This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/1ade0c-9aed-437b-8f18-27f2dca47a2c/1/OVUKm3Usc5f29p6qaoDwm6f32Co.mft File: OVUKm3Usc5f29p6qaoDwm6f32Co.mft (raw, json) Hash identifier: /qvET8fAvQC3vIG4TDX6B1+UaNIi2y7jizgOpEkb5og= Subject key identifier: 5A:76:25:97:4B:20:9E:FA:7A:D2:61:63:98:06:82:F5:11:CD:26:A7 Authority key identifier: 39:55:0A:9B:75:2C:73:97:F6:F6:9E:AA:6A:80:F0:9B:A7:F7:D8:2A Certificate issuer: /CN=39550a9b752c7397f6f69eaa6a80f09ba7f7d82a Certificate serial: 019B5A88E27596D7458E3581DB55B06DE328 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OVUKm3Usc5f29p6qaoDwm6f32Co.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/1ade0c-9aed-437b-8f18-27f2dca47a2c/1/OVUKm3Usc5f29p6qaoDwm6f32Co.mft Manifest number: 0194 Signing time: Fri 26 Dec 2025 12:01:18 +0000 Manifest this update: Fri 26 Dec 2025 12:01:18 +0000 Manifest next update: Sat 27 Dec 2025 12:01:18 +0000 Files and hashes: 1: OVUKm3Usc5f29p6qaoDwm6f32Co.crl (hash: Dt11QVwWahSONXbC4BvUhAYv0Ef3dcsm9RCInkCIgKI=) 2: ylMtZ7R7fkeUU1B9KHOMXQfIdGs.roa (hash: DSXOCCTFabtrlzKxDb8ds7fUzGa0VH3hHQbIA5SQrgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/1ade0c-9aed-437b-8f18-27f2dca47a2c/1/OVUKm3Usc5f29p6qaoDwm6f32Co.crl rsync://rpki.ripe.net/repository/DEFAULT/96/1ade0c-9aed-437b-8f18-27f2dca47a2c/1/OVUKm3Usc5f29p6qaoDwm6f32Co.mft rsync://rpki.ripe.net/repository/DEFAULT/OVUKm3Usc5f29p6qaoDwm6f32Co.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:e2:75:96:d7:45:8e:35:81:db:55:b0:6d:e3:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39550a9b752c7397f6f69eaa6a80f09ba7f7d82a Validity Not Before: Dec 26 12:01:18 2025 GMT Not After : Dec 27 12:01:18 2025 GMT Subject: CN=5a7625974b209efa7ad26163980682f511cd26a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b7:87:9d:00:96:29:76:88:49:9b:a4:a5:47: af:05:9a:e2:b7:74:f7:1b:fe:6c:a8:b4:33:90:a2: 97:89:05:2e:f9:e4:bc:f9:7e:90:ed:61:31:2f:d9: dd:3c:55:eb:6e:d3:17:81:aa:68:ba:78:49:32:1a: a3:3f:48:25:37:d3:a4:b1:b1:5a:3e:1d:f6:d6:74: 54:cc:71:96:7f:f6:7d:29:86:5a:4f:9a:f1:85:e4: b9:5a:c1:3a:52:df:91:16:5e:25:da:61:fa:81:8b: 65:6d:03:6e:84:80:04:a4:3a:d4:0d:23:dd:31:28: dc:a3:00:47:91:e6:ee:bc:49:3c:cd:6e:ab:60:63: 4a:66:8c:bc:91:b6:bc:ca:4e:89:56:ea:ef:58:fe: 12:fd:46:a9:e0:c6:13:35:88:80:36:3a:18:b3:04: 55:e1:c7:d3:b8:6a:a3:ff:db:b7:e1:2b:7e:79:67: 64:c3:61:33:85:00:f7:21:8e:7a:2d:21:77:d6:12: 4d:12:5a:18:a2:c9:9b:98:af:69:c0:bc:df:2a:dc: 57:c5:7c:c2:d5:10:6e:6f:36:c7:ed:0e:ce:aa:aa: c3:c0:6b:0f:62:5f:c4:89:be:0d:1e:a4:fd:38:9f: 6e:c7:a9:82:4d:02:93:f9:37:22:d9:e8:51:ca:47: ba:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:76:25:97:4B:20:9E:FA:7A:D2:61:63:98:06:82:F5:11:CD:26:A7 X509v3 Authority Key Identifier: keyid:39:55:0A:9B:75:2C:73:97:F6:F6:9E:AA:6A:80:F0:9B:A7:F7:D8:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OVUKm3Usc5f29p6qaoDwm6f32Co.