This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft File: Ow839Domg0Lq8P7FOWBjQJC1sbc.mft (raw, json) Hash identifier: cKl15HLd+YO/ywMkn/Mx0wzxfTC+VKacQu3nKxrdydU= Subject key identifier: 2A:0B:13:13:93:E3:05:E5:10:F4:E0:F8:B5:1A:AB:82:40:61:4D:E3 Authority key identifier: 3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7 Certificate issuer: /CN=3b0f37f43a268342eaf0fec53960634090b5b1b7 Certificate serial: 019B51F3244E105826169D7AC27DAD00874E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft Manifest number: 0491 Signing time: Wed 24 Dec 2025 20:00:47 +0000 Manifest this update: Wed 24 Dec 2025 20:00:47 +0000 Manifest next update: Thu 25 Dec 2025 20:00:47 +0000 Files and hashes: 1: Ow839Domg0Lq8P7FOWBjQJC1sbc.crl (hash: hHIpfy1S/c6JM95k6HxpjS+vSQZZ7is0MZ8c5cjKklI=) 2: zSJ_P5pv1HzQ8hvu19sQp2HnlDA.roa (hash: qAEiL4ToqpIPLGT1RE35tlHZ4lj+5tb3m4XW3uq1NSo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:f3:24:4e:10:58:26:16:9d:7a:c2:7d:ad:00:87:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b0f37f43a268342eaf0fec53960634090b5b1b7 Validity Not Before: Dec 24 20:00:47 2025 GMT Not After : Dec 25 20:00:47 2025 GMT Subject: CN=2a0b131393e305e510f4e0f8b51aab8240614de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:82:c2:9e:b6:da:b6:cf:02:9b:85:35:55:f5: 60:97:90:07:e3:66:05:98:dc:4d:23:7c:8b:06:1e: f8:92:0f:e4:32:17:b6:ac:ab:ea:56:df:1e:05:f0: 6e:9b:0c:db:d0:a9:70:29:41:33:34:ab:50:e7:e5: 0a:bd:29:a9:de:d5:d3:3c:09:d9:79:ae:5b:46:7d: 77:12:04:45:65:48:d4:5a:d1:98:dd:36:0d:83:02: a5:2b:e5:2a:0e:f8:c5:4b:55:10:7b:39:ac:ef:b4: 92:03:c6:66:c3:89:b1:56:6f:17:14:06:6d:a1:22: a7:37:91:94:e5:b6:07:ad:e5:57:bf:c1:42:77:3a: 69:ab:c9:f2:59:aa:03:a3:43:8c:86:95:c5:52:04: b5:6f:85:01:79:bc:69:40:d5:3e:32:1b:e3:c5:86: 81:71:49:d6:34:4d:6f:20:7c:7c:71:70:02:c2:3f: 0e:9e:d5:e2:86:e0:3c:fe:05:7b:c3:a2:da:12:38: ad:6e:f2:90:46:3f:cf:64:fa:c9:85:9c:23:bd:8b: 77:63:e1:1c:7f:f4:11:6d:0a:76:7c:0c:8c:14:9e: 6a:69:21:2a:9a:fb:bf:cb:65:44:86:3b:c8:7c:7a: b4:bb:b8:a6:8d:f4:6f:78:c1:9c:56:01:bb:57:a9: 5a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:0B:13:13:93:E3:05:E5:10:F4:E0:F8:B5:1A:AB:82:40:61:4D:E3 X509v3 Authority Key Identifier: keyid:3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:13:51:e3:ad:49:68:d5:d0:f6:a4:32:77:89:56:39:69:95: 19:79:d7:5e:33:70:90:22:88:91:ad:dd:96:be:e1:82:ef:dc: 