This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft File: otXHrn5FwAc077zJE6Gx6j6WS0A.mft (raw, json) Hash identifier: du596qvyo8KmreK4oCzlnSrHcMnm62yngnBSIzYMlUY= Subject key identifier: 44:81:33:3D:C4:B4:F4:98:18:E1:3B:CE:09:0A:2B:E7:FA:0C:0F:6B Authority key identifier: A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40 Certificate issuer: /CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40 Certificate serial: 019AF464DBA7FB879CBB13D4662419EF9E96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft Manifest number: 05C0 Signing time: Sat 06 Dec 2025 16:00:41 +0000 Manifest this update: Sat 06 Dec 2025 16:00:41 +0000 Manifest next update: Sun 07 Dec 2025 16:00:41 +0000 Files and hashes: 1: BAHKXXDGf4FkpvGLoVJvz4ZQS9g.roa (hash: QG7io9HlNrI6xyBwfXvDwRjbZbOdJXrpGi6XSOhyDS8=) 2: Xa4rA7s8Ly9UJZgVYi-Jv5tyXbE.roa (hash: B0/EUa4/ThW3bg+w4c9UI/ZQv1E86GHArXlsrfN6HzQ=) 3: otXHrn5FwAc077zJE6Gx6j6WS0A.crl (hash: 2JrkCzb0Fun3hRwOHjc84tDjJnlaauhJM9pED2Ik/cY=) 4: p4F6VDWGlGgiZn3yBJi7M3fVpVg.roa (hash: TIMfRy8SxAVXXi0h232Rvp4fEAYndvsGejpfbPavyrQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:db:a7:fb:87:9c:bb:13:d4:66:24:19:ef:9e:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40 Validity Not Before: Dec 6 16:00:41 2025 GMT Not After : Dec 7 16:00:41 2025 GMT Subject: CN=4481333dc4b4f49818e13bce090a2be7fa0c0f6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ea:80:77:48:54:95:45:07:b7:64:fb:4e:90: 03:60:e3:4b:a3:c3:53:06:78:b7:6f:d0:0d:3a:20: db:27:83:d4:d0:f0:97:e6:e0:a5:f6:cb:eb:b9:18: 70:43:45:84:bc:8a:68:49:00:a4:ef:81:d0:67:79: ce:e4:d7:e7:b3:21:58:b5:33:f1:44:fb:5c:7c:b1: c5:e4:df:de:d6:f0:18:2c:dc:43:e8:cc:5a:3c:c0: 02:ca:c7:0a:fe:c9:9b:26:62:c5:27:68:7b:f3:0a: 47:4b:b2:2a:f4:6d:dd:45:93:b3:c4:91:27:8e:e5: 1a:32:ae:66:8f:01:dc:51:d5:ce:92:b1:35:04:cd: 29:8d:38:08:b7:56:62:e2:41:97:da:a7:ce:e7:5d: 92:32:fa:3e:bf:97:c4:f4:2a:d7:d4:10:30:03:30: 06:43:a0:7f:6c:1c:25:a6:a6:03:90:4d:30:fe:57: d4:ef:47:6a:ad:2d:68:32:41:dd:37:af:ca:d9:6a: 65:7b:bd:ae:dc:60:d5:29:c0:44:76:11:5e:fb:f9: ba:e4:45:18:9e:d1:c6:2e:40:51:50:7a:04:35:0d: 1e:6b:c0:99:0a:61:c3:8e:ad:30:eb:90:5f:ce:a4: 41:ff:ee:9c:84:1c:26:92:db:7a:51:09:e4:16:9e: 0d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:81:33:3D:C4:B4:F4:98:18:E1:3B:CE:09:0A:2B:E7:FA:0C:0F:6B X509v3 Authority Key Identifier: keyid:A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:03:e1:c9:3e:24:a5:4e:32:58:96:f7:42:82:3f:19:7d:14: 