This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft File: OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft (raw, json) Hash identifier: CgKwvV2jlJlWPkxxLb8wZDB7P91s+xksXM9eREXo8BM= Subject key identifier: A9:56:9B:5D:57:D3:C7:7D:E1:34:48:00:8F:B4:61:D4:20:1B:9C:DA Authority key identifier: 39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5 Certificate issuer: /CN=3964cdeee346116cb9641ba4800f55b9906dc3a5 Certificate serial: 019B2EC23767BF07B806385BC8A7AAF398AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft Manifest number: 06F7 Signing time: Thu 18 Dec 2025 00:00:38 +0000 Manifest this update: Thu 18 Dec 2025 00:00:38 +0000 Manifest next update: Fri 19 Dec 2025 00:00:38 +0000 Files and hashes: 1: BsLLTJoL5Z4HGp4lHrRp2sggxy8.roa (hash: KOPhzfVSci9RxNPGk2QlpxdIKfmzye/4QJQFoBktHeg=) 2: OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl (hash: A753AMUM6X4GNw+pcYVxVSX+FacMSD5tKsEXtVXGNlg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:c2:37:67:bf:07:b8:06:38:5b:c8:a7:aa:f3:98:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3964cdeee346116cb9641ba4800f55b9906dc3a5 Validity Not Before: Dec 18 00:00:38 2025 GMT Not After : Dec 19 00:00:38 2025 GMT Subject: CN=a9569b5d57d3c77de13448008fb461d4201b9cda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8c:23:9c:cf:98:db:8b:02:3c:b0:e9:29:ff: 23:a9:79:f7:a3:98:6a:70:ff:05:96:26:17:bc:20: 62:0f:a0:72:76:a5:65:43:cd:bf:cd:1c:72:e5:b0: da:dc:0b:4d:2c:94:0e:5f:6f:d5:99:8c:cd:fb:38: ec:16:0f:b9:59:e6:be:9d:56:e8:69:26:b2:a6:88: 18:d9:50:3f:48:22:67:d9:e5:6f:e2:26:69:18:be: ad:ca:85:3e:9f:f0:c0:d2:09:63:de:a9:e8:73:67: df:91:85:14:c6:c0:ed:96:32:cd:b0:62:d4:b2:b2: a5:de:20:c4:fb:e1:f0:2b:c4:98:4a:fd:9c:fe:a3: c4:80:4d:bd:c6:d1:2e:5c:eb:51:2a:de:07:d0:e8: 79:ad:26:1f:8e:12:16:b4:b8:fa:96:f0:9d:58:48: 71:58:84:ce:c4:1a:8c:b6:2b:2c:bb:ea:d9:96:da: ec:d9:86:e8:f5:f4:7a:62:3b:89:96:c4:32:ac:86: d6:3c:fa:da:13:61:aa:87:2a:b8:af:be:7a:43:83: fa:84:3b:d3:c0:0f:64:03:74:63:0d:cd:09:39:f9: 10:10:34:d6:ab:b7:be:7c:de:46:72:0f:ef:59:d1: cf:7a:7d:b3:30:e4:fa:fe:3d:6c:0b:15:99:54:74: 05:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:56:9B:5D:57:D3:C7:7D:E1:34:48:00:8F:B4:61:D4:20:1B:9C:DA X509v3 Authority Key Identifier: keyid:39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:20:23:c9:2b:c2:0b:69:5b:2c:0f:92:c2:5a:7e:a6:8a:02: 