This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft File: Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft (raw, json) Hash identifier: nS94SUm9/HldLzQgP5SCL3EXHGm9FRfkxgGmzyynszQ= Subject key identifier: AA:79:BE:25:BB:7C:B0:BD:C1:D3:E8:62:DA:5F:1D:28:04:FF:2D:12 Authority key identifier: 3A:D7:7F:E6:8F:A9:DA:B6:44:FD:0A:3D:FB:3A:02:56:6A:80:95:90 Certificate issuer: /CN=3ad77fe68fa9dab644fd0a3dfb3a02566a809590 Certificate serial: 019AF23FDB36DA0E3E0A03E83F98C65302E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 06:01:02 +0000 Manifest this update: Sat 06 Dec 2025 06:01:02 +0000 Manifest next update: Sun 07 Dec 2025 06:01:02 +0000 Files and hashes: 1: MChEll1heVmbFidBBJvsHOrl4fE.roa (hash: ARoQGxRNkrRdwVI3hmAp61vYLz+zRk9Xivm5xOWKmgg=) 2: Otd_5o-p2rZE_Qo9-zoCVmqAlZA.crl (hash: HwkQ9VDlqFsaDesU0LMDnrHUzgXxaIEyfs8RIf8MYDU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.crl rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft rsync://rpki.ripe.net/repository/DEFAULT/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:db:36:da:0e:3e:0a:03:e8:3f:98:c6:53:02:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad77fe68fa9dab644fd0a3dfb3a02566a809590 Validity Not Before: Dec 6 06:01:02 2025 GMT Not After : Dec 7 06:01:02 2025 GMT Subject: CN=aa79be25bb7cb0bdc1d3e862da5f1d2804ff2d12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:59:e4:75:97:aa:58:94:82:9f:c5:e3:1b:e8: 89:f4:8c:68:20:dd:ac:94:24:63:b6:63:5c:0c:a0: db:e0:a3:c5:d4:31:32:81:20:49:18:6b:2f:8e:51: 4c:a9:e0:d4:9c:04:c4:0c:1b:34:61:73:21:5f:5a: 1a:81:94:9a:6f:d6:c5:56:e7:69:bf:29:18:7d:f1: 1b:3a:d9:20:f5:11:bc:d3:57:c5:a9:c1:26:a1:b6: 05:78:1a:86:b6:50:ce:db:df:de:83:f6:6c:df:0c: d6:02:4f:d6:4f:21:b0:fd:c4:d7:2b:ab:e8:32:9f: 4b:b4:4f:24:59:62:eb:ae:0a:e7:d3:b4:db:4e:ba: 16:d1:32:d6:a3:20:c2:8c:d1:29:93:81:70:02:10: 5b:45:36:dc:1e:16:ad:35:34:6f:3a:98:53:14:a0: 5b:51:87:82:bb:53:33:d7:28:c6:e0:3a:6d:f0:74: 7d:db:0f:31:6e:3c:ac:55:a7:5d:c2:ec:06:f1:c3: b6:27:74:d2:53:81:a6:dc:1b:60:a6:b5:17:c7:07: f1:e2:21:a5:1c:a7:04:d8:8b:4e:b7:b5:38:76:53: 08:49:95:ca:d8:3f:50:e5:31:46:ba:5c:cd:c0:fe: 67:e1:e9:41:96:d2:b8:22:ff:39:85:e0:57:95:7d: e5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:79:BE:25:BB:7C:B0:BD:C1:D3:E8:62:DA:5F:1D:28:04:FF:2D:12 X509v3 Authority Key Identifier: keyid:3A:D7:7F:E6:8F:A9:DA:B6:44:FD:0A:3D:FB:3A:02:56:6A:80:95:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:d5:96:11:85:32:b8:57:ff:ad:80:c3:0a:fd:43:2b:e1:a8: