This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft File: OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft (raw, json) Hash identifier: FmL+j6xbdZEz+igxqtOJmZCW9b/i/06Gs6yChihfv84= Subject key identifier: 43:52:BD:F4:67:E8:55:2B:83:38:F4:C4:15:45:BF:DF:B7:00:49:4A Authority key identifier: 39:39:F9:2B:82:5C:E1:10:90:3C:31:D5:22:B0:F5:0C:AF:D7:4A:6F Certificate issuer: /CN=3939f92b825ce110903c31d522b0f50cafd74a6f Certificate serial: 019B593EBFDE45F6B960861AAAEDF6F4A479 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft Manifest number: 0754 Signing time: Fri 26 Dec 2025 06:00:43 +0000 Manifest this update: Fri 26 Dec 2025 06:00:43 +0000 Manifest next update: Sat 27 Dec 2025 06:00:43 +0000 Files and hashes: 1: OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl (hash: PvCCyfix8Ol8wT9tpNqwnCc3cmTJVb0pyJjEUIDf/DY=) 2: kqIK4ViX12p6eIuBG0T4dHMIIHI.roa (hash: PaO/dVKACGH2GQrFFW5fxxz+R4Obi2vhR9vhB2cSwQc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:3e:bf:de:45:f6:b9:60:86:1a:aa:ed:f6:f4:a4:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3939f92b825ce110903c31d522b0f50cafd74a6f Validity Not Before: Dec 26 06:00:43 2025 GMT Not After : Dec 27 06:00:43 2025 GMT Subject: CN=4352bdf467e8552b8338f4c41545bfdfb700494a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:43:24:ed:15:a0:76:e5:72:a6:db:86:ef:fb: 5e:0c:88:f3:d8:d8:c6:41:d7:14:8f:6e:dc:f9:2a: fa:cb:94:54:db:04:4c:79:ad:27:ad:c8:d8:4d:c1: c6:a7:40:cc:ae:3d:91:9e:ba:6e:d9:5e:a3:af:6d: 63:e1:c2:35:c7:73:de:7a:87:ad:d8:d0:ea:96:f3: 25:6e:3c:06:1f:1c:73:b1:b3:0f:9d:b1:21:cf:96: ca:92:80:bf:e2:2a:7d:54:74:dc:4e:d0:05:26:bf: d7:b0:73:b8:b9:56:9d:66:93:72:53:53:e8:6a:90: 25:0f:e8:01:06:dd:f8:35:fb:92:c5:bd:24:cf:04: f5:3c:0f:d4:92:10:d8:cc:55:a9:23:ce:89:18:f5: ff:14:32:e2:c1:81:5e:40:79:83:a6:80:1f:3f:1c: d2:32:c0:53:32:77:5e:18:d0:a4:b5:99:dc:6b:35: f6:ed:27:e9:82:18:03:27:0c:e1:6a:11:4e:d9:9f: aa:63:c0:78:dc:7e:37:d7:8d:98:4b:d9:21:df:3b: 04:50:11:4f:82:68:06:0b:4c:90:ad:80:1e:ac:bf: 98:41:7d:07:2f:6e:80:3b:17:8c:9f:26:16:0f:b9: 2d:78:22:5f:cc:34:06:20:97:c4:a4:d9:ae:91:69: 6a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:52:BD:F4:67:E8:55:2B:83:38:F4:C4:15:45:BF:DF:B7:00:49:4A X509v3 Authority Key Identifier: keyid:39:39:F9:2B:82:5C:E1:10:90:3C:31:D5:22:B0:F5:0C:AF:D7:4A:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:a2:93:ac:75:55:69:09:4a:96:ae:03:0a:01:7f:50:46:85: ef:81:c3:a5:b3:40:c6:cf:95:96:b8:35:e3:29:a6:42:a7:57: ac:8f:46:4e:c7:68:5e:9b:19:75:70:99:25:d8:fd:dd:e5:24: 97:ef:7b:39:70:b4:f5:78:e2:a0:8f:ad:5e:3d:d3:00:5b:9c: ef:1a:e1:42:51:29:f8:33:dc:10:63:8c:30:24:9b:cf:59:f4: 10:a5:fd:b1:59:9f:53:72:c6:66:79:ed:ef:d3:12:15:db:02: 22:47:63:35:44:76:b0:7f:c9:53:c2:74:b7:ea:b1:b4:c6:8b: 0d:30:3b:4f:2a:f5:84:33:c3:8a:86:33:23:70:a3:ee:a0:49: cc:b2:9b:db:af:5a:0f:56:07:e2:32:f3:1b:14:eb:ca:50:bc: 42:1a:32:a6:55:7d:b8:4c:32:72:94:2f:24:3d:0e:26:68:41: 0e:09:f6:85:d5:3c:fc:c0:00:70:ca:76:42:9b:e3:4c:21:ed: 82:df:e4:82:11:42:01:65:2a:f3:4d:8b:e2:4b:92:52:c3:3f: 4f:1e:7f:56:21:28:e0:24:96:37:ca:13:4f:4a:94:7b:d3:fc: b1:b8:57:c5:f3:74:48:82:8b:79:2e:dc:ea:97:de:d4:ae:a0: 64:f8:e7:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZPr/eRfa5YIYaqu329KR5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MzlmOTJiODI1Y2UxMTA5MDNjMzFkNTIyYjBmNTBjYWZk NzRhNmYwHhcNMjUxMjI2MDYwMDQzWhcNMjUxMjI3MDYwMDQzWjAzMTEwLwYDVQQD Eyg0MzUyYmRmNDY3ZTg1NTJiODMzOGY0YzQxNTQ1YmZkZmI3MDA0OTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0Mk7RWgduVyptuG7/teDIjz2NjG QdcUj27c+Sr6y5RU2wRMea0nrcjYTcHGp0DMrj2Rnrpu2V6jr21j4cI1x3Peeoet 2NDqlvMlbjwGHxxzsbMPnbEhz5bKkoC/4ip9VHTcTtAFJr/XsHO4uVadZpNyU1Po apAlD+gBBt34NfuSxb0kzwT1PA/UkhDYzFWpI86JGPX/FDLiwYFeQHmDpoAfPxzS MsBTMndeGNCktZncazX27SfpghgDJwzhahFO2Z+qY8B43H43142YS9kh3zsEUBFP gmgGC0yQrYAerL+YQX0HL26AOxeMnyYWD7kteCJfzDQGIJfEpNmukWlqVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFENSvfRn6FUrgzj0xBVFv9+3AElKMB8GA1UdIwQY MBaAFDk5+SuCXOEQkDwx1SKw9Qyv10pvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1RuNUs0SmM0UkNRUERIVklyRDFES19YU204LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9lNzVlNDEtYTgyOC00ZGM1LThlZDMt OWZjMzY0MTFhY2NjLzEvT1RuNUs0SmM0UkNRUERIVklyRDFES19YU204Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9lNzVlNDEtYTgyOC00ZGM1LThlZDMtOWZjMzY0MTFhY2Nj LzEvT1RuNUs0SmM0UkNRUERIVklyRDFES19YU204LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcaKTrHVV aQlKlq4DCgF/UEaF74HDpbNAxs+Vlrg14ymmQqdXrI9GTsdoXpsZdXCZJdj93eUk l+97OXC09XjioI+tXj3TAFuc7xrhQlEp+DPcEGOMMCSbz1n0EKX9sVmfU3LGZnnt 79MSFdsCIkdjNUR2sH/JU8J0t+qxtMaLDTA7Tyr1hDPDioYzI3Cj7qBJzLKb269a D1YH4jLzGxTrylC8QhoyplV9uEwycpQvJD0OJmhBDgn2hdU8/MAAcMp2QpvjTCHt gt/kghFCAWUq802L4kuSUsM/Tx5/ViEo4CSWN8oTT0qUe9P8sbhXxfN0SIKLeS7c 6pfe1K6gZPjnHw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:53 2025 by rpki-client