This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft File: OtL3zCdTMJgzAxuolGSagM_7E-g.mft (raw, json) Hash identifier: cJTgoeSDFFaTTnMfZ4skApkBov9ZHFurFIqRkPI9P9k= Subject key identifier: 1F:B7:F2:8D:90:5E:38:DE:BF:80:D8:5A:3A:E2:55:06:44:CA:0D:A1 Authority key identifier: 3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8 Certificate issuer: /CN=3ad2f7cc2753309833031ba894649a80cffb13e8 Certificate serial: 019B1CF330658E6828449FCE28065F43B155 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft Manifest number: 1777 Signing time: Sun 14 Dec 2025 13:00:58 +0000 Manifest this update: Sun 14 Dec 2025 13:00:58 +0000 Manifest next update: Mon 15 Dec 2025 13:00:58 +0000 Files and hashes: 1: OtL3zCdTMJgzAxuolGSagM_7E-g.crl (hash: Om47QvG0FRF2+8WxgaW7LMecyZ0S7/6pjFyC3loeSlg=) 2: u1VOczY0GtYqmMxkx1bvtbbyBno.roa (hash: ZYoGR8269MdLBwkunDrMw1B9ylh+XJUv3tEqHGtF+N8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 13:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:f3:30:65:8e:68:28:44:9f:ce:28:06:5f:43:b1:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad2f7cc2753309833031ba894649a80cffb13e8 Validity Not Before: Dec 14 13:00:58 2025 GMT Not After : Dec 15 13:00:58 2025 GMT Subject: CN=1fb7f28d905e38debf80d85a3ae2550644ca0da1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:44:5a:b4:05:ae:4a:c6:64:24:ca:0e:ad:b5: 4c:c6:58:59:1e:ce:3b:e8:d2:ab:14:27:67:d6:a0: 31:ec:b3:26:1f:de:91:3f:bd:ae:2c:7e:0e:5c:f1: 4a:ae:90:dd:80:58:06:23:0a:f0:30:2a:6a:a8:68: aa:60:14:b9:1f:86:89:7e:cf:eb:8e:9c:da:b7:ff: db:90:79:f8:77:b3:ed:69:6f:d4:3c:54:72:97:8c: 59:be:59:fe:c6:6d:0a:fb:f7:5c:64:ad:c9:40:69: 1f:a4:7d:93:a7:26:a9:9d:50:0c:ff:9e:c8:dc:53: 8d:74:2e:1f:52:aa:4a:68:27:30:a9:c7:ac:c4:b3: fe:4b:88:dc:bf:69:68:ca:ef:4a:a7:d9:fa:4d:58: f2:2a:36:23:30:76:d2:a7:4b:a3:84:09:19:96:39: 40:2f:79:cc:13:73:12:8c:8c:11:aa:bb:17:36:42: 60:6f:0e:fb:61:29:cd:53:89:c1:9e:52:d1:4c:60: e2:c9:9b:75:03:42:cf:04:9e:72:93:72:6a:2d:29: 55:4a:33:5f:5f:ac:38:2a:09:db:2b:9c:fa:68:1f: 12:80:ac:05:58:0e:5b:bf:3a:ef:3c:39:c1:dc:64: 5b:2a:ec:45:a7:ff:e5:31:7c:3b:ee:09:48:0e:b9: 97:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B7:F2:8D:90:5E:38:DE:BF:80:D8:5A:3A:E2:55:06:44:CA:0D:A1 X509v3 Authority Key Identifier: keyid:3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:94:de:d7:a2:cc:39:38:19:77:d8:7d:43:9f:1a:d8:1d:89: 