This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft File: Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft (raw, json) Hash identifier: qRX4XqccDcHoDBcXKhyFu05w+cEZTF9ef0hYEZ9d6jw= Subject key identifier: A4:C8:1E:9B:38:D9:17:4A:0D:73:5A:4D:0F:1A:7B:E1:DF:8D:AF:2F Authority key identifier: 3A:F9:EA:8B:DC:37:1B:5A:66:04:20:0C:51:71:78:97:D6:0C:7D:3D Certificate issuer: /CN=3af9ea8bdc371b5a6604200c51717897d60c7d3d Certificate serial: 019B424924C4CBF58762AF1A5D905A4F74A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft Manifest number: 1333 Signing time: Sun 21 Dec 2025 19:00:48 +0000 Manifest this update: Sun 21 Dec 2025 19:00:48 +0000 Manifest next update: Mon 22 Dec 2025 19:00:48 +0000 Files and hashes: 1: Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl (hash: DhuO5b2H7pMs+40lNm6OOF7A25iLx756oRjkBNI13YM=) 2: wGg0J5Z28xFGgoF0T-AWE9a8nD0.roa (hash: kGXsD5CJ+k4dwjP4TcCf3ci1gDFHD1TYaxVZBZkFLBQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:24:c4:cb:f5:87:62:af:1a:5d:90:5a:4f:74:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af9ea8bdc371b5a6604200c51717897d60c7d3d Validity Not Before: Dec 21 19:00:48 2025 GMT Not After : Dec 22 19:00:48 2025 GMT Subject: CN=a4c81e9b38d9174a0d735a4d0f1a7be1df8daf2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:48:32:f0:48:9b:be:67:5a:d8:27:42:72:82: db:1c:c3:84:e6:dc:0b:92:cd:8b:f8:43:22:29:7e: a9:89:3f:7a:c6:62:1d:2b:c1:f5:2e:1a:31:0f:2b: 21:57:92:dc:2b:c2:29:82:6b:53:b6:14:05:05:35: 5a:c7:f4:01:85:52:be:a1:a9:5b:22:84:19:5d:58: af:ae:c3:21:91:72:51:9f:af:3a:19:b5:dd:5e:d4: 6e:4f:68:bc:06:73:a7:36:6b:90:71:23:f6:5e:54: 55:51:d3:78:00:d2:73:a3:b9:a0:78:1b:9f:7f:41: 13:22:da:3c:1a:ec:0b:cd:ad:d9:6a:f7:65:cb:11: 7c:e1:2f:3a:2e:9f:f0:3c:da:a6:4d:c1:b0:ef:a8: f3:e0:9b:94:6f:93:41:1a:4f:f1:dd:51:af:d6:7d: 09:a4:6a:79:12:04:5b:39:e3:56:b9:fc:c5:a2:91: d8:0f:d7:b8:88:e5:cb:1f:86:4e:cc:48:d7:15:68: 41:47:67:c7:d0:9b:7a:10:86:e5:91:83:cf:78:a4: 68:22:26:91:b4:81:c5:eb:1a:46:2a:d0:c1:6e:d5: d3:13:b3:2d:03:3f:ca:b1:5d:3d:25:15:fc:9a:b3: 87:45:bb:84:a0:d2:9f:95:a6:6b:5b:f7:6f:db:e5: 96:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C8:1E:9B:38:D9:17:4A:0D:73:5A:4D:0F:1A:7B:E1:DF:8D:AF:2F X509v3 Authority Key Identifier: keyid:3A:F9:EA:8B:DC:37:1B:5A:66:04:20:0C:51:71:78:97:D6:0C:7D:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:f6:dc:6f:6f:bd:bc:78:fc:69:af:48:32:b7:b4:69:6d:99: 