This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft File: OvovwG4aqRNcJjG3O-zFlXsCOpM.mft (raw, json) Hash identifier: DBR9PG5bFSKwDDh2YmSlbTGSpoPEm7e3VNx8cTJ7Tec= Subject key identifier: 53:B1:2D:6D:AB:9C:5B:C8:42:05:B8:84:1A:19:AA:C7:CE:1D:84:D4 Authority key identifier: 3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93 Certificate issuer: /CN=3afa2fc06e1aa9135c2631b73becc5957b023a93 Certificate serial: 019B5297FA17037C234F9F978325EF8F47DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft Manifest number: 1426 Signing time: Wed 24 Dec 2025 23:00:50 +0000 Manifest this update: Wed 24 Dec 2025 23:00:50 +0000 Manifest next update: Thu 25 Dec 2025 23:00:50 +0000 Files and hashes: 1: OvovwG4aqRNcJjG3O-zFlXsCOpM.crl (hash: uHbASumamp6vAKPyU48W9IxXcsi3Rdpl7X2KZt42xcc=) 2: TmqgT8a6A5MGUn5mkLtQ8qR97F4.roa (hash: V4gF7PSkd2779yOJRGcz3efKoncCJTVpp0G+/wVgtGA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:97:fa:17:03:7c:23:4f:9f:97:83:25:ef:8f:47:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3afa2fc06e1aa9135c2631b73becc5957b023a93 Validity Not Before: Dec 24 23:00:50 2025 GMT Not After : Dec 25 23:00:50 2025 GMT Subject: CN=53b12d6dab9c5bc84205b8841a19aac7ce1d84d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:65:64:c6:48:d2:8f:be:81:26:a5:c7:bd:f8: 90:3c:58:ff:02:4b:c3:b8:95:f6:1e:dc:83:bb:31: fd:6d:18:e4:5a:01:5c:1e:db:19:be:2b:36:16:60: 68:54:e6:fc:f4:f0:a3:5c:8f:37:72:a1:3b:41:ed: 15:e7:d2:2e:b7:08:d3:16:91:83:28:44:fe:75:b5: 0c:67:6a:c0:70:e0:c9:d5:5f:68:69:59:7e:6a:df: 19:3b:6f:8e:01:a4:df:45:da:5a:46:34:f5:0f:d8: 0c:69:7e:b8:c9:4c:e6:86:80:f8:1f:d0:a6:04:91: 0b:9e:73:95:45:41:ce:8c:eb:b9:a7:0e:f0:0f:8d: bc:16:b3:f1:45:64:64:b2:56:d1:90:09:21:32:fe: 0f:25:2f:cb:98:eb:0d:87:c5:6f:79:75:1b:d7:92: 2d:33:a2:e8:dc:ca:57:52:76:7a:8d:5e:4a:a8:c1: 88:a9:95:b4:65:ca:7d:7f:9e:7d:f5:ab:b2:37:50: 2a:63:91:46:55:18:5d:d0:2c:24:d6:38:7b:0e:30: 80:86:ce:49:67:09:13:13:08:f9:3d:a1:67:d2:22: 6a:d6:a4:82:df:bf:7b:70:7c:42:2f:78:23:aa:0c: f9:fe:53:19:1a:1f:dc:0b:40:11:81:de:15:8e:93: 7d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B1:2D:6D:AB:9C:5B:C8:42:05:B8:84:1A:19:AA:C7:CE:1D:84:D4 X509v3 Authority Key Identifier: keyid:3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:01:b0:ee:65:2b:99:31:cf:ad:ef:68:2c:3c:94:74:d4:a3: fb:6e:3b:61:12:33:01:6f:d5:ad:a5:91:3e:9d:b1:dd:df:06: 