This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.mft File: ov7n60DFpFQ5UC658zG-_qxPjQw.mft (raw, json) Hash identifier: LYAZFhJtxxGGMfi6sKPUkfuGeURGE5P81mV8dnoR7ro= Subject key identifier: 07:CF:F7:24:D8:10:60:D5:3C:55:CB:3D:B2:6D:B7:08:57:93:34:F4 Authority key identifier: A2:FE:E7:EB:40:C5:A4:54:39:50:2E:B9:F3:31:BE:FE:AC:4F:8D:0C Certificate issuer: /CN=a2fee7eb40c5a45439502eb9f331befeac4f8d0c Certificate serial: 019B4324B94A9B76C34A3BD0B71632D7E454 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ov7n60DFpFQ5UC658zG-_qxPjQw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.mft Manifest number: A6 Signing time: Sun 21 Dec 2025 23:00:38 +0000 Manifest this update: Sun 21 Dec 2025 23:00:38 +0000 Manifest next update: Mon 22 Dec 2025 23:00:38 +0000 Files and hashes: 1: cLXJPZRMjACNJWdbzWBHdJk4Gq0.roa (hash: 67waz9BUSl1rmmTlp4M5HuhrKHWIN9dnMCNTzaYDP50=) 2: ov7n60DFpFQ5UC658zG-_qxPjQw.crl (hash: l+zLm+Yuielyh0eFPBoIqaWS/ZrwzDl/x/QdfhAxZaE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.crl rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.mft rsync://rpki.ripe.net/repository/DEFAULT/ov7n60DFpFQ5UC658zG-_qxPjQw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:24:b9:4a:9b:76:c3:4a:3b:d0:b7:16:32:d7:e4:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2fee7eb40c5a45439502eb9f331befeac4f8d0c Validity Not Before: Dec 21 23:00:38 2025 GMT Not After : Dec 22 23:00:38 2025 GMT Subject: CN=07cff724d81060d53c55cb3db26db708579334f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:3f:88:13:b2:1e:c0:32:da:ef:77:bf:ca:e7: 7d:73:74:42:f9:19:4b:94:1c:97:3b:f6:81:ec:d1: 01:18:2e:38:d6:4d:1f:97:ce:dd:f8:61:9c:1d:2c: 2f:c5:99:87:e6:1b:5d:7f:37:90:d8:bc:ae:85:59: 8b:63:e6:de:72:4f:68:55:5c:22:1f:4e:28:80:b9: 4a:78:f7:d7:ab:c2:06:c8:95:13:81:f9:55:49:a3: 3f:4b:40:b7:6b:d7:ae:de:67:11:79:a6:4c:2a:0f: d0:e0:7e:c1:b3:e4:3a:08:d4:bc:c7:79:d1:ae:6f: fd:9c:f8:f2:d0:7b:6c:a8:14:10:8c:51:c0:24:37: 36:5f:5e:4f:fd:bf:b7:e8:50:7f:10:d7:db:2d:4c: 58:a8:28:df:46:88:ad:a2:34:e0:e3:88:fa:35:da: ae:05:94:37:c7:e8:9e:f6:7c:3f:32:f5:cb:e6:39: 6b:9a:ac:9c:bd:b3:f3:ff:75:d4:02:45:17:4e:6d: 8e:ac:1d:5b:9e:2e:c8:95:ed:1f:47:7e:54:e4:3b: 96:d5:d3:aa:81:32:f9:f9:1e:0b:09:ca:a6:e1:8f: 37:c9:6e:c8:b1:88:60:e8:fd:57:02:9e:57:f6:2d: 54:41:3c:7a:25:66:39:4a:f1:71:65:39:1b:f3:60: d1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:CF:F7:24:D8:10:60:D5:3C:55:CB:3D:B2:6D:B7:08:57:93:34:F4 X509v3 Authority Key Identifier: keyid:A2:FE:E7:EB:40:C5:A4:54:39:50:2E:B9:F3:31:BE:FE:AC:4F:8D:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ov7n60DFpFQ5UC658zG-_qxPjQw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:94:cd:32:21:dd:30:e9:a3:63:cb:f9:c7:e8:cb:80:4d:71: a9:72:27:78:09:bf:2f:51:fb:84:e5:59:30:41:3f:f5:63:1a: 27:3e:86:d0:9d:cf:68:b1:96:14:46:03:72:07:65:1c:53:73: 6b:43:29:a3:4f:12:85:fc:b2:16:7e:54:15:3c:e0:0c:c3:bd: 52:3c:11:95:dc:f9:78:77:51:e5:14:89:b7:93:c1:ef:fb:94: 3f:f1:92:78:fe:96:09:07:03:8e:f0:37:b7:e0:30:23:a8:e7: af:fa:79:47:12:1e:6e:59:34:28:98:6a:be:aa:b3:27:cc:92: ae:eb:8c:64:14:5d:e2:24:2b:f1:0b:e1:34:ca:d9:df:53:04: 32:2a:12:5b:79:d2:21:3a:ae:37:25:80:3a:4d:0c:68:ba:4e: fc:ad:0a:a1:cd:06:2b:4c:3c:ad:67:16:99:e5:b6:cc:e1:15: f9:85:16:74:cb:13:d5:ae:01:39:8d:a1:bf:a1:22:3a:77:80: 78:5d:ae:18:eb:64:5e:44:fb:b3:94:57:34:c6:3d:24:77:45: 43:a1:2e:83:80:17:06:37:8a:16:f6:71:a3:c0:70:ec:1b:8e: ef:ec:fc:ea:b0:5f:50:0e:b2:43:19:fa:29:b9:09:a4:ab:bc: a0:35:b8:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJLlKm3bDSjvQtxYy1+RUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZmVlN2ViNDBjNWE0NTQzOTUwMmViOWYzMzFiZWZlYWM0 ZjhkMGMwHhcNMjUxMjIxMjMwMDM4WhcNMjUxMjIyMjMwMDM4WjAzMTEwLwYDVQQD EygwN2NmZjcyNGQ4MTA2MGQ1M2M1NWNiM2RiMjZkYjcwODU3OTMzNGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9z+IE7IewDLa73e/yud9c3RC+RlL lByXO/aB7NEBGC441k0fl87d+GGcHSwvxZmH5htdfzeQ2LyuhVmLY+beck9oVVwi H04ogLlKePfXq8IGyJUTgflVSaM/S0C3a9eu3mcReaZMKg/Q4H7Bs+Q6CNS8x3nR rm/9nPjy0HtsqBQQjFHAJDc2X15P/b+36FB/ENfbLUxYqCjfRoitojTg44j6Ndqu BZQ3x+ie9nw/MvXL5jlrmqycvbPz/3XUAkUXTm2OrB1bni7Ile0fR35U5DuW1dOq gTL5+R4LCcqm4Y83yW7IsYhg6P1XAp5X9i1UQTx6JWY5SvFxZTkb82DRlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAfP9yTYEGDVPFXLPbJttwhXkzT0MB8GA1UdIwQY MBaAFKL+5+tAxaRUOVAuufMxvv6sT40MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3Y3bjYwREZwRlE1VUM2NTh6Ry1fcXhQalF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi83Njk3ZjUtNDQ4YS00YzlhLTk1OWEt NzA2ZGFlNTFjNDAxLzEvb3Y3bjYwREZwRlE1VUM2NTh6Ry1fcXhQalF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi83Njk3ZjUtNDQ4YS00YzlhLTk1OWEtNzA2ZGFlNTFjNDAx LzEvb3Y3bjYwREZwRlE1VUM2NTh6Ry1fcXhQalF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP5TNMiHd MOmjY8v5x+jLgE1xqXIneAm/L1H7hOVZMEE/9WMaJz6G0J3PaLGWFEYDcgdlHFNz a0Mpo08ShfyyFn5UFTzgDMO9UjwRldz5eHdR5RSJt5PB7/uUP/GSeP6WCQcDjvA3 t+AwI6jnr/p5RxIeblk0KJhqvqqzJ8ySruuMZBRd4iQr8QvhNMrZ31MEMioSW3nS ITquNyWAOk0MaLpO/K0Koc0GK0w8rWcWmeW2zOEV+YUWdMsT1a4BOY2hv6EiOneA eF2uGOtkXkT7s5RXNMY9JHdFQ6Eug4AXBjeKFvZxo8Bw7BuO7+z86rBfUA6yQxn6 KbkJpKu8oDW42A== -----END CERTIFICATE-----Generated at Mon Dec 22 06:47:11 2025 by rpki-client