This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft File: ow9vtvXIDKSmA4J8lrO99grVY6o.mft (raw, json) Hash identifier: B47Rw1muDJ9rKRnT50TwUqQYjY/SfVQTKhotqgBmqZg= Subject key identifier: 9E:25:82:C8:F1:26:49:C2:84:A2:B5:92:0B:48:4C:68:0E:65:39:53 Authority key identifier: A3:0F:6F:B6:F5:C8:0C:A4:A6:03:82:7C:96:B3:BD:F6:0A:D5:63:AA Certificate issuer: /CN=a30f6fb6f5c80ca4a603827c96b3bdf60ad563aa Certificate serial: 019B3BD988E5927BB6D040C69629C9C516AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 13:01:10 +0000 Manifest this update: Sat 20 Dec 2025 13:01:10 +0000 Manifest next update: Sun 21 Dec 2025 13:01:10 +0000 Files and hashes: 1: heeGDLviBMl1vF5Zbjvq6fTed7g.roa (hash: cRDDBBpd8BeTbZa8h3z0CLG5of55GqXqgBbWU/LBe+M=) 2: ow9vtvXIDKSmA4J8lrO99grVY6o.crl (hash: +ugUuMjdb6Do2Tx1IHqukwsmcMYZgvbRjJPGljz2A6U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.crl rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:88:e5:92:7b:b6:d0:40:c6:96:29:c9:c5:16:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a30f6fb6f5c80ca4a603827c96b3bdf60ad563aa Validity Not Before: Dec 20 13:01:10 2025 GMT Not After : Dec 21 13:01:10 2025 GMT Subject: CN=9e2582c8f12649c284a2b5920b484c680e653953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e6:f2:fe:2d:5e:83:2f:ab:b7:c4:f7:02:b9: 88:fa:52:7c:96:56:80:e6:92:5a:af:00:92:c9:db: c0:7f:15:8c:0b:03:6a:bd:a1:b2:1d:f9:20:4d:5f: 1f:ba:ad:28:1f:fd:85:db:0c:42:d8:6a:c5:14:fb: 39:f5:15:77:da:3a:8c:04:cc:b6:b7:7e:7d:34:b8: b7:37:02:26:1e:f0:91:79:17:1a:d1:97:68:46:1e: f8:67:20:2d:84:af:27:fb:88:eb:60:26:21:42:8f: 7d:82:f0:c7:48:70:fa:cd:04:df:d1:63:96:9f:56: 53:2b:17:50:f1:20:ca:c5:2d:99:7d:0a:10:02:ce: 42:a8:b5:cd:bd:b6:97:6d:3a:25:56:67:53:bc:03: bb:bc:df:3c:db:f2:64:5d:ad:e7:0f:5e:6c:bc:62: e9:85:0e:e7:08:ab:6e:02:73:b7:1c:ef:c7:9d:94: b6:a9:9f:a5:7a:0c:49:1d:e1:1f:4b:fb:44:ce:fc: ce:bd:e1:c1:60:63:0f:84:5e:2e:b4:09:9d:6c:7b: 22:f6:0a:1f:e5:be:0f:bc:2d:43:f1:7d:8e:b1:5b: 6c:27:26:5d:33:66:11:c5:34:41:20:8b:85:6b:c9: c8:5f:28:1f:66:af:73:3d:9d:00:59:bf:07:e2:7a: aa:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:25:82:C8:F1:26:49:C2:84:A2:B5:92:0B:48:4C:68:0E:65:39:53 X509v3 Authority Key Identifier: keyid:A3:0F:6F:B6:F5:C8:0C:A4:A6:03:82:7C:96:B3:BD:F6:0A:D5:63:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:be:bb:34:34:a0:a4:52:64:a2:77:88:dd:36:c5:f9:8a:60: 