This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft File: ow3ap0lNabocrLRX75G23NIujdk.mft (raw, json) Hash identifier: M4/qKvJqg+CAvvJo4UC7ZsfhVZsZr3TdgujWlWHBNRY= Subject key identifier: A8:79:3B:72:B7:3E:D5:E8:74:F7:9A:9D:99:4C:B4:4B:53:6E:75:7B Authority key identifier: A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9 Certificate issuer: /CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9 Certificate serial: 019B3FED3E874BB83EDC08DA5E87120AA9A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 08:01:11 +0000 Manifest this update: Sun 21 Dec 2025 08:01:11 +0000 Manifest next update: Mon 22 Dec 2025 08:01:11 +0000 Files and hashes: 1: Fq4kg0SRGVzzVSs9_o69LfwOT3A.roa (hash: 2HbnhpvQtG7vsaYBmi0+gk3Ea1ph0D7Fi3q1e56Ae5s=) 2: ow3ap0lNabocrLRX75G23NIujdk.crl (hash: 0DsDlVnpDTnrNPoG7c0qwLtq87BQH/PFNnlZ5M5+uyA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:3e:87:4b:b8:3e:dc:08:da:5e:87:12:0a:a9:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9 Validity Not Before: Dec 21 08:01:11 2025 GMT Not After : Dec 22 08:01:11 2025 GMT Subject: CN=a8793b72b73ed5e874f79a9d994cb44b536e757b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1b:0b:be:e5:78:b3:6e:4e:3a:86:e6:43:3d: 40:00:b8:84:a1:d6:11:28:85:98:31:71:33:38:f0: 10:c5:92:75:fb:cc:98:b6:1f:79:ce:c0:5e:22:51: 00:ae:64:55:06:91:ac:f9:30:f8:ca:58:2d:46:1e: 3c:8c:a9:9b:d2:57:df:d8:57:45:13:e3:a8:4d:63: 9e:61:80:6d:3e:ed:16:bc:b6:8f:79:94:5e:8a:d4: 4f:2c:db:01:42:cc:df:c8:4b:8d:2a:bf:51:4d:25: 94:67:1d:80:a7:98:b4:c7:76:68:dc:e1:da:a3:95: b0:bf:39:eb:12:4c:6c:ec:0c:e6:a9:a2:9b:e7:6e: c8:26:3e:4a:d0:b6:5b:51:80:e2:6e:e7:d6:05:c8: d2:7e:f5:9c:72:e7:ba:ae:e0:c4:4c:4a:de:76:e0: b4:3c:19:48:71:53:69:b8:b3:d8:94:b1:78:fd:8d: 0b:53:59:5f:c8:95:71:c3:3f:a2:b9:e2:bd:c7:b4: b1:d3:91:6e:00:60:d2:c1:23:34:75:9e:9f:c7:7e: 4f:bf:5c:6f:bd:db:97:96:09:2a:01:c9:5d:53:5d: 5e:81:05:72:9f:1f:c4:1d:bd:1d:44:c4:de:4f:70: b8:05:ba:67:a5:bd:3d:af:da:86:69:f7:7e:65:4a: 11:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:79:3B:72:B7:3E:D5:E8:74:F7:9A:9D:99:4C:B4:4B:53:6E:75:7B X509v3 Authority Key Identifier: keyid:A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:aa:a4:9c:3d:a7:d4:b1:25:43:e8:cf:69:07:bc:03:1d:34: 3b:ca:72:64:b0:ab:64:b1:ef:e1:1c:21:f3:ab:1f:58:a2:90: 95:e5:b0:d2:c5:4e:28:14:6c:08:e4:38:d9:ca:86:73:4e:d4: 