This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft File: OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft (raw, json) Hash identifier: lyYmBs1ToQZcuT1ZDvEZKrDHaEJvQLA5rxre5lal6kg= Subject key identifier: 14:2E:42:C9:F1:E6:CD:EA:D4:60:4D:F2:10:5C:6A:4C:95:77:9A:FF Authority key identifier: 3A:DA:5B:AA:05:8C:40:95:65:FF:2A:C8:76:A2:2E:E6:37:7B:50:3B Certificate issuer: /CN=3ada5baa058c409565ff2ac876a22ee6377b503b Certificate serial: 019AF2093C5BFF7898253310F22A424EE3E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft Manifest number: 0249 Signing time: Sat 06 Dec 2025 05:01:22 +0000 Manifest this update: Sat 06 Dec 2025 05:01:22 +0000 Manifest next update: Sun 07 Dec 2025 05:01:22 +0000 Files and hashes: 1: 0pKhUeDAG_MOdW5Y02JeMiWhQ-c.roa (hash: vlnGP89vn7MHQd69bqsZgk5M40XUxWUgsHsylZhCKms=) 2: 3-fP9p4N-Js1uWY2EPsUDn2Ta0Y.roa (hash: 3KgZqAhwrFXDW/vYa1+gIOYPmnsUMBf4mPAqrTO23HI=) 3: OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl (hash: 9ZC+YmRrVeENg0fHzTHvEMBYyDLkTRWyX5/Up0hjL+U=) 4: mrvN1q3z6mxLj5OwmYo4SI68-6w.roa (hash: FCwb+wuvGG1lKyfztmthIAYgGwpmTKUMJbN1dMopTWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:3c:5b:ff:78:98:25:33:10:f2:2a:42:4e:e3:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ada5baa058c409565ff2ac876a22ee6377b503b Validity Not Before: Dec 6 05:01:22 2025 GMT Not After : Dec 7 05:01:22 2025 GMT Subject: CN=142e42c9f1e6cdead4604df2105c6a4c95779aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:59:c9:d3:7b:f2:76:91:57:cd:40:31:2b:48: 51:e2:55:ea:b1:73:04:c9:6c:cc:8c:0c:ee:ed:29: be:14:ed:d3:b7:00:fc:ec:20:0c:a4:c5:c3:1c:c7: d4:fe:f8:9d:66:07:94:84:4a:93:04:58:f3:a8:a3: 95:7c:20:f3:98:8b:6d:2d:a4:08:e0:3e:ca:eb:a5: fe:90:3f:96:6e:77:26:b0:24:44:42:3e:d5:ce:ce: 02:92:9d:a5:2a:6b:bd:90:2c:6c:9a:b8:0b:a9:6a: 5d:a2:6b:77:ea:d0:fc:60:6a:36:1c:ed:0a:3f:4b: 7c:f9:55:2a:d2:8a:c8:c9:45:9c:28:12:f7:94:cd: e0:8f:67:9f:c5:cf:9e:32:e1:27:45:19:a0:42:f1: d3:8c:b9:94:92:cb:41:95:62:44:ef:7d:33:ef:d3: 9e:31:0c:02:88:45:6c:34:06:3e:52:9e:73:ea:d4: c5:e6:08:fd:4d:11:c8:a7:9c:29:bd:87:78:7f:21: 7c:4d:9f:33:6d:5f:20:b5:e7:a3:94:fa:53:84:e6: 59:74:e8:84:bb:86:26:c0:06:a4:cb:d2:2c:46:f6: 0e:1f:69:ff:e1:ea:c5:44:d6:f9:e5:54:07:9c:bc: 6d:19:05:24:d0:89:c6:1b:ea:c5:df:ac:ac:98:91: 1f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:2E:42:C9:F1:E6:CD:EA:D4:60:4D:F2:10:5C:6A:4C:95:77:9A:FF X509v3 Authority Key Identifier: