This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft File: OwmORe9LtdGNvIbFoTX1fry-AF0.mft (raw, json) Hash identifier: V6czaihJ5AYnwHS4vW6NIRzQp7Mw59O+80hKx2PaUvs= Subject key identifier: A3:FA:DE:0A:40:7C:C6:66:8E:15:D1:52:78:26:C3:7C:E2:F2:35:B9 Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Certificate serial: 019AF9F9832D416C68CB006F89BEA75DB2D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft Manifest number: 0DD4 Signing time: Sun 07 Dec 2025 18:01:10 +0000 Manifest this update: Sun 07 Dec 2025 18:01:10 +0000 Manifest next update: Mon 08 Dec 2025 18:01:10 +0000 Files and hashes: 1: 0CU8gK0M0FreSaI70cF5ooIUWnA.roa (hash: 3AhvcPwm/9eRzoLDWBdCRrt2ESsUhmDJGeKMEdO3cAk=) 2: 7P0xN1XPPXfzuJjXef42Iaxs40A.roa (hash: Szxnfn72VKymEKCytT1IJvnAxzM6hc3FKMvWmYVD1F0=) 3: GbOTYXVRE4nGIgwOQA6zBXlj2Xo.roa (hash: encqJVvBdRm6B6vTFCshfVj5JBcWptS0eKrTwjTdeJk=) 4: HyPgpAuvMsNI5L6SLPPAdnBnPdo.roa (hash: EVOBxrtD9ibYF2I1shFMN6eNa05ZrbHe+uhDMKiGbNk=) 5: IvvEQkJx_YQuA7WDKcWTwA6sjeM.roa (hash: TYlXh7A49R6hcyPJlA/asJPKwJrsxKdwQselHHTfu5Q=) 6: JY5i8EzBZBxEJHFfrehIcHiV5Ro.roa (hash: fb4DYVb7xf+ej8L7lVMYzB+36KaoNm7ycChtN8C1vqA=) 7: OwmORe9LtdGNvIbFoTX1fry-AF0.crl (hash: ndfB4KGbC/HLhIIPd+f8JoCYriyszWHi0gHjADVA4gM=) 8: RVDRQlrN44t-sHhv8uePpq3gIpQ.roa (hash: MUS+jPgR3ZDIgTXHg+S1rHojwuN1giKLoPE+nWa/5ho=) 9: S714ou8hYqjvmFB4nmghIWDuzT8.roa (hash: /BUpwNlFfWECuzcvwXarqFvS3D6dRZwllAWqKckM2JU=) 10: SlDcuXgMtJBGo8YlgFJf41C4kAo.roa (hash: SG0BWCyRtxyo4M02OYtmA2zjOWnb5KfeZ0pEnDDi914=) 11: VjGUvPYUWgp-0uedFQJC98v6fEo.roa (hash: jGCrku5NTRGndH4tqMN86FEJPJ73k9kCLkdTKB2wH5A=) 12: Z-Ur6Re147f49wwXtBgxnUTtQco.roa (hash: 6jMXEqLaJpiU5oHiEpHv2AWSooBvq9dmOPpZl+dAG7k=) 13: ZckxSPgStfBNqpf_bKZ5TlHqsiw.roa (hash: ylC4RavnbVZ7xL5LPnNCb6J3es9DShqfcjOt6FoGPyw=) 14: ediJMJBzETBra22Tko9jnlFnOYA.roa (hash: oCcIPCoFUy+fyzOqy+mhQqpOzf2wz/N+TlISESEMNNs=) 15: lLEblpGCJ2241r4W9Ji2hFVdc64.roa (hash: qNO4IJaXH6rwQAiMPs/rZElF0NQU3Bru/i89iBxAD+Y=) 16: q2sdLUq8oTKjFXabTIHjNujteO4.roa (hash: DmdPmf4rfc5GBaM+wuurYH2BFaBH9ELo6PMdUoe2Fiw=) 17: tzK7bQadc-X5ERcHUFRyrLjFAic.roa (hash: pH5a6hVvwpFpvLEU3OQ9naeDuYIybxvVLAzccWIRqYM=) 18: xY27QQkLnZ1CFYPkNRnlg2uzEHs.roa (hash: PQiNovy5zghm0pctHsesA3K/Z4xfX1dgnUxPsPukk5k=) 19: xymeMR66aDWDmDhIlx2JEKPGuQ4.roa (hash: FDOGD9cmw7d0tSGevYfgks8MljnMa/gRurSZQ7spuUQ=) 20: yGG8haOhseC4wLjAMMMPhHZTXjA.roa (hash: lNJuGf7SRWFqIxTMR/qz5nkSoM2R54KFa9KdvNjHl+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 18:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:f9:83:2d:41:6c:68:cb:00:6f:89:be:a7:5d:b2:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Validity Not Before: Dec 7 18:01:10 2025 GMT Not After : Dec 8 18:01:10 2025 GMT Subject: CN=a3fade0a407cc6668e15d1527826c37ce2f235b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:67:f0:1a:26:e9:75:d7:36:a2:b4:60:ba:79: d6:f0:a4:75:09:c1:9d:c5:39:bb:76:b2:93:9e:4b: b7:54:70:5f:72:a2:a2:a5:9d:37:2a:bd:5a:66:3c: 58:a0:88:8f:f2:eb:ab:dd:95:3c:4b:67:97:1a:d7: 