This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft File: OTe1pRVrXHL_wPnAtxBLsYjby7w.mft (raw, json) Hash identifier: V2KyzdIWw1qO/pECXi/Vu/6DTrF/ByOvz8RrNbAhWN0= Subject key identifier: 8C:65:B7:87:2F:A6:3D:4D:54:DB:9F:7E:7F:B5:72:C5:AA:70:DE:19 Authority key identifier: 39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC Certificate issuer: /CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc Certificate serial: 019AF1D1CA4B9A7616687F783B45A8696140 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 04:00:49 +0000 Manifest this update: Sat 06 Dec 2025 04:00:49 +0000 Manifest next update: Sun 07 Dec 2025 04:00:49 +0000 Files and hashes: 1: OTe1pRVrXHL_wPnAtxBLsYjby7w.crl (hash: yyMqYYJl0VSmQiMgFUOawCLxw+eAy0N34guFwDJQAhc=) 2: o1Ho1AoDVivcPIuSoHTiqdRiLsw.roa (hash: 2VRi6zWzRrWILpFGgvS4R1+SnUUqoGeAipP4Ra7rcD4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ca:4b:9a:76:16:68:7f:78:3b:45:a8:69:61:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc Validity Not Before: Dec 6 04:00:49 2025 GMT Not After : Dec 7 04:00:49 2025 GMT Subject: CN=8c65b7872fa63d4d54db9f7e7fb572c5aa70de19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e3:9c:0c:e6:25:95:12:2b:36:c4:47:c4:f8: c5:46:17:74:c0:21:f6:cc:42:4d:80:cf:57:9b:e0: af:d5:07:04:76:62:18:c2:58:e2:6a:e6:22:0f:a3: be:cd:73:94:7c:23:11:71:b5:86:15:fc:47:75:03: cf:7d:fd:bd:c3:f8:1c:fd:45:ec:73:ed:2e:6c:71: 6d:da:63:8f:a7:29:e3:62:20:78:78:03:57:e2:1b: 95:fa:7d:1a:61:3a:ff:10:92:a8:3a:f9:01:30:5f: f3:e1:46:e0:2d:c7:fb:ee:14:9d:bc:4a:c0:b4:2e: 37:72:df:61:37:f5:a3:1b:ff:00:5b:b5:41:14:15: 61:49:cf:0b:7f:e6:b1:8f:17:95:ed:88:80:0c:8e: 72:f8:14:36:1f:b5:7b:86:2f:e5:5b:71:b6:4e:ca: 32:1f:e9:7b:7c:a0:20:a8:8e:3f:6d:c8:23:26:c1: d0:a9:19:1b:bc:03:64:4b:e8:82:b5:c9:6e:1b:e1: 53:e6:2d:d4:e3:10:8b:51:c9:86:f6:ab:42:74:0d: 3d:50:36:d9:9d:92:75:e2:f8:6f:7e:fb:3c:2f:7f: 10:d4:74:c5:1d:f5:4f:b0:45:0a:c0:23:9b:81:eb: 2e:16:6e:e0:d4:5c:72:76:a1:93:a6:28:00:d6:b0: 4a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:65:B7:87:2F:A6:3D:4D:54:DB:9F:7E:7F:B5:72:C5:AA:70:DE:19 X509v3 Authority Key Identifier: keyid:39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:fc:fc:5f:8a:91:8c:aa:5b:b4:c5:83:a5:14:d1:c5:02:e2: 3c:ec:db:c8:51:64:5f:01:fe:81:13:c0:1e:26:80:a5:7b:49: 4c:f0:2a:10:50:a0:41:08:f6:27:d2:42:d9:a0:e9:dd:c7:70: f3:d3:ee:1a:6f:80:2f:ac:9a:25:38:a2:f9:a1:67:33:3c:8c: 30:a1:5e:83:b8:d1:13:18:6b:d6:ea:9e:6b:8c:0e:0c:9a:69: 6b:5d:33:8f:4b:63:5b:ec:68:df:be:2c:18:d6:17:fb:10:31: da:de:b3:28:a2:bf:30:a3:1d:5c:c5:ec:b3:9c:3b:3c:0c:25: 28:37:08:d8:0b:27:b6:72:e6:a1:bb:8b:14:92:78:88:66:b4: dd:8b:b5:4a:8f:90:84:57:34:de:72:5d:84:3f:de:aa:b3:7b: 0f:ab:15:bf:b5:23:16:ac:16:f6:6f:58:d2:92:c0:44:24:91: 7b:87:ed:81:80:38:76:1a:a6:44:ab:27:63:67:2c:cb:de:1a: eb:c7:3b:76:79:51:d0:69:3b:12:a3:0e:1f:59:da:35:20:2e: ee:a0:b6:ae:b8:a0:ce:d3:f3:6e:62:c4:0c:5f:01:60:e5:ca: f7:ca:64:9a:d0:bb:2d:4a:42:5f:20:fc:b3:c0:22:0c:5e:99: e7:ac:5e:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0cpLmnYWaH94O0WoaWFAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MzdiNWE1MTU2YjVjNzJmZmMwZjljMGI3MTA0YmIxODhk YmNiYmMwHhcNMjUxMjA2MDQwMDQ5WhcNMjUxMjA3MDQwMDQ5WjAzMTEwLwYDVQQD Eyg4YzY1Yjc4NzJmYTYzZDRkNTRkYjlmN2U3ZmI1NzJjNWFhNzBkZTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5eOcDOYllRIrNsRHxPjFRhd0wCH2 zEJNgM9Xm+Cv1QcEdmIYwljiauYiD6O+zXOUfCMRcbWGFfxHdQPPff29w/gc/UXs c+0ubHFt2mOPpynjYiB4eANX4huV+n0aYTr/EJKoOvkBMF/z4UbgLcf77hSdvErA tC43ct9hN/WjG/8AW7VBFBVhSc8Lf+axjxeV7YiADI5y+BQ2H7V7hi/lW3G2Tsoy H+l7fKAgqI4/bcgjJsHQqRkbvANkS+iCtcluG+FT5i3U4xCLUcmG9qtCdA09UDbZ nZJ14vhvfvs8L38Q1HTFHfVPsEUKwCObgesuFm7g1FxydqGTpigA1rBK3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIxlt4cvpj1NVNuffn+1csWqcN4ZMB8GA1UdIwQY MBaAFDk3taUVa1xy/8D5wLcQS7GI28u8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1RlMXBSVnJYSExfd1BuQXR4QkxzWWpieTd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9kMjE3NzgtMTkzYy00ZjRjLTgxMTkt ZGQxNDJhMTMzNWYwLzEvT1RlMXBSVnJYSExfd1BuQXR4QkxzWWpieTd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9kMjE3NzgtMTkzYy00ZjRjLTgxMTktZGQxNDJhMTMzNWYw LzEvT1RlMXBSVnJYSExfd1BuQXR4QkxzWWpieTd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYvz8X4qR jKpbtMWDpRTRxQLiPOzbyFFkXwH+gRPAHiaApXtJTPAqEFCgQQj2J9JC2aDp3cdw 89PuGm+AL6yaJTii+aFnMzyMMKFeg7jRExhr1uqea4wODJppa10zj0tjW+xo374s GNYX+xAx2t6zKKK/MKMdXMXss5w7PAwlKDcI2AsntnLmobuLFJJ4iGa03Yu1So+Q hFc03nJdhD/eqrN7D6sVv7UjFqwW9m9Y0pLARCSRe4ftgYA4dhqmRKsnY2csy94a 68c7dnlR0Gk7EqMOH1naNSAu7qC2rrigztPzbmLEDF8BYOXK98pkmtC7LUpCXyD8 s8AiDF6Z56xe4Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:52:16 2025 by rpki-client