This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft File: Ow839Domg0Lq8P7FOWBjQJC1sbc.mft (raw, json) Hash identifier: vqKnJeCsWCEk5Y8J5GrKXtZubK/eEPec96EFCOeNctQ= Subject key identifier: 87:4B:85:65:1E:DC:97:D1:44:1C:A1:9E:BF:66:D1:44:4F:C0:D7:D2 Authority key identifier: 3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7 Certificate issuer: /CN=3b0f37f43a268342eaf0fec53960634090b5b1b7 Certificate serial: 019B7E5DCA2FDA34477EC0A7305287933684 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft Manifest number: 04A9 Signing time: Fri 02 Jan 2026 11:00:34 +0000 Manifest this update: Fri 02 Jan 2026 11:00:34 +0000 Manifest next update: Sat 03 Jan 2026 11:00:34 +0000 Files and hashes: 1: Ow839Domg0Lq8P7FOWBjQJC1sbc.crl (hash: WZU9sJ/D1unbJ2LWL2mIJ8oqH/H/gKH43n0LRa14fV8=) 2: UBu_wFI4vrOxyUU-ryyx1e_IGtc.roa (hash: /0bPFjp2T5vGbtfQS5RsYNIUYPkosMPYyAjiXqIPnOg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 11:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:5d:ca:2f:da:34:47:7e:c0:a7:30:52:87:93:36:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b0f37f43a268342eaf0fec53960634090b5b1b7 Validity Not Before: Jan 2 11:00:34 2026 GMT Not After : Jan 3 11:00:34 2026 GMT Subject: CN=874b85651edc97d1441ca19ebf66d1444fc0d7d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f6:a8:7d:20:7b:57:9a:f0:32:a5:37:26:98: 8e:a4:64:87:84:e8:ba:0c:bd:f0:25:82:63:58:46: 5c:34:30:39:ae:6b:d0:09:39:a5:b8:da:4d:9b:63: 89:ba:ab:94:ae:7f:23:4c:52:f2:d2:e2:65:69:5c: 66:cd:74:9a:30:0b:cb:bd:4d:27:97:2a:70:c5:ef: bc:b2:ea:49:4f:21:92:6a:ba:55:d6:96:4e:1f:55: 4b:be:db:b6:d5:d7:3b:2e:b4:e7:00:f6:00:64:84: 5e:8f:73:c1:a0:38:6e:6b:d5:f3:9c:03:15:c5:e3: 4a:de:47:f8:53:01:79:a6:2a:6b:f1:72:69:14:e7: 41:f0:fb:73:3d:16:71:48:32:42:1a:b0:09:55:85: 65:8f:e4:b5:20:47:2b:a9:88:e3:10:7d:f7:29:1d: f5:7a:16:80:09:8c:cf:87:5a:23:22:24:2c:be:c1: 14:0b:8d:86:df:82:7a:96:f5:4b:7f:4c:b4:5c:d5: c1:a3:62:40:5e:5b:11:f0:b7:15:c3:5f:8e:d4:6f: e1:8f:56:ed:13:bd:a0:fb:ed:44:2c:97:bf:a6:75: ea:87:e3:61:88:a8:10:b4:ec:11:bd:61:06:ea:8b: d1:7b:e5:42:79:5b:3e:3d:2b:56:dd:de:c5:90:1a: 14:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:4B:85:65:1E:DC:97:D1:44:1C:A1:9E:BF:66:D1:44:4F:C0:D7:D2 X509v3 Authority Key Identifier: keyid:3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:e7:cc:3f:d4:fa:f0:01:8b:b8:94:07:f4:1d:98:bd:40:c7: 