4b:86:81:9f:9a:a1:ac:1c:b2:1a:2e:d8:c4:a0:48:15:88:66: 85:a0:28:f6:c9:ec:7b:e8:1f:1e:ea:a3:4f:36:ab:af:f6:82: c4:45:3a:48:1e:6d:b7:36:0f:27:6a:55:dc:29:98:f4:cf:3d: 41:52:df:57:07:60:14:66:ab:2e:6f:00:50:24:bb:c8:ba:75: 7c:aa:21:d5:d7:50:17:07:88:c5:19:33:e4:ed:b4:b3:9c:96: ec:fc:aa:2d:b2:af:78:bb:87:1e:76:0a:87:29:8b:2c:df:40: 4b:d7:dd:d9:36:44:08:4a:f0:6d:a1:b9:9a:e9:52:1a:0b:dc: de:77:77:6d:f3:b4:13:66:1c:be:5d:85:d4:99:81:71:de:a9: 18:f8:5e:58:2c:c7:c2:14:0a:0a:50:5f:a5:39:4b:c3:90:16: 75:16:42:24:30:e4:de:77:21:7d:48:32:b4:d6:49:0b:8e:9a: de:35:76:cf:c2:d6:9b:88:71:61:d3:c8:f6:f3:a0:af:1a:5c: 9a:73:44:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7T6HS7g+3AjaXocSCqmlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzMGRkYWE3NDk0ZDY5YmExY2FjYjQ1N2VmOTFiNmRjZDIy ZThkZDkwHhcNMjUxMjIxMDgwMTExWhcNMjUxMjIyMDgwMTExWjAzMTEwLwYDVQQD EyhhODc5M2I3MmI3M2VkNWU4NzRmNzlhOWQ5OTRjYjQ0YjUzNmU3NTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BsLvuV4s25OOobmQz1AALiEodYR KIWYMXEzOPAQxZJ1+8yYth95zsBeIlEArmRVBpGs+TD4ylgtRh48jKmb0lff2FdF E+OoTWOeYYBtPu0WvLaPeZReitRPLNsBQszfyEuNKr9RTSWUZx2Ap5i0x3Zo3OHa o5WwvznrEkxs7AzmqaKb527IJj5K0LZbUYDibufWBcjSfvWccue6ruDETEreduC0 PBlIcVNpuLPYlLF4/Y0LU1lfyJVxwz+iueK9x7Sx05FuAGDSwSM0dZ6fx35Pv1xv vduXlgkqAcldU11egQVynx/EHb0dRMTeT3C4Bbpnpb09r9qGafd+ZUoRbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKh5O3K3PtXodPeanZlMtEtTbnV7MB8GA1UdIwQY MBaAFKMN2qdJTWm6HKy0V++RttzSLo3ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3czYXAwbE5hYm9jckxSWDc1RzIzTkl1amRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NjExMmMtZjE3ZS00ZGMxLWJhNTIt NjU0NGEyYjk5ODE3LzEvb3czYXAwbE5hYm9jckxSWDc1RzIzTkl1amRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NjExMmMtZjE3ZS00ZGMxLWJhNTItNjU0NGEyYjk5ODE3 LzEvb3czYXAwbE5hYm9jckxSWDc1RzIzTkl1amRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgKqknD2n 1LElQ+jPaQe8Ax00O8pyZLCrZLHv4Rwh86sfWKKQleWw0sVOKBRsCOQ42cqGc07U S4aBn5qhrByyGi7YxKBIFYhmhaAo9snse+gfHuqjTzarr/aCxEU6SB5ttzYPJ2pV 3CmY9M89QVLfVwdgFGarLm8AUCS7yLp1fKoh1ddQFweIxRkz5O20s5yW7PyqLbKv eLuHHnYKhymLLN9AS9fd2TZECErwbaG5mulSGgvc3nd3bfO0E2Ycvl2F1JmBcd6p GPheWCzHwhQKClBfpTlLw5AWdRZCJDDk3nchfUgytNZJC46a3jV2z8LWm4hxYdPI 9vOgrxpcmnNEgQ== -----END CERTIFICATE-----Generated at Sun Dec 21 15:36:49 2025 by rpki-client