This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft File: OTe1pRVrXHL_wPnAtxBLsYjby7w.mft (raw, json) Hash identifier: Zi0LB07/qttL7Q8YE6kOIzbT2zmmYsUHEtgbEMckI98= Subject key identifier: 77:22:04:EA:6F:0B:65:82:42:4B:CD:15:EF:2B:58:A5:13:5D:CE:7A Authority key identifier: 39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC Certificate issuer: /CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc Certificate serial: 019B1E3CAFBF8B221D9368F249637DAEE951 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft Manifest number: 170C Signing time: Sun 14 Dec 2025 19:00:52 +0000 Manifest this update: Sun 14 Dec 2025 19:00:52 +0000 Manifest next update: Mon 15 Dec 2025 19:00:52 +0000 Files and hashes: 1: OTe1pRVrXHL_wPnAtxBLsYjby7w.crl (hash: GvScAAO+WuRBV874/gj3wPMsGhN2oCVkRAwXsTuUo4Y=) 2: o1Ho1AoDVivcPIuSoHTiqdRiLsw.roa (hash: 2VRi6zWzRrWILpFGgvS4R1+SnUUqoGeAipP4Ra7rcD4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:3c:af:bf:8b:22:1d:93:68:f2:49:63:7d:ae:e9:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc Validity Not Before: Dec 14 19:00:52 2025 GMT Not After : Dec 15 19:00:52 2025 GMT Subject: CN=772204ea6f0b6582424bcd15ef2b58a5135dce7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:36:46:36:19:45:26:54:62:06:ec:22:68:15: 07:6a:b8:73:00:f2:a1:35:09:1a:c8:ac:62:1e:9d: 0c:b4:c7:d7:41:aa:1e:59:11:d5:3a:b3:eb:d5:3f: 93:e7:f4:b3:07:4f:3c:ed:04:34:d2:e1:08:af:c6: 02:a5:5c:19:c6:a7:77:2f:a2:53:f6:a2:39:8d:fd: a6:bc:65:94:6e:e5:88:f2:55:04:6b:09:ec:66:bc: 51:96:49:b2:3a:f1:4b:f9:39:67:25:cf:81:bd:89: 53:34:1e:4e:df:02:26:fc:1b:6b:f8:72:38:87:72: e7:19:70:46:8e:ab:9a:6d:7c:6a:9b:89:26:be:ca: 83:5a:50:28:1c:1c:85:97:69:82:88:3b:42:1a:3c: c2:d8:c1:6c:1c:21:0e:ae:36:04:1b:18:6c:45:af: 63:09:e2:be:86:98:dd:10:b1:0b:14:a4:f7:0a:01: 6d:69:9f:37:d4:16:bd:d2:72:c7:21:a2:59:32:3d: d4:e0:72:00:30:20:e9:4a:ae:b8:9e:ee:9f:0f:e7: aa:08:a0:a8:78:fd:7b:3c:30:37:55:a0:cd:59:cd: 0a:39:28:13:3d:45:80:69:28:ea:f8:45:ad:bb:97: eb:19:23:68:a2:d5:f0:31:ac:bc:9e:f9:d4:8d:9f: 55:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:22:04:EA:6F:0B:65:82:42:4B:CD:15:EF:2B:58:A5:13:5D:CE:7A X509v3 Authority Key Identifier: keyid:39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:1f:8d:be:96:64:ab:10:c3:5d:0a:72:cf:94:07:0a:f4:9a: 21:e8:0f:80:87:1f:c7:c2:dd:90:f6:5a:fd:b7:ed:83:de:5c: 