9c:59:4e:5b:6f:9c:f1:73:ed:4a:3c:18:c5:82:34:cb:fe:db: 7a:f8:6c:a4:aa:c6:27:14:b9:67:17:be:51:2e:e4:8a:a6:86: ad:fb:2e:b5:c7:e2:14:5b:02:3d:f6:00:18:3b:17:00:0a:7c: 8a:ad:7e:40:8c:08:9d:94:6a:74:ae:4c:63:6d:39:17:5d:35: 95:f8:33:cb:b3:df:bb:e2:a6:23:4c:95:65:7e:22:54:fe:0b: ba:36:d8:c5:09:80:23:50:d2:6a:70:cd:3a:61:0b:4a:a0:e7: b0:8e:b0:81:5e:80:f1:b6:54:a7:56:5e:20:14:13:79:ce:36: f9:c1:9b:66:56:3f:16:05:23:aa:1b:4a:e1:79:43:fe:57:db: aa:8f:53:65:bd:09:cf:66:86:52:90:6e:ee:cc:65:60:05:00: 2f:ff:02:3b:b8:5e:11:f3:a8:a0:80:ba:83:9f:06:22:92:3c: c9:e8:df:85:10:d1:1d:85:4d:f8:1b:a6:2e:d9:6b:e2:51:62: be:ad:42:8d:2f:21:d4:dd:ff:92:3e:21:1c:51:32:3f:b9:45: a6:3d:6b:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSl/oXA3wjT5+XgyXvj0fcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZmEyZmMwNmUxYWE5MTM1YzI2MzFiNzNiZWNjNTk1N2Iw MjNhOTMwHhcNMjUxMjI0MjMwMDUwWhcNMjUxMjI1MjMwMDUwWjAzMTEwLwYDVQQD Eyg1M2IxMmQ2ZGFiOWM1YmM4NDIwNWI4ODQxYTE5YWFjN2NlMWQ4NGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmVkxkjSj76BJqXHvfiQPFj/AkvD uJX2HtyDuzH9bRjkWgFcHtsZvis2FmBoVOb89PCjXI83cqE7Qe0V59IutwjTFpGD KET+dbUMZ2rAcODJ1V9oaVl+at8ZO2+OAaTfRdpaRjT1D9gMaX64yUzmhoD4H9Cm BJELnnOVRUHOjOu5pw7wD428FrPxRWRkslbRkAkhMv4PJS/LmOsNh8VveXUb15It M6Lo3MpXUnZ6jV5KqMGIqZW0Zcp9f5599auyN1AqY5FGVRhd0Cwk1jh7DjCAhs5J ZwkTEwj5PaFn0iJq1qSC3797cHxCL3gjqgz5/lMZGh/cC0ARgd4VjpN9CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFOxLW2rnFvIQgW4hBoZqsfOHYTUMB8GA1UdIwQY MBaAFDr6L8BuGqkTXCYxtzvsxZV7AjqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZvdndHNGFxUk5jSmpHM08tekZsWHNDT3BNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi84OTkyMTgtMmExOS00ZDBmLTlmMWUt ZWYzOGU4Y2UzM2QxLzEvT3ZvdndHNGFxUk5jSmpHM08tekZsWHNDT3BNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi84OTkyMTgtMmExOS00ZDBmLTlmMWUtZWYzOGU4Y2UzM2Qx LzEvT3ZvdndHNGFxUk5jSmpHM08tekZsWHNDT3BNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAgGw7mUr mTHPre9oLDyUdNSj+247YRIzAW/VraWRPp2x3d8GnFlOW2+c8XPtSjwYxYI0y/7b evhspKrGJxS5Zxe+US7kiqaGrfsutcfiFFsCPfYAGDsXAAp8iq1+QIwInZRqdK5M Y205F101lfgzy7Pfu+KmI0yVZX4iVP4LujbYxQmAI1DSanDNOmELSqDnsI6wgV6A 8bZUp1ZeIBQTec42+cGbZlY/FgUjqhtK4XlD/lfbqo9TZb0Jz2aGUpBu7sxlYAUA L/8CO7heEfOooIC6g58GIpI8yejfhRDRHYVN+BumLtlr4lFivq1CjS8h1N3/kj4h HFEyP7lFpj1rFg== -----END CERTIFICATE-----Generated at Thu Dec 25 01:24:24 2025 by rpki-client