This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft File: OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft (raw, json) Hash identifier: hUbXcTEaVRJZ8W85T0X8zgIqH1no8YTKYbZt/fXK+pc= Subject key identifier: E5:DC:30:3B:57:D8:5C:43:E8:A9:2D:4F:28:C5:E2:69:3E:4B:93:2D Authority key identifier: 39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5 Certificate issuer: /CN=3964cdeee346116cb9641ba4800f55b9906dc3a5 Certificate serial: 019B4F9725C588989CE77C4DEE759E688630 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft Manifest number: 0708 Signing time: Wed 24 Dec 2025 09:01:04 +0000 Manifest this update: Wed 24 Dec 2025 09:01:04 +0000 Manifest next update: Thu 25 Dec 2025 09:01:04 +0000 Files and hashes: 1: BsLLTJoL5Z4HGp4lHrRp2sggxy8.roa (hash: KOPhzfVSci9RxNPGk2QlpxdIKfmzye/4QJQFoBktHeg=) 2: OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl (hash: yoP3X0L9CwE86vDGcFaI1gPSTJZBYH8u0WYqyr+Ake4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:97:25:c5:88:98:9c:e7:7c:4d:ee:75:9e:68:86:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3964cdeee346116cb9641ba4800f55b9906dc3a5 Validity Not Before: Dec 24 09:01:04 2025 GMT Not After : Dec 25 09:01:04 2025 GMT Subject: CN=e5dc303b57d85c43e8a92d4f28c5e2693e4b932d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:63:5c:cb:d1:ae:a2:68:60:4a:1b:3b:78:0f: 50:75:e6:8a:31:e2:6b:6e:a4:3c:53:8d:fb:69:31: f3:cd:e3:85:29:f5:dd:8d:62:c4:9c:1f:9e:12:57: 3c:ed:e4:9a:b2:00:a3:6d:ed:76:79:d9:7a:4a:a6: d0:28:0e:df:12:06:c6:58:54:b0:da:df:cc:6a:a7: 96:d5:0f:e3:56:d4:6f:6f:60:62:d9:c1:30:39:d1: 76:76:71:df:fd:bd:71:38:52:7a:1e:3e:86:8c:e3: e5:d5:ab:1d:80:13:70:6f:a0:e2:68:1c:f8:41:ef: 74:df:f4:8a:de:2e:db:39:53:d9:ca:04:69:13:6a: c5:ce:e9:b1:75:c0:8c:83:cb:fb:a8:ad:42:db:61: a5:df:6b:f6:7f:68:71:9c:0d:a5:3d:ec:d9:62:eb: e4:cc:c7:fa:07:e3:b4:87:c9:1e:a2:7f:2c:df:33: 56:18:73:ae:84:61:89:f9:a7:84:3e:7d:5a:54:06: cc:25:e3:82:65:1c:6c:be:5d:b3:53:e3:22:33:f2: f6:a8:49:46:25:60:3f:78:15:49:d9:b9:4d:1b:90: 8a:32:6b:b5:d6:4b:60:87:c9:ad:ba:e2:ef:52:4e: d2:bf:85:d0:40:be:17:04:1d:41:ac:9f:c3:74:0c: 8d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:DC:30:3B:57:D8:5C:43:E8:A9:2D:4F:28:C5:E2:69:3E:4B:93:2D X509v3 Authority Key Identifier: keyid:39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:15:88:dc:35:e0:0b:08:73:00:d1:50:ee:11:2a:a8:6c:1d: 