43:ce:0f:26:ab:90:61:da:7e:97:c5:92:f7:0d:7c:29:62:dc: d7:84:cd:eb:e9:64:56:e5:a3:6d:d9:43:67:eb:4e:08:9f:75: e9:d4:59:05:2c:5b:08:83:0b:98:d8:44:86:3f:db:0c:1a:22: 75:e7:0a:32:f6:0e:b4:e6:e8:a2:4f:e6:04:77:e9:ae:41:83: 2f:29:41:a3:a1:df:b8:86:d7:3c:5d:dc:e8:d6:9b:13:43:f1: 6b:eb:b6:51:b2:9a:6a:f5:24:67:92:9f:ae:c8:47:89:1a:26: 99:b3:af:f6:ce:cd:b6:ca:1c:8e:2c:59:1a:d4:4e:90:3c:1d: 5f:bb:bc:95:34:08:12:41:87:f6:3b:aa:e0:b8:7b:b4:fc:b2: 37:7e:5e:b9:40:14:3f:95:0a:fb:c9:a6:0f:f1:a1:53:33:17: cc:33:69:26:cb:88:66:41:29:2e:05:5a:7f:f1:13:27:84:30: fe:1a:c7:80:76:61:5f:29:e0:04:13:f0:4a:dc:ed:56:08:a4: 8e:d5:2f:11:d8:95:3a:66:37:c6:3d:3f:9a:d1:f8:56:76:bf: 1e:dd:54:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtR8yROEFgmFp16wn2tAIdOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMGYzN2Y0M2EyNjgzNDJlYWYwZmVjNTM5NjA2MzQwOTBi NWIxYjcwHhcNMjUxMjI0MjAwMDQ3WhcNMjUxMjI1MjAwMDQ3WjAzMTEwLwYDVQQD EygyYTBiMTMxMzkzZTMwNWU1MTBmNGUwZjhiNTFhYWI4MjQwNjE0ZGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoLCnrbats8Cm4U1VfVgl5AH42YF mNxNI3yLBh74kg/kMhe2rKvqVt8eBfBumwzb0KlwKUEzNKtQ5+UKvSmp3tXTPAnZ ea5bRn13EgRFZUjUWtGY3TYNgwKlK+UqDvjFS1UQezms77SSA8Zmw4mxVm8XFAZt oSKnN5GU5bYHreVXv8FCdzppq8nyWaoDo0OMhpXFUgS1b4UBebxpQNU+MhvjxYaB cUnWNE1vIHx8cXACwj8OntXihuA8/gV7w6LaEjitbvKQRj/PZPrJhZwjvYt3Y+Ec f/QRbQp2fAyMFJ5qaSEqmvu/y2VEhjvIfHq0u7imjfRveMGcVgG7V6laHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCoLExOT4wXlEPTg+LUaq4JAYU3jMB8GA1UdIwQY MBaAFDsPN/Q6JoNC6vD+xTlgY0CQtbG3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3c4MzlEb21nMExxOFA3Rk9XQmpRSkMxc2JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wNGY3MzYtMzcxMy00MGJhLThjMDgt OWFlOTAwZGY0Zjg4LzEvT3c4MzlEb21nMExxOFA3Rk9XQmpRSkMxc2JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8wNGY3MzYtMzcxMy00MGJhLThjMDgtOWFlOTAwZGY0Zjg4 LzEvT3c4MzlEb21nMExxOFA3Rk9XQmpRSkMxc2JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAahNR461J aNXQ9qQyd4lWOWmVGXnXXjNwkCKIka3dlr7hgu/cQ84PJquQYdp+l8WS9w18KWLc 14TN6+lkVuWjbdlDZ+tOCJ916dRZBSxbCIMLmNhEhj/bDBoidecKMvYOtObook/m BHfprkGDLylBo6HfuIbXPF3c6NabE0Pxa+u2UbKaavUkZ5KfrshHiRommbOv9s7N tsocjixZGtROkDwdX7u8lTQIEkGH9juq4Lh7tPyyN35euUAUP5UK+8mmD/GhUzMX zDNpJsuIZkEpLgVaf/ETJ4Qw/hrHgHZhXyngBBPwStztVgikjtUvEdiVOmY3xj0/ mtH4Vna/Ht1UXQ== -----END CERTIFICATE-----Generated at Thu Dec 25 01:21:39 2025 by rpki-client