This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft File: ot2usWTjmCFKFxoEEOawIy1kL1A.mft (raw, json) Hash identifier: QiFb/5HgBoNJOsZNRwr05J2MlQt5v7YVU2mrPpN/47o= Subject key identifier: A2:C2:D9:03:6F:05:B2:D8:4F:44:54:0B:32:0D:93:C1:E7:8B:1A:60 Authority key identifier: A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50 Certificate issuer: /CN=a2ddaeb164e398214a171a0410e6b0232d642f50 Certificate serial: 019B18A83129AF789424A79C5D7C9DD147E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft Manifest number: 1773 Signing time: Sat 13 Dec 2025 17:00:34 +0000 Manifest this update: Sat 13 Dec 2025 17:00:34 +0000 Manifest next update: Sun 14 Dec 2025 17:00:34 +0000 Files and hashes: 1: Oe84aJcNETymHO5Mo5MDcXOYnLw.roa (hash: OSImBq5p2iXVjmA+adUzN+gaePAu0L2EyhD+yCsF6YQ=) 2: cQexL6krMjfc-1q8FYIof7PMMrw.roa (hash: C8+OwS0ajCdtALbwYVsZUHXZFfWLyCs4+m/HFUeB+J0=) 3: ot2usWTjmCFKFxoEEOawIy1kL1A.crl (hash: PtHsDX2NQqOUSZg5xw8RJXrBbNuO3HHuCyfpzRnv/XM=) 4: pXLAo5W-uViqoy6VRn7xh63-Zkc.roa (hash: yBl1r2cJ0Cow5+Dq2JidUHqYW1mvqRNbPSpwmQ9U1AQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:a8:31:29:af:78:94:24:a7:9c:5d:7c:9d:d1:47:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2ddaeb164e398214a171a0410e6b0232d642f50 Validity Not Before: Dec 13 17:00:34 2025 GMT Not After : Dec 14 17:00:34 2025 GMT Subject: CN=a2c2d9036f05b2d84f44540b320d93c1e78b1a60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:70:62:a5:6e:71:05:b0:5e:d5:7a:d4:93:37: 2c:c3:d9:5f:43:74:6b:39:9e:ca:28:68:d2:04:2b: 21:0e:96:3e:dd:9d:29:ec:6c:58:3e:00:dd:9e:16: 59:dd:8d:39:bb:6c:ca:f7:bc:80:46:42:6e:db:1a: 8b:18:0e:32:24:fd:a4:99:e8:82:96:e9:ee:6c:83: 82:b0:c8:c8:09:06:44:a8:02:e5:39:91:a2:0f:58: d6:96:c7:25:23:cb:b6:b6:86:9c:60:d2:5f:2a:73: 4f:6c:a3:fa:4d:9e:46:cf:9c:5a:ca:b0:fc:f3:c7: f2:d4:ac:98:0e:63:41:b0:b2:1f:33:7c:e9:e7:0f: 04:a8:94:b1:21:fc:14:8d:c4:12:e0:44:31:ef:0d: 5e:de:ee:ad:d9:9f:03:94:79:22:06:32:52:f9:b8: 42:b2:e5:78:e6:92:0d:7f:18:a1:8a:4c:13:c7:03: bc:8f:82:99:ed:af:b1:56:1b:18:64:c1:b5:a3:c1: 2d:9a:e6:d7:6f:0b:1f:6b:23:d2:f3:4d:38:f0:28: 92:53:e8:94:51:9f:db:25:89:3c:03:c4:34:5d:07: a8:93:fc:4e:3e:b2:5e:63:60:a4:6c:70:08:32:3a: 64:c9:cd:57:ed:6f:21:60:26:c9:e7:04:f4:1c:b7: 38:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C2:D9:03:6F:05:B2:D8:4F:44:54:0B:32:0D:93:C1:E7:8B:1A:60 X509v3 Authority Key Identifier: keyid:A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:dc:a8:fc:10:31:9c:f7:d4:a8:90:67:9e:93:82:c7:e4:4b: 