This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft File: Ow839Domg0Lq8P7FOWBjQJC1sbc.mft (raw, json) Hash identifier: ziZenDciyLZMPSuU83JsryZGSm4rKyIPNlF430T5hMo= Subject key identifier: D6:24:2E:95:35:90:92:A4:29:E0:7A:4A:47:F6:DD:B4:D0:BB:9A:A5 Authority key identifier: 3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7 Certificate issuer: /CN=3b0f37f43a268342eaf0fec53960634090b5b1b7 Certificate serial: 019B3CB50371792F34238B6A8F46EA1B316D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft Manifest number: 0486 Signing time: Sat 20 Dec 2025 17:00:54 +0000 Manifest this update: Sat 20 Dec 2025 17:00:54 +0000 Manifest next update: Sun 21 Dec 2025 17:00:54 +0000 Files and hashes: 1: Ow839Domg0Lq8P7FOWBjQJC1sbc.crl (hash: /r22+RI/0gH6M4MvDbhzxkOBOzuSBSejHGK9Y1vJXR0=) 2: zSJ_P5pv1HzQ8hvu19sQp2HnlDA.roa (hash: qAEiL4ToqpIPLGT1RE35tlHZ4lj+5tb3m4XW3uq1NSo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:03:71:79:2f:34:23:8b:6a:8f:46:ea:1b:31:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b0f37f43a268342eaf0fec53960634090b5b1b7 Validity Not Before: Dec 20 17:00:54 2025 GMT Not After : Dec 21 17:00:54 2025 GMT Subject: CN=d6242e95359092a429e07a4a47f6ddb4d0bb9aa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:67:34:b4:32:bb:8f:a9:b3:b2:00:da:08:3f: 9b:77:19:8d:a2:33:23:b8:25:22:18:72:6d:cd:23: 69:fb:0e:28:1a:fc:9a:d7:82:b1:37:1a:0e:4c:f5: 1a:c6:f3:a6:53:c0:6c:f6:09:02:50:2b:db:8f:21: 8a:8d:95:22:18:3c:36:dd:d9:6e:5a:03:58:57:a6: b1:32:00:ba:b3:3b:9e:7e:da:69:c9:4e:cc:fc:9b: 48:ff:fd:59:01:ea:60:d4:15:f2:d9:13:0b:e1:3d: 8e:69:d3:df:c3:7a:1b:1c:ed:1e:b1:8c:6f:a1:ef: 70:ba:37:d3:78:c2:d0:9e:50:55:da:cb:7c:2d:b7: af:a9:eb:bf:5a:82:0b:97:3f:b0:a4:8e:68:6a:07: 8e:a9:12:28:44:01:86:23:4d:3d:23:49:87:7c:cf: a1:98:55:c9:d7:d0:f4:26:11:10:6a:96:cf:b3:fd: 15:37:14:2b:00:0e:c0:ae:b5:3a:2a:99:5f:28:80: ab:d5:97:0d:9a:33:89:25:51:b3:34:34:e5:f1:cb: c2:b4:fc:38:7c:43:73:5f:d8:3d:33:ed:39:0b:28: 46:38:de:22:82:1a:c7:e5:90:35:90:37:11:7e:91: 82:76:4a:07:ee:62:82:06:16:90:03:00:b6:b3:0e: 52:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:24:2E:95:35:90:92:A4:29:E0:7A:4A:47:F6:DD:B4:D0:BB:9A:A5 X509v3 Authority Key Identifier: keyid:3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:87:6f:e9:2e:97:20:d1:5f:01:bb:4f:be:96:fc:9b:94:01: 0c:ec:c5:d2:fe:bb:dc:7c:f8:23:b8:2d:1b:a4:9c:76:0d:1f: 