This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft File: ova8jxY69JwD2a1p5xa0LFuW7nk.mft (raw, json) Hash identifier: P7chyNrAM06t4F43FN+7tdk5K+S2jKasDbI112vFzAk= Subject key identifier: CC:41:40:DB:91:88:2F:D8:CE:3E:36:00:0C:40:34:DE:89:D6:87:7A Authority key identifier: A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79 Certificate issuer: /CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79 Certificate serial: 019B21E2BADB4C356EF72D50C2936BB89BF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft Manifest number: 1371 Signing time: Mon 15 Dec 2025 12:01:05 +0000 Manifest this update: Mon 15 Dec 2025 12:01:05 +0000 Manifest next update: Tue 16 Dec 2025 12:01:05 +0000 Files and hashes: 1: 7Bmeidkfn6YfbmewKgjKoXuxpPk.roa (hash: WWQfoyMgy0p6lbikPKbuJ/C2nkuTZ1Iwu382Tvm165I=) 2: ivvK2rH3Da0XFb0CtPI6-c8j9iw.roa (hash: y+fDNhHN305IuCvhhyl0+Ku7rbokWctafP7Dlneuvb8=) 3: ova8jxY69JwD2a1p5xa0LFuW7nk.crl (hash: I0T0V+7w9IAoDiEdjIHi6vEWQrFIW97rmsAWJubmaA8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e2:ba:db:4c:35:6e:f7:2d:50:c2:93:6b:b8:9b:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79 Validity Not Before: Dec 15 12:01:05 2025 GMT Not After : Dec 16 12:01:05 2025 GMT Subject: CN=cc4140db91882fd8ce3e36000c4034de89d6877a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1d:0f:13:81:38:6a:46:7f:15:7b:11:70:bc: 5d:04:6c:56:34:ad:60:83:55:f4:48:30:80:e3:74: e3:c1:a3:c5:f2:d4:44:2c:60:df:3a:ef:38:67:3e: b0:d8:85:ec:48:bb:cf:e4:e8:00:a6:fe:2a:f6:c1: db:2d:c5:78:c0:ad:ee:d2:04:74:3e:5d:1c:58:b0: b2:6b:6a:d2:77:8e:cd:8d:66:79:ec:79:fd:9a:4b: 9c:0b:57:f3:dc:fa:af:1c:37:03:4c:d0:1b:e4:3c: 84:b3:b0:2d:fc:62:9f:83:cc:31:69:0a:bb:57:66: 82:14:f0:ed:3c:40:cb:55:a7:c7:72:8f:f2:38:31: 7e:77:4c:49:f4:09:fd:ec:b0:38:de:21:c4:d6:12: ca:17:98:9d:5e:b1:f8:44:c7:2d:3a:1e:c8:88:db: b9:b2:26:4c:51:19:58:3c:59:77:52:e2:7b:7c:5a: 35:8f:96:e1:da:91:41:51:62:81:8a:d0:5f:29:64: c7:8f:34:79:c3:0f:e1:c4:b5:34:4f:ec:56:e5:fd: 70:8f:87:f1:ad:91:12:92:0d:f4:7e:92:51:7a:35: 37:07:85:6b:d3:bc:f0:d3:92:ad:8c:01:e6:5a:0c: 21:1a:99:8c:81:38:af:16:f8:c9:58:5e:23:4a:08: 5b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:41:40:DB:91:88:2F:D8:CE:3E:36:00:0C:40:34:DE:89:D6:87:7A X509v3 Authority Key Identifier: keyid:A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:84:cc:c6:32:d5:75:54:86:dd:f1:e2:aa:88:c0:da:62:d4: 