This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft File: OtEfbBeesxQqSO5ksulM3p3TYXM.mft (raw, json) Hash identifier: /J1t3vnsBowJqtnLTEs56e+aIUoldP3PtcAG+JuYpkw= Subject key identifier: E2:42:89:9C:48:57:83:9D:04:71:8F:F5:32:9A:33:92:B4:45:2A:C7 Authority key identifier: 3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73 Certificate issuer: /CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173 Certificate serial: 019AF12E035CD1D560FBB6573C5A8C259464 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:01:55 +0000 Manifest this update: Sat 06 Dec 2025 01:01:55 +0000 Manifest next update: Sun 07 Dec 2025 01:01:55 +0000 Files and hashes: 1: OtEfbBeesxQqSO5ksulM3p3TYXM.crl (hash: opCcDq8prLW9WcTMV71gcYP2tTbv3+sNrQoQ5lN+hHU=) 2: UcqTmJ89l8NUNjKYfDLMA156xvg.roa (hash: vHYUpfnZxXjHkU7oFNbi+l4QCTaNKF/HLN9VYPGDanA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:03:5c:d1:d5:60:fb:b6:57:3c:5a:8c:25:94:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173 Validity Not Before: Dec 6 01:01:55 2025 GMT Not After : Dec 7 01:01:55 2025 GMT Subject: CN=e242899c4857839d04718ff5329a3392b4452ac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f2:18:8d:ef:62:67:95:6e:7d:25:98:92:80: fb:33:37:18:00:43:97:1c:de:62:55:41:59:79:71: 5f:bb:7f:80:e8:8c:7d:a2:f7:76:e5:da:45:52:fa: 9f:ae:0f:00:ca:e6:ef:da:8a:1f:3d:35:69:10:8c: 9a:69:ee:61:85:bb:6a:d9:24:82:a0:88:3c:6b:29: 59:7a:5f:49:aa:d4:15:52:ed:2f:02:96:21:65:4c: 80:65:40:f3:ea:43:54:b1:ad:c0:37:8e:41:2a:d4: 34:79:10:e3:cb:5f:5c:7d:2d:25:1e:a2:1f:70:50: fe:af:ce:9b:9e:cb:4c:8b:08:5d:84:1e:f9:46:2b: 81:1d:d4:6a:70:11:c4:c3:e9:09:53:76:c4:f3:59: 7c:c9:63:3d:2c:98:d5:87:e0:d7:26:dc:50:94:ac: 66:aa:b1:f1:ff:59:ed:d4:19:3d:a8:a0:28:f2:6e: 79:3b:9e:b7:f1:14:48:91:a3:27:fc:05:be:7e:88: 57:0a:a6:00:77:8b:14:83:be:18:87:1d:28:2b:88: ed:f9:27:46:22:6d:c0:a3:f9:df:86:32:d3:cd:62: 5e:90:67:4b:78:a2:ff:e1:1a:c1:55:92:75:58:2c: ce:d6:b6:ac:b2:88:fb:45:22:eb:ab:e3:40:f5:d9: 4a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:42:89:9C:48:57:83:9D:04:71:8F:F5:32:9A:33:92:B4:45:2A:C7 X509v3 Authority Key Identifier: keyid:3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:c3:ab:6e:c4:d9:64:80:3b:69:51:83:4d:21:6e:42:5f:5e: 1d:9a:a7:cd:e3:85:3e:ca:e2:d1:f2:80:c7:65:76:2b:58:1f: 11:ea:80:14:fb:22:e8:c3:6f:99:e0:ea:08:94:d2:bb:09:05: 