This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft File: OTipB3cqWf31n2L5rZC-UCFxlG4.mft (raw, json) Hash identifier: 4orR7b4Aq1a7oHzGJJrTdd2IM6vd0aBXOju3z1jSYOI= Subject key identifier: 6F:68:5E:9B:76:63:63:FB:53:D7:61:AA:B3:F0:FD:E0:80:16:79:FE Authority key identifier: 39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E Certificate issuer: /CN=3938a907772a59fdf59f62f9ad90be502171946e Certificate serial: 019B5976D81529C04BA04BCA5DA39D2B297E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft Manifest number: 0AEE Signing time: Fri 26 Dec 2025 07:01:59 +0000 Manifest this update: Fri 26 Dec 2025 07:01:59 +0000 Manifest next update: Sat 27 Dec 2025 07:01:59 +0000 Files and hashes: 1: OTipB3cqWf31n2L5rZC-UCFxlG4.crl (hash: +QA671XdC0iA3zDhVVgccw7/1lnGYVxBkKpBjDObXQs=) 2: R2rdc7iEL-QEpfpveQ8XLi794UY.roa (hash: NOUYuQT3ToD/1aYOE1fR2p8arsC0PmHYqq5MEGhXZLs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:d8:15:29:c0:4b:a0:4b:ca:5d:a3:9d:2b:29:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3938a907772a59fdf59f62f9ad90be502171946e Validity Not Before: Dec 26 07:01:59 2025 GMT Not After : Dec 27 07:01:59 2025 GMT Subject: CN=6f685e9b766363fb53d761aab3f0fde0801679fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:01:eb:3e:fd:53:57:2a:28:28:85:61:49:11: f9:88:2e:8a:b3:9d:4d:29:83:e3:a6:da:7c:6f:ac: c3:51:32:f7:88:87:13:fa:db:83:44:0a:1d:28:c6: 72:83:8e:8d:75:34:66:2c:15:1a:b2:4e:c2:6d:51: c2:58:e5:73:cc:db:b7:a6:0a:26:90:14:1c:4c:dd: 42:8b:88:f1:33:e6:3e:56:2a:a9:62:55:b4:45:1f: 36:e1:5b:ca:12:94:d7:b9:33:cf:0e:9c:42:1c:5a: ee:05:59:60:74:94:64:ba:e5:65:39:12:30:2c:60: 2e:ec:74:3c:df:d0:84:fe:55:f2:db:69:75:ad:fa: 32:75:bd:fc:0f:12:5c:b1:ac:56:5e:41:0b:82:6a: 1a:d7:7b:71:32:a0:49:4f:62:ad:e8:c4:1b:e0:c5: 58:9f:5b:a2:80:2a:8e:2c:ac:f0:ef:b1:9b:19:c5: cc:69:3b:70:a3:5d:be:23:ca:f6:85:57:72:3e:5e: 73:7f:37:18:d9:e5:39:ec:eb:3c:d1:63:53:95:ae: 94:f9:2d:44:5b:3a:ab:6c:52:98:31:99:1d:53:0a: 42:99:14:60:de:d6:d2:f0:b3:47:b6:d8:df:75:af: b5:f2:95:74:2d:31:97:5a:03:af:1f:0f:d7:13:66: 84:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:68:5E:9B:76:63:63:FB:53:D7:61:AA:B3:F0:FD:E0:80:16:79:FE X509v3 Authority Key Identifier: keyid:39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:4b:da:40:2c:0b:04:77:0e:b7:25:15:c1:a8:8e:65:b9:70: 08:e4:1b:c5:83:f6:34:86:12:ac:6c:c4:3a:24:f9:d8:71:95: 