This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft File: otN_wx79NwO_LEw-iLw8HPtHmRk.mft (raw, json) Hash identifier: 4SGCk/dtX7L75vBaigOLSHmx7n8anfx5xDQ0uCu/p/M= Subject key identifier: 20:94:A8:46:73:F0:9B:78:91:E0:E7:12:07:8D:BE:4D:9B:33:BC:96 Authority key identifier: A2:D3:7F:C3:1E:FD:37:03:BF:2C:4C:3E:88:BC:3C:1C:FB:47:99:19 Certificate issuer: /CN=a2d37fc31efd3703bf2c4c3e88bc3c1cfb479919 Certificate serial: 019AF38911B59F0914EB332E309F4E081A2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 12:00:37 +0000 Manifest this update: Sat 06 Dec 2025 12:00:37 +0000 Manifest next update: Sun 07 Dec 2025 12:00:37 +0000 Files and hashes: 1: otN_wx79NwO_LEw-iLw8HPtHmRk.crl (hash: dkiswT2HKv9Vd4ijXDGLMm7fAe+IAPaOhndySl26p1w=) 2: rtw5EuFYH3ySq0jw3-ZmGwFMoqo.roa (hash: Ii5lxajvlSV2gkqSCAYWVLgdyHye7gIbfTFfAGtSUlY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:11:b5:9f:09:14:eb:33:2e:30:9f:4e:08:1a:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2d37fc31efd3703bf2c4c3e88bc3c1cfb479919 Validity Not Before: Dec 6 12:00:37 2025 GMT Not After : Dec 7 12:00:37 2025 GMT Subject: CN=2094a84673f09b7891e0e712078dbe4d9b33bc96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1b:e8:ed:01:68:76:8b:04:59:ec:88:c1:6c: ac:5e:23:60:2b:35:d9:9b:af:b0:ad:8e:5e:19:66: 8f:01:9d:c7:8e:ab:eb:27:fc:8b:3f:0f:ed:bc:1c: c3:76:c8:ff:3a:60:e5:70:d7:8a:bb:27:30:9c:d4: 4f:c2:8f:09:47:0a:42:80:6d:46:83:68:08:37:4a: ec:35:4d:7c:51:04:b0:b5:94:ab:22:f9:58:e6:49: 1f:e5:44:35:23:70:0e:f8:c6:c3:bc:e0:d0:6e:28: 59:53:08:46:a6:0d:a1:71:ef:52:66:01:ff:2c:b7: e1:80:b0:af:66:ed:b4:d7:7c:e3:af:11:d3:3b:ef: 8e:d0:4f:f2:80:70:35:be:fd:4a:83:cf:e4:8d:b0: b8:1c:e7:f9:5f:33:4f:65:12:8e:04:8b:df:30:44: 2d:29:08:bc:03:80:2d:e1:c6:f9:72:b0:25:57:9e: 37:d5:8b:07:ff:02:00:d8:26:db:7a:0a:b3:df:d8: 89:7e:c5:95:fa:80:db:f4:52:47:5b:16:33:f1:d7: 7e:a3:32:30:70:6c:42:ce:40:b2:f8:4e:96:dc:40: b5:54:38:7f:a2:a9:23:48:a1:79:6a:46:67:e1:1b: 88:a7:fb:27:99:7a:03:76:1d:8a:8b:22:ba:ca:46: 82:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:94:A8:46:73:F0:9B:78:91:E0:E7:12:07:8D:BE:4D:9B:33:BC:96 X509v3 Authority Key Identifier: keyid:A2:D3:7F:C3:1E:FD:37:03:BF:2C:4C:3E:88:BC:3C:1C:FB:47:99:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:49:3d:86:ec:b4:6b:92:18:70:bd:a7:bf:db:e8:8f:d4:9b: 84:7a:4d:4d:9c:89:bf:6d:34:8a:44:6d:66:02:a4:ac:47:25: 