This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft File: OvovwG4aqRNcJjG3O-zFlXsCOpM.mft (raw, json) Hash identifier: seHr14zSvzEl1zlQd820FidQLtbHgN+t6zOOzR2Hqnc= Subject key identifier: 16:6D:33:9C:AB:B4:79:7A:7C:46:48:AB:79:80:95:D6:A3:A3:19:40 Authority key identifier: 3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93 Certificate issuer: /CN=3afa2fc06e1aa9135c2631b73becc5957b023a93 Certificate serial: 019AF7D3DCDE4F209DE814280860B49BDC37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft Manifest number: 13F7 Signing time: Sun 07 Dec 2025 08:00:48 +0000 Manifest this update: Sun 07 Dec 2025 08:00:48 +0000 Manifest next update: Mon 08 Dec 2025 08:00:48 +0000 Files and hashes: 1: OvovwG4aqRNcJjG3O-zFlXsCOpM.crl (hash: z0O9q7BfSWc7VA5inOZ834VPV7x1v37Se2eUkBzPfyg=) 2: TmqgT8a6A5MGUn5mkLtQ8qR97F4.roa (hash: V4gF7PSkd2779yOJRGcz3efKoncCJTVpp0G+/wVgtGA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:d3:dc:de:4f:20:9d:e8:14:28:08:60:b4:9b:dc:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3afa2fc06e1aa9135c2631b73becc5957b023a93 Validity Not Before: Dec 7 08:00:48 2025 GMT Not After : Dec 8 08:00:48 2025 GMT Subject: CN=166d339cabb4797a7c4648ab798095d6a3a31940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6d:ab:4b:a6:16:91:d2:72:6e:2a:09:ce:79: 82:a9:62:01:c0:e0:87:0d:f4:82:e8:77:ad:64:ee: ae:46:49:ca:03:0c:f0:72:59:a3:86:be:d0:1f:ed: 5d:3c:5e:b4:09:a1:85:89:69:41:e9:fb:28:7b:9b: 54:c9:1a:40:b7:ce:23:a2:1b:bc:71:02:b2:34:4a: 12:1a:bf:2c:f9:48:f0:a7:2b:16:73:75:8c:fc:07: 25:05:1e:e5:47:e2:2d:8b:e9:b1:7f:b8:92:85:02: 5c:eb:0f:d8:6e:58:57:76:45:e5:22:2b:a5:7c:9a: db:24:1a:ae:37:c9:a1:95:0b:c3:6d:52:cd:5c:00: 97:45:eb:d8:80:03:54:d4:73:f6:c0:b3:13:37:85: 2c:63:e8:4e:44:7b:65:9e:af:f6:5d:2b:59:bc:80: 73:e9:c0:dd:56:f8:6a:ad:f0:ba:a8:75:02:84:c5: 65:2f:79:9b:cd:5e:da:d3:f2:c7:6a:a9:23:f4:7e: a8:6a:4e:d9:40:a2:ef:68:35:2d:05:8e:3a:a6:d5: 31:87:17:e1:0e:c7:8b:0c:93:42:ba:82:1e:8b:52: ae:82:37:3d:f6:6a:5f:d5:8e:af:71:27:62:a1:b3: 34:f8:5e:c2:aa:c7:39:0a:20:ca:c3:d5:23:3f:79: b8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:6D:33:9C:AB:B4:79:7A:7C:46:48:AB:79:80:95:D6:A3:A3:19:40 X509v3 Authority Key Identifier: keyid:3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:51:2e:ea:ca:5b:ac:d5:7a:87:e2:10:d5:83:18:10:ad:9b: 1c:80:10:fe:bd:c3:44:49:e8:c7:da:6d:01:41:22:b5:1f:65: 