This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft File: OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft (raw, json) Hash identifier: +cizHinqDi81NWOBsx6IomlVGjQBNQXNzVxFB1NU0uM= Subject key identifier: 47:46:70:76:DA:0B:64:A1:67:25:3A:14:20:8C:25:9F:D3:9B:E0:5F Authority key identifier: 3A:F1:50:7F:DA:4E:70:48:28:C7:E0:3C:AF:62:64:56:AA:FC:5B:1A Certificate issuer: /CN=3af1507fda4e704828c7e03caf626456aafc5b1a Certificate serial: 019AF3896911AA159354BBF2B9815712B67E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvFQf9pOcEgox-A8r2JkVqr8Wxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft Manifest number: 168D Signing time: Sat 06 Dec 2025 12:01:00 +0000 Manifest this update: Sat 06 Dec 2025 12:01:00 +0000 Manifest next update: Sun 07 Dec 2025 12:01:00 +0000 Files and hashes: 1: OvFQf9pOcEgox-A8r2JkVqr8Wxo.crl (hash: FLxgbxFOb6142sRQBxvWZk4K1+dTtxSEIy7HPgvEneE=) 2: RzHN7Dslblmf2SWetMH6DUd-Es8.roa (hash: 2K0PSVlUZvtFJCr5mNlFcXi4Xq9NSfuA5JwXa1JJxuU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft rsync://rpki.ripe.net/repository/DEFAULT/OvFQf9pOcEgox-A8r2JkVqr8Wxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:69:11:aa:15:93:54:bb:f2:b9:81:57:12:b6:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af1507fda4e704828c7e03caf626456aafc5b1a Validity Not Before: Dec 6 12:01:00 2025 GMT Not After : Dec 7 12:01:00 2025 GMT Subject: CN=47467076da0b64a167253a14208c259fd39be05f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:28:3e:20:37:91:ae:8c:fb:3f:fd:c8:0f:a0: 1f:30:e6:85:84:42:74:12:b4:cc:e3:b8:40:34:ca: d1:50:35:88:93:ac:70:c6:df:1c:3f:9e:95:16:91: 7f:b9:ed:8e:86:8f:0b:93:3e:1c:45:68:14:64:81: ac:8e:50:b2:ed:b8:67:f4:41:b7:b6:3f:aa:35:7f: 38:d2:87:6c:06:e3:5f:ae:a0:54:98:3b:42:f5:65: aa:66:23:29:b0:fc:32:cf:8d:5d:1f:78:d1:16:66: 4d:ee:c8:36:61:fc:c1:ba:4e:b5:f1:ca:e0:ce:02: 1d:58:e8:9c:72:2a:be:ba:93:29:77:18:a0:05:53: ef:93:8f:7f:c8:60:59:3c:5e:0c:20:14:c4:f2:b6: a0:26:57:2e:6f:2d:7f:55:8e:e7:08:da:9b:62:b4: 31:1e:9d:6e:14:df:31:c2:27:fe:8a:98:dc:84:e3: 56:df:2b:5a:3e:19:72:28:5d:1e:0b:60:5c:13:7c: 2a:f3:4b:da:c9:83:b1:61:ff:0d:64:96:d1:7e:2e: 8c:94:55:66:29:15:4c:67:30:c3:d2:63:33:c3:d0: 38:af:39:31:12:17:97:3f:7f:72:8d:9e:2c:3e:ec: fb:b7:42:54:5d:a1:a1:75:8a:91:56:2c:88:71:b8: 7b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:46:70:76:DA:0B:64:A1:67:25:3A:14:20:8C:25:9F:D3:9B:E0:5F X509v3 Authority Key Identifier: keyid:3A:F1:50:7F:DA:4E:70:48:28:C7:E0:3C:AF:62:64:56:AA:FC:5B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvFQf9pOcEgox-A8r2JkVqr8Wxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:8d:fe:06:78:9b:6e:d8:a5:8d:9b:b8:17:83:b0:d9:c0:ab: 41:67:8a:af:01:09:20:36:fb:68:aa:88:61:44:d1:90:e8:c8: ef:3e:1d:17:69:61:96:96:51:c3:1e:e3:1d:e2:ca:c7:04:c2: 2e:b7:1e:f8:b7:41:88:fc:07:1e:63:de:97:76:58:47:61:1a: bd:a8:38:4c:ad:3e:28:d1:23:9e:26:26:5b:0c:e7:84:38:bd: aa:59:d5:27:30:46:32:70:ed:b3:47:0d:47:d9:71:e7:27:2a: 5c:70:01:48:1e:e0:38:7f:35:2b:ab:47:5e:4a:0d:c4:db:1f: 1c:71:59:93:9f:96:62:48:c6:3a:95:9a:3e:ab:20:e1:10:95: 3d:e6:50:fc:ae:66:0d:a7:fc:91:60:9f:d5:5c:a4:b0:3c:0c: 4f:71:e7:b9:ff:4f:99:df:12:82:04:dd:cc:9e:ba:81:60:fe: 35:68:b6:a8:67:6e:99:8d:52:0f:0a:5b:44:20:4e:da:72:fe: f9:3a:01:6c:1a:24:9a:6c:bd:52:a0:6a:02:0f:b6:e1:10:d9: 72:86:da:90:76:9c:ea:56:d5:4f:30:55:89:3f:ac:69:82:62: e7:b6:c1:79:81:28:68:00:c6:dc:03:af:6e:f8:2d:01:c3:46: fa:93:0a:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziWkRqhWTVLvyuYFXErZ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjE1MDdmZGE0ZTcwNDgyOGM3ZTAzY2FmNjI2NDU2YWFm YzViMWEwHhcNMjUxMjA2MTIwMTAwWhcNMjUxMjA3MTIwMTAwWjAzMTEwLwYDVQQD Eyg0NzQ2NzA3NmRhMGI2NGExNjcyNTNhMTQyMDhjMjU5ZmQzOWJlMDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCg+IDeRroz7P/3ID6AfMOaFhEJ0 ErTM47hANMrRUDWIk6xwxt8cP56VFpF/ue2Oho8Lkz4cRWgUZIGsjlCy7bhn9EG3 tj+qNX840odsBuNfrqBUmDtC9WWqZiMpsPwyz41dH3jRFmZN7sg2YfzBuk618crg zgIdWOicciq+upMpdxigBVPvk49/yGBZPF4MIBTE8ragJlcuby1/VY7nCNqbYrQx Hp1uFN8xwif+ipjchONW3ytaPhlyKF0eC2BcE3wq80vayYOxYf8NZJbRfi6MlFVm KRVMZzDD0mMzw9A4rzkxEheXP39yjZ4sPuz7t0JUXaGhdYqRViyIcbh7cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEdGcHbaC2ShZyU6FCCMJZ/Tm+BfMB8GA1UdIwQY MBaAFDrxUH/aTnBIKMfgPK9iZFaq/FsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZGUWY5cE9jRWdveC1BOHIySmtWcXI4V3hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85ZjUwZTEtM2VjNC00NmRjLWI0Zjct ODc0MjM0ZWQxZTVlLzEvT3ZGUWY5cE9jRWdveC1BOHIySmtWcXI4V3hvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC85ZjUwZTEtM2VjNC00NmRjLWI0ZjctODc0MjM0ZWQxZTVl LzEvT3ZGUWY5cE9jRWdveC1BOHIySmtWcXI4V3hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgI3+Bnib btiljZu4F4Ow2cCrQWeKrwEJIDb7aKqIYUTRkOjI7z4dF2lhlpZRwx7jHeLKxwTC Lrce+LdBiPwHHmPel3ZYR2Eavag4TK0+KNEjniYmWwznhDi9qlnVJzBGMnDts0cN R9lx5ycqXHABSB7gOH81K6tHXkoNxNsfHHFZk5+WYkjGOpWaPqsg4RCVPeZQ/K5m Daf8kWCf1VyksDwMT3Hnuf9Pmd8SggTdzJ66gWD+NWi2qGdumY1SDwpbRCBO2nL+ +ToBbBokmmy9UqBqAg+24RDZcobakHac6lbVTzBViT+saYJi57bBeYEoaADG3AOv bvgtAcNG+pMKuA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:57:51 2025 by rpki-client