keyid:3A:DA:5B:AA:05:8C:40:95:65:FF:2A:C8:76:A2:2E:E6:37:7B:50:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:dc:2d:f2:a3:98:09:68:3f:76:c1:e0:f6:82:82:c2:87:d5: b3:bf:cc:bc:cf:0f:8b:fe:fb:20:02:3b:5e:1d:10:04:81:b3: 2e:12:ba:73:dc:df:17:a7:15:ca:78:09:e5:33:89:c9:df:70: bb:da:86:1d:61:a9:db:67:78:ac:04:ac:25:23:6a:7b:57:68: c0:ac:0c:f2:ad:65:bf:06:b4:8d:a2:a0:8a:e8:69:e7:b3:1e: 2e:11:03:82:db:e2:89:bd:1f:40:f0:0e:17:18:8d:dc:d2:3f: 18:60:59:ca:00:15:76:b0:ae:0d:ab:d1:3c:2b:7c:45:38:db: 65:6d:81:3b:0e:4f:d2:40:8d:c3:5f:22:fb:20:d6:d4:3b:1e: 69:7a:58:83:c8:28:ca:cf:5c:09:9e:f7:d1:37:df:3d:21:b2: cb:cb:6d:af:46:d7:5e:b9:97:07:98:94:22:15:07:9d:86:cf: 03:8c:81:6a:aa:2c:71:ff:75:64:a1:e5:36:f8:6b:b2:1e:36: 72:64:87:00:ca:42:80:62:56:62:98:00:a0:3e:96:e8:e3:59: f9:82:9c:b0:89:6a:c3:36:66:c5:d5:96:02:2a:89:63:5f:bf: ea:d1:0d:90:53:4c:73:8e:4a:ff:4e:7f:77:ca:fe:88:4f:82: 8d:60:21:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCTxb/3iYJTMQ8ipCTuPnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZGE1YmFhMDU4YzQwOTU2NWZmMmFjODc2YTIyZWU2Mzc3 YjUwM2IwHhcNMjUxMjA2MDUwMTIyWhcNMjUxMjA3MDUwMTIyWjAzMTEwLwYDVQQD EygxNDJlNDJjOWYxZTZjZGVhZDQ2MDRkZjIxMDVjNmE0Yzk1Nzc5YWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFnJ03vydpFXzUAxK0hR4lXqsXME yWzMjAzu7Sm+FO3TtwD87CAMpMXDHMfU/vidZgeUhEqTBFjzqKOVfCDzmIttLaQI 4D7K66X+kD+WbncmsCREQj7Vzs4Ckp2lKmu9kCxsmrgLqWpdomt36tD8YGo2HO0K P0t8+VUq0orIyUWcKBL3lM3gj2efxc+eMuEnRRmgQvHTjLmUkstBlWJE730z79Oe MQwCiEVsNAY+Up5z6tTF5gj9TRHIp5wpvYd4fyF8TZ8zbV8gteejlPpThOZZdOiE u4YmwAaky9IsRvYOH2n/4erFRNb55VQHnLxtGQUk0InGG+rF36ysmJEfTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBQuQsnx5s3q1GBN8hBcakyVd5r/MB8GA1UdIwQY MBaAFDraW6oFjECVZf8qyHaiLuY3e1A7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RwYnFnV01RSlZsX3lySWRxSXU1amQ3VURzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lNjYzZGQtM2Y4Zi00ZWFkLWI0Yzkt OWMxYjJhZDU1OWFiLzEvT3RwYnFnV01RSlZsX3lySWRxSXU1amQ3VURzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9lNjYzZGQtM2Y4Zi00ZWFkLWI0YzktOWMxYjJhZDU1OWFi LzEvT3RwYnFnV01RSlZsX3lySWRxSXU1amQ3VURzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOdwt8qOY CWg/dsHg9oKCwofVs7/MvM8Pi/77IAI7Xh0QBIGzLhK6c9zfF6cVyngJ5TOJyd9w u9qGHWGp22d4rASsJSNqe1dowKwM8q1lvwa0jaKgiuhp57MeLhEDgtviib0fQPAO FxiN3NI/GGBZygAVdrCuDavRPCt8RTjbZW2BOw5P0kCNw18i+yDW1DseaXpYg8go ys9cCZ730TffPSGyy8ttr0bXXrmXB5iUIhUHnYbPA4yBaqoscf91ZKHlNvhrsh42 cmSHAMpCgGJWYpgAoD6W6ONZ+YKcsIlqwzZmxdWWAiqJY1+/6tENkFNMc45K/05/ d8r+iE+CjWAhSg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:49 2025 by rpki-client