This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft File: ow3ap0lNabocrLRX75G23NIujdk.mft (raw, json) Hash identifier: s9CXzTT+3boT4NeAGssIWmFujObovXDAKsH3oM2eC4s= Subject key identifier: B8:DF:6C:E3:EA:CC:DE:FD:28:DF:67:70:95:20:9F:D9:E1:FC:8F:26 Authority key identifier: A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9 Certificate issuer: /CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9 Certificate serial: 019B36458C1392D05CA0114F7D3CD8060F47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft Manifest number: 1788 Signing time: Fri 19 Dec 2025 11:01:26 +0000 Manifest this update: Fri 19 Dec 2025 11:01:26 +0000 Manifest next update: Sat 20 Dec 2025 11:01:26 +0000 Files and hashes: 1: Fq4kg0SRGVzzVSs9_o69LfwOT3A.roa (hash: 2HbnhpvQtG7vsaYBmi0+gk3Ea1ph0D7Fi3q1e56Ae5s=) 2: ow3ap0lNabocrLRX75G23NIujdk.crl (hash: fQOFlxrfOJKYM+WZ9HQPCJysYsaqBh102S/I8qERafI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 11:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:45:8c:13:92:d0:5c:a0:11:4f:7d:3c:d8:06:0f:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9 Validity Not Before: Dec 19 11:01:26 2025 GMT Not After : Dec 20 11:01:26 2025 GMT Subject: CN=b8df6ce3eaccdefd28df677095209fd9e1fc8f26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:81:08:23:a5:51:dc:c1:22:cb:f4:fd:e8:b8: de:6a:cc:1f:7f:6a:f3:c9:25:e2:5b:75:b5:d2:1e: 90:12:ae:0d:7f:63:06:18:b9:d7:c9:25:56:cf:45: 2b:f3:43:99:34:53:30:34:9c:d8:63:77:cb:1a:40: 09:af:b2:d9:f0:ad:c8:cf:98:60:e8:50:36:92:90: 61:4f:91:59:22:c2:e8:46:a2:a8:03:32:e7:32:2c: 39:77:da:d5:0f:fd:aa:d8:d3:56:fc:f0:40:23:93: bc:a3:02:40:fe:33:cb:50:56:0f:f8:bc:5e:e9:49: 59:61:66:5d:d5:bf:82:cc:97:a5:66:a4:cf:43:90: fb:b4:79:02:a3:70:03:79:30:f6:f8:d4:d8:fe:5e: d3:be:62:1a:8d:55:57:7c:0c:06:ec:f2:3a:2d:80: 16:fb:58:e0:83:e2:b9:fa:97:bd:3d:d8:2e:4b:1d: 1c:9c:f0:ce:4a:7b:8b:2b:a9:94:0e:80:d2:bd:6f: e5:40:d4:79:b2:c4:a8:41:c6:7b:3e:78:c5:55:66: 64:f2:9f:81:99:51:ba:f4:c6:b5:7d:30:1c:3e:22: d6:cc:e1:4a:04:3b:93:17:b2:04:c8:ca:0a:87:88: 00:46:10:f0:9c:f9:99:d9:13:b2:f1:c4:9a:07:5a: fb:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:DF:6C:E3:EA:CC:DE:FD:28:DF:67:70:95:20:9F:D9:E1:FC:8F:26 X509v3 Authority Key Identifier: keyid:A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:7a:81:81:55:fc:c4:d4:c2:f3:f8:c6:9f:f1:50:8e:65:b9: 