This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.mft File: OWN43jPRC4yw-AhitkkaTenP_N8.mft (raw, json) Hash identifier: KcMwGXovNpUHMHtUSrdZYXskqqoHZMAGi+4yhTdKoy0= Subject key identifier: 65:2C:99:C3:F0:5A:DE:B7:A5:EB:B4:30:1B:5C:48:9C:DD:B9:9B:3E Authority key identifier: 39:63:78:DE:33:D1:0B:8C:B0:F8:08:62:B6:49:1A:4D:E9:CF:FC:DF Certificate issuer: /CN=396378de33d10b8cb0f80862b6491a4de9cffcdf Certificate serial: 019B4EBBB5417737148DB3F2835CDFFA4A0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWN43jPRC4yw-AhitkkaTenP_N8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.mft Manifest number: 0716 Signing time: Wed 24 Dec 2025 05:01:22 +0000 Manifest this update: Wed 24 Dec 2025 05:01:22 +0000 Manifest next update: Thu 25 Dec 2025 05:01:22 +0000 Files and hashes: 1: OWN43jPRC4yw-AhitkkaTenP_N8.crl (hash: h3fq+wMXxeZg9tNZo/OVeqnqLhbCp315C7tM3+kHdE0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.mft rsync://rpki.ripe.net/repository/DEFAULT/OWN43jPRC4yw-AhitkkaTenP_N8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 05:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:bb:b5:41:77:37:14:8d:b3:f2:83:5c:df:fa:4a:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=396378de33d10b8cb0f80862b6491a4de9cffcdf Validity Not Before: Dec 24 05:01:22 2025 GMT Not After : Dec 25 05:01:22 2025 GMT Subject: CN=652c99c3f05adeb7a5ebb4301b5c489cddb99b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4f:b4:c1:44:4d:68:a2:6a:51:6e:c7:9f:f9: 14:aa:d5:a1:49:82:f9:f8:16:cc:f8:5e:61:e6:22: b8:ac:67:32:14:5c:ce:d0:10:29:8f:e1:6a:7d:79: 93:25:03:6c:fe:98:80:fe:05:9e:db:3a:7d:71:41: c6:55:c7:63:bf:62:df:e1:91:ee:b9:0e:bd:8d:25: d3:74:e0:19:13:40:a4:c5:b8:93:86:b4:b9:ce:5b: ae:5b:a9:f0:b9:30:45:c2:57:25:67:7d:20:37:c2: 05:b5:bc:f6:9c:be:71:09:c7:ad:3e:36:a1:6f:9f: 75:fa:63:2c:16:5a:65:0f:14:97:ee:3a:34:97:44: f4:3e:2d:36:25:a8:94:6b:88:4e:61:fc:c1:06:da: 1e:d7:b0:aa:3b:7a:f7:2e:65:e1:e8:e4:74:74:13: 37:d8:51:05:fc:48:66:0a:30:9f:c5:a4:cd:39:a7: bf:ff:9c:68:0f:04:fb:37:a5:c8:12:27:2e:7f:82: 6d:4b:d5:b5:e7:4b:11:b7:08:c1:3d:cf:69:37:ee: 21:36:cb:a5:9f:9b:ee:00:90:f0:83:ad:94:6a:0c: 02:e8:fa:52:60:23:13:7c:61:c3:ad:54:da:22:b7: ae:47:10:ff:1d:7e:b7:86:94:e9:2e:f9:4c:41:7a: f3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:2C:99:C3:F0:5A:DE:B7:A5:EB:B4:30:1B:5C:48:9C:DD:B9:9B:3E X509v3 Authority Key Identifier: keyid:39:63:78:DE:33:D1:0B:8C:B0:F8:08:62:B6:49:1A:4D:E9:CF:FC:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWN43jPRC4yw-AhitkkaTenP_N8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:24:df:c2:a3:32:e1:38:92:ab:23:41:8c:0f:09:f4:5d:f5: 