This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft File: OvovwG4aqRNcJjG3O-zFlXsCOpM.mft (raw, json) Hash identifier: edSueCM8yl81fSQHW2ALwzQU2NYUUFNgFWPfpiQMcUY= Subject key identifier: 07:6D:5D:11:0B:E0:3A:07:BA:BE:63:8D:F5:CC:7A:47:B1:7B:96:D0 Authority key identifier: 3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93 Certificate issuer: /CN=3afa2fc06e1aa9135c2631b73becc5957b023a93 Certificate serial: 019AF5E575F1855C6595E3C44671AC577532 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft Manifest number: 13F6 Signing time: Sat 06 Dec 2025 23:00:47 +0000 Manifest this update: Sat 06 Dec 2025 23:00:47 +0000 Manifest next update: Sun 07 Dec 2025 23:00:47 +0000 Files and hashes: 1: OvovwG4aqRNcJjG3O-zFlXsCOpM.crl (hash: d6CAWEpSXsH6Nz2QiZLstWfxLanonBqfcKMNg41S45A=) 2: TmqgT8a6A5MGUn5mkLtQ8qR97F4.roa (hash: V4gF7PSkd2779yOJRGcz3efKoncCJTVpp0G+/wVgtGA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:75:f1:85:5c:65:95:e3:c4:46:71:ac:57:75:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3afa2fc06e1aa9135c2631b73becc5957b023a93 Validity Not Before: Dec 6 23:00:47 2025 GMT Not After : Dec 7 23:00:47 2025 GMT Subject: CN=076d5d110be03a07babe638df5cc7a47b17b96d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5b:36:b5:69:bd:fc:9c:73:9a:da:26:28:f1: 71:97:f1:2b:94:a2:00:f0:b6:8c:e1:ff:35:a3:a2: 88:a1:f1:8d:59:16:23:ef:ff:09:17:76:86:d1:c3: f6:8b:9d:4e:7a:63:34:f1:6b:5d:33:43:f9:ec:43: 8e:51:70:cc:23:f5:f9:b9:ce:19:79:6c:03:58:95: 7c:4a:5d:d9:80:50:49:0d:42:77:9c:19:ff:ac:c5: 46:9e:c2:7f:70:40:75:37:a4:e4:df:46:7d:99:60: d6:a1:d8:35:60:c4:8c:64:d5:e3:ed:46:b4:8f:56: 6f:d1:ec:68:69:2b:f3:e6:df:bf:e4:f1:cb:5a:06: a7:36:75:cb:9d:07:d2:d6:51:b6:bd:1b:c5:61:89: 27:7a:10:c1:4f:c9:ab:88:2f:eb:4e:e2:29:f0:7a: 8d:c1:ee:23:60:d2:f8:cb:d9:00:d0:06:b5:79:c0: a9:e6:e3:f6:09:21:4b:0f:9e:e6:ef:9c:34:6c:2c: fe:74:14:97:2e:6b:92:c5:59:8f:05:5f:d9:e5:79: ba:49:b1:c0:1a:19:c9:7f:c9:f6:0e:b3:37:c5:83: 37:4d:15:7a:b9:11:13:2b:fc:71:94:30:97:30:ee: a4:78:05:5d:e0:86:cc:f7:64:1c:c2:76:0f:30:05: d0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:6D:5D:11:0B:E0:3A:07:BA:BE:63:8D:F5:CC:7A:47:B1:7B:96:D0 X509v3 Authority Key Identifier: keyid:3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:84:38:19:32:7c:ba:b6:ad:23:30:83:65:0f:1f:a0:b9:b5: 0f:6d:4d:f2:0d:53:8c:60:bd:27:f7:0e:d1:e5:80:ae:1d:e5: