This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.mft File: Otu0daQwTIRTQ_2U_ummuIAI44s.mft (raw, json) Hash identifier: p85NESn5g3GIsnC20l+UK+JEgkixVd0FLjhBUYR6MpQ= Subject key identifier: A4:99:CD:12:B7:37:F2:55:EA:FB:59:48:77:DF:48:70:6E:50:9C:96 Authority key identifier: 3A:DB:B4:75:A4:30:4C:84:53:43:FD:94:FE:E9:A6:B8:80:08:E3:8B Certificate issuer: /CN=3adbb475a4304c845343fd94fee9a6b88008e38b Certificate serial: 019AF08852EE471C846EEE1B54DF57576939 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otu0daQwTIRTQ_2U_ummuIAI44s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.mft Manifest number: 0127 Signing time: Fri 05 Dec 2025 22:00:57 +0000 Manifest this update: Fri 05 Dec 2025 22:00:57 +0000 Manifest next update: Sat 06 Dec 2025 22:00:57 +0000 Files and hashes: 1: DVUSZ4Wn0WYyKumEhUgsl46ROFc.roa (hash: XFlMm/wUVW8+vc0BV0GxtZswisL8d+xkAL7tq7JpJlQ=) 2: Otu0daQwTIRTQ_2U_ummuIAI44s.crl (hash: +rPTZrRg/9zBZpVDldA/Z7BRgdtkWgnjFHK6Z2NYTl0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.crl rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.mft rsync://rpki.ripe.net/repository/DEFAULT/Otu0daQwTIRTQ_2U_ummuIAI44s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:52:ee:47:1c:84:6e:ee:1b:54:df:57:57:69:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3adbb475a4304c845343fd94fee9a6b88008e38b Validity Not Before: Dec 5 22:00:57 2025 GMT Not After : Dec 6 22:00:57 2025 GMT Subject: CN=a499cd12b737f255eafb594877df48706e509c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:6e:d2:ce:3d:76:4f:c2:65:80:ef:85:29:50: f2:98:64:89:5c:24:4f:d9:3b:f5:84:bc:de:f3:33: 3c:4f:d1:10:3b:70:54:85:0f:8c:51:13:7d:5a:40: e9:8f:a3:70:9e:ed:1a:c8:6a:18:61:86:f8:3f:85: 54:e5:d7:d5:2e:2b:3b:fc:e8:4f:e9:32:f3:3e:be: 78:87:b6:86:61:0d:19:38:e8:51:ab:4e:2b:62:74: a0:ec:af:31:c5:90:94:28:19:bd:e0:d6:94:54:c6: 14:e5:83:5b:fb:07:d1:c7:1d:7a:b2:0a:ba:92:39: 56:c9:44:e1:73:70:ee:7a:d8:ca:46:af:30:58:66: 85:57:72:f0:29:45:ca:3c:76:bf:70:6c:f8:05:c2: 66:48:b0:0e:e8:22:5c:e4:de:b3:1d:2f:0f:fb:95: 1e:83:e3:16:0d:62:8b:74:35:68:dc:20:9d:a3:64: 3f:c5:87:ae:f3:e0:31:7f:48:6b:a8:95:5c:67:37: 70:77:a0:45:6a:37:d2:63:3c:e3:88:fb:64:75:a6: 1a:48:b9:d8:ce:56:97:26:29:c7:5f:c9:4b:20:5e: aa:33:fa:13:4b:7a:35:e2:ee:18:24:c0:fa:41:9b: 30:2f:aa:8e:5b:0e:49:1b:e1:c6:66:15:c7:e6:35: 5f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:99:CD:12:B7:37:F2:55:EA:FB:59:48:77:DF:48:70:6E:50:9C:96 X509v3 Authority Key Identifier: