD:3C:25:16:DA:94:09:ED:B6 Certificate issuer: /CN=3ad5d7c7be912650d71423cd3c2516da9409edb6 Certificate serial: 019B16833E9B48EB990DA1F5F87CF7163566 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft Manifest number: 05B6 Signing time: Sat 13 Dec 2025 07:00:58 +0000 Manifest this update: Sat 13 Dec 2025 07:00:58 +0000 Manifest next update: Sun 14 Dec 2025 07:00:58 +0000 Files and hashes: 1: 1r8kB5Z6z_RNw4FuCZ-nelK6Npw.roa (hash: n6aAyuQfPwHavwhm028DG/DEDv2en3wM9tRCOWmzyME=) 2: OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl (hash: XQ7xYOAB6Y2dJSjAbvoq6xSrwL2vsgpv4bYKSpX1vKk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:16:83:3e:9b:48:eb:99:0d:a1:f5:f8:7c:f7:16:35:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad5d7c7be912650d71423cd3c2516da9409edb6 Validity Not Before: Dec 13 07:00:58 2025 GMT Not After : Dec 14 07:00:58 2025 GMT Subject: CN=54c249d48456a66fb4b27d5904ec35aa0d791057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:9c:a9:04:a3:ba:ce:fc:01:5c:6d:f2:2a:3b: 33:e5:48:da:a8:8f:f2:b6:bb:4b:0e:53:59:5c:63: 0e:aa:76:2d:53:ae:f5:01:40:84:6c:49:09:04:ab: b0:7a:c0:91:8d:46:2b:32:2e:7a:29:19:b3:61:15: 61:89:9a:08:45:80:98:ce:56:8c:08:fe:c4:f1:87: 1d:c7:d3:a7:df:65:21:c8:59:68:1f:34:cb:62:5e: 21:f7:a0:ca:fb:6b:7f:cd:38:08:5e:dd:6d:9e:8a: cc:de:54:32:24:5e:51:28:ba:44:ba:2f:44:1b:74: 1f:6c:cb:e6:2d:a2:41:2a:c2:83:9a:47:c1:ba:fb: e5:c9:86:8b:a3:3f:43:0a:b5:81:a2:29:76:dc:3b: 3f:48:77:71:4e:a9:c4:0c:bc:da:42:aa:d6:9a:04: 19:40:8d:7d:70:1b:9b:d0:f4:c5:b0:9a:3f:8a:48: ac:5d:4c:8d:fe:85:b2:43:07:b6:52:04:96:85:bf: 77:51:2f:0b:02:1f:d3:b4:8a:a5:41:33:91:46:e7: 43:d2:03:e7:e9:68:65:19:ae:35:0b:25:98:83:10: b8:25:3a:fd:08:0b:65:8d:99:f2:e5:61:1d:a8:f5: bb:38:5c:e3:b1:c1:70:62:67:1b:90:51:46:b5:8c: 2b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C2:49:D4:84:56:A6:6F:B4:B2:7D:59:04:EC:35:AA:0D:79:10:57 X509v3 Authority Key Identifier: keyid:3A:D5:D7:C7:BE:91:26:50:D7:14:23:CD:3C:25:16:DA:94:09:ED:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:63:ea:85:e2:15:33:03:48:1a:42:83:30:23:cc:69:fb:5f: 9e:d3:17:e6:2a:2a:ff:5e:d5:d2:ae:18:08:2e:d4:2d:bd:97: ca:80:54:02:3e:7c:d4:26:06:7c:96:97:32:21:ab:da:44:67: e4:ef:d8:ce:5b:c6:13:cb:bc:22:a6:f3:97:00:bb:7e:4f:cb: 