This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft File: ovl077UOcpyeAVqLwrbCsGGd_IQ.mft (raw, json) Hash identifier: QnA0VaVgzGUsvETVURUKP1GxAlICnP7hSG50dC5GXeU= Subject key identifier: 36:18:22:E6:42:18:B3:D7:AB:6C:F3:63:F3:9B:E7:A7:F4:75:3B:7F Authority key identifier: A2:F9:74:EF:B5:0E:72:9C:9E:01:5A:8B:C2:B6:C2:B0:61:9D:FC:84 Certificate issuer: /CN=a2f974efb50e729c9e015a8bc2b6c2b0619dfc84 Certificate serial: 019B3F1196069680742FD365C0D8F5812A7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft Manifest number: 0C54 Signing time: Sun 21 Dec 2025 04:01:15 +0000 Manifest this update: Sun 21 Dec 2025 04:01:15 +0000 Manifest next update: Mon 22 Dec 2025 04:01:15 +0000 Files and hashes: 1: Uk_aanYMRxowJq16GMNyhbsFOEw.roa (hash: creuRsSl8nSakc/hCQHakSFNIaRZLii8X1gMM9BUYWY=) 2: ovl077UOcpyeAVqLwrbCsGGd_IQ.crl (hash: n0PU06iDTOEscBXETlzJakE4JORpTeByuR25QdWvCuY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.crl rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:96:06:96:80:74:2f:d3:65:c0:d8:f5:81:2a:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2f974efb50e729c9e015a8bc2b6c2b0619dfc84 Validity Not Before: Dec 21 04:01:15 2025 GMT Not After : Dec 22 04:01:15 2025 GMT Subject: CN=361822e64218b3d7ab6cf363f39be7a7f4753b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:00:90:a7:ef:ef:35:34:95:bc:f6:05:43:a9: 4f:64:12:fb:04:03:6f:73:88:8a:36:09:56:df:f2: 70:b9:c4:fd:d6:78:55:a3:61:31:c0:e9:03:49:5e: 6c:2f:36:bb:e2:56:7c:b1:02:23:b4:6a:c3:96:b9: da:ed:1a:6e:03:8f:78:1b:04:6e:62:31:24:c8:fc: 24:87:f0:73:a3:e5:c8:5d:71:2e:81:8a:c5:b1:a3: a2:a0:28:7b:fc:6b:1b:1b:70:5f:0e:1b:8d:88:bd: fd:7e:5f:94:a1:90:eb:f9:b2:ea:5e:76:08:02:1d: 59:d1:11:90:cb:40:7f:5a:1c:22:24:25:89:cc:6a: 4e:cc:d1:e0:83:f2:06:d0:68:79:6a:5c:5b:bb:24: 76:a9:47:d7:63:0b:60:97:f3:7d:fd:d8:67:7e:4e: ae:06:ab:69:f4:bc:be:63:0b:ae:8a:0f:45:7e:75: 58:b9:1b:04:9b:3a:75:07:e1:18:36:f1:40:5e:f7: 99:3d:f7:b1:20:49:d6:7c:18:c4:d9:a9:59:9c:84: 7f:48:f2:42:69:1b:ef:68:9f:e0:b5:70:69:4b:09: ae:a4:76:0a:31:00:95:f2:a5:10:79:a5:ec:b3:bf: 25:50:f6:42:c3:85:f9:6b:df:69:d4:2c:c4:47:ed: 2a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:18:22:E6:42:18:B3:D7:AB:6C:F3:63:F3:9B:E7:A7:F4:75:3B:7F X509v3 Authority Key Identifier: keyid:A2:F9:74:EF:B5:0E:72:9C:9E:01:5A:8B:C2:B6:C2:B0:61:9D:FC:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:ea:19:11:d7:c7:83:ae:5c:84:58:08:53:ba:bf:56:a6:86: 