9c:b9:3d:71:d5:5b:c0:49:08:68:f0:17:f1:32:73:e6:77:29: 0e:2a:64:b2:4c:00:7d:a8:77:04:58:44:83:9f:21:5b:6f:7d: 59:5f:ef:95:45:36:8f:32:dd:b3:a0:a8:c6:08:76:c2:3c:36: 4e:d3:0f:49:5b:d6:53:aa:e1:65:15:62:b5:fa:10:03:3c:04: 6f:c2:c8:de:a6:0c:37:f6:9b:89:ae:23:59:49:40:d9:2a:c6: 15:62:a6:9a:a9:ed:de:d1:02:1b:5a:d2:cd:3a:5c:37:6d:37: 4a:97:3b:df:8a:68:d6:4e:ec:25:d0:c8:5c:b4:df:10:bd:74: 33:5e:22:a6:4e:fd:23:7e:06:36:24:84:3d:de:f3:c1:82:f2: 36:62:97:30:2a:68:e3:7c:35:cf:f4:65:e6:a0:b8:5e:e1:07: e8:f1:de:93:c4:32:33:70:4e:ae:6e:72:0a:e1:71:2e:db:a3: 13:e5:72:8b:b6:29:18:6f:c4:91:0c:d3:50:65:8d:57:94:70: 6f:90:1c:ae:5d:de:60:1e:34:a0:46:c3:2b:f2:ef:d1:75:04: 98:30:bc:13:1f:5c:27:4a:72:7a:de:ce:4d:d0:11:c5:15:64: 3e:dd:99:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYqDEpr3iUJKecXXyd0UfoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZGRhZWIxNjRlMzk4MjE0YTE3MWEwNDEwZTZiMDIzMmQ2 NDJmNTAwHhcNMjUxMjEzMTcwMDM0WhcNMjUxMjE0MTcwMDM0WjAzMTEwLwYDVQQD EyhhMmMyZDkwMzZmMDViMmQ4NGY0NDU0MGIzMjBkOTNjMWU3OGIxYTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3BipW5xBbBe1XrUkzcsw9lfQ3Rr OZ7KKGjSBCshDpY+3Z0p7GxYPgDdnhZZ3Y05u2zK97yARkJu2xqLGA4yJP2kmeiC lunubIOCsMjICQZEqALlOZGiD1jWlsclI8u2toacYNJfKnNPbKP6TZ5Gz5xayrD8 88fy1KyYDmNBsLIfM3zp5w8EqJSxIfwUjcQS4EQx7w1e3u6t2Z8DlHkiBjJS+bhC suV45pINfxihikwTxwO8j4KZ7a+xVhsYZMG1o8EtmubXbwsfayPS80048CiSU+iU UZ/bJYk8A8Q0XQeok/xOPrJeY2CkbHAIMjpkyc1X7W8hYCbJ5wT0HLc4MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKLC2QNvBbLYT0RUCzINk8HnixpgMB8GA1UdIwQY MBaAFKLdrrFk45ghShcaBBDmsCMtZC9QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3QydXNXVGptQ0ZLRnhvRUVPYXdJeTFrTDFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS80YWZkYTctODI5Yy00ODgwLWEwYzkt MTEyZTExM2JiN2I3LzEvb3QydXNXVGptQ0ZLRnhvRUVPYXdJeTFrTDFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS80YWZkYTctODI5Yy00ODgwLWEwYzktMTEyZTExM2JiN2I3 LzEvb3QydXNXVGptQ0ZLRnhvRUVPYXdJeTFrTDFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC9yo/BAx nPfUqJBnnpOCx+RLnLk9cdVbwEkIaPAX8TJz5ncpDipkskwAfah3BFhEg58hW299 WV/vlUU2jzLds6Coxgh2wjw2TtMPSVvWU6rhZRVitfoQAzwEb8LI3qYMN/abia4j WUlA2SrGFWKmmqnt3tECG1rSzTpcN203Spc734po1k7sJdDIXLTfEL10M14ipk79 I34GNiSEPd7zwYLyNmKXMCpo43w1z/Rl5qC4XuEH6PHek8QyM3BOrm5yCuFxLtuj E+Vyi7YpGG/EkQzTUGWNV5Rwb5Acrl3eYB40oEbDK/Lv0XUEmDC8Ex9cJ0pyet7O TdARxRVkPt2ZjA== -----END CERTIFICATE-----Generated at Sun Dec 14 01:56:10 2025 by rpki-client