This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft File: OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft (raw, json) Hash identifier: htH0NBse1CwC9FOH9WLagAOBACvmTyzfYzLtqz9XS4g= Subject key identifier: 5D:34:4A:05:F1:0E:F8:6C:BA:FD:B3:28:E2:A7:D4:28:59:EA:48:74 Authority key identifier: 39:3C:C8:B7:D2:DC:70:A2:7D:40:FA:45:9E:4E:56:C0:05:CC:C6:3A Certificate issuer: /CN=393cc8b7d2dc70a27d40fa459e4e56c005ccc63a Certificate serial: 019AF6F843B269FCE57BBFE5D3366C0DCDD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTzIt9LccKJ9QPpFnk5WwAXMxjo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft Manifest number: 1766 Signing time: Sun 07 Dec 2025 04:00:56 +0000 Manifest this update: Sun 07 Dec 2025 04:00:56 +0000 Manifest next update: Mon 08 Dec 2025 04:00:56 +0000 Files and hashes: 1: OTzIt9LccKJ9QPpFnk5WwAXMxjo.crl (hash: RXquN8aBSoIVDT/fy/ELdQZFNYxW9JB3CbG0Zhlvdjk=) 2: TXoJbYdgwtSRoMICf6BpMrQmJMs.roa (hash: Ede1kltXJewHDWyl80pDm1qv2UWiny8U21Nq2Z6l0i4=) 3: b13GBI_ErPPSKTlVvKejavSpfj0.roa (hash: u2uVD2JvI4OweXpyP69Cm6Idhj79Q0buUgqOXky2Kp0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft rsync://rpki.ripe.net/repository/DEFAULT/OTzIt9LccKJ9QPpFnk5WwAXMxjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f8:43:b2:69:fc:e5:7b:bf:e5:d3:36:6c:0d:cd:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=393cc8b7d2dc70a27d40fa459e4e56c005ccc63a Validity Not Before: Dec 7 04:00:56 2025 GMT Not After : Dec 8 04:00:56 2025 GMT Subject: CN=5d344a05f10ef86cbafdb328e2a7d42859ea4874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:78:5e:a1:b6:26:97:be:ed:71:5e:69:91:58: e4:06:1f:37:68:c7:23:e1:f0:19:c8:1c:fb:25:f4: e8:c1:01:74:a8:69:5f:7d:cb:0f:ea:0d:c1:64:70: 95:01:b1:a2:ef:cf:73:05:75:9c:a6:b0:5d:7a:05: 92:ff:08:58:fc:fa:28:bf:0e:ee:ad:a7:68:65:9b: 8d:3b:ab:63:d3:8d:02:36:23:75:86:f4:74:e5:f9: 64:38:1d:fa:2f:00:11:c6:01:b8:97:97:d4:de:66: fa:ef:63:c4:6e:bb:91:ad:14:76:18:65:69:6a:44: 52:80:be:a2:6b:a6:d6:00:7a:fe:9f:a8:9a:a1:b9: 64:03:89:2c:c5:e8:13:30:5b:a2:b1:11:c3:5f:bc: d5:82:6a:ce:2b:63:74:e4:14:04:44:12:04:2e:86: 72:56:57:87:04:63:89:53:4b:eb:e7:b5:a7:90:0a: 9b:d1:d8:28:5c:a3:68:95:26:bf:26:34:09:fa:94: c8:47:1e:d1:df:d6:c6:15:b6:b5:58:8a:3e:5d:d0: 01:66:6c:c5:7d:96:39:67:73:a4:69:e5:df:6d:5e: fc:3b:f6:38:1d:58:26:42:2e:8c:a2:6a:c4:92:3c: b9:d7:26:d8:69:b2:32:ec:07:4f:0d:9f:d8:0a:d3: 85:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:34:4A:05:F1:0E:F8:6C:BA:FD:B3:28:E2:A7:D4:28:59:EA:48:74 X509v3 Authority Key Identifier: keyid:39:3C:C8:B7:D2:DC:70:A2:7D:40:FA:45:9E:4E:56:C0:05:CC:C6:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTzIt9LccKJ9QPpFnk5WwAXMxjo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:82:d9:88:8a:dc:b1:ec:0e:22:93:ba:75:d0:19:e7:5c:92: 42:e4:d8:08:c1:13:b9:33:87:bc:27:5d:5b:87:b6:0e:2a:d6: c4:6b:c1:ed:61:72:5f:75:0c:04:94:ff:61:83:e1:6e:04:37: c6:cf:08:27:23:29:39:25:59:10:33:9d:d3:e0:ac:15:7c:cf: e9:c4:ff:95:50:0e:c8:55:6c:3d:39:4f:5a:ce:2f:30:06:bc: b1:77:01:70:e6:49:8c:60:c2:f0:81:37:44:d9:30:01:e5:05: d5:14:c3:1b:2e:31:3f:ae:0a:6b:ff:56:a0:4d:88:45:02:2f: 3e:26:58:18:ae:63:92:6b:f8:e8:34:b2:39:55:b6:1b:5d:d7: 94:56:0d:8d:8e:74:c9:9f:ce:c5:ba:b6:ef:f6:f2:79:6c:58: f2:d8:88:b5:45:7e:b4:a8:b8:77:31:1b:32:dc:83:b9:c7:d0: f0:c1:fd:16:21:6b:06:f7:8f:6f:90:e9:9a:73:9d:60:4f:74: 52:8f:f1:f7:08:aa:01:3f:0e:17:bb:ae:1e:a1:fd:30:90:04: 3d:d9:25:53:b7:d0:71:bf:9e:d3:9d:01:0a:d4:df:3d:08:38: 50:b1:2d:8c:d8:19:c3:6b:88:d7:20:f4:c8:ad:5a:1a:00:b7: 9e:bc:d5:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+EOyafzle7/l0zZsDc3WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5M2NjOGI3ZDJkYzcwYTI3ZDQwZmE0NTllNGU1NmMwMDVj Y2M2M2EwHhcNMjUxMjA3MDQwMDU2WhcNMjUxMjA4MDQwMDU2WjAzMTEwLwYDVQQD Eyg1ZDM0NGEwNWYxMGVmODZjYmFmZGIzMjhlMmE3ZDQyODU5ZWE0ODc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXheobYml77tcV5pkVjkBh83aMcj 4fAZyBz7JfTowQF0qGlffcsP6g3BZHCVAbGi789zBXWcprBdegWS/whY/Poovw7u radoZZuNO6tj040CNiN1hvR05flkOB36LwARxgG4l5fU3mb672PEbruRrRR2GGVp akRSgL6ia6bWAHr+n6iaoblkA4ksxegTMFuisRHDX7zVgmrOK2N05BQERBIELoZy VleHBGOJU0vr57WnkAqb0dgoXKNolSa/JjQJ+pTIRx7R39bGFba1WIo+XdABZmzF fZY5Z3OkaeXfbV78O/Y4HVgmQi6MomrEkjy51ybYabIy7AdPDZ/YCtOFtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF00SgXxDvhsuv2zKOKn1ChZ6kh0MB8GA1UdIwQY MBaAFDk8yLfS3HCifUD6RZ5OVsAFzMY6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1R6SXQ5TGNjS0o5UVBwRm5rNVd3QVhNeGpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8xMzcwMDItZTc1Zi00MjAxLTk5ODgt OTkxYTFjNzE0Zjk1LzEvT1R6SXQ5TGNjS0o5UVBwRm5rNVd3QVhNeGpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8xMzcwMDItZTc1Zi00MjAxLTk5ODgtOTkxYTFjNzE0Zjk1 LzEvT1R6SXQ5TGNjS0o5UVBwRm5rNVd3QVhNeGpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqILZiIrc sewOIpO6ddAZ51ySQuTYCMETuTOHvCddW4e2DirWxGvB7WFyX3UMBJT/YYPhbgQ3 xs8IJyMpOSVZEDOd0+CsFXzP6cT/lVAOyFVsPTlPWs4vMAa8sXcBcOZJjGDC8IE3 RNkwAeUF1RTDGy4xP64Ka/9WoE2IRQIvPiZYGK5jkmv46DSyOVW2G13XlFYNjY50 yZ/Oxbq27/byeWxY8tiItUV+tKi4dzEbMtyDucfQ8MH9FiFrBvePb5DpmnOdYE90 Uo/x9wiqAT8OF7uuHqH9MJAEPdklU7fQcb+e050BCtTfPQg4ULEtjNgZw2uI1yD0 yK1aGgC3nrzVyg== -----END CERTIFICATE-----Generated at Sun Dec 7 05:59:45 2025 by rpki-client