This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft File: otXHrn5FwAc077zJE6Gx6j6WS0A.mft (raw, json) Hash identifier: 9qxy57YhBVkxAZ2vgGFCM8T4kAZtuTswxh4JOa1p+5Y= Subject key identifier: F3:AA:D1:33:C6:D5:1A:F9:12:B5:76:1E:38:6E:88:AC:E7:E0:1B:91 Authority key identifier: A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40 Certificate issuer: /CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40 Certificate serial: 019B0F6E3EB37F3D79F2BE538F1F3C0291EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft Manifest number: 05CE Signing time: Thu 11 Dec 2025 22:00:41 +0000 Manifest this update: Thu 11 Dec 2025 22:00:41 +0000 Manifest next update: Fri 12 Dec 2025 22:00:41 +0000 Files and hashes: 1: BAHKXXDGf4FkpvGLoVJvz4ZQS9g.roa (hash: QG7io9HlNrI6xyBwfXvDwRjbZbOdJXrpGi6XSOhyDS8=) 2: Xa4rA7s8Ly9UJZgVYi-Jv5tyXbE.roa (hash: B0/EUa4/ThW3bg+w4c9UI/ZQv1E86GHArXlsrfN6HzQ=) 3: otXHrn5FwAc077zJE6Gx6j6WS0A.crl (hash: KvgoQiXxd0kmFTMDjM8ILVkknuZJUVBQj67kYLexRbI=) 4: p4F6VDWGlGgiZn3yBJi7M3fVpVg.roa (hash: TIMfRy8SxAVXXi0h232Rvp4fEAYndvsGejpfbPavyrQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:3e:b3:7f:3d:79:f2:be:53:8f:1f:3c:02:91:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40 Validity Not Before: Dec 11 22:00:41 2025 GMT Not After : Dec 12 22:00:41 2025 GMT Subject: CN=f3aad133c6d51af912b5761e386e88ace7e01b91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:b0:24:32:7f:0c:1c:53:92:ad:cd:b1:1f:cd: a5:60:96:90:da:f6:0f:52:49:ee:99:32:b1:b0:ba: 4c:12:fe:7e:e7:d8:b0:72:b8:7a:52:13:c1:71:74: fd:1f:d5:69:6b:89:00:b3:38:9b:0e:bd:f0:cb:62: 9a:8e:21:a1:b9:69:77:15:86:4b:48:cb:2c:7a:e9: fe:f5:da:03:6b:a5:2c:13:0f:e8:a5:ad:b6:dc:20: b4:f6:ce:80:00:ac:5c:12:d3:9f:12:eb:27:e3:8b: d6:f5:cc:81:e5:4d:53:42:6e:16:e4:9a:bb:30:c0: c7:11:b1:5c:ca:87:63:fe:20:b5:1a:c4:53:a7:ce: 69:6b:15:27:7b:bf:a0:76:0f:f6:ca:04:87:cd:af: 7f:78:af:30:68:98:97:e3:d3:9f:58:42:2c:73:c0: 51:26:a0:44:94:e9:cf:ba:6b:aa:94:c8:0e:b1:a4: f5:6b:73:cd:7e:b4:29:d4:2f:6a:12:a7:00:af:7d: 3b:83:7b:6a:98:0b:ae:0d:a1:ef:bf:93:e0:75:41: 62:23:e4:b4:0b:51:e9:0c:d0:52:ab:4b:58:59:79: f9:37:ba:6e:a8:76:1b:bd:f3:ed:7a:f6:9b:0a:89: 1b:23:2f:11:c7:6f:8e:27:14:8a:8f:c1:d0:e4:69: c3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:AA:D1:33:C6:D5:1A:F9:12:B5:76:1E:38:6E:88:AC:E7:E0:1B:91 X509v3 Authority Key Identifier: keyid:A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:6f:88:c6:85:7f:9d:8e:e6:39:63:94:fb:3c:a2:6e:75:d3: 