56:8c:87:ac:bf:1f:9b:f2:b8:c2:4f:a9:2d:d1:f8:ce:77:e6: 49:ba:35:1c:f2:05:95:eb:76:be:fd:2f:dc:19:ae:be:b4:2b: 1e:23:ba:02:ca:9b:1e:ea:fe:0c:8a:a6:63:d2:12:e9:1c:72: ba:a9:ca:d2:24:4f:de:79:e5:00:02:d1:fd:cd:c7:8f:a7:d9: 99:2d:2c:b4:78:c8:b8:a8:dc:e4:67:5d:1f:f5:83:27:18:d9: f7:50:e1:9e:48:7a:60:f5:de:b1:35:e5:3d:64:3f:a8:43:09: f6:38:33:c6:6b:16:e9:1e:e4:9d:e4:fd:99:09:10:5d:e8:84: d3:73:68:d7:df:5a:45:d4:8a:d9:4b:d9:56:83:6a:21:89:3e: 96:d4:1a:f1:07:52:3a:b8:d1:d6:29:3c:18:da:61:f2:19:b4: 11:30:82:31:8b:dc:59:1d:a3:3b:04:7c:06:28:55:00:ce:07: f5:f7:be:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsWgz6bSOuZDaH1+Hz3FjVmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDVkN2M3YmU5MTI2NTBkNzE0MjNjZDNjMjUxNmRhOTQw OWVkYjYwHhcNMjUxMjEzMDcwMDU4WhcNMjUxMjE0MDcwMDU4WjAzMTEwLwYDVQQD Eyg1NGMyNDlkNDg0NTZhNjZmYjRiMjdkNTkwNGVjMzVhYTBkNzkxMDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6pypBKO6zvwBXG3yKjsz5UjaqI/y trtLDlNZXGMOqnYtU671AUCEbEkJBKuwesCRjUYrMi56KRmzYRVhiZoIRYCYzlaM CP7E8Ycdx9On32UhyFloHzTLYl4h96DK+2t/zTgIXt1tnorM3lQyJF5RKLpEui9E G3QfbMvmLaJBKsKDmkfBuvvlyYaLoz9DCrWBoil23Ds/SHdxTqnEDLzaQqrWmgQZ QI19cBub0PTFsJo/ikisXUyN/oWyQwe2UgSWhb93US8LAh/TtIqlQTORRudD0gPn 6WhlGa41CyWYgxC4JTr9CAtljZny5WEdqPW7OFzjscFwYmcbkFFGtYwrzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFTCSdSEVqZvtLJ9WQTsNaoNeRBXMB8GA1UdIwQY MBaAFDrV18e+kSZQ1xQjzTwlFtqUCe22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RYWHg3NlJKbERYRkNQTlBDVVcycFFKN2JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9lNjg0ZjYtMjRlZi00MDk5LWJmOTYt MWM2M2RhY2FiZGU5LzEvT3RYWHg3NlJKbERYRkNQTlBDVVcycFFKN2JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9lNjg0ZjYtMjRlZi00MDk5LWJmOTYtMWM2M2RhY2FiZGU5 LzEvT3RYWHg3NlJKbERYRkNQTlBDVVcycFFKN2JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs2PqheIV MwNIGkKDMCPMaftfntMX5ioq/17V0q4YCC7ULb2XyoBUAj581CYGfJaXMiGr2kRn 5O/YzlvGE8u8IqbzlwC7fk/LVoyHrL8fm/K4wk+pLdH4znfmSbo1HPIFlet2vv0v 3BmuvrQrHiO6AsqbHur+DIqmY9IS6RxyuqnK0iRP3nnlAALR/c3Hj6fZmS0stHjI uKjc5GddH/WDJxjZ91Dhnkh6YPXesTXlPWQ/qEMJ9jgzxmsW6R7kneT9mQkQXeiE 03No199aRdSK2UvZVoNqIYk+ltQa8QdSOrjR1ik8GNph8hm0ETCCMYvcWR2jOwR8 BihVAM4H9fe+QA== -----END CERTIFICATE-----Generated at Sat Dec 13 10:25:30 2025 by rpki-client