This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft File: owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft (raw, json) Hash identifier: 5tXk7R37a6dsf8IBGzaI8r5WjAgxHkkXsI1274GJ6hI= Subject key identifier: 42:A6:3F:B7:84:2A:23:64:5E:5A:34:A6:F6:36:6B:CB:0E:4C:3A:DC Authority key identifier: A3:02:0A:E9:6B:5F:0C:5B:73:39:E6:15:4D:CE:C6:F1:6C:B6:3F:5A Certificate issuer: /CN=a3020ae96b5f0c5b7339e6154dcec6f16cb63f5a Certificate serial: 019AF5E5C3DEEFA7681DEE7412C60BBC27C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft Manifest number: 08FF Signing time: Sat 06 Dec 2025 23:01:06 +0000 Manifest this update: Sat 06 Dec 2025 23:01:06 +0000 Manifest next update: Sun 07 Dec 2025 23:01:06 +0000 Files and hashes: 1: 75LK0aL52naimh1x42NbpBoOy-w.roa (hash: +e/KEGbv2gq7/ZZoiVRRifw/ABGsD3UfOMxXZbs5gMo=) 2: owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl (hash: uqiIcsC9H6s0Pm1ryc0dW6TeOyCNtxc/gtCJnLbiG7c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:c3:de:ef:a7:68:1d:ee:74:12:c6:0b:bc:27:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3020ae96b5f0c5b7339e6154dcec6f16cb63f5a Validity Not Before: Dec 6 23:01:06 2025 GMT Not After : Dec 7 23:01:06 2025 GMT Subject: CN=42a63fb7842a23645e5a34a6f6366bcb0e4c3adc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:09:9d:c9:d3:d8:2d:ad:b8:45:39:ee:53:e5: 26:41:c3:d2:f7:f7:12:4b:c5:e3:cb:6f:9b:86:7f: f3:0a:45:79:14:ab:ea:d8:4c:67:c3:07:5c:90:5e: 71:a0:2f:40:4c:ba:c0:f2:b8:1a:5f:1f:23:d2:de: ce:f4:46:13:c2:ff:6c:b1:a2:32:25:74:01:cc:00: de:44:0d:b0:fe:30:9b:fa:98:28:e8:c6:d9:ff:f1: 6a:fe:c0:30:a1:95:0a:0d:8c:90:3f:38:d6:b8:55: 36:07:ef:46:ee:db:a9:db:0d:9b:7a:7c:4f:f5:9c: 23:27:dc:ac:46:fe:06:3a:e7:32:1c:dd:06:35:8e: 39:ec:9b:84:76:4e:98:f6:23:46:82:da:40:d4:83: 7a:09:09:ae:96:ca:e7:18:82:8b:01:cf:50:bf:69: 05:1c:3d:f9:7e:74:54:91:d9:33:b2:d8:5e:bb:51: da:a4:85:2d:a9:ae:d0:14:78:a8:57:f1:a5:07:bf: 29:61:96:6e:62:7a:4c:a4:16:33:d9:28:ca:b2:1b: 3e:65:d2:1e:41:b9:da:e1:16:24:8b:45:e2:e9:ed: 7e:b0:cc:72:38:c3:a1:24:58:9d:0f:b0:44:30:5e: 9a:0a:91:ac:ac:fe:b5:c1:cc:a4:3d:da:89:14:bc: fe:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A6:3F:B7:84:2A:23:64:5E:5A:34:A6:F6:36:6B:CB:0E:4C:3A:DC X509v3 Authority Key Identifier: keyid:A3:02:0A:E9:6B:5F:0C:5B:73:39:E6:15:4D:CE:C6:F1:6C:B6:3F:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:32:59:68:b2:ef:0d:54:d7:9e:b2:82:8f:61:12:eb:fd:20: 