This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft File: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft (raw, json) Hash identifier: BuV6ESKGv1CODSuc7cRrGEezOHYHzgOK11iVmSzRT8k= Subject key identifier: D3:AE:12:96:FE:88:92:D5:0B:DC:5D:5A:9F:B5:02:1B:17:FB:45:C3 Authority key identifier: A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43 Certificate issuer: /CN=a2f516bf42214086db39847f9f563b4cf4a0ff43 Certificate serial: 019B3C7ED62134FAB83126D55A485D87EBDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft Manifest number: 0CE1 Signing time: Sat 20 Dec 2025 16:01:43 +0000 Manifest this update: Sat 20 Dec 2025 16:01:43 +0000 Manifest next update: Sun 21 Dec 2025 16:01:43 +0000 Files and hashes: 1: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl (hash: pPI99kgKyoTQKe5pWzUbn3Pluyo9SOXA/vj3zVfIuJ4=) 2: qIsWYTGGyTWdcMi1EBNZy3-Gz6s.roa (hash: 7m+uP5vyUA/FJoMPvZCOt04fNaOUpHbFnR+UKfmp0FA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:d6:21:34:fa:b8:31:26:d5:5a:48:5d:87:eb:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2f516bf42214086db39847f9f563b4cf4a0ff43 Validity Not Before: Dec 20 16:01:43 2025 GMT Not After : Dec 21 16:01:43 2025 GMT Subject: CN=d3ae1296fe8892d50bdc5d5a9fb5021b17fb45c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:56:96:22:6e:85:80:be:d2:9e:db:4b:8d:c8: 91:32:fe:98:28:ea:6e:c1:62:2f:39:3f:5f:73:15: e5:a6:e0:bf:5f:e7:39:36:5c:3a:64:e9:46:54:2b: c3:e7:3b:33:86:e8:d7:16:2d:e6:ad:7e:96:8b:1d: 8a:19:12:59:dc:fb:69:2c:0d:9a:eb:4a:d2:ab:ff: 4f:63:ab:27:5a:a7:ca:b0:4b:6f:e4:d5:02:75:01: 2b:cd:72:dc:04:f9:d6:c4:8e:7d:ae:0e:f9:c7:76: 84:39:42:63:4b:de:8d:a0:5c:de:28:f0:07:72:68: 18:e1:0a:a9:36:c9:15:fa:f0:68:38:8e:78:7e:de: 76:a3:86:c6:eb:da:55:e5:c1:bc:37:90:30:65:33: ea:de:17:f8:7b:df:ed:f1:c5:ca:5f:49:3b:0b:13: a4:fd:81:87:61:76:a2:78:84:2a:db:eb:c2:08:af: b8:96:a0:2e:a9:72:d7:77:97:90:97:eb:3d:e9:3b: ee:4d:1e:52:aa:12:91:55:6e:32:0f:59:f6:39:81: 3d:27:1a:b3:92:31:f0:9d:f2:0a:d1:48:d5:cc:00: f2:df:f5:da:2f:dc:71:24:1c:a3:9d:b2:6e:6e:27: 1d:e0:07:3e:cb:e5:6a:53:55:cc:f0:c1:d0:5d:0f: 2f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:AE:12:96:FE:88:92:D5:0B:DC:5D:5A:9F:B5:02:1B:17:FB:45:C3 X509v3 Authority Key Identifier: keyid:A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:9e:0d:16:0b:9d:62:02:9c:88:fd:87:d0:20:05:5b:42:f7: f5:f0:41:09:88:1a:20:cc:aa:fe:c6:9a:95:a3:0e:f8:e6:56: 41:91:9e:9c:fa:7f:4b:40:e5:b3:c9:ac:98:52:cf:61:5d:ca: 52:a5:42:c4:00:58:65:6c:53:8c:cc:ca:e4:1a:bc:0a:69:d4: 17:68:67:d5:62:3d:e8:a4:c0:55:89:ba:a5:28:84:97:af:a0: 1d:b2:9f:a4:9c:4b:1e:64:db:84:c9:68:92:7e:e4:f0:72:98: 4a:4b:cc:e8:a8:cd:c6:06:ac:16:d4:19:54:0b:1a:78:30:9d: c2:85:cf:1a:21:70:c2:ba:19:1e:55:f7:23:2f:2d:f4:ff:53: 4e:49:7f:a9:0d:e6:32:eb:c7:2f:a9:ee:2b:fd:ce:8e:76:c0: 5c:28:18:af:cb:b7:f2:23:57:03:cc:0a:af:09:b2:7a:a4:cc: 25:78:50:b3:cd:e8:3c:4f:4c:0f:da:04:68:ff:93:25:ec:a3: 8c:55:c3:70:43:59:e6:6e:28:a4:8d:93:1d:92:bb:d9:90:c5: 90:40:d6:bf:17:6d:33:ef:52:34:88:04:b1:b7:c6:79:6e:cf: d4:cc:c3:8f:b0:e4:a3:64:6f:bc:06:d2:29:77:4d:22:0f:22: 2a:83:bb:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8ftYhNPq4MSbVWkhdh+veMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZjUxNmJmNDIyMTQwODZkYjM5ODQ3ZjlmNTYzYjRjZjRh MGZmNDMwHhcNMjUxMjIwMTYwMTQzWhcNMjUxMjIxMTYwMTQzWjAzMTEwLwYDVQQD EyhkM2FlMTI5NmZlODg5MmQ1MGJkYzVkNWE5ZmI1MDIxYjE3ZmI0NWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFaWIm6FgL7SnttLjciRMv6YKOpu wWIvOT9fcxXlpuC/X+c5Nlw6ZOlGVCvD5zszhujXFi3mrX6Wix2KGRJZ3PtpLA2a 60rSq/9PY6snWqfKsEtv5NUCdQErzXLcBPnWxI59rg75x3aEOUJjS96NoFzeKPAH cmgY4QqpNskV+vBoOI54ft52o4bG69pV5cG8N5AwZTPq3hf4e9/t8cXKX0k7CxOk /YGHYXaieIQq2+vCCK+4lqAuqXLXd5eQl+s96TvuTR5SqhKRVW4yD1n2OYE9Jxqz kjHwnfIK0UjVzADy3/XaL9xxJByjnbJubicd4Ac+y+VqU1XM8MHQXQ8vuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNOuEpb+iJLVC9xdWp+1AhsX+0XDMB8GA1UdIwQY MBaAFKL1Fr9CIUCG2zmEf59WO0z0oP9DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3ZVV3YwSWhRSWJiT1lSX24xWTdUUFNnXzBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9kMWRmZDYtY2NkZi00NjIxLWI0NTQt NmUzZmE2MmNkMmRmLzEvb3ZVV3YwSWhRSWJiT1lSX24xWTdUUFNnXzBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9kMWRmZDYtY2NkZi00NjIxLWI0NTQtNmUzZmE2MmNkMmRm LzEvb3ZVV3YwSWhRSWJiT1lSX24xWTdUUFNnXzBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApJ4NFgud YgKciP2H0CAFW0L39fBBCYgaIMyq/saalaMO+OZWQZGenPp/S0Dls8msmFLPYV3K UqVCxABYZWxTjMzK5Bq8CmnUF2hn1WI96KTAVYm6pSiEl6+gHbKfpJxLHmTbhMlo kn7k8HKYSkvM6KjNxgasFtQZVAsaeDCdwoXPGiFwwroZHlX3Iy8t9P9TTkl/qQ3m MuvHL6nuK/3OjnbAXCgYr8u38iNXA8wKrwmyeqTMJXhQs83oPE9MD9oEaP+TJeyj jFXDcENZ5m4opI2THZK72ZDFkEDWvxdtM+9SNIgEsbfGeW7P1MzDj7Dko2RvvAbS KXdNIg8iKoO7zw== -----END CERTIFICATE-----Generated at Sat Dec 20 23:04:03 2025 by rpki-client