69:38:cc:41:18:69:1f:85:1c:60:a4:ed:62:f6:27:79:f8:f2: 7f:f7:bb:7b:60:ab:79:56:18:92:a6:2a:3f:44:ca:31:8e:d9: e6:b3:0b:7b:1e:3b:5b:11:e7:47:d9:ea:a6:e9:93:9e:31:62: 6b:85:90:0e:b2:2d:f9:59:7b:c0:0c:a6:0e:f0:61:df:8e:14: b2:95:30:27:56:62:6e:b4:92:6b:0f:23:d5:ce:64:82:3a:dc: 63:8e:65:47:ef:73:bf:91:f4:cc:d5:df:2c:e6:24:c2:e8:30: d2:46:c3:04:a8:0e:c1:f4:2f:f7:ba:44:e9:95:21:da:37:ff: 4e:85:47:ae:3b:6e:7b:9c:c7:b2:29:83:8b:78:fb:ee:fd:79: 94:f5:b7:19:09:81:37:72:cb:0b:88:36:1f:0e:72:00:c2:68: f6:e2:23:5b:ad:de:70:d3:a1:89:86:bc:d9:29:4d:ed:81:2f: 6b:d0:30:43:fc:ce:d5:46:c0:82:82:ab:0b:fb:ba:7e:07:7f: 18:e8:b0:68:45:61:d3:e4:66:63:c9:b6:b8:c6:3c:58:85:40: 86:2f:6f:fb:f8:f5:bb:6d:05:8a:23:1b:54:a6:37:cd:53:75: 93:6c:b0:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSSTEy/WHYq8aXZBaT3SlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjllYThiZGMzNzFiNWE2NjA0MjAwYzUxNzE3ODk3ZDYw YzdkM2QwHhcNMjUxMjIxMTkwMDQ4WhcNMjUxMjIyMTkwMDQ4WjAzMTEwLwYDVQQD EyhhNGM4MWU5YjM4ZDkxNzRhMGQ3MzVhNGQwZjFhN2JlMWRmOGRhZjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUgy8Eibvmda2CdCcoLbHMOE5twL ks2L+EMiKX6piT96xmIdK8H1LhoxDyshV5LcK8IpgmtTthQFBTVax/QBhVK+oalb IoQZXVivrsMhkXJRn686GbXdXtRuT2i8BnOnNmuQcSP2XlRVUdN4ANJzo7mgeBuf f0ETIto8GuwLza3ZavdlyxF84S86Lp/wPNqmTcGw76jz4JuUb5NBGk/x3VGv1n0J pGp5EgRbOeNWufzFopHYD9e4iOXLH4ZOzEjXFWhBR2fH0Jt6EIblkYPPeKRoIiaR tIHF6xpGKtDBbtXTE7MtAz/KsV09JRX8mrOHRbuEoNKflaZrW/dv2+WW3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKTIHps42RdKDXNaTQ8ae+Hfja8vMB8GA1UdIwQY MBaAFDr56ovcNxtaZgQgDFFxeJfWDH09MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZucWk5dzNHMXBtQkNBTVVYRjRsOVlNZlQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi84MmM2ZmItMDkzMS00NDJjLWFiZTUt YWE4OTgxMzg5OTRjLzEvT3ZucWk5dzNHMXBtQkNBTVVYRjRsOVlNZlQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi84MmM2ZmItMDkzMS00NDJjLWFiZTUtYWE4OTgxMzg5OTRj LzEvT3ZucWk5dzNHMXBtQkNBTVVYRjRsOVlNZlQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAefbcb2+9 vHj8aa9IMre0aW2ZaTjMQRhpH4UcYKTtYvYnefjyf/e7e2CreVYYkqYqP0TKMY7Z 5rMLex47WxHnR9nqpumTnjFia4WQDrIt+Vl7wAymDvBh344UspUwJ1ZibrSSaw8j 1c5kgjrcY45lR+9zv5H0zNXfLOYkwugw0kbDBKgOwfQv97pE6ZUh2jf/ToVHrjtu e5zHsimDi3j77v15lPW3GQmBN3LLC4g2Hw5yAMJo9uIjW63ecNOhiYa82SlN7YEv a9AwQ/zO1UbAgoKrC/u6fgd/GOiwaEVh0+RmY8m2uMY8WIVAhi9v+/j1u20FiiMb VKY3zVN1k2yw3w== -----END CERTIFICATE-----Generated at Mon Dec 22 01:48:51 2025 by rpki-client