keyid:3A:DB:B4:75:A4:30:4C:84:53:43:FD:94:FE:E9:A6:B8:80:08:E3:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otu0daQwTIRTQ_2U_ummuIAI44s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:35:82:c2:fb:f8:f0:bc:86:bd:98:82:2f:6d:1a:1a:f8:07: 31:29:5e:3e:77:be:a1:1b:10:44:00:f6:23:2b:7f:6e:98:95: a5:24:70:c2:3c:84:0f:06:35:da:cc:85:d1:26:40:db:52:bf: 13:f6:3e:9f:74:1c:17:ca:ca:f1:ee:2c:bc:c6:ae:5e:15:4c: b5:cb:12:ad:c8:09:18:ec:5b:43:cf:ff:02:cf:92:4f:50:6d: 40:46:09:2a:94:f5:88:53:5c:74:80:bb:57:23:bf:89:1a:86: 34:33:6f:8b:e7:9f:33:7e:af:e1:21:36:b6:3e:f8:03:ff:ce: 93:25:ff:33:6a:a9:d1:24:43:5f:95:2f:63:ac:6c:7f:d5:e8: 67:67:d1:25:f6:03:c0:f8:60:86:af:f2:bc:43:5e:59:f5:72: 42:80:6b:45:2d:c8:6f:da:87:25:0b:22:17:9c:1d:6a:8b:90: 46:03:f5:fe:8a:b6:df:9b:97:09:fa:bd:92:9e:28:74:3a:ec: 2b:7d:5d:e7:2a:56:a8:77:0f:e0:9c:56:14:14:ad:ff:75:ea: ed:a6:06:33:15:e3:e0:0c:93:42:c1:40:a8:72:82:75:83:a2: fc:fd:63:21:e0:9c:f1:4c:b7:4a:47:95:46:b1:b9:66:8a:23: 34:23:cf:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiFLuRxyEbu4bVN9XV2k5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZGJiNDc1YTQzMDRjODQ1MzQzZmQ5NGZlZTlhNmI4ODAw OGUzOGIwHhcNMjUxMjA1MjIwMDU3WhcNMjUxMjA2MjIwMDU3WjAzMTEwLwYDVQQD EyhhNDk5Y2QxMmI3MzdmMjU1ZWFmYjU5NDg3N2RmNDg3MDZlNTA5Yzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+G7Szj12T8JlgO+FKVDymGSJXCRP 2Tv1hLze8zM8T9EQO3BUhQ+MURN9WkDpj6Nwnu0ayGoYYYb4P4VU5dfVLis7/OhP 6TLzPr54h7aGYQ0ZOOhRq04rYnSg7K8xxZCUKBm94NaUVMYU5YNb+wfRxx16sgq6 kjlWyUThc3DuetjKRq8wWGaFV3LwKUXKPHa/cGz4BcJmSLAO6CJc5N6zHS8P+5Ue g+MWDWKLdDVo3CCdo2Q/xYeu8+Axf0hrqJVcZzdwd6BFajfSYzzjiPtkdaYaSLnY zlaXJinHX8lLIF6qM/oTS3o14u4YJMD6QZswL6qOWw5JG+HGZhXH5jVfRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKSZzRK3N/JV6vtZSHffSHBuUJyWMB8GA1UdIwQY MBaAFDrbtHWkMEyEU0P9lP7ppriACOOLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3R1MGRhUXdUSVJUUV8yVV91bW11SUFJNDRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yMjY5MjctZDY1Ni00YjkxLWE5OTAt MGNlMDQ5NmE5OTdiLzEvT3R1MGRhUXdUSVJUUV8yVV91bW11SUFJNDRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8yMjY5MjctZDY1Ni00YjkxLWE5OTAtMGNlMDQ5NmE5OTdi LzEvT3R1MGRhUXdUSVJUUV8yVV91bW11SUFJNDRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAATWCwvv4 8LyGvZiCL20aGvgHMSlePne+oRsQRAD2Iyt/bpiVpSRwwjyEDwY12syF0SZA21K/ E/Y+n3QcF8rK8e4svMauXhVMtcsSrcgJGOxbQ8//As+ST1BtQEYJKpT1iFNcdIC7 VyO/iRqGNDNvi+efM36v4SE2tj74A//OkyX/M2qp0SRDX5UvY6xsf9XoZ2fRJfYD wPhghq/yvENeWfVyQoBrRS3Ib9qHJQsiF5wdaouQRgP1/oq235uXCfq9kp4odDrs K31d5ypWqHcP4JxWFBSt/3Xq7aYGMxXj4AyTQsFAqHKCdYOi/P1jIeCc8Uy3SkeV RrG5ZoojNCPPUA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:00 2025 by rpki-client