This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft File: Otc0z5DHc0KIBrloIJUVuRSDGp0.mft (raw, json) Hash identifier: PIeW7Sr5fCQ58axM6LBy9ZUAsAEAa/Snz3cgNXFyKnY= Subject key identifier: 19:D4:48:C4:78:C3:DE:1E:5B:67:A6:89:1F:82:93:C2:DB:90:7C:82 Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d Certificate serial: 019B13B8B94F4D48D26D6CA6C12B40FBEAD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft Manifest number: 1790 Signing time: Fri 12 Dec 2025 18:00:31 +0000 Manifest this update: Fri 12 Dec 2025 18:00:31 +0000 Manifest next update: Sat 13 Dec 2025 18:00:31 +0000 Files and hashes: 1: 2NYdjjFKUwwAHXr7ubSJv8Kzg8g.roa (hash: kjplcNAq1JXoQgnY61zJpj1+5jIDXxWAT5fT5oin7qk=) 2: AF-KFPYoLrR_wnL0SE_zW6WshRE.roa (hash: z49PjeXPIBQhRQUNgU9fm0U8o2Eum7mravj6VvfHLII=) 3: Otc0z5DHc0KIBrloIJUVuRSDGp0.crl (hash: ELq8tHgcLjE8KJZwUzVsH1D9mvTi651Txs4NPU1zRcw=) 4: VIvJR-ELjPDDNwtDAs7jPXPRVS8.roa (hash: xlYWOAlcQ9qUm1X3p6cNrDPlijzSwOQVXOe0gD7Wm78=) 5: WCC9rTSbJ_Cq0gmrQEQG46tRbpQ.roa (hash: VkHV+4ebPs26e57T+NHLP6p9bqcsmEKUplaKOzXFS/4=) 6: apLqK898oR7RE-dAFEvdyErBOzE.roa (hash: 7wPWjmBIQU48S3GSQT90DN//sDuxGXlKRA7f0n/Hjc8=) 7: beYTq1ZSU6CkOYAx7ryqD6bd3cM.roa (hash: x3+IsuLxOdLQwSExJVIL+EzcT73OO7RISZtN+IgQDrQ=) 8: d3jC5FrVCU6deYGz56A8xH8Tz24.roa (hash: EEf3EKHXGl/MGjvhaDBjNExCSWB1bA3J+U/K+9OLzcQ=) 9: eFAtBNJzls8AgaaXT8fjcCX17mA.roa (hash: GPQ9iMR4UR3PGXp7FlfdeNJSrFumQ8WzN02VnHoIJ84=) 10: fmuUqwHIE4LJQQIBDK_3JI3axjw.roa (hash: jgYvNn+KWNnN7BXATe+H2BiIlAYgwP4SHTyKXfV03HU=) 11: m8epfX6ALey9mozyTLJ0ovC6F2E.roa (hash: nEswDzlmuc7WOVjzf1OqhYzhCng69m/AkqBFVEn5Jd8=) 12: uQXqHDwD39ncADiPwLCFwCaOFoE.roa (hash: 6dohaywgNPrlc422aBBS3H3acbsvFO8x4A1z0WMis3g=) 13: vpHvJjjgw4O3Rz8r2ZFr25OMuek.roa (hash: DjXvcuXor+t9vZEtEo50/bWiWyQCM6LNcDnznEPg0tw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 16:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:b8:b9:4f:4d:48:d2:6d:6c:a6:c1:2b:40:fb:ea:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad734cf90c773428806b968209515b914831a9d Validity Not Before: Dec 12 18:00:31 2025 GMT Not After : Dec 13 18:00:31 2025 GMT Subject: CN=19d448c478c3de1e5b67a6891f8293c2db907c82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:f7:ed:0c:21:bd:67:72:01:c4:a1:f6:68:c9: 5e:2d:d0:f2:7a:20:3e:e5:e1:6f:94:9e:0d:2e:8e: 4e:6b:7b:c3:15:f9:a9:f7:4f:03:2b:d1:d3:fb:31: a7:03:99:62:42:49:01:23:64:c1:39:c2:d5:dc:52: 41:93:25:ed:74:4e:2c:58:fb:6c:b0:cc:90:f4:c0: 89:f1:74:4b:18:13:8f:3e:3c:d8:51:4e:a3:6d:c0: c3:81:7e:74:c2:a4:bb:35:7b:12:15:41:6d:c1:d6: 61:95:55:4f:2f:bd:7a:0e:46:d4:d5:55:63:61:07: ba:af:e8:94:7c:9b:c2:06:2f:11:29:72:83:a0:6f: 18:e9:ec:39:d0:67:94:df:40:90:f7:bf:7b:13:b4: 3c:cb:82:d0:76:af:b0:7b:e6:17:cc:64:ae:70:3f: 