This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft File: OvovwG4aqRNcJjG3O-zFlXsCOpM.mft (raw, json) Hash identifier: IBTB5pjyFYh2Fw25Ihdon4qAT5mxCxIq3jbMotOVUbM= Subject key identifier: E8:5F:E7:90:93:6C:6F:B9:18:D8:C3:B3:B7:D3:E3:A7:87:9E:33:D1 Authority key identifier: 3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93 Certificate issuer: /CN=3afa2fc06e1aa9135c2631b73becc5957b023a93 Certificate serial: 019B33B1A70006E37502C1FF76EE5808476D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft Manifest number: 1416 Signing time: Thu 18 Dec 2025 23:00:39 +0000 Manifest this update: Thu 18 Dec 2025 23:00:39 +0000 Manifest next update: Fri 19 Dec 2025 23:00:39 +0000 Files and hashes: 1: OvovwG4aqRNcJjG3O-zFlXsCOpM.crl (hash: JhuahCplUYU7nrH67Nabp4pgjj5jM4WmaxsBp/F0AfQ=) 2: TmqgT8a6A5MGUn5mkLtQ8qR97F4.roa (hash: V4gF7PSkd2779yOJRGcz3efKoncCJTVpp0G+/wVgtGA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:a7:00:06:e3:75:02:c1:ff:76:ee:58:08:47:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3afa2fc06e1aa9135c2631b73becc5957b023a93 Validity Not Before: Dec 18 23:00:39 2025 GMT Not After : Dec 19 23:00:39 2025 GMT Subject: CN=e85fe790936c6fb918d8c3b3b7d3e3a7879e33d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:39:69:8c:7d:01:e1:6d:29:a3:7f:ba:b5:c2: 7b:6d:df:95:19:bb:e5:fb:27:13:31:57:10:5c:aa: 32:bb:9b:23:de:f3:22:f8:ee:d9:67:40:fa:02:48: 9f:8a:0c:a5:2f:a1:1a:af:7c:bc:ac:1d:5e:fe:07: 60:8f:bc:cb:33:15:46:f1:d6:8a:00:08:c8:2a:f7: 14:76:04:72:39:b1:2a:6b:59:89:1a:a4:b4:52:8c: 20:d2:57:d1:e4:63:e3:06:85:d1:48:bb:e9:34:90: 1a:8a:60:ef:3a:be:56:1c:96:70:89:77:69:52:b0: ca:98:e1:0b:6e:f2:4a:00:b6:60:68:9d:a8:0e:f4: 91:c2:b1:18:05:eb:4b:b0:4d:1c:c9:ee:b7:b5:e4: d9:05:ac:cd:cd:4f:d8:68:02:a1:ea:50:f5:80:dc: 18:4e:77:2a:00:b9:78:e1:53:c8:a2:06:da:76:d4: b5:2d:ec:d8:8a:4b:23:2d:24:82:90:2c:94:76:09: 57:42:cf:64:e0:fc:80:3c:b3:ca:4d:b6:f7:70:d2: 78:81:13:96:7e:c9:93:b4:b9:50:a4:dc:8d:6e:41: 25:c3:c8:f1:c1:1a:5f:90:80:43:ec:eb:c0:68:ca: 40:c3:f6:5e:65:34:a0:e7:b0:67:36:5c:e3:dc:78: 32:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:5F:E7:90:93:6C:6F:B9:18:D8:C3:B3:B7:D3:E3:A7:87:9E:33:D1 X509v3 Authority Key Identifier: keyid:3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:76:53:46:aa:94:6f:c1:9b:01:f7:0c:4c:f6:7b:9a:9b:5b: bf:a6:9b:de:d4:86:62:0d:db:f5:3c:2f:50:fa:55:7a:2f:8e: 