This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft File: OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft (raw, json) Hash identifier: dAvm0yznh94gHzX51SHAdWO1xiohL8rJHT9LvAhkx5I= Subject key identifier: 69:8B:F5:4D:00:A3:8D:FE:BF:CC:0E:7D:91:85:EA:32:09:31:6E:D7 Authority key identifier: 39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37 Certificate issuer: /CN=393d2f0a96199a060856cf67e2105fda2cb93d37 Certificate serial: 019B514E9D345D0DC8BED461B6B02C49557C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft Manifest number: 1790 Signing time: Wed 24 Dec 2025 17:01:05 +0000 Manifest this update: Wed 24 Dec 2025 17:01:05 +0000 Manifest next update: Thu 25 Dec 2025 17:01:05 +0000 Files and hashes: 1: 2ksl-0DaqqPMJOIcVSjRYw3oowo.roa (hash: bR5/CsRer/6UzbcdOln79yAgzHl3TX5cZlnxevkQmfk=) 2: NeDUni-C3uHplhagAy2lf9i4WwQ.roa (hash: tf9wG40bSRlg1tIcGU3dfENffu94T3Q0YSHKTzWPt14=) 3: OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl (hash: h9Z3WUHYq7Mz0Qj4p8xCqr1MchW9h0XYjObMVukrZhI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 17:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:4e:9d:34:5d:0d:c8:be:d4:61:b6:b0:2c:49:55:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=393d2f0a96199a060856cf67e2105fda2cb93d37 Validity Not Before: Dec 24 17:01:05 2025 GMT Not After : Dec 25 17:01:05 2025 GMT Subject: CN=698bf54d00a38dfebfcc0e7d9185ea3209316ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ee:6c:1b:85:3d:19:1d:0e:a8:17:fe:a0:94: 5c:cd:e4:14:27:bd:a5:e5:ac:e5:82:2e:75:94:64: be:d2:5e:7a:e7:71:20:78:29:05:06:8a:89:15:14: ec:83:cf:75:84:db:2d:5c:bd:6b:b7:aa:81:1f:c7: 44:df:f2:db:2e:64:8c:46:c3:3f:0f:79:83:a2:b1: 93:f1:95:f2:48:ba:61:7c:f4:1b:e1:06:bc:57:65: 67:16:0e:72:b7:42:5a:ac:3b:9f:99:67:2e:cf:dd: e6:5c:cb:e0:fd:0e:a0:22:70:79:8f:05:8f:9b:4f: 30:33:b2:b4:ea:1f:3d:30:87:ff:cf:7a:a9:4b:fc: 7a:40:21:4c:6d:c5:9f:11:03:52:54:28:c1:43:12: 40:57:c8:e2:74:36:a4:29:6f:fb:c4:1e:ff:87:59: ff:f6:a1:24:e9:f5:04:8c:fb:85:0c:d9:33:43:4b: 84:11:e3:b7:a4:5d:2e:2a:74:e7:37:b8:7e:dd:b8: 6f:43:11:9c:04:4b:90:f5:a6:34:9f:c7:05:00:08: de:68:51:30:d9:91:79:a7:6a:e7:d9:44:8e:ed:d9: b9:c8:b9:72:f5:e2:7f:ad:87:9e:fc:6a:34:80:19: 63:e0:59:d1:9d:c8:d0:8e:60:b5:03:2c:bd:48:78: 32:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:8B:F5:4D:00:A3:8D:FE:BF:CC:0E:7D:91:85:EA:32:09:31:6E:D7 X509v3 Authority Key Identifier: keyid:39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:f7:79:39:8c:d7:53:46:69:7e:92:fe:72:07:70:4a:31:9d: e0:cb:5a:11:db:af:e7:e0:af:c4:f5:14:30:99:8e:b7:81:af: 54:b8:9e:11:9b:3c:7e:b2:94:26:67:5d:f2:38:78:cd:92:f7: 10:a2:45:4b:49:3e:01:44:bf:f8:1a:23:9c:6a:e9:b0:8b:be: ff:70:ac:b9:4c:f6:f4:f7:e7:1b:fa:e4:29:3c:da:2b:d8:d1: 4d:b8:b8:e0:2a:5e:33:07:af:64:31:da:f7:9f:32:f4:50:a1: 09:6d:7d:68:77:c8:5a:cc:ad:44:94:79:c2:25:c5:40:5d:75: 6c:e8:0e:0d:d2:d0:4c:34:9c:dc:ca:6d:30:61:2f:90:be:34: de:83:5b:fa:1e:f4:68:7a:7d:ac:b2:f7:18:d4:bb:fa:8e:ee: 47:a3:cd:09:aa:a6:06:fe:0b:dd:cf:1b:03:5c:5a:c9:73:2c: 83:4e:9e:95:d3:98:a4:86:dd:fa:23:70:ec:42:c1:59:f5:92: c4:e7:27:31:f0:a2:77:fe:da:db:08:07:05:f0:c7:3c:c8:d8: 33:f9:54:be:51:bd:d4:0f:9f:1e:22:40:fa:49:1a:58:e5:26: ac:4b:79:98:e4:bc:90:89:d4:6c:9e:ba:dc:6d:1d:a7:04:95: 6a:84:57:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRTp00XQ3IvtRhtrAsSVV8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5M2QyZjBhOTYxOTlhMDYwODU2Y2Y2N2UyMTA1ZmRhMmNi OTNkMzcwHhcNMjUxMjI0MTcwMTA1WhcNMjUxMjI1MTcwMTA1WjAzMTEwLwYDVQQD Eyg2OThiZjU0ZDAwYTM4ZGZlYmZjYzBlN2Q5MTg1ZWEzMjA5MzE2ZWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAme5sG4U9GR0OqBf+oJRczeQUJ72l 5azlgi51lGS+0l5653EgeCkFBoqJFRTsg891hNstXL1rt6qBH8dE3/LbLmSMRsM/ D3mDorGT8ZXySLphfPQb4Qa8V2VnFg5yt0JarDufmWcuz93mXMvg/Q6gInB5jwWP m08wM7K06h89MIf/z3qpS/x6QCFMbcWfEQNSVCjBQxJAV8jidDakKW/7xB7/h1n/ 9qEk6fUEjPuFDNkzQ0uEEeO3pF0uKnTnN7h+3bhvQxGcBEuQ9aY0n8cFAAjeaFEw 2ZF5p2rn2USO7dm5yLly9eJ/rYee/Go0gBlj4FnRncjQjmC1Ayy9SHgy0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGmL9U0Ao43+v8wOfZGF6jIJMW7XMB8GA1UdIwQY MBaAFDk9LwqWGZoGCFbPZ+IQX9osuT03MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1QwdkNwWVptZ1lJVnM5bjRoQmYyaXk1UFRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wMzY1ZGUtODAwOC00NzEzLWFiOTkt NjE5ZmE4MGI4ZDc0LzEvT1QwdkNwWVptZ1lJVnM5bjRoQmYyaXk1UFRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8wMzY1ZGUtODAwOC00NzEzLWFiOTktNjE5ZmE4MGI4ZDc0 LzEvT1QwdkNwWVptZ1lJVnM5bjRoQmYyaXk1UFRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb/d5OYzX U0ZpfpL+cgdwSjGd4MtaEduv5+CvxPUUMJmOt4GvVLieEZs8frKUJmdd8jh4zZL3 EKJFS0k+AUS/+BojnGrpsIu+/3CsuUz29PfnG/rkKTzaK9jRTbi44CpeMwevZDHa 958y9FChCW19aHfIWsytRJR5wiXFQF11bOgODdLQTDSc3MptMGEvkL403oNb+h70 aHp9rLL3GNS7+o7uR6PNCaqmBv4L3c8bA1xayXMsg06eldOYpIbd+iNw7ELBWfWS xOcnMfCid/7a2wgHBfDHPMjYM/lUvlG91A+fHiJA+kkaWOUmrEt5mOS8kInUbJ66 3G0dpwSVaoRXRQ== -----END CERTIFICATE-----Generated at Thu Dec 25 02:17:37 2025 by rpki-client