This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.mft File: Ot_UipdyDNhUAp3bJmxR-R8HZw0.mft (raw, json) Hash identifier: 7avbHAEtw5TlZQvdo2SUgAz3EcQIgvq6yEpXr4ueNjE= Subject key identifier: 0B:94:1A:D2:92:9F:42:40:F4:F7:81:65:E3:52:7A:7E:6F:68:FC:98 Authority key identifier: 3A:DF:D4:8A:97:72:0C:D8:54:02:9D:DB:26:6C:51:F9:1F:07:67:0D Certificate issuer: /CN=3adfd48a97720cd854029ddb266c51f91f07670d Certificate serial: 019AF164506F5E7C27C750D54B2B875E234B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot_UipdyDNhUAp3bJmxR-R8HZw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.mft Manifest number: 0D61 Signing time: Sat 06 Dec 2025 02:01:14 +0000 Manifest this update: Sat 06 Dec 2025 02:01:14 +0000 Manifest next update: Sun 07 Dec 2025 02:01:14 +0000 Files and hashes: 1: Ot_UipdyDNhUAp3bJmxR-R8HZw0.crl (hash: yVEfJjh7aY84alDESbE317p+X8Kcnk3N5ULJsoEjaXU=) 2: vm_KzfoiY4cVzVJi9fJVQUcZlJs.roa (hash: lyBGyAokiSjopS7O45WDbuUZk8SIrQSCpnYKsmtEQ5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.crl rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.mft rsync://rpki.ripe.net/repository/DEFAULT/Ot_UipdyDNhUAp3bJmxR-R8HZw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:50:6f:5e:7c:27:c7:50:d5:4b:2b:87:5e:23:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3adfd48a97720cd854029ddb266c51f91f07670d Validity Not Before: Dec 6 02:01:14 2025 GMT Not After : Dec 7 02:01:14 2025 GMT Subject: CN=0b941ad2929f4240f4f78165e3527a7e6f68fc98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b4:7c:be:85:50:09:24:48:b5:bc:51:a6:7b: af:cd:0a:a0:bd:fb:2e:88:4e:a2:f9:2e:ad:82:55: 82:86:d5:7c:81:ee:82:98:40:4c:5b:33:42:fa:29: 0e:aa:7d:ef:09:3e:f0:34:87:85:63:87:fa:6c:3a: 25:d0:0d:6b:dc:a9:86:f5:2b:97:8c:d5:57:ca:c3: 18:85:2e:11:34:3f:92:fc:ec:80:3f:0c:58:c2:e5: 77:4e:5f:19:91:5a:62:60:77:71:8a:e7:d0:3c:d9: 02:d3:79:f7:11:2e:a5:c5:f8:91:35:01:be:4b:ff: 6c:11:0f:46:3c:3f:56:d7:0a:41:82:3a:bb:a9:38: a2:c1:51:5a:6f:12:8c:07:ad:1a:b6:d3:60:c2:8d: 8a:13:51:6b:6f:18:75:d0:22:8b:3d:70:c3:ef:53: 51:cf:78:17:53:20:df:80:22:3b:db:7c:f3:e3:5e: 16:36:72:83:c4:04:95:bc:ee:c0:c9:e2:96:7e:da: 34:5c:a2:7c:a3:65:9b:e6:2b:7f:55:cb:1d:f9:74: d5:bc:87:f5:26:54:1b:af:3f:09:a5:fe:6c:af:b9: 23:43:37:af:e9:4a:7e:be:a0:84:43:ab:f4:e8:ce: 60:da:7a:c1:a6:e3:66:90:1f:7a:21:a5:90:46:6b: 4f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:94:1A:D2:92:9F:42:40:F4:F7:81:65:E3:52:7A:7E:6F:68:FC:98 X509v3 Authority Key Identifier: