This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft File: 1OTgFewB2mrn2EkW_RrUyqkE3E4.mft (raw, json) Hash identifier: jGZeYt9RG5lw8XNGmXjml+yAxcRjGXobyndDKpcaFec= Subject key identifier: 08:42:79:1F:6E:0D:3A:FB:80:39:D9:01:3B:38:81:91:CA:B8:89:BB Authority key identifier: D4:E4:E0:15:EC:01:DA:6A:E7:D8:49:16:FD:1A:D4:CA:A9:04:DC:4E Certificate issuer: /CN=d4e4e015ec01da6ae7d84916fd1ad4caa904dc4e Certificate serial: 019B1B0505BE6C69AF57367D35D46091A6EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft Manifest number: 0E46 Signing time: Sun 14 Dec 2025 04:01:12 +0000 Manifest this update: Sun 14 Dec 2025 04:01:12 +0000 Manifest next update: Mon 15 Dec 2025 04:01:12 +0000 Files and hashes: 1: 1OTgFewB2mrn2EkW_RrUyqkE3E4.crl (hash: LqG84v+1/osw83KT9h+W28kGAxIjtsLb83hYHUpV5lw=) 2: Cg7qlLFT5Tw2Rj89YI6LNGMAVC8.roa (hash: RUt6pQHc+8RuyWicYb+I1y3SWfel5InfTPhk0ybD+Y4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.crl rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:05:05:be:6c:69:af:57:36:7d:35:d4:60:91:a6:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4e4e015ec01da6ae7d84916fd1ad4caa904dc4e Validity Not Before: Dec 14 04:01:12 2025 GMT Not After : Dec 15 04:01:12 2025 GMT Subject: CN=0842791f6e0d3afb8039d9013b388191cab889bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e0:6d:e9:3f:61:7b:70:d9:4b:bb:64:ce:6e: 96:72:0b:35:33:3d:9e:ba:73:a0:40:79:d7:41:bf: 6a:ba:33:10:7b:3a:e0:bc:49:be:f5:61:d9:b1:a0: 83:a6:cd:87:ae:fa:d9:26:aa:43:48:65:99:f7:ad: 19:51:a1:fb:8c:57:84:bc:d9:d4:64:6f:52:93:50: ae:a7:bc:32:6d:b7:3d:69:5f:a4:61:45:55:62:8b: 55:dc:54:38:44:d0:28:7a:40:a5:b4:df:46:ae:b6: 2b:42:8e:31:ad:a3:6e:c9:3a:5b:12:18:6e:31:27: 6d:b1:7f:7f:b7:b2:d8:90:f4:1d:82:82:ed:4e:cf: 21:4e:03:01:e6:04:db:c2:78:19:ab:7f:c3:1a:ad: 88:35:3f:00:d3:1a:b3:e5:78:d0:71:10:44:ef:ce: bc:08:c6:d2:59:b3:86:2c:85:d1:8b:ae:16:a9:31: 83:1a:d0:28:70:e7:bd:d9:6b:23:46:10:92:1c:81: 96:94:cb:15:e8:31:35:29:29:a2:f4:03:88:bc:6e: 35:db:06:91:cd:22:31:ff:fb:7c:c7:9b:d6:a4:3b: cb:a8:d6:de:d9:43:58:04:16:c8:e4:67:5f:ab:77: d0:ae:3b:f6:3d:d7:2e:da:8b:40:0b:08:5c:d8:ed: 88:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:42:79:1F:6E:0D:3A:FB:80:39:D9:01:3B:38:81:91:CA:B8:89:BB X509v3 Authority Key Identifier: keyid:D4:E4:E0:15:EC:01:DA:6A:E7:D8:49:16:FD:1A:D4:CA:A9:04:DC:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:bc:54:41:5e:f5:b1:29:88:13:21:e8:3d:14:45:38:95:ff: a0:c5:bb:60:bd:6f:9e:a2:41:28:77:62:fa:8c:bf:4f:80:c1: a0:e1:4d:bb:6c:10:39:39:8a:1d:1e:4c:c4:78:61:1c:d4:d2: 83:1a:03:ad:4c:76:8e:79:bf:ae:82:53:ce:9b:fa:6d:ef:2c: 39:b2:7d:74:46:35:91:e9:15:05:dc:19:84:57:75:9a:cf:42: 80:bb:a4:c0:da:0c:d4:f0:14:38:06:aa:e2:d7:5c:60:ac:18: 7c:fe:04:fb:fd:10:db:a0:75:f1:66:02:fb:da:11:58:71:4d: 6b:51:4c:11:6c:40:68:0f:ac:66:ce:87:42:ba:68:03:a5:b5: 87:7c:c1:3a:3e:0c:59:db:5f:ff:01:a9:81:d1:1a:f6:08:b7: 7f:30:a6:b7:39:6a:86:e3:b1:6b:e6:8a:ef:19:a1:c1:55:0e: f2:a1:42:82:04:33:48:b5:6c:82:6f:12:99:7b:ca:d1:1c:4a: d0:68:ee:29:fd:74:cf:09:b4:8e:a4:34:eb:d9:12:b6:52:44: ae:62:35:2a:04:f4:5a:18:cd:97:d0:fb:5e:d6:44:c0:f6:0f: 10:8a:4c:52:a8:ee:9d:f7:2d:d6:dc:22:11:69:e2:42:6c:70: 25:ab:cb:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbBQW+bGmvVzZ9NdRgkabqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZTRlMDE1ZWMwMWRhNmFlN2Q4NDkxNmZkMWFkNGNhYTkw NGRjNGUwHhcNMjUxMjE0MDQwMTEyWhcNMjUxMjE1MDQwMTEyWjAzMTEwLwYDVQQD EygwODQyNzkxZjZlMGQzYWZiODAzOWQ5MDEzYjM4ODE5MWNhYjg4OWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOBt6T9he3DZS7tkzm6Wcgs1Mz2e unOgQHnXQb9qujMQezrgvEm+9WHZsaCDps2HrvrZJqpDSGWZ960ZUaH7jFeEvNnU ZG9Sk1Cup7wybbc9aV+kYUVVYotV3FQ4RNAoekCltN9GrrYrQo4xraNuyTpbEhhu MSdtsX9/t7LYkPQdgoLtTs8hTgMB5gTbwngZq3/DGq2INT8A0xqz5XjQcRBE7868 CMbSWbOGLIXRi64WqTGDGtAocOe92WsjRhCSHIGWlMsV6DE1KSmi9AOIvG412waR zSIx//t8x5vWpDvLqNbe2UNYBBbI5Gdfq3fQrjv2Pdcu2otACwhc2O2IQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAhCeR9uDTr7gDnZATs4gZHKuIm7MB8GA1UdIwQY MBaAFNTk4BXsAdpq59hJFv0a1MqpBNxOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU9UZ0Zld0IybXJuMkVrV19SclV5cWtFM0U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9iZGQ4N2MtYTZkOS00YmMyLTlkODct MGE4MTJiYjE4ZjM1LzEvMU9UZ0Zld0IybXJuMkVrV19SclV5cWtFM0U0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9iZGQ4N2MtYTZkOS00YmMyLTlkODctMGE4MTJiYjE4ZjM1 LzEvMU9UZ0Zld0IybXJuMkVrV19SclV5cWtFM0U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa7xUQV71 sSmIEyHoPRRFOJX/oMW7YL1vnqJBKHdi+oy/T4DBoOFNu2wQOTmKHR5MxHhhHNTS gxoDrUx2jnm/roJTzpv6be8sObJ9dEY1kekVBdwZhFd1ms9CgLukwNoM1PAUOAaq 4tdcYKwYfP4E+/0Q26B18WYC+9oRWHFNa1FMEWxAaA+sZs6HQrpoA6W1h3zBOj4M Wdtf/wGpgdEa9gi3fzCmtzlqhuOxa+aK7xmhwVUO8qFCggQzSLVsgm8SmXvK0RxK 0GjuKf10zwm0jqQ069kStlJErmI1KgT0WhjNl9D7XtZEwPYPEIpMUqjunfct1twi EWniQmxwJavL1A== -----END CERTIFICATE-----Generated at Sun Dec 14 07:47:41 2025 by rpki-client