2d:f3:47:ad:94:62:67:b7:e5:22:a5:85:30:96:ed:15:c5:48: d2:67:bc:66:d0:01:d5:14:47:d9:10:53:9b:ff:15:25:a0:14: 62:1a:f1:40:03:f9:63:6d:5b:b4:a9:66:55:cb:16:a6:36:53: c7:bd:09:b6:f8:46:de:27:dd:f4:d3:d2:2a:92:88:2e:f0:e7: 4c:39:a0:2d:38:e3:dd:bc:fd:ed:3d:4b:84:bd:d7:03:62:b4: b6:35:8f:7b:b1:e3:0c:9c:e1:ef:79:88:21:45:43:e3:9d:f4: 08:a0:9c:a7:e8:68:d8:a9:8f:32:0c:65:ba:5b:34:11:fc:61: 06:d1:2c:2f:55:4a:09:2d:69:26:6e:b9:a3:ca:2c:65:52:b7: 76:ce:00:ab:6f:2f:43:bd:b8:50:fa:e3:c3:ee:cf:c8:43:a8: 45:14:cd:12:ba:fa:68:47:30:fc:b7:4d:dc:44:ad:7c:8a:20: 56:f4:9e:a3:ce:ac:5f:18:9b:97:17:bf:00:1d:1d:c4:14:cb: cf:d8:e4:e7:c7:c1:5f:2e:1d:57:00:93:3a:02:91:b5:8f:39: 87:ec:a0:44:ce:21:ff:bd:52:75:ad:0b:14:4a:4e:75:4e:ee: 08:66:de:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt+Xcov2jRHfsCnMFKHkzaEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMGYzN2Y0M2EyNjgzNDJlYWYwZmVjNTM5NjA2MzQwOTBi NWIxYjcwHhcNMjYwMTAyMTEwMDM0WhcNMjYwMTAzMTEwMDM0WjAzMTEwLwYDVQQD Eyg4NzRiODU2NTFlZGM5N2QxNDQxY2ExOWViZjY2ZDE0NDRmYzBkN2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/aofSB7V5rwMqU3JpiOpGSHhOi6 DL3wJYJjWEZcNDA5rmvQCTmluNpNm2OJuquUrn8jTFLy0uJlaVxmzXSaMAvLvU0n lypwxe+8supJTyGSarpV1pZOH1VLvtu21dc7LrTnAPYAZIRej3PBoDhua9XznAMV xeNK3kf4UwF5pipr8XJpFOdB8PtzPRZxSDJCGrAJVYVlj+S1IEcrqYjjEH33KR31 ehaACYzPh1ojIiQsvsEUC42G34J6lvVLf0y0XNXBo2JAXlsR8LcVw1+O1G/hj1bt E72g++1ELJe/pnXqh+NhiKgQtOwRvWEG6ovRe+VCeVs+PStW3d7FkBoUUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIdLhWUe3JfRRByhnr9m0URPwNfSMB8GA1UdIwQY MBaAFDsPN/Q6JoNC6vD+xTlgY0CQtbG3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3c4MzlEb21nMExxOFA3Rk9XQmpRSkMxc2JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wNGY3MzYtMzcxMy00MGJhLThjMDgt OWFlOTAwZGY0Zjg4LzEvT3c4MzlEb21nMExxOFA3Rk9XQmpRSkMxc2JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8wNGY3MzYtMzcxMy00MGJhLThjMDgtOWFlOTAwZGY0Zjg4 LzEvT3c4MzlEb21nMExxOFA3Rk9XQmpRSkMxc2JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg+fMP9T6 8AGLuJQH9B2YvUDHLfNHrZRiZ7flIqWFMJbtFcVI0me8ZtAB1RRH2RBTm/8VJaAU YhrxQAP5Y21btKlmVcsWpjZTx70JtvhG3ifd9NPSKpKILvDnTDmgLTjj3bz97T1L hL3XA2K0tjWPe7HjDJzh73mIIUVD4530CKCcp+ho2KmPMgxluls0EfxhBtEsL1VK CS1pJm65o8osZVK3ds4Aq28vQ724UPrjw+7PyEOoRRTNErr6aEcw/LdN3EStfIog VvSeo86sXxiblxe/AB0dxBTLz9jk58fBXy4dVwCTOgKRtY85h+ygRM4h/71Sda0L FEpOdU7uCGbewA== -----END CERTIFICATE-----Generated at Fri Jan 2 16:57:48 2026 by rpki-client