37:95:6c:91:a6:75:42:49:ea:58:20:97:4d:28:a8:b1:74:8e: a1:0e:88:50:f5:e2:57:88:82:8d:8b:ce:f3:e7:3b:2f:87:93: 5f:02:dd:f5:29:75:0b:79:23:0d:fc:91:7c:f7:60:3e:f9:3e: 2b:6f:80:f5:2c:3c:cf:18:3d:77:17:25:07:1b:4c:f1:5c:61: f4:aa:cb:65:ee:72:27:e8:be:d4:41:1f:fd:be:d9:37:b9:81: f2:24:38:10:7b:26:60:4e:d1:8e:f4:80:83:b1:42:57:28:6b: c2:35:a9:64:f1:37:86:ee:06:8f:18:75:85:fd:18:6a:fa:1c: ff:4f:05:a7:7f:21:cb:12:ec:3a:1b:3f:70:3d:fd:b4:14:ec: 17:14:ff:33:3a:84:b4:1a:4f:26:07:40:56:3f:53:00:18:0a: e5:a3:bf:e2:9b:96:3d:a4:05:fa:ff:aa:f5:15:4e:76:de:51: 92:8f:aa:83:1a:cd:6b:c5:54:93:69:1d:45:80:67:d3:47:f0: 94:94:a4:66:c0:f6:8e:06:4d:01:c2:dc:cd:b6:a5:f2:e0:9a: c7:69:b1:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsacABuN1AsH/du5YCEdtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZmEyZmMwNmUxYWE5MTM1YzI2MzFiNzNiZWNjNTk1N2Iw MjNhOTMwHhcNMjUxMjE4MjMwMDM5WhcNMjUxMjE5MjMwMDM5WjAzMTEwLwYDVQQD EyhlODVmZTc5MDkzNmM2ZmI5MThkOGMzYjNiN2QzZTNhNzg3OWUzM2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zlpjH0B4W0po3+6tcJ7bd+VGbvl +ycTMVcQXKoyu5sj3vMi+O7ZZ0D6AkifigylL6Ear3y8rB1e/gdgj7zLMxVG8daK AAjIKvcUdgRyObEqa1mJGqS0Uowg0lfR5GPjBoXRSLvpNJAaimDvOr5WHJZwiXdp UrDKmOELbvJKALZgaJ2oDvSRwrEYBetLsE0cye63teTZBazNzU/YaAKh6lD1gNwY TncqALl44VPIogbadtS1LezYiksjLSSCkCyUdglXQs9k4PyAPLPKTbb3cNJ4gROW fsmTtLlQpNyNbkElw8jxwRpfkIBD7OvAaMpAw/ZeZTSg57BnNlzj3HgymwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOhf55CTbG+5GNjDs7fT46eHnjPRMB8GA1UdIwQY MBaAFDr6L8BuGqkTXCYxtzvsxZV7AjqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZvdndHNGFxUk5jSmpHM08tekZsWHNDT3BNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi84OTkyMTgtMmExOS00ZDBmLTlmMWUt ZWYzOGU4Y2UzM2QxLzEvT3ZvdndHNGFxUk5jSmpHM08tekZsWHNDT3BNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi84OTkyMTgtMmExOS00ZDBmLTlmMWUtZWYzOGU4Y2UzM2Qx LzEvT3ZvdndHNGFxUk5jSmpHM08tekZsWHNDT3BNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASnZTRqqU b8GbAfcMTPZ7mptbv6ab3tSGYg3b9TwvUPpVei+ON5VskaZ1QknqWCCXTSiosXSO oQ6IUPXiV4iCjYvO8+c7L4eTXwLd9Sl1C3kjDfyRfPdgPvk+K2+A9Sw8zxg9dxcl BxtM8Vxh9KrLZe5yJ+i+1EEf/b7ZN7mB8iQ4EHsmYE7RjvSAg7FCVyhrwjWpZPE3 hu4Gjxh1hf0Yavoc/08Fp38hyxLsOhs/cD39tBTsFxT/MzqEtBpPJgdAVj9TABgK 5aO/4puWPaQF+v+q9RVOdt5Rko+qgxrNa8VUk2kdRYBn00fwlJSkZsD2jgZNAcLc zbal8uCax2mxcQ== -----END CERTIFICATE-----Generated at Fri Dec 19 04:55:05 2025 by rpki-client