This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft File: OWQDC_IwvVbT_j4pwYiBujL656I.mft (raw, json) Hash identifier: Nr40bdAgK+GzeH5UDCLtVY7wWeWDF9qqz0eAXShos8o= Subject key identifier: B6:9F:0A:FC:CD:0F:B9:0D:F3:0E:BD:9A:07:43:76:99:A5:E8:10:DD Authority key identifier: 39:64:03:0B:F2:30:BD:56:D3:FE:3E:29:C1:88:81:BA:32:FA:E7:A2 Certificate issuer: /CN=3964030bf230bd56d3fe3e29c18881ba32fae7a2 Certificate serial: 019B2DE6CFA30A41CE1CDD037CB7D672B4B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft Manifest number: 177E Signing time: Wed 17 Dec 2025 20:00:59 +0000 Manifest this update: Wed 17 Dec 2025 20:00:59 +0000 Manifest next update: Thu 18 Dec 2025 20:00:59 +0000 Files and hashes: 1: OWQDC_IwvVbT_j4pwYiBujL656I.crl (hash: AgNLBRM5SP8fJo4C5W0o+Q14HDEV5cevnkBXD/sL4YU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:e6:cf:a3:0a:41:ce:1c:dd:03:7c:b7:d6:72:b4:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3964030bf230bd56d3fe3e29c18881ba32fae7a2 Validity Not Before: Dec 17 20:00:59 2025 GMT Not After : Dec 18 20:00:59 2025 GMT Subject: CN=b69f0afccd0fb90df30ebd9a07437699a5e810dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:57:f6:12:f7:2f:a4:72:34:8d:b5:fd:19:65: 6b:c5:da:45:3b:c3:89:b9:41:2b:6f:13:62:f8:8f: af:09:9e:7b:56:3a:7b:3d:38:e7:b0:03:50:8c:5c: 11:9b:04:b4:84:8f:7d:dd:61:e8:62:6d:77:33:af: ce:82:18:c3:8d:05:52:ed:be:10:9d:24:3b:a2:98: 41:63:00:9c:5c:b5:ad:90:f2:3c:b2:a3:72:b5:08: da:4d:6d:9d:71:30:e4:bc:57:3d:ff:35:89:43:f7: 12:27:f7:cc:83:91:c0:ba:0f:5e:19:c5:b6:c6:15: ee:57:cc:2e:99:d6:fe:9d:37:20:2b:48:94:72:2d: 9f:90:6e:b1:a9:55:1e:8c:38:6f:23:d8:d2:c4:a8: d2:27:4b:47:b2:4c:ed:ad:73:5f:bb:94:b6:f2:13: 22:28:09:b0:d5:76:ac:5f:6d:e2:d9:ac:9a:0e:af: b4:7a:63:73:f8:17:27:00:12:be:83:04:9d:88:02: 9e:57:e2:45:72:85:48:86:c0:f5:f7:43:bb:ba:21: c1:18:b4:d6:41:d6:b3:5b:d6:92:1e:a6:40:d3:16: 19:03:05:cb:f0:fb:43:c8:73:0e:11:0c:97:4c:b1: c2:68:1d:b6:3d:85:86:17:4a:9f:4d:0b:3e:53:f1: 56:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:9F:0A:FC:CD:0F:B9:0D:F3:0E:BD:9A:07:43:76:99:A5:E8:10:DD X509v3 Authority Key Identifier: keyid:39:64:03:0B:F2:30:BD:56:D3:FE:3E:29:C1:88:81:BA:32:FA:E7:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:95:e2:17:7f:04:df:23:fc:57:7a:c6:73:e0:2f:da:35:d5: 43:e7:1c:6b:d0:3d:f6:10:c3:6c:00:87:7b:5d:04:66:a1:0d: ad:93:f1:d7:80:4c:6c:24:4f:7c:59:c3:93:20:b4:9b:76:b2: a9:59:27:e8:62:f7:80:3c:c7:57:b6:e6:23:dc:8a:58:68:7b: 1b:6e:47:8b:0a:92:d3:86:62:9a:c9:f1:e6:20:ee:df:36:fb: 2e:90:ab:b1:d1:f7:b7:7f:8b:96:c1:9a:c3:ec:1e:99:98:9e: 9a:bb:ed:d6:f3:7b:10:c8:59:aa:69:3a:62:2f:f8:a8:8d:c1: dd:b9:cb:20:33:60:48:72:f8:87:24:c3:2e:f8:00:9f:44:f2: 8c:f6:eb:19:50:f0:f1:89:91:9d:ff:f6:50:ff:89:04:78:6f: cb:71:59:9b:ec:3a:f3:e3:c2:86:0b:06:cd:36:1d:a7:f8:4e: ff:a9:ee:2c:9d:51:22:fb:51:6b:67:da:e8:34:a1:16:c4:88: a0:b0:23:ef:a0:81:4a:58:db:26:de:f5:d8:75:1a:19:b2:fd: 5e:39:02:3a:64:23:65:70:8a:f0:9c:4c:cc:e1:c6:98:87:9f: 22:d1:89:b6:5f:c4:3c:9c:ff:39:1a:f8:7a:a5:44:d7:f1:d2: 12:3a:d2:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZst5s+jCkHOHN0DfLfWcrSyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5NjQwMzBiZjIzMGJkNTZkM2ZlM2UyOWMxODg4MWJhMzJm YWU3YTIwHhcNMjUxMjE3MjAwMDU5WhcNMjUxMjE4MjAwMDU5WjAzMTEwLwYDVQQD EyhiNjlmMGFmY2NkMGZiOTBkZjMwZWJkOWEwNzQzNzY5OWE1ZTgxMGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVf2EvcvpHI0jbX9GWVrxdpFO8OJ uUErbxNi+I+vCZ57Vjp7PTjnsANQjFwRmwS0hI993WHoYm13M6/OghjDjQVS7b4Q nSQ7ophBYwCcXLWtkPI8sqNytQjaTW2dcTDkvFc9/zWJQ/cSJ/fMg5HAug9eGcW2 xhXuV8wumdb+nTcgK0iUci2fkG6xqVUejDhvI9jSxKjSJ0tHskztrXNfu5S28hMi KAmw1XasX23i2ayaDq+0emNz+BcnABK+gwSdiAKeV+JFcoVIhsD190O7uiHBGLTW QdazW9aSHqZA0xYZAwXL8PtDyHMOEQyXTLHCaB22PYWGF0qfTQs+U/FWMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLafCvzND7kN8w69mgdDdpml6BDdMB8GA1UdIwQY MBaAFDlkAwvyML1W0/4+KcGIgboy+ueiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1dRRENfSXd2VmJUX2o0cHdZaUJ1akw2NTZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8xZGQyNmQtZWFlNS00ZTE5LWFjMzUt Yzk5M2ZkZmM0YTBiLzEvT1dRRENfSXd2VmJUX2o0cHdZaUJ1akw2NTZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8xZGQyNmQtZWFlNS00ZTE5LWFjMzUtYzk5M2ZkZmM0YTBi LzEvT1dRRENfSXd2VmJUX2o0cHdZaUJ1akw2NTZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFZXiF38E 3yP8V3rGc+Av2jXVQ+cca9A99hDDbACHe10EZqENrZPx14BMbCRPfFnDkyC0m3ay qVkn6GL3gDzHV7bmI9yKWGh7G25HiwqS04Zimsnx5iDu3zb7LpCrsdH3t3+LlsGa w+wemZiemrvt1vN7EMhZqmk6Yi/4qI3B3bnLIDNgSHL4hyTDLvgAn0TyjPbrGVDw 8YmRnf/2UP+JBHhvy3FZm+w68+PChgsGzTYdp/hO/6nuLJ1RIvtRa2fa6DShFsSI oLAj76CBSljbJt712HUaGbL9XjkCOmQjZXCK8JxMzOHGmIefItGJtl/EPJz/ORr4 eqVE1/HSEjrSPA== -----END CERTIFICATE-----Generated at Thu Dec 18 05:22:53 2025 by rpki-client