2f:5f:a9:a8:4d:b4:c7:f6:16:e3:9c:c1:b8:34:55:aa:95:e0: 96:9d:fa:c9:be:ac:9f:e9:83:b8:fb:47:df:cc:5c:dd:f6:05: 04:7d:68:a1:56:c7:35:19:f9:9d:2d:2f:53:42:67:a1:1b:82: d6:26:94:9a:ed:a0:0f:46:d9:0e:b1:a0:34:7c:09:36:c3:37: d1:47:fe:d1:11:45:3b:60:b6:28:78:50:0b:65:64:e1:00:82: 9d:eb:46:a8:ac:f2:15:6e:0b:51:5a:7d:2c:c4:11:ae:e0:60: af:47:38:82:0d:60:86:92:56:13:84:e8:34:e7:03:07:59:c4: 0a:7c:05:20:a8:48:68:12:18:e6:e6:54:68:c8:30:d2:dd:ee: 6d:d4:50:34:3a:1c:3c:27:bf:df:25:93:6e:0b:3b:7d:a3:75: 21:f5:aa:de:96:03:b6:c4:03:fa:c1:b9:b8:fd:50:a4:08:0a: f6:71:86:e0:cd:59:2a:ec:34:2d:44:81:fc:23:3d:c1:1e:dc: 4a:f8:51:10:0a:50:17:7c:15:80:41:69:aa:37:b7:fa:9c:60: 63:99:78:7f:98:3f:ee:2e:b6:0f:72:ab:ee:40:a3:db:c0:e2: 3e:e6:25:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15cPe76doHe50EsYLvCfGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzMDIwYWU5NmI1ZjBjNWI3MzM5ZTYxNTRkY2VjNmYxNmNi NjNmNWEwHhcNMjUxMjA2MjMwMTA2WhcNMjUxMjA3MjMwMTA2WjAzMTEwLwYDVQQD Eyg0MmE2M2ZiNzg0MmEyMzY0NWU1YTM0YTZmNjM2NmJjYjBlNGMzYWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwmdydPYLa24RTnuU+UmQcPS9/cS S8Xjy2+bhn/zCkV5FKvq2ExnwwdckF5xoC9ATLrA8rgaXx8j0t7O9EYTwv9ssaIy JXQBzADeRA2w/jCb+pgo6MbZ//Fq/sAwoZUKDYyQPzjWuFU2B+9G7tup2w2benxP 9ZwjJ9ysRv4GOucyHN0GNY457JuEdk6Y9iNGgtpA1IN6CQmulsrnGIKLAc9Qv2kF HD35fnRUkdkzstheu1HapIUtqa7QFHioV/GlB78pYZZuYnpMpBYz2SjKshs+ZdIe Qbna4RYki0Xi6e1+sMxyOMOhJFidD7BEMF6aCpGsrP61wcykPdqJFLz+2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEKmP7eEKiNkXlo0pvY2a8sOTDrcMB8GA1UdIwQY MBaAFKMCCulrXwxbcznmFU3OxvFstj9aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3dJSzZXdGZERnR6T2VZVlRjN0c4V3kyUDFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9jNmU5NzItNGVkMS00NTI2LWEzMjAt M2I3YzEyNjcyNWQ1LzEvb3dJSzZXdGZERnR6T2VZVlRjN0c4V3kyUDFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9jNmU5NzItNGVkMS00NTI2LWEzMjAtM2I3YzEyNjcyNWQ1 LzEvb3dJSzZXdGZERnR6T2VZVlRjN0c4V3kyUDFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOzJZaLLv DVTXnrKCj2ES6/0gL1+pqE20x/YW45zBuDRVqpXglp36yb6sn+mDuPtH38xc3fYF BH1ooVbHNRn5nS0vU0JnoRuC1iaUmu2gD0bZDrGgNHwJNsM30Uf+0RFFO2C2KHhQ C2Vk4QCCnetGqKzyFW4LUVp9LMQRruBgr0c4gg1ghpJWE4ToNOcDB1nECnwFIKhI aBIY5uZUaMgw0t3ubdRQNDocPCe/3yWTbgs7faN1IfWq3pYDtsQD+sG5uP1QpAgK 9nGG4M1ZKuw0LUSB/CM9wR7cSvhREApQF3wVgEFpqje3+pxgY5l4f5g/7i62D3Kr 7kCj28DiPuYlYw== -----END CERTIFICATE-----Generated at Sun Dec 7 06:41:28 2025 by rpki-client