This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft File: OwzUTrvj0NagcudRA_IxYGmV9qs.mft (raw, json) Hash identifier: r4nmqhisKfsaqHhntrvsnD0A7obf8aXFA/v+B9d9jX0= Subject key identifier: 84:8B:4E:04:B8:E9:0A:18:74:CF:07:90:65:1B:6E:A4:97:21:87:0B Authority key identifier: 3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB Certificate issuer: /CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab Certificate serial: 019B4F28EB19B8412E46BD71B82E724B055B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft Manifest number: 1791 Signing time: Wed 24 Dec 2025 07:00:40 +0000 Manifest this update: Wed 24 Dec 2025 07:00:40 +0000 Manifest next update: Thu 25 Dec 2025 07:00:40 +0000 Files and hashes: 1: 1_qLHUdqm7sR0Q8q1colm3DejS0.roa (hash: EM08EWb/b5Ix5jQ35FhICifQx6j5GDireNgAsuw6f8M=) 2: OwzUTrvj0NagcudRA_IxYGmV9qs.crl (hash: ncpLz5EVPdjkYOoWIGlkI+3gJaMXT5xjlyngOgBsLKQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 07:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:28:eb:19:b8:41:2e:46:bd:71:b8:2e:72:4b:05:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab Validity Not Before: Dec 24 07:00:40 2025 GMT Not After : Dec 25 07:00:40 2025 GMT Subject: CN=848b4e04b8e90a1874cf0790651b6ea49721870b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:09:07:b2:d8:7f:23:0f:4c:b3:b9:f4:b2:f2: f6:99:b5:34:4b:d6:d6:b2:cc:a1:60:b4:5f:1c:bb: 78:f4:08:00:aa:82:eb:0b:57:07:fb:9e:66:62:ba: dd:32:99:30:bc:ef:18:8e:37:69:5d:fc:30:54:f3: 3e:25:7f:eb:bb:6a:b9:77:4c:51:3b:0f:55:7e:8f: ba:30:85:40:34:76:e7:5a:62:06:bc:60:4a:1e:cd: c5:b6:4e:c0:4e:a9:8e:86:31:ae:c4:3e:1d:7c:95: a4:9f:8e:46:c9:53:27:45:44:09:b0:85:17:bb:c8: 99:e3:03:84:d7:f8:98:4f:f4:0f:f5:05:52:5c:4b: 18:33:b6:00:88:f4:f5:bd:54:d4:7c:16:00:40:8e: 46:87:80:2c:4c:b1:90:0d:8a:53:52:70:c2:de:b7: ad:79:80:09:d5:62:3c:63:6a:56:25:03:23:f2:33: c1:f6:55:05:db:ca:59:47:41:62:98:83:b8:22:ae: a7:d9:89:6a:f8:ce:9a:2f:7e:42:c2:26:8a:26:71: ed:ae:09:ea:1f:05:20:e8:9f:3a:3f:bf:57:53:89: 24:eb:7c:ec:5e:e1:a7:d6:27:8d:f2:85:d1:ff:57: 19:c6:eb:33:d0:66:de:3c:17:94:29:c1:ec:e7:92: 34:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:8B:4E:04:B8:E9:0A:18:74:CF:07:90:65:1B:6E:A4:97:21:87:0B X509v3 Authority Key Identifier: keyid:3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:c5:b1:e0:33:67:4e:b4:43:11:8b:36:4b:4d:05:87:78:8e: 75:4b:ae:aa:7b:55:86:70:32:3b:00:3b:e7:c0:c7:68:1b:29: 