1e:86:d6:64:18:13:12:44:0f:5a:b4:09:fd:c2:3e:99:96:01: 97:c5:b2:d6:e5:59:a6:33:8a:2c:c0:fc:4f:4f:ca:a8:da:ee: 87:b9:25:f7:37:bc:88:24:f6:cd:1a:b1:6b:76:d5:90:a9:03: 61:f8:61:55:9a:86:4e:3f:cc:8b:93:a6:9f:42:ec:bd:8e:87: d0:06:58:70:36:dd:ca:64:2f:e1:03:85:e5:13:fd:63:23:21: 3d:bf:fd:da:38:f5:ec:cc:64:81:57:98:49:2c:67:ba:21:f2: 14:8a:da:93:98:8a:d3:1b:ca:e8:9a:dc:b7:e1:e9:44:c9:82: 61:d0:77:6d:ff:b3:11:90:0d:7e:b7:71:ea:4f:8c:e7:4c:12: 22:90:3a:78:da:1b:91:b4:e4:6c:a0:45:0b:31:74:a9:ab:dd: 22:90:1a:1a:04:69:29:f7:a4:e0:a5:9c:d8:c3:b2:0e:2b:d4: 1c:38:9f:70:da:85:c9:8f:86:51:3c:bf:d7:75:52:3c:7d:bc: fa:19:dd:1a:e7:d9:79:2f:97:a2:93:10:fc:c9:84:01:5d:1e: ea:ea:a9:48:a6:00:2a:f7:a0:18:4c:14:d4:63:d3:b7:08:3b: 42:6b:61:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOu7VBdzcUjbPyg1zf+koMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5NjM3OGRlMzNkMTBiOGNiMGY4MDg2MmI2NDkxYTRkZTlj ZmZjZGYwHhcNMjUxMjI0MDUwMTIyWhcNMjUxMjI1MDUwMTIyWjAzMTEwLwYDVQQD Eyg2NTJjOTljM2YwNWFkZWI3YTVlYmI0MzAxYjVjNDg5Y2RkYjk5YjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvk+0wURNaKJqUW7Hn/kUqtWhSYL5 +BbM+F5h5iK4rGcyFFzO0BApj+FqfXmTJQNs/piA/gWe2zp9cUHGVcdjv2Lf4ZHu uQ69jSXTdOAZE0CkxbiThrS5zluuW6nwuTBFwlclZ30gN8IFtbz2nL5xCcetPjah b591+mMsFlplDxSX7jo0l0T0Pi02JaiUa4hOYfzBBtoe17CqO3r3LmXh6OR0dBM3 2FEF/EhmCjCfxaTNOae//5xoDwT7N6XIEicuf4JtS9W150sRtwjBPc9pN+4hNsul n5vuAJDwg62UagwC6PpSYCMTfGHDrVTaIreuRxD/HX63hpTpLvlMQXrz0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUsmcPwWt63peu0MBtcSJzduZs+MB8GA1UdIwQY MBaAFDljeN4z0QuMsPgIYrZJGk3pz/zfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1dONDNqUFJDNHl3LUFoaXRra2FUZW5QX044LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9mNzU2Y2YtMDYyOC00ZjcyLWExMTct YmJlMDczYmY2YTY0LzEvT1dONDNqUFJDNHl3LUFoaXRra2FUZW5QX044Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9mNzU2Y2YtMDYyOC00ZjcyLWExMTctYmJlMDczYmY2YTY0 LzEvT1dONDNqUFJDNHl3LUFoaXRra2FUZW5QX044LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyCTfwqMy 4TiSqyNBjA8J9F31HobWZBgTEkQPWrQJ/cI+mZYBl8Wy1uVZpjOKLMD8T0/KqNru h7kl9ze8iCT2zRqxa3bVkKkDYfhhVZqGTj/Mi5Omn0LsvY6H0AZYcDbdymQv4QOF 5RP9YyMhPb/92jj17MxkgVeYSSxnuiHyFIrak5iK0xvK6Jrct+HpRMmCYdB3bf+z EZANfrdx6k+M50wSIpA6eNobkbTkbKBFCzF0qavdIpAaGgRpKfek4KWc2MOyDivU HDifcNqFyY+GUTy/13VSPH28+hndGufZeS+XopMQ/MmEAV0e6uqpSKYAKvegGEwU 1GPTtwg7Qmthww== -----END CERTIFICATE-----Generated at Wed Dec 24 11:25:58 2025 by rpki-client