This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft File: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft (raw, json) Hash identifier: PcC3sQbWFdi8Qgf7HZDufRtIAdlzIuDvcdZNDeqOgh4= Subject key identifier: 94:3B:E0:5E:BD:88:D0:4B:2C:D9:23:96:78:47:95:4C:E3:2E:81:4E Authority key identifier: A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43 Certificate issuer: /CN=a2f516bf42214086db39847f9f563b4cf4a0ff43 Certificate serial: 019B2552312DE84B50066E12F9904D0420A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft Manifest number: 0CD5 Signing time: Tue 16 Dec 2025 04:01:41 +0000 Manifest this update: Tue 16 Dec 2025 04:01:41 +0000 Manifest next update: Wed 17 Dec 2025 04:01:41 +0000 Files and hashes: 1: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl (hash: mqs0eibG/i+K9bFuEoqNJ01xx4Ps2Flsxo510marQMc=) 2: qIsWYTGGyTWdcMi1EBNZy3-Gz6s.roa (hash: 7m+uP5vyUA/FJoMPvZCOt04fNaOUpHbFnR+UKfmp0FA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:52:31:2d:e8:4b:50:06:6e:12:f9:90:4d:04:20:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2f516bf42214086db39847f9f563b4cf4a0ff43 Validity Not Before: Dec 16 04:01:41 2025 GMT Not After : Dec 17 04:01:41 2025 GMT Subject: CN=943be05ebd88d04b2cd923967847954ce32e814e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:87:ae:64:cd:bd:30:25:a5:22:f2:87:d1:ff: e7:04:cd:3f:a9:73:0f:6d:78:aa:68:6d:00:69:76: 54:4b:15:bc:5d:66:8a:e1:78:14:52:96:8e:49:99: 19:06:93:bb:75:a5:9d:85:ec:1c:d9:6c:e1:d5:4a: 15:37:fc:50:ec:1f:8f:26:51:97:46:c3:0f:c0:7a: c5:b2:e8:df:44:c9:ee:57:6f:3d:9c:4e:9d:6c:b0: c1:d8:62:f3:15:60:6e:d7:0c:b2:6b:72:00:a7:85: 35:d8:33:5e:61:b9:dc:eb:06:d4:f4:c8:1d:40:b1: 95:20:b6:ea:9a:e4:e7:b9:eb:02:45:80:9c:ec:d3: 87:25:b7:dc:90:65:1b:e4:ae:e2:2b:d0:a5:0f:0b: 2f:6c:28:ae:c1:cb:95:62:6b:88:39:5b:0a:e2:3e: fc:72:c3:fd:0d:57:72:df:42:f4:e5:7a:05:48:60: 08:7d:09:c0:4a:dc:17:a6:9d:c6:eb:ba:02:4c:95: fc:44:e3:73:36:cd:00:6c:b1:64:95:f0:37:de:28: 95:30:b6:cc:47:17:9a:a3:0b:a4:80:2e:7a:50:c7: 44:e3:14:ec:0b:67:9f:7a:38:00:7f:9b:92:c8:3e: 5d:52:4b:f8:8a:46:72:dc:4a:70:a5:3f:12:72:b9: c6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:3B:E0:5E:BD:88:D0:4B:2C:D9:23:96:78:47:95:4C:E3:2E:81:4E X509v3 Authority Key Identifier: keyid:A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e7:8d:18:13:5f:24:b7:d9:99:a9:56:b2:77:cb:55:0a:61:a1: 