42:e2:ab:31:7d:4a:1a:ff:df:d5:fc:51:57:87:6b:b8:64:e0: 34:6d:dc:c3:c8:78:9a:9e:7d:c1:e4:80:77:42:7d:2d:56:8d: 52:59:fa:c6:c9:91:e7:aa:36:38:d0:c1:86:b8:a4:21:6f:40: 93:08:79:be:72:f2:ba:c5:88:ae:3d:33:d7:5f:0a:e6:c3:d1: d5:bf:90:fb:4a:ec:5e:b7:d4:07:fc:74:3b:e9:5d:37:0d:8f: 44:5a:00:48:59:bb:40:a8:ae:aa:bd:41:a4:57:01:35:0a:f7: 54:fc:9c:88:31:0b:b7:67:7e:62:57:9c:a3:b2:6b:93:bf:1e: 6d:12:44:13:c8:61:5e:0f:dc:3a:58:24:87:aa:f4:e9:d4:be: 38:f7:33:68:f7:2e:d6:75:04:3a:e8:d3:a4:88:45:ef:95:7f: bb:42:4d:e7:b1:0f:90:81:73:10:2c:e5:ee:f0:ef:65:ed:44: 36:e6:97:83:72:7f:55:74:d8:d6:5d:c9:a2:48:7f:0b:e4:a4: 2b:a9:d1:ec:45:3e:95:0d:20:e7:50:38:1b:55:74:ff:62:27: 45:ae:ce:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdtgVKcBLoEvKXaOdKyl+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MzhhOTA3NzcyYTU5ZmRmNTlmNjJmOWFkOTBiZTUwMjE3 MTk0NmUwHhcNMjUxMjI2MDcwMTU5WhcNMjUxMjI3MDcwMTU5WjAzMTEwLwYDVQQD Eyg2ZjY4NWU5Yjc2NjM2M2ZiNTNkNzYxYWFiM2YwZmRlMDgwMTY3OWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AHrPv1TVyooKIVhSRH5iC6Ks51N KYPjptp8b6zDUTL3iIcT+tuDRAodKMZyg46NdTRmLBUask7CbVHCWOVzzNu3pgom kBQcTN1Ci4jxM+Y+ViqpYlW0RR824VvKEpTXuTPPDpxCHFruBVlgdJRkuuVlORIw LGAu7HQ839CE/lXy22l1rfoydb38DxJcsaxWXkELgmoa13txMqBJT2Kt6MQb4MVY n1uigCqOLKzw77GbGcXMaTtwo12+I8r2hVdyPl5zfzcY2eU57Os80WNTla6U+S1E WzqrbFKYMZkdUwpCmRRg3tbS8LNHttjfda+18pV0LTGXWgOvHw/XE2aEmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG9oXpt2Y2P7U9dhqrPw/eCAFnn+MB8GA1UdIwQY MBaAFDk4qQd3Kln99Z9i+a2QvlAhcZRuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1RpcEIzY3FXZjMxbjJMNXJaQy1VQ0Z4bEc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi84MThlMTAtNDA5Yi00NTFhLTgyYjct ZTVjMWM2MmNmZTM3LzEvT1RpcEIzY3FXZjMxbjJMNXJaQy1VQ0Z4bEc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi84MThlMTAtNDA5Yi00NTFhLTgyYjctZTVjMWM2MmNmZTM3 LzEvT1RpcEIzY3FXZjMxbjJMNXJaQy1VQ0Z4bEc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf0vaQCwL BHcOtyUVwaiOZblwCOQbxYP2NIYSrGzEOiT52HGVQuKrMX1KGv/f1fxRV4druGTg NG3cw8h4mp59weSAd0J9LVaNUln6xsmR56o2ONDBhrikIW9Akwh5vnLyusWIrj0z 118K5sPR1b+Q+0rsXrfUB/x0O+ldNw2PRFoASFm7QKiuqr1BpFcBNQr3VPyciDEL t2d+Yleco7Jrk78ebRJEE8hhXg/cOlgkh6r06dS+OPczaPcu1nUEOujTpIhF75V/ u0JN57EPkIFzECzl7vDvZe1ENuaXg3J/VXTY1l3Jokh/C+SkK6nR7EU+lQ0g51A4 G1V0/2InRa7OUA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:21 2025 by rpki-client