49:99:a5:12:e4:27:cc:9e:f7:70:3d:a4:5c:ff:06:13:ca:01: f0:80:e2:1f:12:f3:62:d3:2b:04:91:48:f0:13:e0:6c:2c:d0: 87:b7:48:09:58:51:8f:b3:0d:9e:08:28:fc:ee:81:4b:06:0c: 51:7f:14:5a:a9:d6:58:f0:27:57:3c:a6:00:65:7a:3c:e9:69: 16:70:3c:22:87:04:c5:0d:e8:b1:c5:ca:b2:ce:85:fa:05:57: a1:15:24:e8:61:dd:5a:b6:2b:8e:c3:ca:e2:d4:0b:7a:d8:ec: 60:17:27:49:ea:28:6b:f8:a9:46:57:a3:8b:b3:55:4c:d8:94: f5:3f:8c:96:a9:b6:28:9b:48:a6:32:a6:40:46:6a:ff:de:31: 65:ec:fc:fd:48:b3:f0:4e:3c:26:8b:31:ee:6f:95:0d:82:96: 4b:83:78:31:86:77:0a:09:4c:2e:21:be:2b:10:e1:cb:18:b2: 3c:cc:05:db:68:7e:c5:f3:ce:34:98:2b:b3:95:9f:5d:9b:1d: a7:46:16:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLgNc0dVg+7ZXPFqMJZRkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDExZjZjMTc5ZWIzMTQyYTQ4ZWU2NGIyZTk0Y2RlOWRk MzYxNzMwHhcNMjUxMjA2MDEwMTU1WhcNMjUxMjA3MDEwMTU1WjAzMTEwLwYDVQQD EyhlMjQyODk5YzQ4NTc4MzlkMDQ3MThmZjUzMjlhMzM5MmI0NDUyYWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvIYje9iZ5VufSWYkoD7MzcYAEOX HN5iVUFZeXFfu3+A6Ix9ovd25dpFUvqfrg8Ayubv2oofPTVpEIyaae5hhbtq2SSC oIg8aylZel9JqtQVUu0vApYhZUyAZUDz6kNUsa3AN45BKtQ0eRDjy19cfS0lHqIf cFD+r86bnstMiwhdhB75RiuBHdRqcBHEw+kJU3bE81l8yWM9LJjVh+DXJtxQlKxm qrHx/1nt1Bk9qKAo8m55O5638RRIkaMn/AW+fohXCqYAd4sUg74Yhx0oK4jt+SdG Im3Ao/nfhjLTzWJekGdLeKL/4RrBVZJ1WCzO1rassoj7RSLrq+NA9dlKPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOJCiZxIV4OdBHGP9TKaM5K0RSrHMB8GA1UdIwQY MBaAFDrRH2wXnrMUKkjuZLLpTN6d02FzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RFZmJCZWVzeFFxU081a3N1bE0zcDNUWVhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy83ZGJmMzYtMjQ4NS00OTM1LWEwYzct ZWY5MWQ4YjViMDgxLzEvT3RFZmJCZWVzeFFxU081a3N1bE0zcDNUWVhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy83ZGJmMzYtMjQ4NS00OTM1LWEwYzctZWY5MWQ4YjViMDgx LzEvT3RFZmJCZWVzeFFxU081a3N1bE0zcDNUWVhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdMOrbsTZ ZIA7aVGDTSFuQl9eHZqnzeOFPsri0fKAx2V2K1gfEeqAFPsi6MNvmeDqCJTSuwkF SZmlEuQnzJ73cD2kXP8GE8oB8IDiHxLzYtMrBJFI8BPgbCzQh7dICVhRj7MNnggo /O6BSwYMUX8UWqnWWPAnVzymAGV6POlpFnA8IocExQ3oscXKss6F+gVXoRUk6GHd WrYrjsPK4tQLetjsYBcnSeooa/ipRleji7NVTNiU9T+Mlqm2KJtIpjKmQEZq/94x Zez8/Uiz8E48Josx7m+VDYKWS4N4MYZ3CglMLiG+KxDhyxiyPMwF22h+xfPONJgr s5WfXZsdp0YW5Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:55 2025 by rpki-client