keyid:3A:DF:D4:8A:97:72:0C:D8:54:02:9D:DB:26:6C:51:F9:1F:07:67:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot_UipdyDNhUAp3bJmxR-R8HZw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:5b:bd:31:5c:76:56:8f:9c:ca:7c:e7:ef:ef:9a:4f:03:8b: 09:87:b8:9a:07:aa:c0:5f:e3:4b:7f:8c:ba:d9:6d:e6:ee:0d: 49:a4:1c:41:c7:8d:e9:8e:a9:6f:29:2d:a6:66:b8:be:77:13: 52:93:43:71:69:91:88:3c:3b:e8:dd:ac:0d:d1:bf:e0:37:98: b6:91:b3:be:bf:f4:de:21:15:67:a4:57:86:78:12:ac:cd:60: 06:aa:4c:05:60:c0:dd:15:f5:04:f1:14:e8:23:ca:55:ae:bd: 4f:66:0a:be:98:73:d5:61:d8:1e:d3:4e:b6:22:32:ce:9d:bb: d7:da:c3:9f:14:29:c9:2b:b5:c0:40:9d:b8:fb:d0:e7:17:0f: 10:93:cd:7c:54:57:62:5a:e5:e3:ef:95:15:f2:e9:44:b7:09: 66:8b:6f:94:1c:31:01:31:2e:cb:2e:94:d3:41:f4:02:8c:30: dc:0f:20:54:bf:67:32:13:d1:da:65:a2:e5:a5:dc:fe:80:c0: 63:9e:d9:1c:36:3d:85:fc:13:a4:23:2e:78:ff:99:e1:66:17: d8:83:af:66:99:e5:d2:62:53:ee:fd:13:dc:1a:bc:da:81:91: be:c0:8a:f8:45:4c:44:02:7b:53:4b:8b:e0:e8:c4:f0:9b:dc: cc:3b:96:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZFBvXnwnx1DVSyuHXiNLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZGZkNDhhOTc3MjBjZDg1NDAyOWRkYjI2NmM1MWY5MWYw NzY3MGQwHhcNMjUxMjA2MDIwMTE0WhcNMjUxMjA3MDIwMTE0WjAzMTEwLwYDVQQD EygwYjk0MWFkMjkyOWY0MjQwZjRmNzgxNjVlMzUyN2E3ZTZmNjhmYzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorR8voVQCSRItbxRpnuvzQqgvfsu iE6i+S6tglWChtV8ge6CmEBMWzNC+ikOqn3vCT7wNIeFY4f6bDol0A1r3KmG9SuX jNVXysMYhS4RND+S/OyAPwxYwuV3Tl8ZkVpiYHdxiufQPNkC03n3ES6lxfiRNQG+ S/9sEQ9GPD9W1wpBgjq7qTiiwVFabxKMB60attNgwo2KE1Frbxh10CKLPXDD71NR z3gXUyDfgCI723zz414WNnKDxASVvO7AyeKWfto0XKJ8o2Wb5it/Vcsd+XTVvIf1 JlQbrz8Jpf5sr7kjQzev6Up+vqCEQ6v06M5g2nrBpuNmkB96IaWQRmtPrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAuUGtKSn0JA9PeBZeNSen5vaPyYMB8GA1UdIwQY MBaAFDrf1IqXcgzYVAKd2yZsUfkfB2cNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RfVWlwZHlETmhVQXAzYkpteFItUjhIWncwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9hMmViNWEtMDk2Mi00NWJjLWE2Mzct ZjAxMDRkZGYyODExLzEvT3RfVWlwZHlETmhVQXAzYkpteFItUjhIWncwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9hMmViNWEtMDk2Mi00NWJjLWE2MzctZjAxMDRkZGYyODEx LzEvT3RfVWlwZHlETmhVQXAzYkpteFItUjhIWncwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANlu9MVx2 Vo+cynzn7++aTwOLCYe4mgeqwF/jS3+Mutlt5u4NSaQcQceN6Y6pbyktpma4vncT UpNDcWmRiDw76N2sDdG/4DeYtpGzvr/03iEVZ6RXhngSrM1gBqpMBWDA3RX1BPEU 6CPKVa69T2YKvphz1WHYHtNOtiIyzp2719rDnxQpySu1wECduPvQ5xcPEJPNfFRX Ylrl4++VFfLpRLcJZotvlBwxATEuyy6U00H0Aoww3A8gVL9nMhPR2mWi5aXc/oDA Y57ZHDY9hfwTpCMueP+Z4WYX2IOvZpnl0mJT7v0T3Bq82oGRvsCK+EVMRAJ7U0uL 4OjE8JvczDuWcg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:19:58 2025 by rpki-client