This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft File: OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft (raw, json) Hash identifier: ADY2RudoqxiADlidUM8c0Emg2nwPwZDBa332SJCpAnc= Subject key identifier: 98:DF:35:63:A2:4D:F3:81:8A:70:BD:F0:2A:BC:94:8D:04:44:7F:9B Authority key identifier: 39:34:88:67:DC:B2:95:6A:CA:65:D0:83:48:E4:40:D4:72:7A:37:43 Certificate issuer: /CN=39348867dcb2956aca65d08348e440d4727a3743 Certificate serial: 019AF23FDE86850E16A7566E80430D11F1B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTSIZ9yylWrKZdCDSORA1HJ6N0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft Manifest number: 0505 Signing time: Sat 06 Dec 2025 06:01:03 +0000 Manifest this update: Sat 06 Dec 2025 06:01:03 +0000 Manifest next update: Sun 07 Dec 2025 06:01:03 +0000 Files and hashes: 1: OTSIZ9yylWrKZdCDSORA1HJ6N0M.crl (hash: a21cTKD88LmNAqHkXHWr2vrebCflMI9QiXDRYRK0R1c=) 2: c6YXeFcziXYV8oA7IxxFWWIl7jo.roa (hash: 772kO8FIL8B9L379YEWTLwC21iJYKEhsMHuMIDdHwY4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft rsync://rpki.ripe.net/repository/DEFAULT/OTSIZ9yylWrKZdCDSORA1HJ6N0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:de:86:85:0e:16:a7:56:6e:80:43:0d:11:f1:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39348867dcb2956aca65d08348e440d4727a3743 Validity Not Before: Dec 6 06:01:03 2025 GMT Not After : Dec 7 06:01:03 2025 GMT Subject: CN=98df3563a24df3818a70bdf02abc948d04447f9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5b:6b:6d:3e:5b:b6:12:28:d3:c8:82:0b:72: f7:14:2d:6e:bc:8e:a5:5e:ea:17:13:48:34:7b:01: 23:78:12:45:b2:b4:bf:08:be:83:10:e1:cb:2f:ed: a9:eb:04:45:ed:f6:3a:bc:3e:8e:cc:51:a3:a6:38: 56:ac:42:73:30:bd:79:64:d4:7e:eb:f9:89:4d:8d: 99:fe:2e:be:f7:c6:67:e3:fa:13:6a:8d:ae:46:e9: 21:2b:33:c6:52:59:04:fe:bf:51:03:4a:38:2e:87: dd:a5:d4:99:ee:56:0b:6c:71:66:80:ea:cb:16:3d: fe:9a:55:3b:41:42:3c:d4:74:0a:cd:c0:7f:66:45: 6d:fb:15:9b:22:0f:f9:07:e4:dd:22:ba:82:00:50: 2f:a0:c2:40:6b:21:aa:26:2a:6b:c0:89:2e:83:df: ec:76:bb:ce:40:bf:1d:6b:80:40:d3:aa:12:e7:45: a8:c3:a5:eb:84:8e:4c:b0:7e:1d:bc:05:1c:f9:9a: e7:f9:d5:0d:3a:f1:17:72:4b:ea:19:d7:f4:78:3e: 5a:35:82:4b:67:c0:3f:e1:c2:01:90:bb:a5:4e:e3: 6e:65:1b:a9:b9:0b:13:91:e4:25:c5:ae:86:24:c6: de:83:89:16:9e:88:de:6c:8c:d6:17:e2:1d:7d:3f: 33:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:DF:35:63:A2:4D:F3:81:8A:70:BD:F0:2A:BC:94:8D:04:44:7F:9B X509v3 Authority Key Identifier: