This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft File: OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft (raw, json) Hash identifier: ZbJndoG7Zm/42EjN2/QA8nxqyq6P/AFugOlmlN6J1LM= Subject key identifier: EC:C0:23:70:BB:00:F2:A4:4C:47:EA:B4:7B:E3:75:70:07:83:A5:DE Authority key identifier: 3A:D5:D7:C7:BE:91:26:50:D7:14:23:CD:3C:25:16:DA:94:09:ED:B6 Certificate issuer: /CN=3ad5d7c7be912650d71423cd3c2516da9409edb6 Certificate serial: 019B40FFFD0BBC56CABD190DD3FD0E57FE8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft Manifest number: 05CC Signing time: Sun 21 Dec 2025 13:01:16 +0000 Manifest this update: Sun 21 Dec 2025 13:01:16 +0000 Manifest next update: Mon 22 Dec 2025 13:01:16 +0000 Files and hashes: 1: 1r8kB5Z6z_RNw4FuCZ-nelK6Npw.roa (hash: n6aAyuQfPwHavwhm028DG/DEDv2en3wM9tRCOWmzyME=) 2: OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl (hash: HhfG2brWnu7m7zEqKP6rbXYKlpXWUICoH8MI2DhGvUo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:fd:0b:bc:56:ca:bd:19:0d:d3:fd:0e:57:fe:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad5d7c7be912650d71423cd3c2516da9409edb6 Validity Not Before: Dec 21 13:01:16 2025 GMT Not After : Dec 22 13:01:16 2025 GMT Subject: CN=ecc02370bb00f2a44c47eab47be375700783a5de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1d:15:e0:c4:67:0c:c5:42:60:17:a4:24:16: 2f:20:41:82:db:5e:cd:05:f9:e8:42:8d:ac:86:0f: 2c:ba:1d:07:dc:ff:55:aa:15:50:ee:92:f1:86:fe: 55:c2:af:54:45:94:9d:64:f6:70:57:77:27:e8:e6: e0:1b:a0:82:72:43:3b:57:3c:79:ee:5b:cf:53:32: 1d:51:14:d7:03:80:c3:ab:ab:b5:94:1b:38:01:6e: 38:b5:6f:34:b0:b9:4b:22:3c:9c:8e:10:f9:9e:08: 71:44:56:13:fa:1c:3d:d0:71:fe:af:e9:a4:a2:47: 2e:b1:ca:fc:05:fc:be:25:76:44:70:4f:fd:5c:b8: 12:51:40:45:49:67:34:c1:95:a0:7d:65:b4:8e:d2: f1:45:9e:03:96:b9:95:66:c1:d7:24:44:3c:d1:74: 49:c0:f6:6e:82:8e:d7:b3:ba:84:29:0b:6a:a9:26: 2e:bf:c1:6d:da:55:16:1e:d6:ac:77:0f:d7:66:f2: 69:54:a0:e7:84:32:76:02:a6:4c:fb:34:61:fd:49: f9:d1:61:b1:74:83:b7:da:56:80:7e:2f:c3:aa:58: ac:0c:d4:ba:00:6d:85:03:5b:07:77:65:77:f6:15: 5b:95:74:a6:0e:e6:83:1a:13:0e:46:0b:1d:71:a8: 64:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C0:23:70:BB:00:F2:A4:4C:47:EA:B4:7B:E3:75:70:07:83:A5:DE X509v3 Authority Key Identifier: keyid:3A:D5:D7:C7:BE:91:26:50:D7:14:23:CD:3C:25:16:DA:94:09:ED:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c0:50:da:da:59:71:cb:93:e3:5f:c8:03:d3:c1:94:db:10: 