19:13:ca:10:bc:f5:1b:f8:b5:b8:3f:af:d0:19:55:1d:23:e2: c3:24:51:e7:25:a1:35:27:e1:2e:5c:7f:11:d5:8b:a4:83:f4: 98:f8:5d:0a:d5:bd:d1:28:62:8c:32:d8:5b:a6:70:67:46:d7: 70:27:41:ac:7a:b2:7c:ed:5c:7f:b6:f1:77:11:19:42:5e:96: 50:9d:d3:57:b2:8e:96:4e:ab:3a:8c:30:9f:e5:34:f9:2d:be: e6:cd:2b:47:3a:a1:25:fd:01:05:cd:08:31:1a:d6:9d:44:09: d4:8e:db:45:40:f7:0a:fc:70:db:a7:6d:7d:e5:b0:0f:4d:97: 6d:52:f4:ec:f3:f9:06:7d:7c:13:e9:8d:ad:46:53:15:48:74: a9:ae:9d:d6:f5:6f:c5:6c:9b:fa:64:55:fb:08:9b:e2:9f:9e: 86:39:28:55:17:51:35:64:9b:7f:6a:fd:c9:11:2c:1a:85:c7: 58:dd:76:74:95:35:7d:fe:43:43:a4:75:90:40:eb:39:b1:44: ce:a1:c8:d9:6f:1b:44:5a:e1:23:3e:47:07:91:bf:83:de:84: b1:78:a1:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tQNxeS80I4tqj0bqGzFtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMGYzN2Y0M2EyNjgzNDJlYWYwZmVjNTM5NjA2MzQwOTBi NWIxYjcwHhcNMjUxMjIwMTcwMDU0WhcNMjUxMjIxMTcwMDU0WjAzMTEwLwYDVQQD EyhkNjI0MmU5NTM1OTA5MmE0MjllMDdhNGE0N2Y2ZGRiNGQwYmI5YWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGc0tDK7j6mzsgDaCD+bdxmNojMj uCUiGHJtzSNp+w4oGvya14KxNxoOTPUaxvOmU8Bs9gkCUCvbjyGKjZUiGDw23dlu WgNYV6axMgC6szueftppyU7M/JtI//1ZAepg1BXy2RML4T2OadPfw3obHO0esYxv oe9wujfTeMLQnlBV2st8Lbevqeu/WoILlz+wpI5oageOqRIoRAGGI009I0mHfM+h mFXJ19D0JhEQapbPs/0VNxQrAA7ArrU6KplfKICr1ZcNmjOJJVGzNDTl8cvCtPw4 fENzX9g9M+05CyhGON4ighrH5ZA1kDcRfpGCdkoH7mKCBhaQAwC2sw5SawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNYkLpU1kJKkKeB6Skf23bTQu5qlMB8GA1UdIwQY MBaAFDsPN/Q6JoNC6vD+xTlgY0CQtbG3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3c4MzlEb21nMExxOFA3Rk9XQmpRSkMxc2JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wNGY3MzYtMzcxMy00MGJhLThjMDgt OWFlOTAwZGY0Zjg4LzEvT3c4MzlEb21nMExxOFA3Rk9XQmpRSkMxc2JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8wNGY3MzYtMzcxMy00MGJhLThjMDgtOWFlOTAwZGY0Zjg4 LzEvT3c4MzlEb21nMExxOFA3Rk9XQmpRSkMxc2JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlodv6S6X INFfAbtPvpb8m5QBDOzF0v673Hz4I7gtG6Scdg0fGRPKELz1G/i1uD+v0BlVHSPi wyRR5yWhNSfhLlx/EdWLpIP0mPhdCtW90ShijDLYW6ZwZ0bXcCdBrHqyfO1cf7bx dxEZQl6WUJ3TV7KOlk6rOowwn+U0+S2+5s0rRzqhJf0BBc0IMRrWnUQJ1I7bRUD3 Cvxw26dtfeWwD02XbVL07PP5Bn18E+mNrUZTFUh0qa6d1vVvxWyb+mRV+wib4p+e hjkoVRdRNWSbf2r9yREsGoXHWN12dJU1ff5DQ6R1kEDrObFEzqHI2W8bRFrhIz5H B5G/g96EsXihuA== -----END CERTIFICATE-----Generated at Sat Dec 20 18:46:07 2025 by rpki-client