75:e0:da:6e:a8:73:6c:46:99:23:4d:b0:ef:5f:5f:99:a2:58: 3f:59:e6:3e:c5:56:a0:c4:00:3a:2f:2f:53:1a:60:bf:92:91: ff:7d:7a:fc:78:2c:71:02:d6:cb:c4:83:36:ed:ae:bb:8c:25: 8e:e7:96:94:cc:99:16:3f:11:12:6a:95:e0:a2:f4:3e:3b:89: 4e:ea:aa:f6:46:5c:2a:75:f3:51:75:e6:96:0f:2c:c1:f3:ec: 85:4b:a3:39:73:7e:2c:4a:91:87:e2:2d:2b:6b:d1:d7:13:13: 15:78:4e:bd:c2:ca:98:93:45:b7:5a:19:d7:19:43:0b:9f:ba: ab:e7:f8:05:a1:21:08:a9:8a:cb:6b:10:18:e2:e1:c9:22:61: 9b:a9:3c:c9:45:c8:b9:07:e8:7c:f3:47:93:5b:a7:88:03:73: 62:35:70:d1:02:b6:24:9a:cc:e0:60:11:b9:ae:1a:21:a9:5e: 62:75:88:54:c4:9c:a6:02:31:0b:8f:86:fa:0c:78:b5:53:96: eb:b1:c4:8b:d1:4d:6b:6e:01:7d:79:ce:1f:97:11:47:58:e8: 20:dc:76:ca:fa:50:86:23:a4:5f:a2:0c:a3:2a:5c:5b:a3:97: 09:45:3d:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4rrbTDVu9y1QwpNruJv5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZjZiYzhmMTYzYWY0OWMwM2Q5YWQ2OWU3MTZiNDJjNWI5 NmVlNzkwHhcNMjUxMjE1MTIwMTA1WhcNMjUxMjE2MTIwMTA1WjAzMTEwLwYDVQQD EyhjYzQxNDBkYjkxODgyZmQ4Y2UzZTM2MDAwYzQwMzRkZTg5ZDY4NzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuB0PE4E4akZ/FXsRcLxdBGxWNK1g g1X0SDCA43TjwaPF8tRELGDfOu84Zz6w2IXsSLvP5OgApv4q9sHbLcV4wK3u0gR0 Pl0cWLCya2rSd47NjWZ57Hn9mkucC1fz3PqvHDcDTNAb5DyEs7At/GKfg8wxaQq7 V2aCFPDtPEDLVafHco/yODF+d0xJ9An97LA43iHE1hLKF5idXrH4RMctOh7IiNu5 siZMURlYPFl3UuJ7fFo1j5bh2pFBUWKBitBfKWTHjzR5ww/hxLU0T+xW5f1wj4fx rZESkg30fpJRejU3B4Vr07zw05KtjAHmWgwhGpmMgTivFvjJWF4jSghbaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMxBQNuRiC/Yzj42AAxANN6J1od6MB8GA1UdIwQY MBaAFKL2vI8WOvScA9mtaecWtCxblu55MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3ZhOGp4WTY5SndEMmExcDV4YTBMRnVXN25rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yODUxYjYtMmU2NS00ODU5LTljMDUt NTA2YmI2YzY3OWNlLzEvb3ZhOGp4WTY5SndEMmExcDV4YTBMRnVXN25rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8yODUxYjYtMmU2NS00ODU5LTljMDUtNTA2YmI2YzY3OWNl LzEvb3ZhOGp4WTY5SndEMmExcDV4YTBMRnVXN25rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYTMxjLV dVSG3fHiqojA2mLUdeDabqhzbEaZI02w719fmaJYP1nmPsVWoMQAOi8vUxpgv5KR /316/HgscQLWy8SDNu2uu4wljueWlMyZFj8REmqV4KL0PjuJTuqq9kZcKnXzUXXm lg8swfPshUujOXN+LEqRh+ItK2vR1xMTFXhOvcLKmJNFt1oZ1xlDC5+6q+f4BaEh CKmKy2sQGOLhySJhm6k8yUXIuQfofPNHk1uniANzYjVw0QK2JJrM4GARua4aIale YnWIVMScpgIxC4+G+gx4tVOW67HEi9FNa24BfXnOH5cRR1joINx2yvpQhiOkX6IM oypcW6OXCUU9RA== -----END CERTIFICATE-----Generated at Mon Dec 15 19:57:04 2025 by rpki-client