01:be:67:e8:4f:99:31:01:d6:67:36:5e:93:e7:7b:61:86:c0: 7b:71:89:a8:6e:7b:aa:4e:28:76:af:e9:f4:1e:63:17:2e:e5: 49:ec:48:da:d8:27:64:c7:55:93:74:fe:f6:e4:05:a0:29:8f: e3:1b:0e:26:59:ce:b7:93:9d:e9:22:ac:1f:88:c2:15:47:d3: 6b:e0:8d:45:85:55:fc:e7:ab:1b:48:9f:29:9d:0a:f6:59:93: 99:80:48:b0:18:89:11:9e:da:cb:10:fa:55:68:92:69:69:25: 92:03:8d:64:99:b5:a9:03:72:59:f9:55:a7:82:b9:42:c8:fe: 96:25:b9:85:fa:d3:ab:23:95:27:a2:c0:02:da:e8:7c:05:dd: 02:f1:ee:0c:6f:84:8e:d7:35:51:5f:9c:09:e7:e8:b1:da:50: 27:5e:d3:b5:3c:a6:55:a6:6e:09:45:5f:31:ee:86:b7:0b:97: 7c:09:89:f8:51:5c:1c:c3:88:24:99:5a:76:b4:3e:18:68:d6: d5:0b:12:2a:3c:2b:8f:7d:33:11:7a:08:45:e7:eb:ff:af:47: 71:75:84:b3:1f:d7:2b:ea:6e:18:a6:ab:31:4d:34:3f:b2:d2: 34:01:ae:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuwjdnvwe4BjhbyKeq85ivMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5NjRjZGVlZTM0NjExNmNiOTY0MWJhNDgwMGY1NWI5OTA2 ZGMzYTUwHhcNMjUxMjE4MDAwMDM4WhcNMjUxMjE5MDAwMDM4WjAzMTEwLwYDVQQD EyhhOTU2OWI1ZDU3ZDNjNzdkZTEzNDQ4MDA4ZmI0NjFkNDIwMWI5Y2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqowjnM+Y24sCPLDpKf8jqXn3o5hq cP8FliYXvCBiD6BydqVlQ82/zRxy5bDa3AtNLJQOX2/VmYzN+zjsFg+5Wea+nVbo aSaypogY2VA/SCJn2eVv4iZpGL6tyoU+n/DA0glj3qnoc2ffkYUUxsDtljLNsGLU srKl3iDE++HwK8SYSv2c/qPEgE29xtEuXOtRKt4H0Oh5rSYfjhIWtLj6lvCdWEhx WITOxBqMtissu+rZltrs2Ybo9fR6YjuJlsQyrIbWPPraE2Gqhyq4r756Q4P6hDvT wA9kA3RjDc0JOfkQEDTWq7e+fN5Gcg/vWdHPen2zMOT6/j1sCxWZVHQFFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKlWm11X08d94TRIAI+0YdQgG5zaMB8GA1UdIwQY MBaAFDlkze7jRhFsuWQbpIAPVbmQbcOlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1dUTjd1TkdFV3k1WkJ1a2dBOVZ1WkJ0dzZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hMDE4YTctNmI1Yy00MjM5LTg5Yjct MmEwMjQ3ZmJiNmQ1LzEvT1dUTjd1TkdFV3k1WkJ1a2dBOVZ1WkJ0dzZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9hMDE4YTctNmI1Yy00MjM5LTg5YjctMmEwMjQ3ZmJiNmQ1 LzEvT1dUTjd1TkdFV3k1WkJ1a2dBOVZ1WkJ0dzZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlyAjySvC C2lbLA+Swlp+pooCAb5n6E+ZMQHWZzZek+d7YYbAe3GJqG57qk4odq/p9B5jFy7l SexI2tgnZMdVk3T+9uQFoCmP4xsOJlnOt5Od6SKsH4jCFUfTa+CNRYVV/OerG0if KZ0K9lmTmYBIsBiJEZ7ayxD6VWiSaWklkgONZJm1qQNyWflVp4K5Qsj+liW5hfrT qyOVJ6LAAtrofAXdAvHuDG+Ejtc1UV+cCefosdpQJ17TtTymVaZuCUVfMe6GtwuX fAmJ+FFcHMOIJJladrQ+GGjW1QsSKjwrj30zEXoIRefr/69HcXWEsx/XK+puGKar MU00P7LSNAGugQ== -----END CERTIFICATE-----Generated at Thu Dec 18 08:02:13 2025 by rpki-client