0b:83:88:f5:12:2d:4a:f5:70:db:ef:94:28:b4:28:c5:84:31: 7c:8c:4c:6b:49:11:60:28:df:9b:ba:b5:c5:b2:2b:59:71:b0: 20:1f:a4:54:a9:45:ff:e6:43:fe:90:3c:73:45:42:a5:47:d4: af:94:1a:69:26:dd:48:47:39:fd:08:bb:2d:cc:e3:3a:e9:1b: c5:1b:0c:13:48:f0:2d:6b:3e:cd:f3:f5:8a:fa:20:40:b8:14: 01:f3:f6:b5:dd:29:da:8f:05:00:da:c9:9e:6c:7f:bc:70:a1: 24:a3:25:ba:7b:92:2c:b5:bb:1e:27:d9:a7:ea:05:79:5c:e4: 79:1a:36:72:bd:91:88:c7:61:e4:37:d4:cb:35:42:f6:c0:08: a1:26:f2:09:30:94:ac:1c:f7:3d:f9:1a:c5:58:34:40:03:17: 84:0d:b8:5c:8e:49:2e:a0:99:98:bf:94:7e:5b:57:07:62:0f: 4f:96:0c:d2:a2:a0:b0:9b:29:45:6d:b6:0e:49:80:e4:11:a2: 98:80:5a:1f:2c:e4:c4:ee:ba:1e:77:bd:01:1c:1e:56:84:0e: c9:a5:9b:bf:f2:70:c1:04:ed:65:4c:b6:e4:71:36:12:0f:d3: 3a:b9:8f:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EZYGloB0L9NlwNj1gSp9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZjk3NGVmYjUwZTcyOWM5ZTAxNWE4YmMyYjZjMmIwNjE5 ZGZjODQwHhcNMjUxMjIxMDQwMTE1WhcNMjUxMjIyMDQwMTE1WjAzMTEwLwYDVQQD EygzNjE4MjJlNjQyMThiM2Q3YWI2Y2YzNjNmMzliZTdhN2Y0NzUzYjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQCQp+/vNTSVvPYFQ6lPZBL7BANv c4iKNglW3/JwucT91nhVo2ExwOkDSV5sLza74lZ8sQIjtGrDlrna7RpuA494GwRu YjEkyPwkh/Bzo+XIXXEugYrFsaOioCh7/GsbG3BfDhuNiL39fl+UoZDr+bLqXnYI Ah1Z0RGQy0B/WhwiJCWJzGpOzNHgg/IG0Gh5alxbuyR2qUfXYwtgl/N9/dhnfk6u Bqtp9Ly+Ywuuig9FfnVYuRsEmzp1B+EYNvFAXveZPfexIEnWfBjE2alZnIR/SPJC aRvvaJ/gtXBpSwmupHYKMQCV8qUQeaXss78lUPZCw4X5a99p1CzER+0q1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDYYIuZCGLPXq2zzY/Ob56f0dTt/MB8GA1UdIwQY MBaAFKL5dO+1DnKcngFai8K2wrBhnfyEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3ZsMDc3VU9jcHllQVZxTHdyYkNzR0dkX0lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC82NjgzNDUtZjViYy00YTNmLWI2ZmYt MTBkZjQ5ZjY1NjE2LzEvb3ZsMDc3VU9jcHllQVZxTHdyYkNzR0dkX0lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC82NjgzNDUtZjViYy00YTNmLWI2ZmYtMTBkZjQ5ZjY1NjE2 LzEvb3ZsMDc3VU9jcHllQVZxTHdyYkNzR0dkX0lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT+oZEdfH g65chFgIU7q/VqaGC4OI9RItSvVw2++UKLQoxYQxfIxMa0kRYCjfm7q1xbIrWXGw IB+kVKlF/+ZD/pA8c0VCpUfUr5QaaSbdSEc5/Qi7LczjOukbxRsME0jwLWs+zfP1 ivogQLgUAfP2td0p2o8FANrJnmx/vHChJKMlunuSLLW7HifZp+oFeVzkeRo2cr2R iMdh5DfUyzVC9sAIoSbyCTCUrBz3PfkaxVg0QAMXhA24XI5JLqCZmL+UfltXB2IP T5YM0qKgsJspRW22DkmA5BGimIBaHyzkxO66Hne9ARweVoQOyaWbv/JwwQTtZUy2 5HE2Eg/TOrmPYw== -----END CERTIFICATE-----Generated at Sun Dec 21 05:27:51 2025 by rpki-client