60:45:fd:a4:40:bd:8b:72:58:e6:b3:13:c6:f8:00:51:f8:ed: 40:a4:e2:34:fa:b5:b7:8f:21:cf:4c:aa:07:44:b7:c5:cc:1c: e3:09:19:37:fe:7c:22:90:36:aa:2a:10:c9:3f:ec:e1:7b:7a: 71:74:ba:d6:ed:9c:5b:e0:7b:a3:1d:b7:99:d2:78:0d:59:03: de:3f:a2:f8:98:03:77:18:5d:57:c6:3f:e6:8b:61:d8:16:f3: 1b:a3:1b:eb:a8:d8:52:bb:e3:aa:e5:f7:b1:1e:8c:f6:21:62: 4b:cb:5b:4a:55:f3:d2:c7:c9:da:d5:68:6d:1d:2b:8a:71:03: 2b:05:81:f3:e3:b2:63:06:82:d9:4b:9e:40:84:ab:b1:c7:50: d3:4d:c6:56:0b:48:b4:37:ad:90:7e:b0:b6:64:23:d5:91:63: 23:37:29:b5:c2:b6:61:5c:04:f1:a3:e7:26:23:28:8a:5c:4f: 24:f7:da:6c:2d:60:55:95:15:7e:6c:e7:af:79:cb:dc:c2:28: d3:70:d2:7f:19:09:0b:84:eb:70:21:ba:f7:6f:9b:81:9b:0b: 77:87:e8:b5:3d:66:7e:7b:0d:19:0c:4a:ef:32:a7:3c:68:f9: 80:e2:e4:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72Yjlknu20EDGlinJxRasMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzMGY2ZmI2ZjVjODBjYTRhNjAzODI3Yzk2YjNiZGY2MGFk NTYzYWEwHhcNMjUxMjIwMTMwMTEwWhcNMjUxMjIxMTMwMTEwWjAzMTEwLwYDVQQD Eyg5ZTI1ODJjOGYxMjY0OWMyODRhMmI1OTIwYjQ4NGM2ODBlNjUzOTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuby/i1egy+rt8T3ArmI+lJ8llaA 5pJarwCSydvAfxWMCwNqvaGyHfkgTV8fuq0oH/2F2wxC2GrFFPs59RV32jqMBMy2 t359NLi3NwImHvCReRca0ZdoRh74ZyAthK8n+4jrYCYhQo99gvDHSHD6zQTf0WOW n1ZTKxdQ8SDKxS2ZfQoQAs5CqLXNvbaXbTolVmdTvAO7vN882/JkXa3nD15svGLp hQ7nCKtuAnO3HO/HnZS2qZ+legxJHeEfS/tEzvzOveHBYGMPhF4utAmdbHsi9gof 5b4PvC1D8X2OsVtsJyZdM2YRxTRBIIuFa8nIXygfZq9zPZ0AWb8H4nqqiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ4lgsjxJknChKK1kgtITGgOZTlTMB8GA1UdIwQY MBaAFKMPb7b1yAykpgOCfJazvfYK1WOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3c5dnR2WElES1NtQTRKOGxyTzk5Z3JWWTZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9kN2U2NjgtZjA3ZS00MzhiLTlmYTgt ODBhYjc3OWVlZDEwLzEvb3c5dnR2WElES1NtQTRKOGxyTzk5Z3JWWTZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9kN2U2NjgtZjA3ZS00MzhiLTlmYTgtODBhYjc3OWVlZDEw LzEvb3c5dnR2WElES1NtQTRKOGxyTzk5Z3JWWTZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYb67NDSg pFJkoneI3TbF+YpgYEX9pEC9i3JY5rMTxvgAUfjtQKTiNPq1t48hz0yqB0S3xcwc 4wkZN/58IpA2qioQyT/s4Xt6cXS61u2cW+B7ox23mdJ4DVkD3j+i+JgDdxhdV8Y/ 5oth2BbzG6Mb66jYUrvjquX3sR6M9iFiS8tbSlXz0sfJ2tVobR0rinEDKwWB8+Oy YwaC2UueQISrscdQ003GVgtItDetkH6wtmQj1ZFjIzcptcK2YVwE8aPnJiMoilxP JPfabC1gVZUVfmznr3nL3MIo03DSfxkJC4TrcCG692+bgZsLd4fotT1mfnsNGQxK 7zKnPGj5gOLkug== -----END CERTIFICATE-----Generated at Sat Dec 20 18:16:17 2025 by rpki-client