2c:a4:5e:aa:0e:8a:b2:f9:bd:ed:97:ee:75:42:cf:eb:1b:a6: 57:02:b4:ce:5e:c2:b9:e2:de:3d:6a:3e:21:64:86:31:4b:65: 5e:ea:a1:4c:34:8b:04:35:12:1e:bd:89:9b:ed:09:8f:f3:d2: 1a:85:c9:77:17:97:41:a0:ff:a1:02:83:fe:25:bc:07:9d:c3: 16:7a:19:eb:d3:ae:01:7f:dd:3b:c5:75:c6:f4:bb:e6:35:c6: dd:06:dd:74:98:74:13:63:4a:ec:d3:b4:52:1f:1b:22:a6:76: 3d:23:1a:fc:83:08:1a:ab:f4:e2:af:5b:ff:5f:d2:3f:f1:47: 67:4e:37:7e:a8:17:9b:88:56:c4:f4:fa:43:af:04:ff:7e:65: de:07:f3:ae:6e:13:87:8d:3b:cb:de:11:a4:f7:bd:85:fd:51: c7:50:c4:f8:a6:c2:39:04:37:ce:18:37:06:81:79:ed:23:cb: b5:76:1a:8d:37:7b:b5:a2:f6:db:c9:0f:6c:30:89:41:2c:d8: b5:9d:3e:43:f5:1b:77:db:2e:65:ed:77:e3:2f:cd:0e:86:29: 6a:90:2e:fb:23:46:e6:7d:e4:78:1b:1a:80:4b:51:49:59:6a: 15:55:fa:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbj6zfz158r5Tjx88ApHsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZDVjN2FlN2U0NWMwMDczNGVmYmNjOTEzYTFiMWVhM2U5 NjRiNDAwHhcNMjUxMjExMjIwMDQxWhcNMjUxMjEyMjIwMDQxWjAzMTEwLwYDVQQD EyhmM2FhZDEzM2M2ZDUxYWY5MTJiNTc2MWUzODZlODhhY2U3ZTAxYjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA87AkMn8MHFOSrc2xH82lYJaQ2vYP UknumTKxsLpMEv5+59iwcrh6UhPBcXT9H9Vpa4kAszibDr3wy2KajiGhuWl3FYZL SMsseun+9doDa6UsEw/opa223CC09s6AAKxcEtOfEusn44vW9cyB5U1TQm4W5Jq7 MMDHEbFcyodj/iC1GsRTp85paxUne7+gdg/2ygSHza9/eK8waJiX49OfWEIsc8BR JqBElOnPumuqlMgOsaT1a3PNfrQp1C9qEqcAr307g3tqmAuuDaHvv5PgdUFiI+S0 C1HpDNBSq0tYWXn5N7puqHYbvfPtevabCokbIy8Rx2+OJxSKj8HQ5GnD0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPOq0TPG1Rr5ErV2HjhuiKzn4BuRMB8GA1UdIwQY MBaAFKLVx65+RcAHNO+8yROhseo+lktAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3RYSHJuNUZ3QWMwNzd6SkU2R3g2ajZXUzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81MGYzNGMtMzM4ZC00ZmNlLTgxOTMt ZWMxNjczNWEzMzgyLzEvb3RYSHJuNUZ3QWMwNzd6SkU2R3g2ajZXUzBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC81MGYzNGMtMzM4ZC00ZmNlLTgxOTMtZWMxNjczNWEzMzgy LzEvb3RYSHJuNUZ3QWMwNzd6SkU2R3g2ajZXUzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkG+IxoV/ nY7mOWOU+zyibnXTLKReqg6Ksvm97ZfudULP6xumVwK0zl7CueLePWo+IWSGMUtl XuqhTDSLBDUSHr2Jm+0Jj/PSGoXJdxeXQaD/oQKD/iW8B53DFnoZ69OuAX/dO8V1 xvS75jXG3QbddJh0E2NK7NO0Uh8bIqZ2PSMa/IMIGqv04q9b/1/SP/FHZ043fqgX m4hWxPT6Q68E/35l3gfzrm4Th407y94RpPe9hf1Rx1DE+KbCOQQ3zhg3BoF57SPL tXYajTd7taL228kPbDCJQSzYtZ0+Q/Ubd9suZe134y/NDoYpapAu+yNG5n3keBsa gEtRSVlqFVX6Lg== -----END CERTIFICATE-----Generated at Fri Dec 12 04:02:33 2025 by rpki-client