80:e3:3c:96:e6:c6:ba:90:e1:2d:c5:88:e4:b5:85:66:52:ca: 40:4b:74:f0:55:52:8f:2a:d8:e7:f3:7e:24:a9:57:17:4f:a0: ff:93:04:62:6d:86:d0:f5:e4:bb:f1:26:c4:e7:66:83:20:0a: 00:d3:8e:4a:50:d2:9f:f5:8b:97:3f:45:29:70:35:60:37:ed: 82:e7:6f:a7:2a:19:5f:53:7b:8f:7d:42:18:de:72:c2:a9:45: 59:22:6f:1f:c3:a4:c4:d8:69:92:b6:b1:03:3c:2a:56:1d:c3: 79:91:25:c0:96:64:21:c4:84:09:d4:00:a3:44:d3:85:08:7e: ee:de:f3:9a:e1:d5:69:8c:c1:0a:03:b3:c8:f7:5e:87:75:24: 5f:0e:ac:27:5a:35:1f:5b:8f:40:9c:ed:c7:55:eb:36:05:87: 0a:9b:8a:f7:92:0f:46:be:96:3d:7c:d1:c8:48:8f:46:99:e6: 1c:1a:a1:89:37:a2:fa:22:39:f5:b6:26:3b:7f:a9:4c:08:9b: d7:b3:28:51:c4:65:45:0b:3e:f1:39:4b:1d:e5:5e:bb:fc:df: 12:9e:9a:f8:61:11:1b:03:84:94:99:0c:af:9f:f3:8c:4d:d8: 57:a1:4e:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPlyXFiJic53xN7nWeaIYwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5NjRjZGVlZTM0NjExNmNiOTY0MWJhNDgwMGY1NWI5OTA2 ZGMzYTUwHhcNMjUxMjI0MDkwMTA0WhcNMjUxMjI1MDkwMTA0WjAzMTEwLwYDVQQD EyhlNWRjMzAzYjU3ZDg1YzQzZThhOTJkNGYyOGM1ZTI2OTNlNGI5MzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2Ncy9GuomhgShs7eA9QdeaKMeJr bqQ8U437aTHzzeOFKfXdjWLEnB+eElc87eSasgCjbe12edl6SqbQKA7fEgbGWFSw 2t/MaqeW1Q/jVtRvb2Bi2cEwOdF2dnHf/b1xOFJ6Hj6GjOPl1asdgBNwb6DiaBz4 Qe903/SK3i7bOVPZygRpE2rFzumxdcCMg8v7qK1C22Gl32v2f2hxnA2lPezZYuvk zMf6B+O0h8keon8s3zNWGHOuhGGJ+aeEPn1aVAbMJeOCZRxsvl2zU+MiM/L2qElG JWA/eBVJ2blNG5CKMmu11ktgh8mtuuLvUk7Sv4XQQL4XBB1BrJ/DdAyNzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOXcMDtX2FxD6KktTyjF4mk+S5MtMB8GA1UdIwQY MBaAFDlkze7jRhFsuWQbpIAPVbmQbcOlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1dUTjd1TkdFV3k1WkJ1a2dBOVZ1WkJ0dzZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hMDE4YTctNmI1Yy00MjM5LTg5Yjct MmEwMjQ3ZmJiNmQ1LzEvT1dUTjd1TkdFV3k1WkJ1a2dBOVZ1WkJ0dzZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9hMDE4YTctNmI1Yy00MjM5LTg5YjctMmEwMjQ3ZmJiNmQ1 LzEvT1dUTjd1TkdFV3k1WkJ1a2dBOVZ1WkJ0dzZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFxWI3DXg CwhzANFQ7hEqqGwdgOM8lubGupDhLcWI5LWFZlLKQEt08FVSjyrY5/N+JKlXF0+g /5MEYm2G0PXku/EmxOdmgyAKANOOSlDSn/WLlz9FKXA1YDftgudvpyoZX1N7j31C GN5ywqlFWSJvH8OkxNhpkraxAzwqVh3DeZElwJZkIcSECdQAo0TThQh+7t7zmuHV aYzBCgOzyPdeh3UkXw6sJ1o1H1uPQJztx1XrNgWHCpuK95IPRr6WPXzRyEiPRpnm HBqhiTei+iI59bYmO3+pTAib17MoUcRlRQs+8TlLHeVeu/zfEp6a+GERGwOElJkM r5/zjE3YV6FOLg== -----END CERTIFICATE-----Generated at Wed Dec 24 18:27:19 2025 by rpki-client