This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft File: OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft (raw, json) Hash identifier: muJEtlb0v0djIMeIT3U7YjSP6qDbE/v9eQXj/tz6GZ0= Subject key identifier: 29:A5:D4:B4:EF:78:BD:1A:2A:66:AE:D2:D1:4E:42:A1:AB:11:6F:28 Authority key identifier: 3A:F1:50:7F:DA:4E:70:48:28:C7:E0:3C:AF:62:64:56:AA:FC:5B:1A Certificate issuer: /CN=3af1507fda4e704828c7e03caf626456aafc5b1a Certificate serial: 019B4E4D657A7756E360FD7CDEF9479F4FCE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvFQf9pOcEgox-A8r2JkVqr8Wxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft Manifest number: 16BC Signing time: Wed 24 Dec 2025 03:00:53 +0000 Manifest this update: Wed 24 Dec 2025 03:00:53 +0000 Manifest next update: Thu 25 Dec 2025 03:00:53 +0000 Files and hashes: 1: OvFQf9pOcEgox-A8r2JkVqr8Wxo.crl (hash: +IOisZHU+N18EArHinwWanR5MD6W7aElMkuxU/wCHi8=) 2: RzHN7Dslblmf2SWetMH6DUd-Es8.roa (hash: 2K0PSVlUZvtFJCr5mNlFcXi4Xq9NSfuA5JwXa1JJxuU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft rsync://rpki.ripe.net/repository/DEFAULT/OvFQf9pOcEgox-A8r2JkVqr8Wxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4d:65:7a:77:56:e3:60:fd:7c:de:f9:47:9f:4f:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af1507fda4e704828c7e03caf626456aafc5b1a Validity Not Before: Dec 24 03:00:53 2025 GMT Not After : Dec 25 03:00:53 2025 GMT Subject: CN=29a5d4b4ef78bd1a2a66aed2d14e42a1ab116f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:13:ec:3a:cd:6a:a6:20:f7:2c:33:e1:ee:b8: a1:18:7a:b1:33:cf:46:89:10:9c:82:7c:65:20:1e: 90:54:07:a6:5c:cd:fa:7f:60:e5:15:5f:26:ab:36: 32:f3:e2:63:85:2d:71:54:44:5b:c4:f3:57:da:b1: 0e:87:f0:72:a1:32:60:c4:b6:20:24:df:1a:c7:20: f9:e9:93:e8:17:a9:ae:3c:71:b4:1b:20:42:bb:4a: 4b:8a:da:7c:34:0f:77:f2:cb:56:df:41:d0:3f:96: 4b:ef:99:01:1a:53:3a:50:5c:b9:55:27:a5:39:7e: b5:82:ee:48:83:69:3c:de:4e:97:d7:69:26:5d:92: c5:27:17:6f:da:25:af:ba:7a:31:8d:3a:dc:e0:b5: 14:9f:5e:b9:de:e9:a7:84:b1:ae:bd:be:b8:63:eb: 1e:12:a3:89:4a:8d:2a:dd:ff:e9:ba:b1:97:79:32: a0:74:e5:9c:dd:e3:d2:41:35:d9:fa:85:46:a8:53: 7e:d6:da:b9:64:19:62:27:af:b0:b7:9f:14:e4:d6: 8d:9a:25:e2:f7:56:eb:05:18:c1:97:0c:b4:58:83: 54:c9:85:5e:b7:ac:7e:82:c8:58:69:6e:7d:17:d2: 90:b7:7a:fe:41:76:d9:81:7a:a7:b0:a5:81:a8:03: 3d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A5:D4:B4:EF:78:BD:1A:2A:66:AE:D2:D1:4E:42:A1:AB:11:6F:28 X509v3 Authority Key Identifier: keyid:3A:F1:50:7F:DA:4E:70:48:28:C7:E0:3C:AF:62:64:56:AA:FC:5B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvFQf9pOcEgox-A8r2JkVqr8Wxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:42:eb:c8:c6:46:48:e7:98:95:5b:00:98:54:0f:e5:ee:ed: 23:2d:3b:45:82:26:95:a2:c9:6d:5c:19:19:6e:76:60:08:d6: 5b:7e:ec:e0:fd:85:cb:af:c4:64:51:82:fa:aa:6d:be:4c:e9: 69:a2:ec:ae:7d:17:e8:90:e0:1e:5f:d5:34:c0:fa:83:de:b8: 82:78:fb:66:70:c6:e6:96:64:27:41:89:89:a8:35:c4:d6:ea: a5:f0:d6:08:59:75:10:50:e8:f9:be:8d:6d:35:ad:dd:72:3b: 68:ba:c3:e8:77:c4:e3:c9:b9:ad:29:d0:ab:79:a3:ca:7a:7d: 9a:3b:40:bb:02:4c:30:63:e7:8f:11:bc:78:fd:03:16:49:41: e1:a3:92:9d:bb:8b:b9:d4:86:5d:4e:1b:44:9d:fb:0d:88:71: aa:a1:00:ac:40:d2:e0:07:2b:e0:d3:b7:21:b8:9a:b0:3e:ef: a6:a3:35:5d:35:12:c9:5b:32:35:e8:c9:00:d4:fd:0b:62:ec: 4b:d1:1f:5b:eb:4d:0d:3b:33:ad:7b:eb:07:67:ce:8e:c2:71: 35:16:de:65:dd:54:ff:02:c9:7f:2b:cc:31:b4:2a:cc:7e:56: 1b:57:2a:7f:d1:ed:e6:bb:4b:b4:81:ed:6d:6d:61:90:7b:14: 34:de:5e:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTWV6d1bjYP183vlHn0/OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjE1MDdmZGE0ZTcwNDgyOGM3ZTAzY2FmNjI2NDU2YWFm YzViMWEwHhcNMjUxMjI0MDMwMDUzWhcNMjUxMjI1MDMwMDUzWjAzMTEwLwYDVQQD EygyOWE1ZDRiNGVmNzhiZDFhMmE2NmFlZDJkMTRlNDJhMWFiMTE2ZjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxPsOs1qpiD3LDPh7rihGHqxM89G iRCcgnxlIB6QVAemXM36f2DlFV8mqzYy8+JjhS1xVERbxPNX2rEOh/ByoTJgxLYg JN8axyD56ZPoF6muPHG0GyBCu0pLitp8NA938stW30HQP5ZL75kBGlM6UFy5VSel OX61gu5Ig2k83k6X12kmXZLFJxdv2iWvunoxjTrc4LUUn1653umnhLGuvb64Y+se EqOJSo0q3f/purGXeTKgdOWc3ePSQTXZ+oVGqFN+1tq5ZBliJ6+wt58U5NaNmiXi 91brBRjBlwy0WINUyYVet6x+gshYaW59F9KQt3r+QXbZgXqnsKWBqAM9LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCml1LTveL0aKmau0tFOQqGrEW8oMB8GA1UdIwQY MBaAFDrxUH/aTnBIKMfgPK9iZFaq/FsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZGUWY5cE9jRWdveC1BOHIySmtWcXI4V3hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85ZjUwZTEtM2VjNC00NmRjLWI0Zjct ODc0MjM0ZWQxZTVlLzEvT3ZGUWY5cE9jRWdveC1BOHIySmtWcXI4V3hvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC85ZjUwZTEtM2VjNC00NmRjLWI0ZjctODc0MjM0ZWQxZTVl LzEvT3ZGUWY5cE9jRWdveC1BOHIySmtWcXI4V3hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATULryMZG SOeYlVsAmFQP5e7tIy07RYImlaLJbVwZGW52YAjWW37s4P2Fy6/EZFGC+qptvkzp aaLsrn0X6JDgHl/VNMD6g964gnj7ZnDG5pZkJ0GJiag1xNbqpfDWCFl1EFDo+b6N bTWt3XI7aLrD6HfE48m5rSnQq3mjynp9mjtAuwJMMGPnjxG8eP0DFklB4aOSnbuL udSGXU4bRJ37DYhxqqEArEDS4Acr4NO3IbiasD7vpqM1XTUSyVsyNejJANT9C2Ls S9EfW+tNDTszrXvrB2fOjsJxNRbeZd1U/wLJfyvMMbQqzH5WG1cqf9Ht5rtLtIHt bW1hkHsUNN5eQA== -----END CERTIFICATE-----Generated at Wed Dec 24 08:50:58 2025 by rpki-client