19:1b:62:8a:ba:30:b0:32:db:65:00:6e:4c:35:f7:60:2c:b0: cc:d5:3e:aa:28:1c:09:78:87:c4:35:a8:78:e1:48:89:91:69: 14:23:ae:b8:30:fa:6e:9d:9e:b3:b4:bf:ad:5e:cc:3d:7d:92: e2:cc:a9:83:4b:dc:8c:dd:79:60:e5:a8:66:98:10:56:fe:f4: c9:5f:19:d1:41:0f:e0:1e:46:2f:f4:ae:9b:b2:e9:bb:91:39: 47:29:20:3f:43:85:98:e8:75:3e:2b:90:d9:5a:fc:32:1e:98: d9:df:70:b6:8b:54:e5:6c:08:05:e5:d3:e4:2c:28:5a:a9:2e: 02:b7:f1:35:e8:3b:3e:28:ef:c3:8c:71:d3:98:b5:50:a5:a2: 96:5a:6c:0c:a7:2b:a3:32:11:72:4d:9f:1b:ac:4d:a1:b2:f7: fc:e6:94:31:de:77:39:d1:90:b0:78:e3:2d:5a:66:a7:46:d1: 5e:43:cb:9e:46:c4:4e:e2:c5:bc:e2:db:02:7d:6c:5a:ba:31: 2c:48:60:c7:bf:b5:8b:00:dd:98:4a:25:1a:e0:47:f0:ed:5f: f8:e7:4a:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr309zeTyCd6BQoCGC0m9w3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZmEyZmMwNmUxYWE5MTM1YzI2MzFiNzNiZWNjNTk1N2Iw MjNhOTMwHhcNMjUxMjA3MDgwMDQ4WhcNMjUxMjA4MDgwMDQ4WjAzMTEwLwYDVQQD EygxNjZkMzM5Y2FiYjQ3OTdhN2M0NjQ4YWI3OTgwOTVkNmEzYTMxOTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW2rS6YWkdJybioJznmCqWIBwOCH DfSC6HetZO6uRknKAwzwclmjhr7QH+1dPF60CaGFiWlB6fsoe5tUyRpAt84johu8 cQKyNEoSGr8s+UjwpysWc3WM/AclBR7lR+Iti+mxf7iShQJc6w/YblhXdkXlIiul fJrbJBquN8mhlQvDbVLNXACXRevYgANU1HP2wLMTN4UsY+hORHtlnq/2XStZvIBz 6cDdVvhqrfC6qHUChMVlL3mbzV7a0/LHaqkj9H6oak7ZQKLvaDUtBY46ptUxhxfh DseLDJNCuoIei1Kugjc99mpf1Y6vcSdiobM0+F7Cqsc5CiDKw9UjP3m4iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBZtM5yrtHl6fEZIq3mAldajoxlAMB8GA1UdIwQY MBaAFDr6L8BuGqkTXCYxtzvsxZV7AjqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZvdndHNGFxUk5jSmpHM08tekZsWHNDT3BNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi84OTkyMTgtMmExOS00ZDBmLTlmMWUt ZWYzOGU4Y2UzM2QxLzEvT3ZvdndHNGFxUk5jSmpHM08tekZsWHNDT3BNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi84OTkyMTgtMmExOS00ZDBmLTlmMWUtZWYzOGU4Y2UzM2Qx LzEvT3ZvdndHNGFxUk5jSmpHM08tekZsWHNDT3BNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKFEu6spb rNV6h+IQ1YMYEK2bHIAQ/r3DREnox9ptAUEitR9lGRtiirowsDLbZQBuTDX3YCyw zNU+qigcCXiHxDWoeOFIiZFpFCOuuDD6bp2es7S/rV7MPX2S4sypg0vcjN15YOWo ZpgQVv70yV8Z0UEP4B5GL/Sum7Lpu5E5RykgP0OFmOh1PiuQ2Vr8Mh6Y2d9wtotU 5WwIBeXT5CwoWqkuArfxNeg7Pijvw4xx05i1UKWillpsDKcrozIRck2fG6xNobL3 /OaUMd53OdGQsHjjLVpmp0bRXkPLnkbETuLFvOLbAn1sWroxLEhgx7+1iwDdmEol GuBH8O1f+OdKaQ== -----END CERTIFICATE-----Generated at Sun Dec 7 10:52:54 2025 by rpki-client