This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft File: OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft (raw, json) Hash identifier: RXM+BmsMgRjz1T+BW8RfpyR99Bb7vVoSBS1wN6hh208= Subject key identifier: 00:DA:9E:34:68:0B:EB:76:3A:2B:6A:DC:9B:92:56:B5:FE:39:55:C7 Authority key identifier: 39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5 Certificate issuer: /CN=3964cdeee346116cb9641ba4800f55b9906dc3a5 Certificate serial: 019B329EF1F28CFC2BBFC54FDD911827F3F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft Manifest number: 06F9 Signing time: Thu 18 Dec 2025 18:00:35 +0000 Manifest this update: Thu 18 Dec 2025 18:00:35 +0000 Manifest next update: Fri 19 Dec 2025 18:00:35 +0000 Files and hashes: 1: BsLLTJoL5Z4HGp4lHrRp2sggxy8.roa (hash: KOPhzfVSci9RxNPGk2QlpxdIKfmzye/4QJQFoBktHeg=) 2: OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl (hash: JuzNIhizBgzIG7hcK7RRJH0tKtwgpS1Vj6vn1ZolnHE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 18:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:9e:f1:f2:8c:fc:2b:bf:c5:4f:dd:91:18:27:f3:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3964cdeee346116cb9641ba4800f55b9906dc3a5 Validity Not Before: Dec 18 18:00:35 2025 GMT Not After : Dec 19 18:00:35 2025 GMT Subject: CN=00da9e34680beb763a2b6adc9b9256b5fe3955c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0b:85:ee:bf:31:b7:af:e6:be:60:87:05:65: 09:d5:6a:37:09:78:b6:63:56:4a:a3:83:03:c3:13: b3:eb:e6:2a:e5:a2:b6:9e:c0:5e:5e:ad:96:e8:aa: e0:45:70:40:b2:52:01:65:58:db:07:3c:4d:58:66: bd:29:3b:c1:e6:e5:d4:b6:62:1a:fa:ec:dd:ee:1b: 1f:6e:c6:3f:c0:2f:5c:e6:56:0b:28:b3:b1:c3:74: 32:9d:d4:b8:c5:63:b3:3e:32:03:9c:00:2c:e3:c6: 73:2c:99:aa:b2:8b:b6:92:44:4f:1e:86:65:c1:ce: 1e:4c:5a:cd:60:64:d5:ad:ac:31:20:05:b3:ce:37: f3:a2:46:fd:04:66:53:b2:21:fc:f6:ec:85:b2:13: cf:e6:e0:86:73:c2:be:3d:64:f3:77:91:8f:55:f6: ff:7b:39:fa:7c:39:25:00:aa:de:70:21:ba:7d:ec: e6:16:df:48:7c:96:39:2a:fa:ac:8e:cc:4f:fe:2d: 3e:2a:5f:45:f2:bc:c0:5d:20:f5:87:40:98:18:61: 7e:9c:d1:10:40:a6:ad:24:9d:dd:3c:7a:7d:68:0b: b7:40:a5:1a:b2:15:ca:1c:0a:eb:33:30:9c:c8:76: bd:7c:d4:88:3d:14:61:e1:41:04:96:7e:21:0e:c9: ba:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:DA:9E:34:68:0B:EB:76:3A:2B:6A:DC:9B:92:56:B5:FE:39:55:C7 X509v3 Authority Key Identifier: keyid:39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:c1:f9:3e:2c:50:fb:65:20:ea:a0:97:99:57:b4:90:43:46: b0:c4:2e:d9:8f:70:ba:3b:0b:be:b9:e7:b9:40:d2:fb:f6:2b: 3d:be:e3:9b:a4:1b:63:02:a5:af:ce:a5:ae:a7:ce:86:1e:25: d0:87:b7:8b:0a:80:9b:4b:c5:20:36:2c:5f:0a:f9:1a:17:c7: e0:57:88:6f:1d:f2:b4:e5:d7:ee:31:52:06:e3:4a:55:ec:17: a5:f3:88:58:25:8c:5f:9a:5f:e2:d0:c0:7c:e1:53:5c:c4:60: 83:ff:0e:d0:08:e5:65:0c:38:93:1e:09:1b:8b:51:6a:11:36: c5:1a:e5:bf:44:33:f4:18:1c:74:8a:a9:ca:23:bc:d1:ce:69: bc:d0:86:40:78:79:65:32:9d:19:28:53:04:51:11:42:f7:61: ca:5b:63:3b:94:1a:77:ca:4c:c7:33:25:ee:d6:3b:dc:50:7a: 14:6c:bc:b4:92:51:8e:e6:e0:77:8c:05:b7:60:d6:eb:58:13: 90:22:6b:79:53:79:73:f9:69:20:66:fb:72:4b:ad:82:65:62: 57:ac:02:6b:1b:2c:f7:ff:12:c0:1e:5b:e5:6c:80:51:7e:30: d5:b8:de:56:57:1c:55:c3:14:d0:31:de:70:dc:26:6e:54:3c: e3:41:f3:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsynvHyjPwrv8VP3ZEYJ/P3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5NjRjZGVlZTM0NjExNmNiOTY0MWJhNDgwMGY1NWI5OTA2 ZGMzYTUwHhcNMjUxMjE4MTgwMDM1WhcNMjUxMjE5MTgwMDM1WjAzMTEwLwYDVQQD EygwMGRhOWUzNDY4MGJlYjc2M2EyYjZhZGM5YjkyNTZiNWZlMzk1NWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQuF7r8xt6/mvmCHBWUJ1Wo3CXi2 Y1ZKo4MDwxOz6+Yq5aK2nsBeXq2W6KrgRXBAslIBZVjbBzxNWGa9KTvB5uXUtmIa +uzd7hsfbsY/wC9c5lYLKLOxw3QyndS4xWOzPjIDnAAs48ZzLJmqsou2kkRPHoZl wc4eTFrNYGTVrawxIAWzzjfzokb9BGZTsiH89uyFshPP5uCGc8K+PWTzd5GPVfb/ ezn6fDklAKrecCG6fezmFt9IfJY5KvqsjsxP/i0+Kl9F8rzAXSD1h0CYGGF+nNEQ QKatJJ3dPHp9aAu3QKUashXKHArrMzCcyHa9fNSIPRRh4UEEln4hDsm66wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFADanjRoC+t2Oitq3JuSVrX+OVXHMB8GA1UdIwQY MBaAFDlkze7jRhFsuWQbpIAPVbmQbcOlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1dUTjd1TkdFV3k1WkJ1a2dBOVZ1WkJ0dzZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hMDE4YTctNmI1Yy00MjM5LTg5Yjct MmEwMjQ3ZmJiNmQ1LzEvT1dUTjd1TkdFV3k1WkJ1a2dBOVZ1WkJ0dzZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9hMDE4YTctNmI1Yy00MjM5LTg5YjctMmEwMjQ3ZmJiNmQ1 LzEvT1dUTjd1TkdFV3k1WkJ1a2dBOVZ1WkJ0dzZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfsH5PixQ +2Ug6qCXmVe0kENGsMQu2Y9wujsLvrnnuUDS+/YrPb7jm6QbYwKlr86lrqfOhh4l 0Ie3iwqAm0vFIDYsXwr5GhfH4FeIbx3ytOXX7jFSBuNKVewXpfOIWCWMX5pf4tDA fOFTXMRgg/8O0AjlZQw4kx4JG4tRahE2xRrlv0Qz9BgcdIqpyiO80c5pvNCGQHh5 ZTKdGShTBFERQvdhyltjO5Qad8pMxzMl7tY73FB6FGy8tJJRjubgd4wFt2DW61gT kCJreVN5c/lpIGb7ckutgmViV6wCaxss9/8SwB5b5WyAUX4w1bjeVlccVcMU0DHe cNwmblQ840HzwQ== -----END CERTIFICATE-----Generated at Fri Dec 19 01:57:27 2025 by rpki-client