This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft File: ow9vtvXIDKSmA4J8lrO99grVY6o.mft (raw, json) Hash identifier: y3THycqrGgDI3P//5h/FLdHT/OQzC1K9aZ7lZfCfY30= Subject key identifier: A8:50:1F:5A:85:D6:6D:54:9A:AD:EE:2D:D4:18:80:55:0D:43:A5:D4 Authority key identifier: A3:0F:6F:B6:F5:C8:0C:A4:A6:03:82:7C:96:B3:BD:F6:0A:D5:63:AA Certificate issuer: /CN=a30f6fb6f5c80ca4a603827c96b3bdf60ad563aa Certificate serial: 019B22BE37C2A6C7021F825C9779CB83FF1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft Manifest number: 177A Signing time: Mon 15 Dec 2025 16:00:49 +0000 Manifest this update: Mon 15 Dec 2025 16:00:49 +0000 Manifest next update: Tue 16 Dec 2025 16:00:49 +0000 Files and hashes: 1: heeGDLviBMl1vF5Zbjvq6fTed7g.roa (hash: cRDDBBpd8BeTbZa8h3z0CLG5of55GqXqgBbWU/LBe+M=) 2: ow9vtvXIDKSmA4J8lrO99grVY6o.crl (hash: GdajpUM59nflBs+QqUc9Qt3LSQ4gETDztIuPg1JNacQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.crl rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:be:37:c2:a6:c7:02:1f:82:5c:97:79:cb:83:ff:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a30f6fb6f5c80ca4a603827c96b3bdf60ad563aa Validity Not Before: Dec 15 16:00:49 2025 GMT Not After : Dec 16 16:00:49 2025 GMT Subject: CN=a8501f5a85d66d549aadee2dd41880550d43a5d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:19:46:ea:92:30:64:b0:79:23:63:67:9a:b3: e1:74:6c:a6:6c:f6:9b:bc:0e:ca:a6:dd:2d:82:7f: 7f:95:64:c1:59:9f:d4:62:38:b6:5d:90:80:df:5d: 14:fc:74:1d:4a:ac:df:6e:c2:51:77:c2:da:d7:a5: 62:c5:4d:05:d8:fa:33:53:3c:44:eb:8b:71:b2:b6: be:0f:2a:9e:c5:14:bc:40:5c:e9:a3:8c:45:bb:c6: 16:20:56:d0:70:db:0d:ab:94:b5:e6:8d:29:6b:e5: 39:5e:f6:6d:35:05:ec:c1:96:ed:8e:69:09:2e:e1: a2:d4:5e:82:f1:88:3e:4c:f7:b1:b8:7b:5d:bd:ff: a7:43:2c:f5:ab:14:d7:a1:b3:a6:4b:5e:a9:e7:64: 5a:f6:2d:de:39:f7:69:1c:11:6c:9e:f2:42:1e:f5: 5f:39:b4:f3:1d:98:d8:4f:1c:de:af:92:61:f3:02: 43:f8:41:4d:93:a4:53:76:d9:75:c5:f7:4d:8e:33: 62:15:4e:fe:d0:c5:6d:10:f1:45:ab:2d:8e:94:63: 19:b3:13:1a:ff:a6:4f:e6:e8:fd:cb:b5:f5:1b:e8: 31:c8:c8:d7:17:30:e9:43:b2:2e:46:2f:28:75:3f: b0:3e:32:5f:ef:50:ad:a3:ee:94:18:7d:00:18:44: 36:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:50:1F:5A:85:D6:6D:54:9A:AD:EE:2D:D4:18:80:55:0D:43:A5:D4 X509v3 Authority Key Identifier: keyid:A3:0F:6F:B6:F5:C8:0C:A4:A6:03:82:7C:96:B3:BD:F6:0A:D5:63:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:65:a1:c5:72:1a:37:4c:f2:df:15:07:1d:03:dc:44:f8:e9: 