31:dd:42:33:6c:b9:64:12:a1:e4:83:68:57:27:ba:b1:1e:48: 70:61:a0:0f:5f:93:8f:5a:f0:50:7e:fe:17:fb:af:f9:9a:22: 6c:12:33:40:e5:55:21:b0:e4:b0:06:a9:ef:6d:6b:6f:50:85: 99:be:c2:98:0b:0a:f2:11:b4:4c:6a:4f:19:5a:9f:fa:0b:d4: 71:70:c4:9d:f0:71:65:65:b3:a5:b2:9c:ff:86:66:44:c9:83: c5:cd:8a:14:68:84:1f:4a:a1:c6:1a:69:df:b9:42:f7:57:67: 17:64:74:99:e4:e5:2e:b9:29:fc:ec:0f:14:43:42:45:1f:32: 4c:41:37:71:4e:6d:95:f9:0a:42:25:a9:07:35:87:97:24:34: d0:b1:0f:12:c4:97:17:64:33:c8:82:a4:65:28:f4:41:14:39: 00:0e:c2:6a:36:6b:e2:4d:45:59:0f:7e:b1:ff:2e:c9:ab:3d: e6:a0:75:95:1b:86:76:01:9c:55:9e:de:a1:b2:d0:bd:f5:3a: 7e:a4:2e:4b:cd:a3:31:89:fb:76:1c:b9:29:f7:c4:f1:09:2f: be:c3:0f:43:6d:41:15:d7:6b:b3:78:cb:24:3d:db:d7:d0:bd: b6:4a:5d:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUjEt6EtQBm4S+ZBNBCCjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZjUxNmJmNDIyMTQwODZkYjM5ODQ3ZjlmNTYzYjRjZjRh MGZmNDMwHhcNMjUxMjE2MDQwMTQxWhcNMjUxMjE3MDQwMTQxWjAzMTEwLwYDVQQD Eyg5NDNiZTA1ZWJkODhkMDRiMmNkOTIzOTY3ODQ3OTU0Y2UzMmU4MTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoeuZM29MCWlIvKH0f/nBM0/qXMP bXiqaG0AaXZUSxW8XWaK4XgUUpaOSZkZBpO7daWdhewc2Wzh1UoVN/xQ7B+PJlGX RsMPwHrFsujfRMnuV289nE6dbLDB2GLzFWBu1wyya3IAp4U12DNeYbnc6wbU9Mgd QLGVILbqmuTnuesCRYCc7NOHJbfckGUb5K7iK9ClDwsvbCiuwcuVYmuIOVsK4j78 csP9DVdy30L05XoFSGAIfQnAStwXpp3G67oCTJX8RONzNs0AbLFklfA33iiVMLbM RxeaowukgC56UMdE4xTsC2efejgAf5uSyD5dUkv4ikZy3EpwpT8ScrnG1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJQ74F69iNBLLNkjlnhHlUzjLoFOMB8GA1UdIwQY MBaAFKL1Fr9CIUCG2zmEf59WO0z0oP9DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3ZVV3YwSWhRSWJiT1lSX24xWTdUUFNnXzBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9kMWRmZDYtY2NkZi00NjIxLWI0NTQt NmUzZmE2MmNkMmRmLzEvb3ZVV3YwSWhRSWJiT1lSX24xWTdUUFNnXzBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9kMWRmZDYtY2NkZi00NjIxLWI0NTQtNmUzZmE2MmNkMmRm LzEvb3ZVV3YwSWhRSWJiT1lSX24xWTdUUFNnXzBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA540YE18k t9mZqVayd8tVCmGhMd1CM2y5ZBKh5INoVye6sR5IcGGgD1+Tj1rwUH7+F/uv+Zoi bBIzQOVVIbDksAap721rb1CFmb7CmAsK8hG0TGpPGVqf+gvUcXDEnfBxZWWzpbKc /4ZmRMmDxc2KFGiEH0qhxhpp37lC91dnF2R0meTlLrkp/OwPFENCRR8yTEE3cU5t lfkKQiWpBzWHlyQ00LEPEsSXF2QzyIKkZSj0QRQ5AA7CajZr4k1FWQ9+sf8uyas9 5qB1lRuGdgGcVZ7eobLQvfU6fqQuS82jMYn7dhy5KffE8QkvvsMPQ21BFddrs3jL JD3b19C9tkpdSg== -----END CERTIFICATE-----Generated at Tue Dec 16 08:34:45 2025 by rpki-client