ef:b9:15:9c:68:1f:41:59:0e:d2:3e:4b:7f:cd:c2:71:23:e3: 76:85:24:59:db:85:be:11:e0:2e:5e:00:46:8c:37:77:c3:01: 4e:0c:1d:2c:ba:50:ea:7c:21:e1:86:6d:55:6b:6c:21:1d:2d: af:6b:59:83:48:56:86:e0:e3:3d:a5:56:9d:d6:7c:b3:00:1e: b6:70:23:5a:14:9e:f6:84:2d:98:70:d0:e4:2a:53:32:4e:e9: 92:75:39:4e:cb:27:ca:97:a0:fc:b7:af:48:c7:c4:b7:33:b4: e6:3d:c0:97:fc:46:6f:d6:21:d0:47:6a:cb:9a:48:08:d3:84: 24:7b:78:aa:3d:da:76:01:fc:cf:7c:ae:fc:1e:09:be:09:f5: e9:95:fa:d9:30:02:7d:f6:e5:ec:a6:25:21:96:e9:8e:a5:f9: 44:28:26:eb:25:dc:87:90:70:6e:e1:ee:ee:b5:7b:57:1a:e4: 5b:ef:f3:f0:34:6f:14:31:b7:c8:e6:f9:44:d0:a4:f9:5e:39: 09:c2:36:63:21:b9:b4:ca:29:e5:07:cd:3d:65:91:8c:65:aa: 0b:10:50:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15XXxhVxllePERnGsV3UyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZmEyZmMwNmUxYWE5MTM1YzI2MzFiNzNiZWNjNTk1N2Iw MjNhOTMwHhcNMjUxMjA2MjMwMDQ3WhcNMjUxMjA3MjMwMDQ3WjAzMTEwLwYDVQQD EygwNzZkNWQxMTBiZTAzYTA3YmFiZTYzOGRmNWNjN2E0N2IxN2I5NmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnls2tWm9/JxzmtomKPFxl/ErlKIA 8LaM4f81o6KIofGNWRYj7/8JF3aG0cP2i51OemM08WtdM0P57EOOUXDMI/X5uc4Z eWwDWJV8Sl3ZgFBJDUJ3nBn/rMVGnsJ/cEB1N6Tk30Z9mWDWodg1YMSMZNXj7Ua0 j1Zv0exoaSvz5t+/5PHLWganNnXLnQfS1lG2vRvFYYknehDBT8mriC/rTuIp8HqN we4jYNL4y9kA0Aa1ecCp5uP2CSFLD57m75w0bCz+dBSXLmuSxVmPBV/Z5Xm6SbHA GhnJf8n2DrM3xYM3TRV6uRETK/xxlDCXMO6keAVd4IbM92QcwnYPMAXQ1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAdtXREL4DoHur5jjfXMekexe5bQMB8GA1UdIwQY MBaAFDr6L8BuGqkTXCYxtzvsxZV7AjqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZvdndHNGFxUk5jSmpHM08tekZsWHNDT3BNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi84OTkyMTgtMmExOS00ZDBmLTlmMWUt ZWYzOGU4Y2UzM2QxLzEvT3ZvdndHNGFxUk5jSmpHM08tekZsWHNDT3BNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi84OTkyMTgtMmExOS00ZDBmLTlmMWUtZWYzOGU4Y2UzM2Qx LzEvT3ZvdndHNGFxUk5jSmpHM08tekZsWHNDT3BNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAooQ4GTJ8 uratIzCDZQ8foLm1D21N8g1TjGC9J/cO0eWArh3l77kVnGgfQVkO0j5Lf83CcSPj doUkWduFvhHgLl4ARow3d8MBTgwdLLpQ6nwh4YZtVWtsIR0tr2tZg0hWhuDjPaVW ndZ8swAetnAjWhSe9oQtmHDQ5CpTMk7pknU5Tssnypeg/LevSMfEtzO05j3Al/xG b9Yh0Edqy5pICNOEJHt4qj3adgH8z3yu/B4Jvgn16ZX62TACffbl7KYlIZbpjqX5 RCgm6yXch5BwbuHu7rV7VxrkW+/z8DRvFDG3yOb5RNCk+V45CcI2YyG5tMop5QfN PWWRjGWqCxBQxA== -----END CERTIFICATE-----Generated at Sun Dec 7 03:23:34 2025 by rpki-client