26:16:2d:a7:61:a9:21:bb:46:e0:36:b0:bb:c7:3b:59:5d:1e: 71:18:1c:16:a1:88:a3:e9:f9:5e:aa:0b:2e:6a:87:37:05:5a: 11:5a:e7:70:1d:e1:8a:29:02:ef:4a:7a:3b:1a:06:79:75:68: 45:d0:10:00:1e:c6:35:62:57:81:c2:f5:2a:1d:e1:8d:98:e5: 1f:49:13:51:ee:c2:5c:5d:0b:44:68:8e:a5:3d:d2:8e:c3:00: 24:c0:76:1b:b6:92:85:19:28:38:30:00:56:5c:8d:3b:02:f3: 2a:68:4f:5f:2c:d3:f5:1a:45:bb:29:ab:00:5c:08:d2:bf:e5: d6:f9:e1:47:54:bf:c4:77:05:01:c4:96:20:88:74:37:57:f7: ef:a1:7a:0e:05:f1:e7:90:15:94:bb:88:59:b4:f8:96:43:30: 92:3a:af:d4:25:e9:4e:89:0c:5e:8b:d7:c6:95:aa:1d:66:bf: f2:aa:0b:f7:5c:48:f6:a3:e5:b3:74:0e:e0:8c:91:7c:9e:48: b0:3a:f8:d0:43:ac:8b:68:0b:f7:89:4d:c9:e9:3e:b8:92:44: 00:37:94:89:7b:2e:e6:59:9b:2f:eb:c7:49:51:02:f3:7d:da: 0d:8a:6a:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsc8zBljmgoRJ/OKAZfQ7FVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDJmN2NjMjc1MzMwOTgzMzAzMWJhODk0NjQ5YTgwY2Zm YjEzZTgwHhcNMjUxMjE0MTMwMDU4WhcNMjUxMjE1MTMwMDU4WjAzMTEwLwYDVQQD EygxZmI3ZjI4ZDkwNWUzOGRlYmY4MGQ4NWEzYWUyNTUwNjQ0Y2EwZGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ERatAWuSsZkJMoOrbVMxlhZHs47 6NKrFCdn1qAx7LMmH96RP72uLH4OXPFKrpDdgFgGIwrwMCpqqGiqYBS5H4aJfs/r jpzat//bkHn4d7PtaW/UPFRyl4xZvln+xm0K+/dcZK3JQGkfpH2TpyapnVAM/57I 3FONdC4fUqpKaCcwqcesxLP+S4jcv2loyu9Kp9n6TVjyKjYjMHbSp0ujhAkZljlA L3nME3MSjIwRqrsXNkJgbw77YSnNU4nBnlLRTGDiyZt1A0LPBJ5yk3JqLSlVSjNf X6w4KgnbK5z6aB8SgKwFWA5bvzrvPDnB3GRbKuxFp//lMXw77glIDrmXswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+38o2QXjjev4DYWjriVQZEyg2hMB8GA1UdIwQY MBaAFDrS98wnUzCYMwMbqJRkmoDP+xPoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RMM3pDZFRNSmd6QXh1b2xHU2FnTV83RS1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82ZWJjMWMtNDJhYi00NTU5LTg0YjEt ZjZhZDkzMzBjNGIwLzEvT3RMM3pDZFRNSmd6QXh1b2xHU2FnTV83RS1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS82ZWJjMWMtNDJhYi00NTU5LTg0YjEtZjZhZDkzMzBjNGIw LzEvT3RMM3pDZFRNSmd6QXh1b2xHU2FnTV83RS1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAapTe16LM OTgZd9h9Q58a2B2JJhYtp2GpIbtG4Dawu8c7WV0ecRgcFqGIo+n5XqoLLmqHNwVa EVrncB3hiikC70p6OxoGeXVoRdAQAB7GNWJXgcL1Kh3hjZjlH0kTUe7CXF0LRGiO pT3SjsMAJMB2G7aShRkoODAAVlyNOwLzKmhPXyzT9RpFuymrAFwI0r/l1vnhR1S/ xHcFAcSWIIh0N1f376F6DgXx55AVlLuIWbT4lkMwkjqv1CXpTokMXovXxpWqHWa/ 8qoL91xI9qPls3QO4IyRfJ5IsDr40EOsi2gL94lNyek+uJJEADeUiXsu5lmbL+vH SVEC833aDYpqdQ== -----END CERTIFICATE-----Generated at Sun Dec 14 22:54:03 2025 by rpki-client