This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft File: oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft (raw, json) Hash identifier: FTe6vZxYA5NKyh3SAI5ZMGSJRg9m6Cs7ov25m9PEvlE= Subject key identifier: C8:4D:35:AA:86:32:7D:0B:09:E2:8B:C2:FA:C0:CC:B3:B4:CF:C5:45 Authority key identifier: A1:37:89:1D:D4:F3:DF:83:77:2D:7C:FE:71:83:84:3C:BF:F4:4D:54 Certificate issuer: /CN=a137891dd4f3df83772d7cfe7183843cbff44d54 Certificate serial: 019B4438E0C0C842BB1724D3E858F71E9F3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft Manifest number: 122E Signing time: Mon 22 Dec 2025 04:02:16 +0000 Manifest this update: Mon 22 Dec 2025 04:02:16 +0000 Manifest next update: Tue 23 Dec 2025 04:02:16 +0000 Files and hashes: 1: c7xqGqZ0KnoVgSHP1uxqIn-gcow.roa (hash: fgA4jW+G01sd+KIFTnm2o/eJLY8zge2zWEftjWqJRcE=) 2: oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl (hash: +8JA9KjZ0tJZ0rTsMxnR+OIE+4ijTejcLX5Grh6mKYo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:e0:c0:c8:42:bb:17:24:d3:e8:58:f7:1e:9f:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a137891dd4f3df83772d7cfe7183843cbff44d54 Validity Not Before: Dec 22 04:02:16 2025 GMT Not After : Dec 23 04:02:16 2025 GMT Subject: CN=c84d35aa86327d0b09e28bc2fac0ccb3b4cfc545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:75:1b:0a:17:fd:b1:77:e2:46:19:4b:04:e0: 59:ee:2b:0a:ae:25:49:11:01:cf:1e:a6:48:cf:60: 9d:19:7e:4a:24:29:fe:2a:51:8a:20:e6:e5:28:61: b2:fc:9e:ba:45:30:39:d7:c5:5c:f6:b9:8b:d3:45: 24:36:b1:50:dd:6a:5e:39:3f:e1:24:2d:1a:01:64: b5:21:cd:c3:89:b0:22:45:f4:e3:dd:7f:f2:cb:0c: ee:76:e1:25:c8:bd:b4:34:f4:09:12:0a:52:f9:42: 96:42:dc:bc:d8:f9:4c:a9:2f:30:42:06:e4:9b:64: 96:2f:90:5f:f0:a4:54:70:68:dd:c9:da:07:75:4c: fc:f6:ca:11:aa:38:38:94:ce:f6:2c:ce:2b:7f:0e: eb:12:83:d9:40:d3:6e:c5:23:c9:67:7f:c3:16:0d: 31:45:b6:0b:c7:22:f3:af:80:99:fa:cf:4f:9a:2d: bc:f3:0e:15:ee:09:0e:f0:5c:b6:4b:6e:7c:11:66: d9:5d:99:e5:3e:8b:f2:6b:ab:45:64:ec:96:64:d6: ae:85:a8:ca:d5:05:91:80:6a:99:c8:ff:56:f6:79: 02:22:fd:47:09:49:38:5a:13:34:9d:77:50:3b:c0: 13:15:8d:8f:fe:87:37:03:56:cb:d9:f7:de:6b:bc: 23:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:4D:35:AA:86:32:7D:0B:09:E2:8B:C2:FA:C0:CC:B3:B4:CF:C5:45 X509v3 Authority Key Identifier: keyid:A1:37:89:1D:D4:F3:DF:83:77:2D:7C:FE:71:83:84:3C:BF:F4:4D:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:74:4e:ab:df:4a:1f:2d:12:58:39:cc:83:b2:10:2f:77:27: 