This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft File: Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft (raw, json) Hash identifier: dhRFWRMR9A4ftLiULK37lGvV819pEg7yMA+vtiBkQw4= Subject key identifier: BF:50:BE:DF:54:38:98:5A:01:06:11:AC:31:ED:8C:14:F0:81:DE:E1 Authority key identifier: 3A:DE:A4:B7:AF:8C:CE:5C:FD:37:75:CB:01:FB:97:C4:F9:51:A9:A2 Certificate issuer: /CN=3adea4b7af8cce5cfd3775cb01fb97c4f951a9a2 Certificate serial: 019B10818C120C8997A995623DE82F05D622 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft Manifest number: 030D Signing time: Fri 12 Dec 2025 03:01:23 +0000 Manifest this update: Fri 12 Dec 2025 03:01:23 +0000 Manifest next update: Sat 13 Dec 2025 03:01:23 +0000 Files and hashes: 1: NR0WsT059Uu9ocKkEY9pXlrin1E.roa (hash: VV0hNdxr41R7/bkmPoA35nvmhlKGJglGwfeyHr+U+LY=) 2: Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl (hash: Dp7Iim/SMo5tP3sHgy2/9WCYXUuh9OMdGaLLMtxhmCw=) 3: SEh_0GqoSaiRBqWseUujp9ajyxU.roa (hash: 4qBD/oh8RDMtbEgS97ZhV1TCABNjw7BvgNSejlDS+ZM=) 4: g6a9uq2KRc9wYONVhtFPPZGaBr4.roa (hash: Jcii24w5hELShXLMXhNP2/DuSUjwnJEfN84e/8CYORI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 03:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:8c:12:0c:89:97:a9:95:62:3d:e8:2f:05:d6:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3adea4b7af8cce5cfd3775cb01fb97c4f951a9a2 Validity Not Before: Dec 12 03:01:23 2025 GMT Not After : Dec 13 03:01:23 2025 GMT Subject: CN=bf50bedf5438985a010611ac31ed8c14f081dee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b6:95:31:0c:fd:34:86:38:67:f7:b5:11:d2: a8:02:c8:86:93:07:9f:d2:4e:1f:35:84:e2:f6:c3: 91:5b:12:ad:a6:96:5c:d5:85:e6:fd:f2:a0:17:77: 66:fa:40:9e:5c:72:fc:0f:97:e2:c7:9e:6c:7a:88: 6f:a2:5d:75:ca:e6:3e:df:f8:00:15:d6:99:e6:11: 14:22:8b:ee:30:c8:c6:cd:53:b6:d1:25:52:a6:ec: be:ec:f5:09:09:66:63:ea:09:8c:3d:07:09:54:53: 77:a6:61:9e:d4:37:bf:30:00:99:b8:d2:de:3f:76: 82:1f:09:eb:c7:ac:2c:bc:98:e9:de:a5:ff:b6:95: 69:bb:1a:9d:00:f9:ba:35:3a:97:6c:f9:60:3e:32: 23:dd:ff:62:ff:c3:3c:2f:17:13:8e:0c:24:c0:2f: 58:1b:58:97:04:50:fb:11:b2:68:59:0e:4a:c6:5a: e9:20:c5:90:0b:96:b8:6a:a8:8f:33:26:09:b1:95: 7b:1c:71:9f:60:41:67:8e:98:a6:bf:b1:09:e1:35: 35:db:eb:05:89:bf:08:87:5c:31:42:e7:06:b2:78: c8:66:aa:36:7d:a6:b2:d9:dd:88:99:3e:a6:06:a2: cf:45:b4:6c:b6:32:4c:66:6b:76:00:50:3d:2f:82: 8e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:50:BE:DF:54:38:98:5A:01:06:11:AC:31:ED:8C:14:F0:81:DE:E1 X509v3 Authority Key Identifier: keyid:3A:DE:A4:B7:AF:8C:CE:5C:FD:37:75:CB:01:FB:97:C4:F9:51:A9:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:cd:1f:b2:cb:0c:5e:96:79:ba:1a:d5:fb:76:9d:8b:4b:12: dd:e8:c0:85:57:57:f3:7f:1a:16:ca:b5:a7:59:5a:c8:bc:0a: a9:26:f0:82:70:6b:7b:a3:5c:96:34:fa:22:97:95:b1:8a:06: c2:ec:47:cd:8f:0c:37:2c:14:42:4b:55:d1:51:ad:45:66:93: 36:e4:0f:9b:79:ee:58:7a:f8:a4:c9:eb:09:05:e8:0b:07:7f: de:4b:3a:00:9d:4f:78:f6:6c:f0:54:79:c0:37:35:f3:19:dd: 77:67:aa:76:8d:7a:d2:99:9a:cc:3c:3d:18:ca:b8:c5:05:0a: 8f:10:3c:48:11:10:0e:3e:66:39:3a:4b:ff:d5:d6:40:7d:fa: 59:d0:eb:04:63:b2:66:67:03:a7:fe:70:62:9d:88:ae:0a:c4: d0:8b:72:8b:6f:f9:a1:e3:6b:84:a9:5d:9e:c6:a4:e0:81:5f: 9b:c4:6b:ca:d7:12:29:41:dc:c8:b4:dc:55:be:71:b7:8a:07: ec:93:10:4c:d1:00:97:a1:73:6f:bf:c2:cd:1b:ca:a4:73:d4: 7d:8b:d7:60:ee:b3:db:5b:5e:4c:9f:cf:49:0b:f1:4f:44:3d: 41:a4:cf:a9:a7:fd:95:9b:2a:37:33:f1:7f:fd:db:e0:2b:42: d4:0d:c3:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgYwSDImXqZViPegvBdYiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZGVhNGI3YWY4Y2NlNWNmZDM3NzVjYjAxZmI5N2M0Zjk1 MWE5YTIwHhcNMjUxMjEyMDMwMTIzWhcNMjUxMjEzMDMwMTIzWjAzMTEwLwYDVQQD EyhiZjUwYmVkZjU0Mzg5ODVhMDEwNjExYWMzMWVkOGMxNGYwODFkZWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLaVMQz9NIY4Z/e1EdKoAsiGkwef 0k4fNYTi9sORWxKtppZc1YXm/fKgF3dm+kCeXHL8D5fix55seohvol11yuY+3/gA FdaZ5hEUIovuMMjGzVO20SVSpuy+7PUJCWZj6gmMPQcJVFN3pmGe1De/MACZuNLe P3aCHwnrx6wsvJjp3qX/tpVpuxqdAPm6NTqXbPlgPjIj3f9i/8M8LxcTjgwkwC9Y G1iXBFD7EbJoWQ5KxlrpIMWQC5a4aqiPMyYJsZV7HHGfYEFnjpimv7EJ4TU12+sF ib8Ih1wxQucGsnjIZqo2faay2d2ImT6mBqLPRbRstjJMZmt2AFA9L4KOXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL9Qvt9UOJhaAQYRrDHtjBTwgd7hMB8GA1UdIwQY MBaAFDrepLevjM5c/Td1ywH7l8T5UamiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3Q2a3Q2LU16bHo5TjNYTEFmdVh4UGxScWFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8xMjMxMjQtZWY2Ni00OGQxLTkxZDAt ZjBkMTE5YzUyN2ZmLzEvT3Q2a3Q2LU16bHo5TjNYTEFmdVh4UGxScWFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8xMjMxMjQtZWY2Ni00OGQxLTkxZDAtZjBkMTE5YzUyN2Zm LzEvT3Q2a3Q2LU16bHo5TjNYTEFmdVh4UGxScWFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO80fsssM XpZ5uhrV+3adi0sS3ejAhVdX838aFsq1p1layLwKqSbwgnBre6NcljT6IpeVsYoG wuxHzY8MNywUQktV0VGtRWaTNuQPm3nuWHr4pMnrCQXoCwd/3ks6AJ1PePZs8FR5 wDc18xndd2eqdo160pmazDw9GMq4xQUKjxA8SBEQDj5mOTpL/9XWQH36WdDrBGOy ZmcDp/5wYp2IrgrE0Ityi2/5oeNrhKldnsak4IFfm8RrytcSKUHcyLTcVb5xt4oH 7JMQTNEAl6Fzb7/CzRvKpHPUfYvXYO6z21teTJ/PSQvxT0Q9QaTPqaf9lZsqNzPx f/3b4CtC1A3DwA== -----END CERTIFICATE-----Generated at Fri Dec 12 09:27:56 2025 by rpki-client