2c:32:85:12:c4:d5:1f:3f:e8:c3:5d:80:a0:82:1e:96:df:28: dd:9d:bb:fc:1b:ce:5b:06:cb:b1:d4:23:57:9a:68:45:7a:5c: b2:9c:62:3a:60:ad:33:ea:31:4d:7f:57:6b:cc:9a:77:f0:e4: b2:73:4e:86:bb:24:39:b3:f6:9e:80:9d:74:b5:cb:e4:d8:14: 29:f3:7f:84:86:17:f5:5c:18:3c:6a:b3:82:a1:a5:e0:fa:98: a6:3d:e4:1d:b9:ce:2b:f5:26:b1:4b:3e:c2:c7:5e:f9:25:1d: 36:79:5b:63:61:a6:90:e8:5a:39:53:42:19:31:ce:3e:df:9f: 69:d9:d6:10:0c:13:33:84:02:ee:60:c5:f8:36:72:fb:99:4f: 9b:6d:cc:a4:f7:fe:99:52:74:fe:fd:b6:35:1b:66:b6:04:e6: 44:66:aa:aa:ba:f0:cb:7f:87:3b:fe:07:97:c1:5d:72:cd:26: 1e:b6:18:d5:f0:e5:1d:ec:da:37:23:6b:e4:61:bb:78:df:5c: fe:e8:57:85:c8:d5:de:bd:ae:7a:b5:51:d4:ed:a8:b1:00:3e: 56:5a:bd:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsePK+/iyIdk2jySWN9rulRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MzdiNWE1MTU2YjVjNzJmZmMwZjljMGI3MTA0YmIxODhk YmNiYmMwHhcNMjUxMjE0MTkwMDUyWhcNMjUxMjE1MTkwMDUyWjAzMTEwLwYDVQQD Eyg3NzIyMDRlYTZmMGI2NTgyNDI0YmNkMTVlZjJiNThhNTEzNWRjZTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTZGNhlFJlRiBuwiaBUHarhzAPKh NQkayKxiHp0MtMfXQaoeWRHVOrPr1T+T5/SzB0887QQ00uEIr8YCpVwZxqd3L6JT 9qI5jf2mvGWUbuWI8lUEawnsZrxRlkmyOvFL+TlnJc+BvYlTNB5O3wIm/Btr+HI4 h3LnGXBGjquabXxqm4kmvsqDWlAoHByFl2mCiDtCGjzC2MFsHCEOrjYEGxhsRa9j CeK+hpjdELELFKT3CgFtaZ831Ba90nLHIaJZMj3U4HIAMCDpSq64nu6fD+eqCKCo eP17PDA3VaDNWc0KOSgTPUWAaSjq+EWtu5frGSNootXwMay8nvnUjZ9VHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHciBOpvC2WCQkvNFe8rWKUTXc56MB8GA1UdIwQY MBaAFDk3taUVa1xy/8D5wLcQS7GI28u8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1RlMXBSVnJYSExfd1BuQXR4QkxzWWpieTd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9kMjE3NzgtMTkzYy00ZjRjLTgxMTkt ZGQxNDJhMTMzNWYwLzEvT1RlMXBSVnJYSExfd1BuQXR4QkxzWWpieTd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9kMjE3NzgtMTkzYy00ZjRjLTgxMTktZGQxNDJhMTMzNWYw LzEvT1RlMXBSVnJYSExfd1BuQXR4QkxzWWpieTd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArB+NvpZk qxDDXQpyz5QHCvSaIegPgIcfx8LdkPZa/bftg95cLDKFEsTVHz/ow12AoIIelt8o 3Z27/BvOWwbLsdQjV5poRXpcspxiOmCtM+oxTX9Xa8yad/DksnNOhrskObP2noCd dLXL5NgUKfN/hIYX9VwYPGqzgqGl4PqYpj3kHbnOK/UmsUs+wsde+SUdNnlbY2Gm kOhaOVNCGTHOPt+fadnWEAwTM4QC7mDF+DZy+5lPm23MpPf+mVJ0/v22NRtmtgTm RGaqqrrwy3+HO/4Hl8Fdcs0mHrYY1fDlHezaNyNr5GG7eN9c/uhXhcjV3r2uerVR 1O2osQA+Vlq9MA== -----END CERTIFICATE-----Generated at Sun Dec 14 21:08:54 2025 by rpki-client