17:9f:41:27:2e:32:90:5c:50:f0:62:1a:92:04:57: fa:84:a6:68:97:7f:98:b7:8f:aa:c5:de:01:b2:eb: 1f:8d:0e:c6:fe:54:4b:41:df:d2:e7:5d:0c:d5:37: cc:e5:fe:b3:81:3b:49:d5:79:0f:ac:a6:18:55:5c: 0c:d7:6c:be:00:bb:6e:18:a0:2a:ec:7d:b5:bd:63: 51:12:d0:b5:e7:34:b7:f6:9a:6c:8e:af:85:23:48: c2:ab:38:01:52:f4:d8:73:ee:be:ce:8a:ee:00:7f: 7b:04:d4:e9:a3:fd:19:6b:fe:99:ec:fd:28:bb:31: 4b:f2:a7:bd:26:c9:fa:19:19:ff:ca:0c:db:c5:c3: a2:c3:a4:37:07:08:96:8e:97:63:5c:c2:79:6c:cd: 95:3b:3d:33:d5:aa:82:5f:60:5e:4a:fb:4c:e5:c2: 69:fb:61:e5:2c:32:58:e5:f8:6d:f7:a6:fe:82:00: f0:8d:87:76:bb:d7:48:0d:4d:ba:9f:16:74:bd:e4: 34:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:FA:DE:0A:40:7C:C6:66:8E:15:D1:52:78:26:C3:7C:E2:F2:35:B9 X509v3 Authority Key Identifier: keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:f1:36:af:69:52:ef:72:de:3d:53:d2:40:d4:6f:4d:fd:1d: 3b:78:18:bd:a7:9a:b2:cd:2c:82:b3:49:7e:58:52:1d:f0:ac: 0d:ed:43:14:f7:11:64:03:35:66:a4:d7:d1:dc:48:49:3a:88: e3:e0:08:d4:83:84:12:69:55:86:83:d0:6a:65:38:ae:a9:b9: 62:f2:ce:62:91:ce:0e:22:35:34:a2:74:f6:16:f0:b6:fe:9f: 24:dd:10:bd:5c:d5:ea:3e:02:27:9f:e1:1d:35:10:7d:a6:65: 12:40:06:d8:c4:6e:77:35:45:ab:4f:1f:5f:b2:dd:f4:40:1e: 46:c0:68:1f:8e:08:b6:38:12:98:f1:15:9e:41:52:e5:7e:5b: d3:f8:5d:d7:65:6b:d9:83:70:fc:a7:39:8d:9e:a5:07:f6:97: 57:e5:42:ac:5d:69:ec:b3:df:3b:f6:83:e3:8a:6d:49:a5:75: 57:64:d3:aa:4b:75:76:4b:df:a8:49:0c:db:02:77:87:9b:21: 85:4e:2c:b5:35:68:40:25:39:82:c9:32:3c:d5:c4:5b:a5:ad: 5b:9d:e9:da:5a:70:32:9d:24:20:3f:16:bc:3c:c5:04:32:2e: e1:67:0c:92:53:c1:97:89:bb:fa:35:5e:2b:ea:b4:a1:37:47: ba:4c:f5:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr5+YMtQWxoywBvib6nXbLUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi ZTAwNWQwHhcNMjUxMjA3MTgwMTEwWhcNMjUxMjA4MTgwMTEwWjAzMTEwLwYDVQQD EyhhM2ZhZGUwYTQwN2NjNjY2OGUxNWQxNTI3ODI2YzM3Y2UyZjIzNWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimfwGibpddc2orRgunnW8KR1CcGd xTm7drKTnku3VHBfcqKipZ03Kr1aZjxYoIiP8uur3ZU8S2eXGtcXn0EnLjKQXFDw YhqSBFf6hKZol3+Yt4+qxd4BsusfjQ7G/lRLQd/S510M1TfM5f6zgTtJ1XkPrKYY VVwM12y+ALtuGKAq7H21vWNREtC15zS39ppsjq+FI0jCqzgBUvTYc+6+zoruAH97 BNTpo/0Za/6Z7P0ouzFL8qe9Jsn6GRn/ygzbxcOiw6Q3BwiWjpdjXMJ5bM2VOz0z 1aqCX2BeSvtM5cJp+2HlLDJY5fht96b+ggDwjYd2u9dIDU26nxZ0veQ01QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKP63gpAfMZmjhXRUngmw3zi8jW5MB8GA1UdIwQY MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt ZTEyYjE2NDIxNWI5LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5 LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2/E2r2lS 73LePVPSQNRvTf0dO3gYvaeass0sgrNJflhSHfCsDe1DFPcRZAM1ZqTX0dxISTqI 4+AI1IOEEmlVhoPQamU4rqm5YvLOYpHODiI1NKJ09hbwtv6fJN0QvVzV6j4CJ5/h HTUQfaZlEkAG2MRudzVFq08fX7Ld9EAeRsBoH44ItjgSmPEVnkFS5X5b0/hd12Vr 2YNw/Kc5jZ6lB/aXV+VCrF1p7LPfO/aD44ptSaV1V2TTqkt1dkvfqEkM2wJ3h5sh hU4stTVoQCU5gskyPNXEW6WtW53p2lpwMp0kID8WvDzFBDIu4WcMklPBl4m7+jVe K+q0oTdHukz1pA== -----END CERTIFICATE-----Generated at Mon Dec 8 03:17:08 2025 by rpki-client