1b:5f:14:f4:d7:92:6f:99:d5:c1:92:f5:96:fe:e4:1a:52:88: b3:ac:9d:0a:bb:7c:38:a6:95:31:2f:56:cb:dd:64:69:99:75: 76:d1:f7:e7:75:25:ac:cb:67:a1:1b:b1:c2:1f:e0:1e:68:13: c1:f9:4a:e2:ac:ea:84:1e:44:85:54:ec:46:28:1c:1b:d9:c1: a9:2c:aa:9e:c8:10:6d:fa:b9:53:19:18:00:8c:d8:c5:a9:d4: 58:ef:3a:70:68:80:8b:2c:a3:dd:d0:b9:d0:c8:c8:b4:92:a1: 13:8e:d0:6c:4a:54:12:12:92:07:64:de:cd:45:84:e4:42:d0: 44:f7:5b:a4:1e:0e:00:a3:94:2e:fd:0b:2b:1b:ea:c8:6c:e8: e0:6e:41:00:7d:47:9e:a3:d8:b5:86:ab:b3:37:a6:7e:46:0c: af:89:b0:f6:04:11:b2:c8:16:d9:3b:39:5a:ee:14:5c:cf:c2: ae:b5:c4:29:a6:f1:74:8c:d9:ca:04:9c:ad:e0:64:6a:f1:5d: b2:41:22:95:c5:b8:42:55:c5:bd:5e:b5:4e:fa:6e:6d:4a:12: 67:b9:00:3e:8c:4b:c9:00:74:40:5a:a8:8b:c2:30:f5:f1:02: fe:f8:0f:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2RYwTktBcoBFPfTzYBg9HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzMGRkYWE3NDk0ZDY5YmExY2FjYjQ1N2VmOTFiNmRjZDIy ZThkZDkwHhcNMjUxMjE5MTEwMTI2WhcNMjUxMjIwMTEwMTI2WjAzMTEwLwYDVQQD EyhiOGRmNmNlM2VhY2NkZWZkMjhkZjY3NzA5NTIwOWZkOWUxZmM4ZjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYEII6VR3MEiy/T96Ljeaswff2rz ySXiW3W10h6QEq4Nf2MGGLnXySVWz0Ur80OZNFMwNJzYY3fLGkAJr7LZ8K3Iz5hg 6FA2kpBhT5FZIsLoRqKoAzLnMiw5d9rVD/2q2NNW/PBAI5O8owJA/jPLUFYP+Lxe 6UlZYWZd1b+CzJelZqTPQ5D7tHkCo3ADeTD2+NTY/l7TvmIajVVXfAwG7PI6LYAW +1jgg+K5+pe9PdguSx0cnPDOSnuLK6mUDoDSvW/lQNR5ssSoQcZ7PnjFVWZk8p+B mVG69Ma1fTAcPiLWzOFKBDuTF7IEyMoKh4gARhDwnPmZ2ROy8cSaB1r7DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjfbOPqzN79KN9ncJUgn9nh/I8mMB8GA1UdIwQY MBaAFKMN2qdJTWm6HKy0V++RttzSLo3ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3czYXAwbE5hYm9jckxSWDc1RzIzTkl1amRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NjExMmMtZjE3ZS00ZGMxLWJhNTIt NjU0NGEyYjk5ODE3LzEvb3czYXAwbE5hYm9jckxSWDc1RzIzTkl1amRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NjExMmMtZjE3ZS00ZGMxLWJhNTItNjU0NGEyYjk5ODE3 LzEvb3czYXAwbE5hYm9jckxSWDc1RzIzTkl1amRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS3qBgVX8 xNTC8/jGn/FQjmW5G18U9NeSb5nVwZL1lv7kGlKIs6ydCrt8OKaVMS9Wy91kaZl1 dtH353UlrMtnoRuxwh/gHmgTwflK4qzqhB5EhVTsRigcG9nBqSyqnsgQbfq5UxkY AIzYxanUWO86cGiAiyyj3dC50MjItJKhE47QbEpUEhKSB2TezUWE5ELQRPdbpB4O AKOULv0LKxvqyGzo4G5BAH1HnqPYtYarszemfkYMr4mw9gQRssgW2Ts5Wu4UXM/C rrXEKabxdIzZygScreBkavFdskEilcW4QlXFvV61TvpubUoSZ7kAPoxLyQB0QFqo i8Iw9fEC/vgPoA== -----END CERTIFICATE-----Generated at Fri Dec 19 18:50:48 2025 by rpki-client