This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft File: owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft (raw, json) Hash identifier: 0080D7y5U7Q3PN07UtnKUw0thdyZetKzgfCTYk5UVt0= Subject key identifier: ED:7C:72:7B:18:29:EB:3A:B8:D5:CA:CE:50:7E:C4:DF:AB:64:31:7E Authority key identifier: A3:02:0A:E9:6B:5F:0C:5B:73:39:E6:15:4D:CE:C6:F1:6C:B6:3F:5A Certificate issuer: /CN=a3020ae96b5f0c5b7339e6154dcec6f16cb63f5a Certificate serial: 019B2FD530481385C01B454FCBE18B94A9E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft Manifest number: 091D Signing time: Thu 18 Dec 2025 05:00:59 +0000 Manifest this update: Thu 18 Dec 2025 05:00:59 +0000 Manifest next update: Fri 19 Dec 2025 05:00:59 +0000 Files and hashes: 1: 75LK0aL52naimh1x42NbpBoOy-w.roa (hash: +e/KEGbv2gq7/ZZoiVRRifw/ABGsD3UfOMxXZbs5gMo=) 2: owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl (hash: W9qnTkPMql1MFLptWY4XDP16zba0TUegZTSw3jDfXSo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:30:48:13:85:c0:1b:45:4f:cb:e1:8b:94:a9:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3020ae96b5f0c5b7339e6154dcec6f16cb63f5a Validity Not Before: Dec 18 05:00:59 2025 GMT Not After : Dec 19 05:00:59 2025 GMT Subject: CN=ed7c727b1829eb3ab8d5cace507ec4dfab64317e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fe:f3:6a:fd:36:dd:bf:4f:7e:4c:da:a1:bd: 60:17:c6:e9:1a:a2:2c:5b:c5:f4:ae:e2:e4:b8:62: d6:8a:50:e7:33:1f:61:2e:52:19:d9:1d:3b:f5:c5: 02:82:03:4e:71:94:0d:c9:21:d1:a9:ff:fa:c0:a6: 88:ef:1d:3d:4b:ed:93:53:f9:ff:d4:31:7e:25:5c: b6:28:7a:9e:22:6c:92:f6:36:c6:ba:a7:da:0e:81: a0:3e:ec:38:da:e7:a4:0d:45:7b:b5:93:49:57:29: 70:86:b4:be:82:e6:5f:03:c8:45:c8:e0:5c:9e:5f: 0d:89:ef:93:23:0e:24:aa:8f:fd:a9:3d:bb:a3:ae: 29:d6:f7:5c:77:af:d7:47:49:f5:4e:75:91:72:a5: d9:4b:60:db:96:f3:1c:42:ef:62:52:27:ac:c4:17: ca:47:ec:ff:0f:93:a5:f5:7a:33:f3:d0:bd:cc:9e: b6:67:72:14:55:46:14:f2:86:47:9d:54:4a:b6:f8: 86:15:73:27:cb:74:73:ff:3a:ea:ce:6e:af:9b:06: e9:14:28:44:8d:88:a1:3c:9a:77:7d:07:66:fe:07: fd:1e:59:c1:12:63:8c:a8:e6:b3:ca:d5:fe:53:5b: 64:c7:bb:2c:4f:21:bc:86:92:dc:48:37:bf:7b:45: a2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:7C:72:7B:18:29:EB:3A:B8:D5:CA:CE:50:7E:C4:DF:AB:64:31:7E X509v3 Authority Key Identifier: keyid:A3:02:0A:E9:6B:5F:0C:5B:73:39:E6:15:4D:CE:C6:F1:6C:B6:3F:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ad:2c:7c:c9:02:60:e3:4c:dd:54:67:0c:1a:72:34:2c:0c: 