This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft File: otlSJFuzTkDNq11LCQFDwNhYE5A.mft (raw, json) Hash identifier: aL7s8fXAwjo2xwlwU7T/Rmyds/SYWDvYafqoWKvfuyI= Subject key identifier: FE:DF:E4:59:9B:7E:64:2F:69:13:16:9D:A8:D1:75:8D:F7:BD:7D:B3 Authority key identifier: A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90 Certificate issuer: /CN=a2d952245bb34e40cdab5d4b090143c0d8581390 Certificate serial: 019AC97AD882CBF81F199A8FE2D717181CC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft Manifest number: 1750 Signing time: Fri 28 Nov 2025 08:01:02 +0000 Manifest this update: Fri 28 Nov 2025 08:01:02 +0000 Manifest next update: Sat 29 Nov 2025 08:01:02 +0000 Files and hashes: 1: 3HWzcOaTDrdG94i3xjE6Qq-tfnk.roa (hash: 10l24Yg/npX27cx+ImjzGfcJeOU0IJssFEQ4Du2ScJQ=) 2: 6NvbAT4RMJYDBf6360dj0cmbOC4.roa (hash: tpHQQELFe4AosbNjooax9dsLwDFzjHfeb9ASXozivq8=) 3: cn7xlpxUU_sjrheBrcxBDUwIFZM.roa (hash: rjBABCp1JK8gkLVNNwhPnYtWrojXtWHlNh1PMd//BKI=) 4: otlSJFuzTkDNq11LCQFDwNhYE5A.crl (hash: 46h/KlHmirnTLCnw19a2YcDwbh0U3VbVfy8J5MmiN3A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c9:7a:d8:82:cb:f8:1f:19:9a:8f:e2:d7:17:18:1c:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2d952245bb34e40cdab5d4b090143c0d8581390 Validity Not Before: Nov 28 08:01:02 2025 GMT Not After : Nov 29 08:01:02 2025 GMT Subject: CN=fedfe4599b7e642f6913169da8d1758df7bd7db3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1f:e4:4c:10:b5:d0:ab:cb:d1:25:67:7b:54: 76:3c:f0:58:d7:2d:0f:65:36:1f:fb:11:16:6e:21: f1:6c:30:de:a6:b9:76:ba:5f:08:35:83:39:1a:e8: b4:7d:ef:5c:d6:55:b2:69:38:7a:0b:8f:60:6a:6b: 7f:67:fa:ed:ab:4d:90:61:ae:2a:0d:88:bf:26:8e: 7f:76:37:05:6c:ac:d3:e2:ea:6b:f2:0f:6d:18:5d: 21:aa:17:22:b7:70:89:ed:e0:b4:d7:d4:05:1d:40: de:6a:07:f3:ea:c4:f4:b1:40:df:83:c2:7a:9f:cb: ee:66:d8:8b:e5:e4:23:87:a3:80:e4:55:69:29:99: 7f:2a:6f:40:de:f3:88:9a:92:5b:92:01:1e:49:38: c7:bf:f8:8c:e1:3d:12:ac:5f:07:c3:36:dc:15:a0: 4c:e0:74:9d:93:c6:67:aa:5b:85:a2:ed:92:5e:83: 67:87:ee:c8:b1:94:c4:a5:54:d2:e8:a7:0a:29:5b: 9a:c0:e7:ee:13:1b:29:bb:c6:04:62:01:d0:fd:cd: 98:9f:b6:89:84:2e:b2:b0:3d:7f:e2:b0:a1:1a:6b: 84:fb:d8:c0:5a:69:9c:a4:87:27:f2:85:46:f5:b7: dd:35:c2:83:a4:35:48:ba:3a:9f:d9:6c:a6:88:38: 22:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:DF:E4:59:9B:7E:64:2F:69:13:16:9D:A8:D1:75:8D:F7:BD:7D:B3 X509v3 Authority Key Identifier: keyid:A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:fa:77:5f:a3:6f:a4:88:d6:b7:96:a6:a3:41:72:6a:f3:cc: 