keyid:39:34:88:67:DC:B2:95:6A:CA:65:D0:83:48:E4:40:D4:72:7A:37:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTSIZ9yylWrKZdCDSORA1HJ6N0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:93:f0:20:61:3c:5c:1f:a6:6a:c0:90:5b:ac:48:45:4b:ab: 1c:e9:b6:05:f1:94:68:10:59:52:62:ef:bd:8d:84:ca:6b:5f: 57:b5:50:37:18:7e:8b:64:8b:f8:aa:25:18:d6:36:75:40:05: 0f:f2:69:36:f1:43:0f:fd:31:86:a5:04:aa:9c:b7:a5:60:22: 23:49:5c:08:38:5c:3f:e4:0c:6c:76:56:89:08:74:f2:c7:26: d6:de:22:ba:9d:be:94:f9:73:e5:df:5e:8b:00:df:2b:8c:5b: 48:be:97:47:08:34:9d:3e:f7:eb:76:c2:1c:7a:56:91:2f:d4: 7d:09:ff:17:dd:f0:ef:5c:8d:38:7f:4c:99:82:fd:f6:50:1c: 6a:e1:bb:73:5d:1d:83:40:4e:0f:63:cd:04:93:d1:5a:70:31: db:ee:bf:a1:0f:f0:c1:13:4a:42:fd:9a:92:f9:f5:83:d1:ea: d4:58:c4:ac:d9:55:9c:b4:eb:dd:c8:66:95:b8:2d:ca:0d:4d: d6:5f:74:30:e6:9e:27:ef:57:84:15:8c:61:38:7f:95:c4:c5: bc:4a:e3:21:b1:dc:41:51:a9:8c:c6:8b:98:b1:74:b8:06:85: a0:96:47:7d:b3:52:5c:1a:5f:6a:e5:c9:0b:8b:2b:26:cf:c1: 46:bb:dc:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP96GhQ4Wp1ZugEMNEfG4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MzQ4ODY3ZGNiMjk1NmFjYTY1ZDA4MzQ4ZTQ0MGQ0NzI3 YTM3NDMwHhcNMjUxMjA2MDYwMTAzWhcNMjUxMjA3MDYwMTAzWjAzMTEwLwYDVQQD Eyg5OGRmMzU2M2EyNGRmMzgxOGE3MGJkZjAyYWJjOTQ4ZDA0NDQ3ZjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArltrbT5bthIo08iCC3L3FC1uvI6l XuoXE0g0ewEjeBJFsrS/CL6DEOHLL+2p6wRF7fY6vD6OzFGjpjhWrEJzML15ZNR+ 6/mJTY2Z/i6+98Zn4/oTao2uRukhKzPGUlkE/r9RA0o4LofdpdSZ7lYLbHFmgOrL Fj3+mlU7QUI81HQKzcB/ZkVt+xWbIg/5B+TdIrqCAFAvoMJAayGqJiprwIkug9/s drvOQL8da4BA06oS50Wow6XrhI5MsH4dvAUc+Zrn+dUNOvEXckvqGdf0eD5aNYJL Z8A/4cIBkLulTuNuZRupuQsTkeQlxa6GJMbeg4kWnojebIzWF+IdfT8zmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJjfNWOiTfOBinC98Cq8lI0ERH+bMB8GA1UdIwQY MBaAFDk0iGfcspVqymXQg0jkQNRyejdDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1RTSVo5eXlsV3JLWmRDRFNPUkExSEo2TjBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8xZGZmZTEtYzhmZi00NjZiLTlkYzIt YmZjNmY0OGU5NmFiLzEvT1RTSVo5eXlsV3JLWmRDRFNPUkExSEo2TjBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8xZGZmZTEtYzhmZi00NjZiLTlkYzItYmZjNmY0OGU5NmFi LzEvT1RTSVo5eXlsV3JLWmRDRFNPUkExSEo2TjBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJJPwIGE8 XB+masCQW6xIRUurHOm2BfGUaBBZUmLvvY2EymtfV7VQNxh+i2SL+KolGNY2dUAF D/JpNvFDD/0xhqUEqpy3pWAiI0lcCDhcP+QMbHZWiQh08scm1t4iup2+lPlz5d9e iwDfK4xbSL6XRwg0nT7363bCHHpWkS/UfQn/F93w71yNOH9MmYL99lAcauG7c10d g0BOD2PNBJPRWnAx2+6/oQ/wwRNKQv2akvn1g9Hq1FjErNlVnLTr3chmlbgtyg1N 1l90MOaeJ+9XhBWMYTh/lcTFvErjIbHcQVGpjMaLmLF0uAaFoJZHfbNSXBpfauXJ C4srJs/BRrvc9g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:14:34 2025 by rpki-client