28:d0:c5:71:a0:bc:62:f9:1e:e6:ab:45:b6:92:df:75:53:f5: 32:b6:19:ef:3f:b6:f1:e4:1c:87:9c:7c:01:55:4d:c9:8d:d6: cb:c4:a2:71:b8:21:69:16:92:10:85:03:d8:20:c8:a1:ee:fe: 7c:1b:8f:29:9d:12:db:8b:0b:11:e2:f3:5d:e3:7b:eb:90:c3: c0:fc:1e:c3:c2:80:a1:56:02:ad:35:a6:e3:52:65:f0:79:09: d2:c6:27:39:db:21:5e:dc:3f:4b:f6:17:64:01:d0:bb:d5:45: 26:b9:b0:2a:93:f9:28:3d:e5:5e:1b:be:ff:b2:64:f1:e9:3e: 9d:72:7d:8c:07:c3:6f:01:da:87:16:e3:a6:d1:e7:f0:03:2b: 33:08:06:1c:e0:04:24:ce:9c:84:0c:63:ca:fa:d4:c5:2b:74: 6f:49:5c:7d:5b:cc:5b:1b:ed:09:7b:12:64:e2:dc:69:1c:93: 1b:8e:b8:81:64:a2:7c:ff:46:39:31:e0:37:a7:0b:d3:28:9e: a9:f0:21:ed:ea:d5:ee:77:67:4f:2b:b9:c5:39:72:bf:16:fb: e2:b6:7e:d2:21:f4:29:4e:8d:c3:49:b1:f7:8e:62:ef:4b:a0: 17:b0:2a:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsivjfCpscCH4Jcl3nLg/8fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzMGY2ZmI2ZjVjODBjYTRhNjAzODI3Yzk2YjNiZGY2MGFk NTYzYWEwHhcNMjUxMjE1MTYwMDQ5WhcNMjUxMjE2MTYwMDQ5WjAzMTEwLwYDVQQD EyhhODUwMWY1YTg1ZDY2ZDU0OWFhZGVlMmRkNDE4ODA1NTBkNDNhNWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBlG6pIwZLB5I2NnmrPhdGymbPab vA7Kpt0tgn9/lWTBWZ/UYji2XZCA310U/HQdSqzfbsJRd8La16VixU0F2PozUzxE 64txsra+DyqexRS8QFzpo4xFu8YWIFbQcNsNq5S15o0pa+U5XvZtNQXswZbtjmkJ LuGi1F6C8Yg+TPexuHtdvf+nQyz1qxTXobOmS16p52Ra9i3eOfdpHBFsnvJCHvVf ObTzHZjYTxzer5Jh8wJD+EFNk6RTdtl1xfdNjjNiFU7+0MVtEPFFqy2OlGMZsxMa /6ZP5uj9y7X1G+gxyMjXFzDpQ7IuRi8odT+wPjJf71Cto+6UGH0AGEQ2HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKhQH1qF1m1Umq3uLdQYgFUNQ6XUMB8GA1UdIwQY MBaAFKMPb7b1yAykpgOCfJazvfYK1WOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3c5dnR2WElES1NtQTRKOGxyTzk5Z3JWWTZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9kN2U2NjgtZjA3ZS00MzhiLTlmYTgt ODBhYjc3OWVlZDEwLzEvb3c5dnR2WElES1NtQTRKOGxyTzk5Z3JWWTZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9kN2U2NjgtZjA3ZS00MzhiLTlmYTgtODBhYjc3OWVlZDEw LzEvb3c5dnR2WElES1NtQTRKOGxyTzk5Z3JWWTZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw2WhxXIa N0zy3xUHHQPcRPjpKNDFcaC8Yvke5qtFtpLfdVP1MrYZ7z+28eQch5x8AVVNyY3W y8SicbghaRaSEIUD2CDIoe7+fBuPKZ0S24sLEeLzXeN765DDwPwew8KAoVYCrTWm 41Jl8HkJ0sYnOdshXtw/S/YXZAHQu9VFJrmwKpP5KD3lXhu+/7Jk8ek+nXJ9jAfD bwHahxbjptHn8AMrMwgGHOAEJM6chAxjyvrUxSt0b0lcfVvMWxvtCXsSZOLcaRyT G464gWSifP9GOTHgN6cL0yieqfAh7erV7ndnTyu5xTlyvxb74rZ+0iH0KU6Nw0mx 945i70ugF7Aq4w== -----END CERTIFICATE-----Generated at Mon Dec 15 19:56:50 2025 by rpki-client