3f:a4:1e:85:ae:28:9b:60:74:17:7c:d9:0c:ad:ed:6e:04:60: 9b:d0:da:89:01:17:91:7c:56:e5:1a:46:09:c6:f6:6a:76:0f: 27:7e:61:0e:63:b5:26:26:ea:29:a2:b9:3c:32:13:5c:f3:05: a6:81:0a:3b:c0:32:ec:31:29:94:99:c3:23:bb:f0:d2:65:65: 20:68:aa:d4:2c:a4:f6:02:9d:0a:31:9e:ef:00:91:9e:bf:ea: 6b:28:a2:5a:7b:37:1e:6a:30:e3:49:89:a2:88:a4:8a:0a:8a: a3:1f:a0:66:17:08:e6:7d:55:4b:b0:56:f1:19:3b:2b:fa:c0: f5:5a:ab:7b:9f:33:09:d1:92:39:f1:98:62:11:79:15:30:ac: 8b:bd:86:9c:ee:1b:1d:6d:d4:59:06:8b:f7:27:7b:a4:e7:c4: 1c:76:84:9a:aa:18:a0:6b:a9:b1:6a:83:5c:ac:84:2c:53:e0: 37:2a:b6:26:3a:45:f0:19:4a:6f:cf:75:95:0f:a3:0d:fe:3d: 6a:48:18:b3:15:0e:90:6b:02:6d:f6:57:5e:89:ff:e0:2d:ab: 4e:e0:71:04:ae:00:f1:77:17:a5:46:a0:e8:4d:b0:80:ea:99: b9:18:04:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOODAyEK7FyTT6Fj3Hp89MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMzc4OTFkZDRmM2RmODM3NzJkN2NmZTcxODM4NDNjYmZm NDRkNTQwHhcNMjUxMjIyMDQwMjE2WhcNMjUxMjIzMDQwMjE2WjAzMTEwLwYDVQQD EyhjODRkMzVhYTg2MzI3ZDBiMDllMjhiYzJmYWMwY2NiM2I0Y2ZjNTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33UbChf9sXfiRhlLBOBZ7isKriVJ EQHPHqZIz2CdGX5KJCn+KlGKIOblKGGy/J66RTA518Vc9rmL00UkNrFQ3WpeOT/h JC0aAWS1Ic3DibAiRfTj3X/yywzuduElyL20NPQJEgpS+UKWQty82PlMqS8wQgbk m2SWL5Bf8KRUcGjdydoHdUz89soRqjg4lM72LM4rfw7rEoPZQNNuxSPJZ3/DFg0x RbYLxyLzr4CZ+s9Pmi288w4V7gkO8Fy2S258EWbZXZnlPovya6tFZOyWZNauhajK 1QWRgGqZyP9W9nkCIv1HCUk4WhM0nXdQO8ATFY2P/oc3A1bL2ffea7wjAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMhNNaqGMn0LCeKLwvrAzLO0z8VFMB8GA1UdIwQY MBaAFKE3iR3U89+Ddy18/nGDhDy/9E1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1RlSkhkVHozNE4zTFh6LWNZT0VQTF8wVFZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9hMmJiOTItYzU5MS00MjUwLWIyZDMt OGRkYTZjNmNhODFkLzEvb1RlSkhkVHozNE4zTFh6LWNZT0VQTF8wVFZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9hMmJiOTItYzU5MS00MjUwLWIyZDMtOGRkYTZjNmNhODFk LzEvb1RlSkhkVHozNE4zTFh6LWNZT0VQTF8wVFZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxXROq99K Hy0SWDnMg7IQL3cnP6Qeha4om2B0F3zZDK3tbgRgm9DaiQEXkXxW5RpGCcb2anYP J35hDmO1JibqKaK5PDITXPMFpoEKO8Ay7DEplJnDI7vw0mVlIGiq1Cyk9gKdCjGe 7wCRnr/qayiiWns3Hmow40mJooikigqKox+gZhcI5n1VS7BW8Rk7K/rA9Vqre58z CdGSOfGYYhF5FTCsi72GnO4bHW3UWQaL9yd7pOfEHHaEmqoYoGupsWqDXKyELFPg Nyq2JjpF8BlKb891lQ+jDf49akgYsxUOkGsCbfZXXon/4C2rTuBxBK4A8XcXpUag 6E2wgOqZuRgEPA== -----END CERTIFICATE-----Generated at Mon Dec 22 06:49:26 2025 by rpki-client