This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft File: Ow839Domg0Lq8P7FOWBjQJC1sbc.mft (raw, json) Hash identifier: zpG6pRu+V0BQtlh9L9WvBwjCe2vh2sOPf0eKq12iC/g= Subject key identifier: 21:6C:D5:CC:09:5E:C8:5B:BB:54:9E:9F:C2:50:30:71:2B:7E:73:2A Authority key identifier: 3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7 Certificate issuer: /CN=3b0f37f43a268342eaf0fec53960634090b5b1b7 Certificate serial: 019AF352D20C7F537ACBEE20E9CF6C88C36A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft Manifest number: 0460 Signing time: Sat 06 Dec 2025 11:01:22 +0000 Manifest this update: Sat 06 Dec 2025 11:01:22 +0000 Manifest next update: Sun 07 Dec 2025 11:01:22 +0000 Files and hashes: 1: Ow839Domg0Lq8P7FOWBjQJC1sbc.crl (hash: PXJJKK0ajUayTK1QbBk0z51CSAsd21Eqh1+UwZaSiA8=) 2: zSJ_P5pv1HzQ8hvu19sQp2HnlDA.roa (hash: qAEiL4ToqpIPLGT1RE35tlHZ4lj+5tb3m4XW3uq1NSo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:d2:0c:7f:53:7a:cb:ee:20:e9:cf:6c:88:c3:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b0f37f43a268342eaf0fec53960634090b5b1b7 Validity Not Before: Dec 6 11:01:22 2025 GMT Not After : Dec 7 11:01:22 2025 GMT Subject: CN=216cd5cc095ec85bbb549e9fc25030712b7e732a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d2:05:cd:7b:d2:11:f8:10:ac:a5:7f:78:df: fa:0d:1a:ef:1b:65:03:42:29:74:12:c4:2a:81:b7: fa:cd:33:a1:db:ee:5d:98:69:94:ef:a1:59:2c:cb: 41:33:29:19:f9:89:95:f6:63:99:15:be:f0:b8:ea: d7:c0:13:f2:6d:81:2e:32:7e:8c:ee:f9:72:1d:65: 45:57:67:cb:5c:67:8b:08:0f:8c:29:96:dd:0c:e6: 21:80:42:cd:1f:18:6b:e2:75:b7:44:01:db:f5:ab: 5c:0a:8e:64:63:eb:b4:53:6f:97:f9:43:f1:79:26: 9f:f6:0f:25:7a:d5:c9:2b:61:ad:27:f3:f7:47:26: a7:0a:0d:d3:40:be:b6:59:db:3e:b8:6d:12:c1:38: 97:54:86:f1:2d:32:a6:be:7e:b0:b1:38:3d:58:ee: 85:b0:a7:23:a0:5e:1b:7b:08:db:3a:5f:08:04:12: 5d:d1:9f:d5:21:72:a0:49:3e:85:b5:8d:7e:8a:00: 5b:60:eb:66:58:d3:7a:05:75:22:84:b7:24:fb:9e: f1:2d:1b:aa:54:b4:f1:3a:c6:44:ee:bb:01:98:c7: 4f:e2:e7:f6:ba:2e:b5:c1:dd:6b:81:33:5e:c5:74: d8:fc:14:e9:ab:30:74:3f:e4:18:c8:43:3e:4a:81: 29:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:6C:D5:CC:09:5E:C8:5B:BB:54:9E:9F:C2:50:30:71:2B:7E:73:2A X509v3 Authority Key Identifier: keyid:3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:a8:e3:fa:f6:b3:1a:2c:cb:9d:a6:a8:e0:98:5a:f6:0a:22: a4:5d:0c:09:6e:c2:a7:46:eb:42:d0:46:6e:fd:e2:cb:53:99: c6:79:12:3f:91:5e:54:2c:6b:8f:00:c7:00:07:55:77:ac:86: 2b:f4:37:e6:d5:cc:91:b2:c2:35:02:b7:df:b7:8b:89:4b:69: 50:d5:4d:40:5a:7a:ac:73:22:70:7e:39:5f:53:e9:a8:dc:fd: fc:ef:83:ff:fd:05:d6:ec:39:10:28:d3:2d:f4:bc:4e:82:3c: 41:5f:06:c2:51:71:ad:2a:b1:22:db:e4:a8:04:d7:e5:63:10: 15:14:78:90:3e:00:72:20:40:ff:ae:d8:43:6a:18:39:23:19: 7c:82:e3:4d:b2:e9:18:a3:d1:96:65:1e:1a:bd:59:12:c0:86: 7b:40:bd:4a:42:47:ee:e1:1e:b1:f2:3a:b3:77:00:a4:82:37: bb:f2:08:b9:16:4c:f5:fa:11:87:b9:80:db:34:0f:78:78:8d: ec:07:d6:59:38:50:ef:f5:f7:b8:ce:1f:f2:47:52:2b:65:bf: bc:f6:45:89:19:d4:2a:99:54:a8:58:aa:7f:db:6c:0d:39:54: 66:f5:59:78:71:5e:f6:65:18:5c:66:95:36:76:c0:a7:ac:60: 3a:65:f5:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUtIMf1N6y+4g6c9siMNqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMGYzN2Y0M2EyNjgzNDJlYWYwZmVjNTM5NjA2MzQwOTBi NWIxYjcwHhcNMjUxMjA2MTEwMTIyWhcNMjUxMjA3MTEwMTIyWjAzMTEwLwYDVQQD EygyMTZjZDVjYzA5NWVjODViYmI1NDllOWZjMjUwMzA3MTJiN2U3MzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudIFzXvSEfgQrKV/eN/6DRrvG2UD Qil0EsQqgbf6zTOh2+5dmGmU76FZLMtBMykZ+YmV9mOZFb7wuOrXwBPybYEuMn6M 7vlyHWVFV2fLXGeLCA+MKZbdDOYhgELNHxhr4nW3RAHb9atcCo5kY+u0U2+X+UPx eSaf9g8letXJK2GtJ/P3RyanCg3TQL62Wds+uG0SwTiXVIbxLTKmvn6wsTg9WO6F sKcjoF4bewjbOl8IBBJd0Z/VIXKgST6FtY1+igBbYOtmWNN6BXUihLck+57xLRuq VLTxOsZE7rsBmMdP4uf2ui61wd1rgTNexXTY/BTpqzB0P+QYyEM+SoEpLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFs1cwJXshbu1Sen8JQMHErfnMqMB8GA1UdIwQY MBaAFDsPN/Q6JoNC6vD+xTlgY0CQtbG3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3c4MzlEb21nMExxOFA3Rk9XQmpRSkMxc2JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wNGY3MzYtMzcxMy00MGJhLThjMDgt OWFlOTAwZGY0Zjg4LzEvT3c4MzlEb21nMExxOFA3Rk9XQmpRSkMxc2JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8wNGY3MzYtMzcxMy00MGJhLThjMDgtOWFlOTAwZGY0Zjg4 LzEvT3c4MzlEb21nMExxOFA3Rk9XQmpRSkMxc2JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABKjj+vaz GizLnaao4Jha9goipF0MCW7Cp0brQtBGbv3iy1OZxnkSP5FeVCxrjwDHAAdVd6yG K/Q35tXMkbLCNQK337eLiUtpUNVNQFp6rHMicH45X1PpqNz9/O+D//0F1uw5ECjT LfS8ToI8QV8GwlFxrSqxItvkqATX5WMQFRR4kD4AciBA/67YQ2oYOSMZfILjTbLp GKPRlmUeGr1ZEsCGe0C9SkJH7uEesfI6s3cApII3u/IIuRZM9foRh7mA2zQPeHiN 7AfWWThQ7/X3uM4f8kdSK2W/vPZFiRnUKplUqFiqf9tsDTlUZvVZeHFe9mUYXGaV NnbAp6xgOmX15A== -----END CERTIFICATE-----Generated at Sat Dec 6 15:19:36 2025 by rpki-client