19:a9:78:2c:ca:f9:40:b9:6d:0e:39:cd:d0:4e:24:fa:68:50: b0:2d:b5:43:dc:aa:2b:31:6a:62:09:d5:7d:20:0b:bd:e1:1b: 2e:52:0b:82:23:f7:4e:b5:dd:15:ca:22:db:e8:e8:c4:12:eb: 73:2e:05:44:81:9b:17:b3:46:a6:0d:88:14:da:5d:62:18:29: ac:11:b3:df:c6:e4:6f:0e:65:47:ee:7b:2e:48:e5:c7:04:36: 86:c1:3c:84:a0:65:7f:e1:1f:1a:6e:fc:34:c5:24:dd:15:ee: 9b:ce:85:2b:e5:52:1a:84:da:66:61:60:a1:bd:3a:14:06:a7: 57:a0:1a:54:50:c3:7c:ca:bb:09:a1:dc:37:d8:66:c1:9f:8a: 14:21:f6:0c:ee:40:02:b6:70:44:2b:74:75:18:7b:1b:78:f7: af:9b:5b:db:fa:92:1e:00:36:61:a8:e8:d7:ec:77:d3:91:d2: c0:5b:aa:e0:b5:16:bb:e7:3a:94:24:66:17:d6:a9:dc:b9:e8: 3a:ce:00:0e:a5:2d:c6:84:b9:3b:9b:c8:34:1d:68:ae:8b:fb: af:95:aa:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPKOsZuEEuRr1xuC5ySwVbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMGNkNDRlYmJlM2QwZDZhMDcyZTc1MTAzZjIzMTYwNjk5 NWY2YWIwHhcNMjUxMjI0MDcwMDQwWhcNMjUxMjI1MDcwMDQwWjAzMTEwLwYDVQQD Eyg4NDhiNGUwNGI4ZTkwYTE4NzRjZjA3OTA2NTFiNmVhNDk3MjE4NzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAkHsth/Iw9Ms7n0svL2mbU0S9bW ssyhYLRfHLt49AgAqoLrC1cH+55mYrrdMpkwvO8YjjdpXfwwVPM+JX/ru2q5d0xR Ow9Vfo+6MIVANHbnWmIGvGBKHs3Ftk7ATqmOhjGuxD4dfJWkn45GyVMnRUQJsIUX u8iZ4wOE1/iYT/QP9QVSXEsYM7YAiPT1vVTUfBYAQI5Gh4AsTLGQDYpTUnDC3ret eYAJ1WI8Y2pWJQMj8jPB9lUF28pZR0FimIO4Iq6n2Ylq+M6aL35CwiaKJnHtrgnq HwUg6J86P79XU4kk63zsXuGn1ieN8oXR/1cZxusz0GbePBeUKcHs55I0eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISLTgS46QoYdM8HkGUbbqSXIYcLMB8GA1UdIwQY MBaAFDsM1E6749DWoHLnUQPyMWBplfarMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3d6VVRydmowTmFnY3VkUkFfSXhZR21WOXFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy85NzFmMDgtZTU3Yy00MDhhLWI3NzYt ZjdkYTNiODczMmJmLzEvT3d6VVRydmowTmFnY3VkUkFfSXhZR21WOXFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy85NzFmMDgtZTU3Yy00MDhhLWI3NzYtZjdkYTNiODczMmJm LzEvT3d6VVRydmowTmFnY3VkUkFfSXhZR21WOXFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJcWx4DNn TrRDEYs2S00Fh3iOdUuuqntVhnAyOwA758DHaBspGal4LMr5QLltDjnN0E4k+mhQ sC21Q9yqKzFqYgnVfSALveEbLlILgiP3TrXdFcoi2+joxBLrcy4FRIGbF7NGpg2I FNpdYhgprBGz38bkbw5lR+57LkjlxwQ2hsE8hKBlf+EfGm78NMUk3RXum86FK+VS GoTaZmFgob06FAanV6AaVFDDfMq7CaHcN9hmwZ+KFCH2DO5AArZwRCt0dRh7G3j3 r5tb2/qSHgA2Yajo1+x305HSwFuq4LUWu+c6lCRmF9ap3LnoOs4ADqUtxoS5O5vI NB1orov7r5WquQ== -----END CERTIFICATE-----Generated at Wed Dec 24 10:06:07 2025 by rpki-client