dc:13:fc:ed:52:f8:67:f4:b9:4a:2b:1f:0b:bb:0d:99:bc:7f: d2:ab:73:9d:4a:c9:bd:7b:27:d9:98:de:9e:56:a5:4f:33:fe: a8:71:de:b7:79:7c:fd:74:ed:74:c5:a1:a1:dd:f7:38:29:ef: 3f:af:2f:5e:64:e3:ee:4e:50:8b:a5:60:6e:ed:7b:8d:c3:60: bc:91:8e:41:81:00:ff:f6:36:20:a6:f7:31:80:3e:a3:93:2f: 1d:9c:4d:dc:dd:ea:40:5d:0d:45:01:6a:ee:6c:b1:09:ae:6d: f8:d7:96:45:25:69:08:ee:f1:9b:2c:3b:4c:bd:7f:d4:dd:ed: 93:74:9a:a1:33:92:bb:0b:49:a9:96:99:30:ed:e4:0a:52:8d: d7:0d:0a:69:77:e5:a6:40:2a:41:fd:14:5b:b1:43:d7:1b:53: 6b:4c:58:d6:7c:69:31:0b:ec:2d:bb:cc:3f:dc:9a:ff:3a:cf: 44:c1:1a:ee:2f:a7:00:8a:ba:58:9a:32:06:f0:2b:3c:18:45: eb:31:92:b7:86:75:1c:2c:aa:28:6c:51:fa:0d:72:7c:b5:07: 9a:16:66:7b:f7:63:d6:3b:65:6c:29:9b:b6:88:0c:70:a0:84: af:79:7d:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9s22g4+CgPoP5jGUwLlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDc3ZmU2OGZhOWRhYjY0NGZkMGEzZGZiM2EwMjU2NmE4 MDk1OTAwHhcNMjUxMjA2MDYwMTAyWhcNMjUxMjA3MDYwMTAyWjAzMTEwLwYDVQQD EyhhYTc5YmUyNWJiN2NiMGJkYzFkM2U4NjJkYTVmMWQyODA0ZmYyZDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFnkdZeqWJSCn8XjG+iJ9IxoIN2s lCRjtmNcDKDb4KPF1DEygSBJGGsvjlFMqeDUnATEDBs0YXMhX1oagZSab9bFVudp vykYffEbOtkg9RG801fFqcEmobYFeBqGtlDO29/eg/Zs3wzWAk/WTyGw/cTXK6vo Mp9LtE8kWWLrrgrn07TbTroW0TLWoyDCjNEpk4FwAhBbRTbcHhatNTRvOphTFKBb UYeCu1Mz1yjG4Dpt8HR92w8xbjysVaddwuwG8cO2J3TSU4Gm3BtgprUXxwfx4iGl HKcE2ItOt7U4dlMISZXK2D9Q5TFGulzNwP5n4elBltK4Iv85heBXlX3lYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKp5viW7fLC9wdPoYtpfHSgE/y0SMB8GA1UdIwQY MBaAFDrXf+aPqdq2RP0KPfs6AlZqgJWQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RkXzVvLXAyclpFX1FvOS16b0NWbXFBbFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8xMzc0YzAtNGJkNC00MTU2LWE3N2Yt NjUzYTcwYmYwOTI1LzEvT3RkXzVvLXAyclpFX1FvOS16b0NWbXFBbFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8xMzc0YzAtNGJkNC00MTU2LWE3N2YtNjUzYTcwYmYwOTI1 LzEvT3RkXzVvLXAyclpFX1FvOS16b0NWbXFBbFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqtWWEYUy uFf/rYDDCv1DK+Go3BP87VL4Z/S5SisfC7sNmbx/0qtznUrJvXsn2ZjenlalTzP+ qHHet3l8/XTtdMWhod33OCnvP68vXmTj7k5Qi6Vgbu17jcNgvJGOQYEA//Y2IKb3 MYA+o5MvHZxN3N3qQF0NRQFq7myxCa5t+NeWRSVpCO7xmyw7TL1/1N3tk3SaoTOS uwtJqZaZMO3kClKN1w0KaXflpkAqQf0UW7FD1xtTa0xY1nxpMQvsLbvMP9ya/zrP RMEa7i+nAIq6WJoyBvArPBhF6zGSt4Z1HCyqKGxR+g1yfLUHmhZme/dj1jtlbCmb togMcKCEr3l9wg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:46 2025 by rpki-client