6c:cc:ba:29:8a:92:e4:93:23:cf:c4:f5:9b:55:3c:0f:5e:b7: 53:33:0a:33:43:10:17:98:b6:57:ef:cf:0c:69:9d:6a:39:63: c5:b6:fe:83:f5:89:2e:83:ed:bb:f7:ac:66:d8:04:82:72:b3: 89:08:71:ef:c7:50:06:15:fb:a0:71:e8:77:36:02:10:e9:c1: d4:de:0e:ef:fb:5e:88:0c:01:f2:08:ad:11:9f:47:5b:ab:c9: ef:8f:ef:c8:d6:82:fb:fd:02:5e:0f:d6:a6:fd:f3:2a:2d:ce: 4d:ec:f6:27:00:e1:1e:ca:c2:2e:75:f0:dd:5a:16:d0:89:a0: 85:51:71:6b:cb:63:a2:1f:58:f2:c6:15:00:a9:5f:91:3d:92: 9a:a7:a4:03:c3:f7:de:d6:72:8d:68:6a:74:56:48:db:84:e9: 77:47:c0:d4:b2:6e:55:36:81:6d:1e:2a:e5:9e:f5:9e:99:a7: 36:1f:97:4d:a3:f4:b2:c8:ae:94:9c:57:76:03:b3:3b:a4:5d: 38:54:8a:0d:51:1b:09:20:a9:e0:b5:b8:87:d7:c4:10:e5:7f: 55:b7:6f:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziRG1nwkU6zMuMJ9OCBovMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZDM3ZmMzMWVmZDM3MDNiZjJjNGMzZTg4YmMzYzFjZmI0 Nzk5MTkwHhcNMjUxMjA2MTIwMDM3WhcNMjUxMjA3MTIwMDM3WjAzMTEwLwYDVQQD EygyMDk0YTg0NjczZjA5Yjc4OTFlMGU3MTIwNzhkYmU0ZDliMzNiYzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRvo7QFodosEWeyIwWysXiNgKzXZ m6+wrY5eGWaPAZ3HjqvrJ/yLPw/tvBzDdsj/OmDlcNeKuycwnNRPwo8JRwpCgG1G g2gIN0rsNU18UQSwtZSrIvlY5kkf5UQ1I3AO+MbDvODQbihZUwhGpg2hce9SZgH/ LLfhgLCvZu2013zjrxHTO++O0E/ygHA1vv1Kg8/kjbC4HOf5XzNPZRKOBIvfMEQt KQi8A4At4cb5crAlV5431YsH/wIA2Cbbegqz39iJfsWV+oDb9FJHWxYz8dd+ozIw cGxCzkCy+E6W3EC1VDh/oqkjSKF5akZn4RuIp/snmXoDdh2KiyK6ykaCbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCCUqEZz8Jt4keDnEgeNvk2bM7yWMB8GA1UdIwQY MBaAFKLTf8Me/TcDvyxMPoi8PBz7R5kZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3ROX3d4NzlOd09fTEV3LWlMdzhIUHRIbVJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8zNjMyZjUtODllNy00ZDIyLThiYzEt MzMzOTkwODAyNzBmLzEvb3ROX3d4NzlOd09fTEV3LWlMdzhIUHRIbVJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS8zNjMyZjUtODllNy00ZDIyLThiYzEtMzMzOTkwODAyNzBm LzEvb3ROX3d4NzlOd09fTEV3LWlMdzhIUHRIbVJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADkk9huy0 a5IYcL2nv9voj9SbhHpNTZyJv200ikRtZgKkrEclbMy6KYqS5JMjz8T1m1U8D163 UzMKM0MQF5i2V+/PDGmdajljxbb+g/WJLoPtu/esZtgEgnKziQhx78dQBhX7oHHo dzYCEOnB1N4O7/teiAwB8gitEZ9HW6vJ74/vyNaC+/0CXg/Wpv3zKi3OTez2JwDh HsrCLnXw3VoW0ImghVFxa8tjoh9Y8sYVAKlfkT2SmqekA8P33tZyjWhqdFZI24Tp d0fA1LJuVTaBbR4q5Z71npmnNh+XTaP0ssiulJxXdgOzO6RdOFSKDVEbCSCp4LW4 h9fEEOV/VbdvfQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:44:17 2025 by rpki-client