7b:91:ad:5d:d1:84:bc:2d:99:7b:30:90:af:4b:dd:43:99:05: 3c:b1:5c:28:e4:a5:87:8c:39:a2:d6:d9:cf:4e:71:ce:46:14: 68:65:41:18:41:75:cb:fb:e4:1b:5f:44:6d:f6:36:9f:cf:af: 68:b5:6b:a6:86:51:36:73:0f:1f:30:c1:69:10:6c:03:4d:66: d2:0e:16:e7:5b:d2:d3:90:36:43:d3:68:43:05:1b:93:1a:47: 08:1f:8d:12:5b:7b:4c:0a:56:b5:04:4b:c5:7b:33:79:b2:9f: 9f:f5:c2:66:7c:21:39:f5:94:c9:e8:7b:aa:19:fa:47:3b:e9: 6f:e4:18:6c:f2:9b:64:c4:2d:db:dd:46:7e:d2:77:c9:1f:17: 63:80:4f:42:4e:39:18:c9:b5:3a:2d:c2:51:31:13:7e:45:6f: dc:2e:ae:55:da:48:78:87:cd:fc:13:f5:12:35:56:fd:3b:0c: c7:f4:49:98:7b:02:9e:62:af:aa:61:5f:54:cf:a1:48:47:07: d1:6c:4d:7a:96:77:d5:f7:50:b9:e3:82:d6:5c:e1:19:16:15: fd:16:aa:f6:59:0e:48:86:71:b4:45:fb:04:35:fa:52:08:e7: 6a:3c:87:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZNun+4ecuxPUZiQZ756WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZDVjN2FlN2U0NWMwMDczNGVmYmNjOTEzYTFiMWVhM2U5 NjRiNDAwHhcNMjUxMjA2MTYwMDQxWhcNMjUxMjA3MTYwMDQxWjAzMTEwLwYDVQQD Eyg0NDgxMzMzZGM0YjRmNDk4MThlMTNiY2UwOTBhMmJlN2ZhMGMwZjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeqAd0hUlUUHt2T7TpADYONLo8NT Bni3b9ANOiDbJ4PU0PCX5uCl9svruRhwQ0WEvIpoSQCk74HQZ3nO5NfnsyFYtTPx RPtcfLHF5N/e1vAYLNxD6MxaPMACyscK/smbJmLFJ2h78wpHS7Iq9G3dRZOzxJEn juUaMq5mjwHcUdXOkrE1BM0pjTgIt1Zi4kGX2qfO512SMvo+v5fE9CrX1BAwAzAG Q6B/bBwlpqYDkE0w/lfU70dqrS1oMkHdN6/K2Wple72u3GDVKcBEdhFe+/m65EUY ntHGLkBRUHoENQ0ea8CZCmHDjq0w65BfzqRB/+6chBwmktt6UQnkFp4NiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFESBMz3EtPSYGOE7zgkKK+f6DA9rMB8GA1UdIwQY MBaAFKLVx65+RcAHNO+8yROhseo+lktAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3RYSHJuNUZ3QWMwNzd6SkU2R3g2ajZXUzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81MGYzNGMtMzM4ZC00ZmNlLTgxOTMt ZWMxNjczNWEzMzgyLzEvb3RYSHJuNUZ3QWMwNzd6SkU2R3g2ajZXUzBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC81MGYzNGMtMzM4ZC00ZmNlLTgxOTMtZWMxNjczNWEzMzgy LzEvb3RYSHJuNUZ3QWMwNzd6SkU2R3g2ajZXUzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACQPhyT4k pU4yWJb3QoI/GX0Ue5GtXdGEvC2ZezCQr0vdQ5kFPLFcKOSlh4w5otbZz05xzkYU aGVBGEF1y/vkG19EbfY2n8+vaLVrpoZRNnMPHzDBaRBsA01m0g4W51vS05A2Q9No QwUbkxpHCB+NElt7TApWtQRLxXszebKfn/XCZnwhOfWUyeh7qhn6Rzvpb+QYbPKb ZMQt291GftJ3yR8XY4BPQk45GMm1Oi3CUTETfkVv3C6uVdpIeIfN/BP1EjVW/TsM x/RJmHsCnmKvqmFfVM+hSEcH0WxNepZ31fdQueOC1lzhGRYV/Raq9lkOSIZxtEX7 BDX6UgjnajyH0w== -----END CERTIFICATE-----Generated at Sat Dec 6 18:01:03 2025 by rpki-client