4b:10:db:cd:a4:55:f9:fb:0f:67:ec:67:42:9a:a9:ab:d3:c2: df:96:94:0f:2c:0e:01:7f:4b:45:1c:c2:6e:bd:a2:2b:0e:55: 83:20:f4:58:16:ab:d4:af:41:1f:0d:a4:f7:14:ec:38:74:45: c2:90:0c:b9:ee:ba:e8:28:bb:67:81:2f:03:54:f1:58:57:51: 01:6b:24:33:ea:fd:73:a7:3d:cb:ec:10:fc:b8:c5:18:2d:c9: fb:10:b9:01:50:8d:56:f9:0a:85:cb:82:36:13:c0:d3:98:be: 53:cb:70:89:a2:6e:27:d7:af:26:06:4e:06:81:bd:20:f5:e7: ab:22:d8:83:bc:34:6c:87:70:7f:ec:9a:ea:30:96:5f:8f:6e: e1:f2:b3:37:27:e1:fd:f5:5a:cc:e1:16:42:01:90:a7:f9:d1: 37:aa:c0:7b:59:92:16:7c:a6:23:84:da:a5:69:aa:d1:5b:3c: 09:d5:04:24:cd:d9:cb:fc:e5:8d:5c:25:7f:9e:56:8c:87:72: 47:fa:1e:c1:92:2d:49:fb:f6:bd:a2:1c:0a:a9:e7:30:7f:40: 01:a7:a6:da:be:99:92:a0:b1:71:e2:2f:42:55:e4:ee:6a:ef: 97:23:20:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA//0LvFbKvRkN0/0OV/6NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDVkN2M3YmU5MTI2NTBkNzE0MjNjZDNjMjUxNmRhOTQw OWVkYjYwHhcNMjUxMjIxMTMwMTE2WhcNMjUxMjIyMTMwMTE2WjAzMTEwLwYDVQQD EyhlY2MwMjM3MGJiMDBmMmE0NGM0N2VhYjQ3YmUzNzU3MDA3ODNhNWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlR0V4MRnDMVCYBekJBYvIEGC217N BfnoQo2shg8suh0H3P9VqhVQ7pLxhv5Vwq9URZSdZPZwV3cn6ObgG6CCckM7Vzx5 7lvPUzIdURTXA4DDq6u1lBs4AW44tW80sLlLIjycjhD5nghxRFYT+hw90HH+r+mk okcuscr8Bfy+JXZEcE/9XLgSUUBFSWc0wZWgfWW0jtLxRZ4DlrmVZsHXJEQ80XRJ wPZugo7Xs7qEKQtqqSYuv8Ft2lUWHtasdw/XZvJpVKDnhDJ2AqZM+zRh/Un50WGx dIO32laAfi/DqlisDNS6AG2FA1sHd2V39hVblXSmDuaDGhMORgsdcahkhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOzAI3C7APKkTEfqtHvjdXAHg6XeMB8GA1UdIwQY MBaAFDrV18e+kSZQ1xQjzTwlFtqUCe22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RYWHg3NlJKbERYRkNQTlBDVVcycFFKN2JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9lNjg0ZjYtMjRlZi00MDk5LWJmOTYt MWM2M2RhY2FiZGU5LzEvT3RYWHg3NlJKbERYRkNQTlBDVVcycFFKN2JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9lNjg0ZjYtMjRlZi00MDk5LWJmOTYtMWM2M2RhY2FiZGU5 LzEvT3RYWHg3NlJKbERYRkNQTlBDVVcycFFKN2JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASsBQ2tpZ ccuT41/IA9PBlNsQSxDbzaRV+fsPZ+xnQpqpq9PC35aUDywOAX9LRRzCbr2iKw5V gyD0WBar1K9BHw2k9xTsOHRFwpAMue666Ci7Z4EvA1TxWFdRAWskM+r9c6c9y+wQ /LjFGC3J+xC5AVCNVvkKhcuCNhPA05i+U8twiaJuJ9evJgZOBoG9IPXnqyLYg7w0 bIdwf+ya6jCWX49u4fKzNyfh/fVazOEWQgGQp/nRN6rAe1mSFnymI4TapWmq0Vs8 CdUEJM3Zy/zljVwlf55WjIdyR/oewZItSfv2vaIcCqnnMH9AAaem2r6ZkqCxceIv QlXk7mrvlyMgTg== -----END CERTIFICATE-----Generated at Sun Dec 21 23:00:21 2025 by rpki-client