This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft File: OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft (raw, json) Hash identifier: WEAcmNNLshcqxAt3/L1BfWvPTjEdx1rJOR90cmSIoMM= Subject key identifier: 98:2B:65:8F:D9:A2:BB:D0:72:8B:22:C3:07:69:28:99:7F:0D:88:FC Authority key identifier: 3A:F1:50:7F:DA:4E:70:48:28:C7:E0:3C:AF:62:64:56:AA:FC:5B:1A Certificate issuer: /CN=3af1507fda4e704828c7e03caf626456aafc5b1a Certificate serial: 019B334440F2D7B99D0B909EEE951C17A2B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvFQf9pOcEgox-A8r2JkVqr8Wxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft Manifest number: 16AE Signing time: Thu 18 Dec 2025 21:01:09 +0000 Manifest this update: Thu 18 Dec 2025 21:01:09 +0000 Manifest next update: Fri 19 Dec 2025 21:01:09 +0000 Files and hashes: 1: OvFQf9pOcEgox-A8r2JkVqr8Wxo.crl (hash: Crh0hyxufMxY6YMeoRd7Sr9Q3IlXZIzWInubvT13k5w=) 2: RzHN7Dslblmf2SWetMH6DUd-Es8.roa (hash: 2K0PSVlUZvtFJCr5mNlFcXi4Xq9NSfuA5JwXa1JJxuU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft rsync://rpki.ripe.net/repository/DEFAULT/OvFQf9pOcEgox-A8r2JkVqr8Wxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:40:f2:d7:b9:9d:0b:90:9e:ee:95:1c:17:a2:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af1507fda4e704828c7e03caf626456aafc5b1a Validity Not Before: Dec 18 21:01:09 2025 GMT Not After : Dec 19 21:01:09 2025 GMT Subject: CN=982b658fd9a2bbd0728b22c3076928997f0d88fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f9:78:58:f8:00:7e:f5:21:81:65:7d:cb:61: 2f:10:bd:cc:20:2f:b6:3f:9a:68:93:05:29:db:a5: 9c:a6:37:f2:a8:c1:ad:24:d1:86:62:fb:db:b4:bb: 4e:40:ce:fc:b3:71:36:09:e1:1e:2d:2b:74:d3:b1: 83:49:de:6c:88:2a:65:57:99:cd:b4:ff:77:db:cc: 4c:10:53:b6:be:34:0c:a2:ba:53:8d:34:e3:22:6e: 77:9e:51:1c:c6:6d:43:4e:70:a5:85:d6:35:75:a4: 19:89:f3:fe:71:16:23:6e:d7:ff:c7:ff:78:5d:06: fa:7f:23:89:b7:53:82:d6:b1:56:f1:8c:4d:8c:11: 49:0e:3c:99:15:1b:a6:da:60:cc:34:c2:76:6c:ee: 7c:8b:71:35:02:1a:24:a5:e5:49:16:1f:9a:64:e1: 8f:64:16:51:44:eb:5a:19:bf:fa:7c:39:f4:3c:a4: 66:d4:12:ac:d5:81:a3:f3:e4:a4:bb:24:06:22:0c: 88:5f:9a:0c:53:7b:d5:77:49:21:24:b2:f2:4d:7f: 35:09:38:d0:26:1f:84:2d:ea:c9:93:d1:da:81:bb: 74:c0:74:75:d8:4c:c1:b8:bb:9d:b0:1f:e6:fd:f1: 70:3b:8a:ad:5e:98:7f:2e:74:65:6b:3f:36:c6:8e: 51:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:2B:65:8F:D9:A2:BB:D0:72:8B:22:C3:07:69:28:99:7F:0D:88:FC X509v3 Authority Key Identifier: keyid:3A:F1:50:7F:DA:4E:70:48:28:C7:E0:3C:AF:62:64:56:AA:FC:5B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvFQf9pOcEgox-A8r2JkVqr8Wxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:6b:0e:c6:cb:c1:e3:00:a1:c7:3f:f2:03:46:9f:19:50:7f: 71:fe:5d:5a:2b:79:7a:98:e8:bb:26:58:05:b4:ab:c3:45:82: c4:7b:cf:bf:ec:6a:67:16:5a:f8:15:2a:88:83:3c:3b:54:57: 51:54:d8:c6:4a:27:e1:00:ac:27:8e:f7:d1:be:34:0f:ad:a6: ff:ef:44:96:e0:96:4f:2c:00:07:5d:60:c7:e0:e1:5b:cb:23: a0:0d:22:68:27:42:78:8d:d5:6c:89:6e:41:71:f5:e7:8c:19: 1e:b1:0e:11:bd:11:85:04:0f:bb:fd:f3:df:59:f7:ad:3b:e8: ef:2f:56:d2:54:e2:16:bd:18:f8:06:bf:87:83:e1:19:af:d0: 64:e1:e5:a1:a8:f6:4d:e7:a0:73:c1:c6:de:f2:67:3b:ec:96: f2:77:22:90:b0:63:82:ec:53:cf:8c:6d:99:cb:92:fc:65:e4: 45:fa:f2:d3:29:cf:99:1b:1b:a3:4d:f6:68:c7:6b:44:4b:da: 09:cb:31:f2:6f:cb:d1:2c:f2:3d:b3:b3:ec:87:0d:f6:f1:b4: 46:79:25:2d:0a:91:96:72:dd:94:d6:d5:44:06:63:23:82:30: 9a:f8:34:3e:b9:44:23:13:48:6c:1a:b5:f4:5d:99:3c:08:e0: 0f:b7:da:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszREDy17mdC5Ce7pUcF6K4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjE1MDdmZGE0ZTcwNDgyOGM3ZTAzY2FmNjI2NDU2YWFm YzViMWEwHhcNMjUxMjE4MjEwMTA5WhcNMjUxMjE5MjEwMTA5WjAzMTEwLwYDVQQD Eyg5ODJiNjU4ZmQ5YTJiYmQwNzI4YjIyYzMwNzY5Mjg5OTdmMGQ4OGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfl4WPgAfvUhgWV9y2EvEL3MIC+2 P5pokwUp26WcpjfyqMGtJNGGYvvbtLtOQM78s3E2CeEeLSt007GDSd5siCplV5nN tP9328xMEFO2vjQMorpTjTTjIm53nlEcxm1DTnClhdY1daQZifP+cRYjbtf/x/94 XQb6fyOJt1OC1rFW8YxNjBFJDjyZFRum2mDMNMJ2bO58i3E1AhokpeVJFh+aZOGP ZBZRROtaGb/6fDn0PKRm1BKs1YGj8+SkuyQGIgyIX5oMU3vVd0khJLLyTX81CTjQ Jh+ELerJk9Hagbt0wHR12EzBuLudsB/m/fFwO4qtXph/LnRlaz82xo5R4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJgrZY/ZorvQcosiwwdpKJl/DYj8MB8GA1UdIwQY MBaAFDrxUH/aTnBIKMfgPK9iZFaq/FsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZGUWY5cE9jRWdveC1BOHIySmtWcXI4V3hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85ZjUwZTEtM2VjNC00NmRjLWI0Zjct ODc0MjM0ZWQxZTVlLzEvT3ZGUWY5cE9jRWdveC1BOHIySmtWcXI4V3hvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC85ZjUwZTEtM2VjNC00NmRjLWI0ZjctODc0MjM0ZWQxZTVl LzEvT3ZGUWY5cE9jRWdveC1BOHIySmtWcXI4V3hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh2sOxsvB 4wChxz/yA0afGVB/cf5dWit5epjouyZYBbSrw0WCxHvPv+xqZxZa+BUqiIM8O1RX UVTYxkon4QCsJ4730b40D62m/+9EluCWTywAB11gx+DhW8sjoA0iaCdCeI3VbIlu QXH154wZHrEOEb0RhQQPu/3z31n3rTvo7y9W0lTiFr0Y+Aa/h4PhGa/QZOHloaj2 Teegc8HG3vJnO+yW8ncikLBjguxTz4xtmcuS/GXkRfry0ynPmRsbo032aMdrREva Ccsx8m/L0SzyPbOz7IcN9vG0RnklLQqRlnLdlNbVRAZjI4Iwmvg0PrlEIxNIbBq1 9F2ZPAjgD7faew== -----END CERTIFICATE-----Generated at Fri Dec 19 01:08:31 2025 by rpki-client