7a:92:a9:80:80:35:32:af:8f:7d:db:20:7f:01:51:50:ac:75: ae:da:f8:17:f8:0e:6f:62:f3:55:b6:75:3c:df:32:1f:ef:df: 47:fa:85:ee:4f:cd:55:b3:17:37:94:04:1c:aa:50:cc:5c:71: ea:d7:7b:29:50:dc:eb:dc:8e:75:6e:67:1f:cc:06:e6:1f:3d: a6:3c:d6:ec:c8:18:e5:d6:55:a0:2a:37:99:78:6f:18:5b:d8: f1:1c:18:cf:31:14:da:70:13:28:4d:bd:43:65:f7:eb:aa:c0: e4:85:93:fa:8b:14:d9:b9:ec:ea:64:cd:63:5c:4e:59:e2:9f: 21:e0:48:44:b7:c0:53:84:06:85:bf:5d:61:bb:b7:85:ac:c4: da:35:a3:15:5b:4b:a7:26:7b:4c:d3:15:80:f8:74:0b:b0:16: 9f:fc:5b:2c:3c:d4:84:65:aa:d5:90:4c:a7:e9:2b:5e:0f:7a: 97:d9:d7:22:20:9c:15:f3:2b:9c:58:68:00:da:f7:74:4b:12: f7:6e:03:dd:84:86:60:9e:b2:90:85:19:45:35:ab:7c:1f:35: c8:8a:85:e1:66:6f:97:e9:c3:52:c5:9a:01:33:7a:a8:5a:47: d3:df:e0:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1TBIE4XAG0VPy+GLlKnhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzMDIwYWU5NmI1ZjBjNWI3MzM5ZTYxNTRkY2VjNmYxNmNi NjNmNWEwHhcNMjUxMjE4MDUwMDU5WhcNMjUxMjE5MDUwMDU5WjAzMTEwLwYDVQQD EyhlZDdjNzI3YjE4MjllYjNhYjhkNWNhY2U1MDdlYzRkZmFiNjQzMTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/7zav023b9Pfkzaob1gF8bpGqIs W8X0ruLkuGLWilDnMx9hLlIZ2R079cUCggNOcZQNySHRqf/6wKaI7x09S+2TU/n/ 1DF+JVy2KHqeImyS9jbGuqfaDoGgPuw42uekDUV7tZNJVylwhrS+guZfA8hFyOBc nl8Nie+TIw4kqo/9qT27o64p1vdcd6/XR0n1TnWRcqXZS2DblvMcQu9iUiesxBfK R+z/D5Ol9Xoz89C9zJ62Z3IUVUYU8oZHnVRKtviGFXMny3Rz/zrqzm6vmwbpFChE jYihPJp3fQdm/gf9HlnBEmOMqOazytX+U1tkx7ssTyG8hpLcSDe/e0Wi9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO18cnsYKes6uNXKzlB+xN+rZDF+MB8GA1UdIwQY MBaAFKMCCulrXwxbcznmFU3OxvFstj9aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3dJSzZXdGZERnR6T2VZVlRjN0c4V3kyUDFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9jNmU5NzItNGVkMS00NTI2LWEzMjAt M2I3YzEyNjcyNWQ1LzEvb3dJSzZXdGZERnR6T2VZVlRjN0c4V3kyUDFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9jNmU5NzItNGVkMS00NTI2LWEzMjAtM2I3YzEyNjcyNWQ1 LzEvb3dJSzZXdGZERnR6T2VZVlRjN0c4V3kyUDFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADa0sfMkC YONM3VRnDBpyNCwMepKpgIA1Mq+PfdsgfwFRUKx1rtr4F/gOb2LzVbZ1PN8yH+/f R/qF7k/NVbMXN5QEHKpQzFxx6td7KVDc69yOdW5nH8wG5h89pjzW7MgY5dZVoCo3 mXhvGFvY8RwYzzEU2nATKE29Q2X366rA5IWT+osU2bns6mTNY1xOWeKfIeBIRLfA U4QGhb9dYbu3hazE2jWjFVtLpyZ7TNMVgPh0C7AWn/xbLDzUhGWq1ZBMp+krXg96 l9nXIiCcFfMrnFhoANr3dEsS924D3YSGYJ6ykIUZRTWrfB81yIqF4WZvl+nDUsWa ATN6qFpH09/ghQ== -----END CERTIFICATE-----Generated at Thu Dec 18 09:51:34 2025 by rpki-client