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1ade0c-9aed-437b-8f18-27f2dca47a2c/1/OVUKm3Usc5f29p6qaoDwm6f32Co.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1ade0c-9aed-437b-8f18-27f2dca47a2c/1/OVUKm3Usc5f29p6qaoDwm6f32Co.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:29:2f:7d:09:11:ae:67:c2:c6:e8:37:23:05:13:5b:72:c4: 37:3b:08:cf:29:a8:a8:07:73:be:03:a5:4e:44:40:e2:06:a0: 12:13:35:88:06:2f:75:a5:de:58:12:0d:11:2e:5a:8e:fa:00: 64:b7:d1:ca:9b:53:03:3a:ce:cc:23:49:d9:5c:88:b7:b5:5c: 5c:1a:1d:f1:af:a0:1e:ad:c0:b2:31:1d:d6:66:18:23:c9:26: 6b:9d:17:01:36:20:57:2f:64:74:56:3b:9a:61:b6:2f:9a:9b: b8:52:80:67:b3:67:e7:82:c0:15:da:2b:2a:d0:cf:53:88:0f: 74:aa:38:85:04:f7:68:d8:c4:fa:fc:ef:c3:c3:70:e3:3c:d4: e2:c6:3f:c5:10:42:49:09:43:8a:12:92:65:be:bb:1d:bf:ad: 4f:77:38:99:c8:20:8a:22:b0:6a:4b:05:1f:10:55:58:0d:e5: c2:47:a5:f1:36:c3:85:a3:01:4b:0e:c3:14:f0:78:b4:02:25: f4:fb:fe:f0:ba:1e:db:47:ee:70:31:9a:d1:9a:24:89:ec:b2: 0e:2b:51:90:8b:8e:0b:66:79:f1:4d:27:44:67:f9:ae:c1:63: 1e:72:69:88:70:49:24:ff:30:99:ec:01:5f:6b:85:44:97:67: 6e:60:22:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiOJ1ltdFjjWB21WwbeMoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5NTUwYTliNzUyYzczOTdmNmY2OWVhYTZhODBmMDliYTdm N2Q4MmEwHhcNMjUxMjI2MTIwMTE4WhcNMjUxMjI3MTIwMTE4WjAzMTEwLwYDVQQD Eyg1YTc2MjU5NzRiMjA5ZWZhN2FkMjYxNjM5ODA2ODJmNTExY2QyNmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAureHnQCWKXaISZukpUevBZrit3T3 G/5sqLQzkKKXiQUu+eS8+X6Q7WExL9ndPFXrbtMXgapounhJMhqjP0glN9OksbFa Ph321nRUzHGWf/Z9KYZaT5rxheS5WsE6Ut+RFl4l2mH6gYtlbQNuhIAEpDrUDSPd MSjcowBHkebuvEk8zW6rYGNKZoy8kba8yk6JVurvWP4S/Uap4MYTNYiANjoYswRV 4cfTuGqj/9u34St+eWdkw2EzhQD3IY56LSF31hJNEloYosmbmK9pwLzfKtxXxXzC 1RBubzbH7Q7OqqrDwGsPYl/Eib4NHqT9OJ9ux6mCTQKT+Tci2ehRyke6KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFp2JZdLIJ76etJhY5gGgvURzSanMB8GA1UdIwQY MBaAFDlVCpt1LHOX9vaeqmqA8Jun99gqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1ZVS20zVXNjNWYyOXA2cWFvRHdtNmYzMkNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8xYWRlMGMtOWFlZC00MzdiLThmMTgt MjdmMmRjYTQ3YTJjLzEvT1ZVS20zVXNjNWYyOXA2cWFvRHdtNmYzMkNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni8xYWRlMGMtOWFlZC00MzdiLThmMTgtMjdmMmRjYTQ3YTJj LzEvT1ZVS20zVXNjNWYyOXA2cWFvRHdtNmYzMkNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKSkvfQkR rmfCxug3IwUTW3LENzsIzymoqAdzvgOlTkRA4gagEhM1iAYvdaXeWBINES5ajvoA ZLfRyptTAzrOzCNJ2VyIt7VcXBod8a+gHq3AsjEd1mYYI8kma50XATYgVy9kdFY7 mmG2L5qbuFKAZ7Nn54LAFdorKtDPU4gPdKo4hQT3aNjE+vzvw8Nw4zzU4sY/xRBC SQlDihKSZb67Hb+tT3c4mcggiiKwaksFHxBVWA3lwkel8TbDhaMBSw7DFPB4tAIl 9Pv+8Loe20fucDGa0ZokieyyDitRkIuOC2Z58U0nRGf5rsFjHnJpiHBJJP8wmewB X2uFRJdnbmAi5Q== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:59 2025 by rpki-client