53:ce:68:87:15:53:61:b3:87:d7:92:48:60:4c:f2:1c:d4:94: aa:a0:c1:e9:e5:35:2b:8d:f8:96:87:08:eb:94:cc:90:e1:15: fd:4f:76:f4:dc:e7:c4:fd:2b:69:62:e5:63:d8:11:a9:1d:c7: b6:85:c1:65:65:c1:a2:69:31:0f:fb:d9:80:95:8e:42:2c:85: 37:7f:a2:9c:32:1d:96:53:d7:5d:56:7e:77:42:d8:fd:8a:d0: 09:1a:2f:b0:2d:73:d1:be:28:8b:56:ef:2e:e7:16:c8:c8:1f: 8e:03:d9:1a:6d:27:1f:ef:c1:f0:1a:c4:fb:4d:25:ca:24:cc: 82:7f:5e:9d:9b:91:b5:2f:b8:5f:ae:18:47:18:b7:63:ca:4c: b5:30:91:64:79:5e:71:2b:23:45:13:26:a0:cc:73:67:49:0b: 00:3a:e2:e7:13:e6:35:0c:ff:22:f2:15:8a:75:70:48:80:b3: 9d:3f:23:f8:d5:75:1a:74:03:8e:8e:7c:f4:08:7d:8d:8d:b5: e6:25:9e:04:2f:a7:3d:b2:a0:75:03:8d:21:38:3d:01:39:d7: 39:45:02:14:a5:9b:16:20:9b:6b:f7:70:45:54:6b:86:bf:47: ac:47:92:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrJetiCy/gfGZqP4tcXGBzDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZDk1MjI0NWJiMzRlNDBjZGFiNWQ0YjA5MDE0M2MwZDg1 ODEzOTAwHhcNMjUxMTI4MDgwMTAyWhcNMjUxMTI5MDgwMTAyWjAzMTEwLwYDVQQD EyhmZWRmZTQ1OTliN2U2NDJmNjkxMzE2OWRhOGQxNzU4ZGY3YmQ3ZGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjR/kTBC10KvL0SVne1R2PPBY1y0P ZTYf+xEWbiHxbDDeprl2ul8INYM5Gui0fe9c1lWyaTh6C49gamt/Z/rtq02QYa4q DYi/Jo5/djcFbKzT4upr8g9tGF0hqhcit3CJ7eC019QFHUDeagfz6sT0sUDfg8J6 n8vuZtiL5eQjh6OA5FVpKZl/Km9A3vOImpJbkgEeSTjHv/iM4T0SrF8HwzbcFaBM 4HSdk8ZnqluFou2SXoNnh+7IsZTEpVTS6KcKKVuawOfuExspu8YEYgHQ/c2Yn7aJ hC6ysD1/4rChGmuE+9jAWmmcpIcn8oVG9bfdNcKDpDVIujqf2WymiDgi9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP7f5FmbfmQvaRMWnajRdY33vX2zMB8GA1UdIwQY MBaAFKLZUiRbs05AzatdSwkBQ8DYWBOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3RsU0pGdXpUa0ROcTExTENRRkR3TmhZRTVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC80YjFhODAtNGU1Zi00OWU3LWI1MDIt YTIyZmZlZTRhNTE1LzEvb3RsU0pGdXpUa0ROcTExTENRRkR3TmhZRTVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC80YjFhODAtNGU1Zi00OWU3LWI1MDItYTIyZmZlZTRhNTE1 LzEvb3RsU0pGdXpUa0ROcTExTENRRkR3TmhZRTVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWvp3X6Nv pIjWt5amo0FyavPMU85ohxVTYbOH15JIYEzyHNSUqqDB6eU1K434locI65TMkOEV /U929NznxP0raWLlY9gRqR3HtoXBZWXBomkxD/vZgJWOQiyFN3+inDIdllPXXVZ+ d0LY/YrQCRovsC1z0b4oi1bvLucWyMgfjgPZGm0nH+/B8BrE+00lyiTMgn9enZuR tS+4X64YRxi3Y8pMtTCRZHlecSsjRRMmoMxzZ0kLADri5xPmNQz/IvIVinVwSICz nT8j+NV1GnQDjo589Ah9jY215iWeBC+nPbKgdQONITg9ATnXOUUCFKWbFiCba/dw RVRrhr9HrEeSsw== -----END CERTIFICATE-----Generated at Fri Nov 28 14:42:28 2025 by rpki-client