8c:b2:a5:5d:76:73:b5:ad:43:f5:1c:28:90:0a:0d: e1:9e:ca:3b:ec:a6:4c:a3:45:96:7c:cd:73:12:38: 77:3c:82:15:4c:55:54:4a:0e:e5:0e:35:e4:ab:d0: 06:e3:fe:d2:17:10:27:88:ae:31:16:33:2d:99:d0: 0b:01:3e:31:58:09:20:d7:0f:b4:e5:a2:ef:ef:73: d7:f1:c2:b3:2e:56:db:2c:9e:fe:6e:c7:8e:6f:aa: 3b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D4:48:C4:78:C3:DE:1E:5B:67:A6:89:1F:82:93:C2:DB:90:7C:82 X509v3 Authority Key Identifier: keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:26:65:9e:4c:27:1b:d2:2a:45:63:15:ba:2b:d3:ec:42:16: 6e:6f:d7:c1:41:0c:21:17:8d:34:1b:3d:c3:8f:d3:ca:46:16: 50:46:db:37:17:e5:4c:a9:63:bc:8a:af:69:05:b0:1f:41:b3: 1f:f4:71:a0:21:33:06:ba:92:3e:7d:cb:15:ff:8b:e2:7e:36: 4d:3e:eb:78:4e:dc:76:b6:8c:4d:84:a5:cb:a3:09:39:7a:23: 66:e6:77:0c:be:73:34:e3:1b:3d:87:13:36:4c:47:87:12:6a: fd:cb:f2:fa:8e:c8:06:9b:ca:27:d3:79:a9:f2:e4:b1:5e:0c: 00:26:94:d0:2e:be:44:ef:5b:1e:e0:36:60:c0:1f:2d:54:cf: 46:08:74:c2:c5:77:bd:cb:29:90:15:36:f0:a7:bb:fa:e1:16: 8d:8b:15:10:8e:89:7d:f7:73:26:6b:db:1b:f1:1e:99:bb:2b: 20:ee:ef:29:de:d3:2a:52:53:76:a7:2b:dd:cf:4c:0b:dc:b9: 25:76:e2:65:ba:f2:00:f5:86:14:7a:94:f9:12:b2:32:98:ce: e7:41:11:77:75:e5:2a:24:5b:e4:0e:5b:58:e1:07:bf:0e:f7: 61:99:f5:f1:6f:03:d0:00:50:29:41:71:10:49:52:0d:66:6d: 55:60:ba:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsTuLlPTUjSbWymwStA++rQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDczNGNmOTBjNzczNDI4ODA2Yjk2ODIwOTUxNWI5MTQ4 MzFhOWQwHhcNMjUxMjEyMTgwMDMxWhcNMjUxMjEzMTgwMDMxWjAzMTEwLwYDVQQD EygxOWQ0NDhjNDc4YzNkZTFlNWI2N2E2ODkxZjgyOTNjMmRiOTA3YzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8PftDCG9Z3IBxKH2aMleLdDyeiA+ 5eFvlJ4NLo5Oa3vDFfmp908DK9HT+zGnA5liQkkBI2TBOcLV3FJBkyXtdE4sWPts sMyQ9MCJ8XRLGBOPPjzYUU6jbcDDgX50wqS7NXsSFUFtwdZhlVVPL716DkbU1VVj YQe6r+iUfJvCBi8RKXKDoG8Y6ew50GeU30CQ9797E7Q8y4LQdq+we+YXzGSucD+M sqVddnO1rUP1HCiQCg3hnso77KZMo0WWfM1zEjh3PIIVTFVUSg7lDjXkq9AG4/7S FxAniK4xFjMtmdALAT4xWAkg1w+05aLv73PX8cKzLlbbLJ7+bseOb6o7gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBnUSMR4w94eW2emiR+Ck8LbkHyCMB8GA1UdIwQY MBaAFDrXNM+Qx3NCiAa5aCCVFbkUgxqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMt NzZhMWQ0ZDgzMTk3LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMtNzZhMWQ0ZDgzMTk3 LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArCZlnkwn G9IqRWMVuivT7EIWbm/XwUEMIReNNBs9w4/TykYWUEbbNxflTKljvIqvaQWwH0Gz H/RxoCEzBrqSPn3LFf+L4n42TT7reE7cdraMTYSly6MJOXojZuZ3DL5zNOMbPYcT NkxHhxJq/cvy+o7IBpvKJ9N5qfLksV4MACaU0C6+RO9bHuA2YMAfLVTPRgh0wsV3 vcspkBU28Ke7+uEWjYsVEI6JffdzJmvbG/EembsrIO7vKd7TKlJTdqcr3c9MC9y5 JXbiZbryAPWGFHqU+RKyMpjO50ERd3XlKiRb5A5bWOEHvw73YZn18W8D0ABQKUFx EElSDWZtVWC6eA== -----END CERTIFICATE-----Generated at Sat Dec 13 00:30:34 2025 by rpki-client