This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft File: OwzUTrvj0NagcudRA_IxYGmV9qs.mft (raw, json) Hash identifier: jDi/fjVhj305b7xigifsvb4I/s9eKe0RiT6eVFuJZBw= Subject key identifier: 6A:B5:73:3B:AC:29:B9:71:06:30:42:58:FB:00:5D:1D:E9:D8:1C:B8 Authority key identifier: 3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB Certificate issuer: /CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab Certificate serial: 019AF0886F505E9EAF40F48DCA159493A596 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft Manifest number: 1760 Signing time: Fri 05 Dec 2025 22:01:04 +0000 Manifest this update: Fri 05 Dec 2025 22:01:04 +0000 Manifest next update: Sat 06 Dec 2025 22:01:04 +0000 Files and hashes: 1: 1_qLHUdqm7sR0Q8q1colm3DejS0.roa (hash: EM08EWb/b5Ix5jQ35FhICifQx6j5GDireNgAsuw6f8M=) 2: OwzUTrvj0NagcudRA_IxYGmV9qs.crl (hash: KEPorHhY/C23VUsClH7Zd0F6Jxpq06x5j8rYnfjIbXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:6f:50:5e:9e:af:40:f4:8d:ca:15:94:93:a5:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab Validity Not Before: Dec 5 22:01:04 2025 GMT Not After : Dec 6 22:01:04 2025 GMT Subject: CN=6ab5733bac29b97106304258fb005d1de9d81cb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:aa:25:68:57:bd:00:61:bc:7c:ac:b5:3a:51: b4:54:79:98:c1:0e:13:20:7b:03:0c:57:35:a0:33: d0:02:21:31:8e:58:53:41:c8:68:42:c4:cb:2b:7f: 7a:7f:03:54:dc:f5:05:16:7e:19:76:ea:ed:60:ac: 7a:c4:0c:ea:91:9b:5b:8c:47:23:46:10:c6:8b:3c: df:b6:35:39:6f:ff:eb:e5:d5:04:b7:b2:47:43:44: 75:bf:98:38:e8:f6:1b:da:88:22:ae:eb:85:44:85: db:27:0c:2a:10:ea:ed:58:89:cc:f7:80:ef:98:55: a2:d9:74:3f:2c:53:cf:ff:b4:88:d7:b2:2f:3d:21: fb:de:c8:e1:8e:09:6e:27:ce:a0:ef:b4:9d:10:18: 0a:11:68:81:5b:48:ed:48:d4:e3:8d:93:5f:19:66: b7:0e:fa:85:e7:a9:40:2e:e1:ee:f8:74:07:72:a6: 04:3d:e7:d4:22:14:24:1b:3c:58:a4:21:ce:f0:74: c9:90:b2:19:e4:0a:f0:83:75:99:5b:3b:1f:50:1f: 3e:07:a1:03:73:6e:d8:a5:e5:c3:57:63:d3:67:91: f7:98:9e:fb:dc:bc:7f:03:11:37:40:02:54:d9:c1: fd:c9:bc:c3:30:74:ba:85:34:a3:01:15:fe:93:e6: 09:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B5:73:3B:AC:29:B9:71:06:30:42:58:FB:00:5D:1D:E9:D8:1C:B8 X509v3 Authority Key Identifier: keyid:3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:b9:1b:d4:99:32:59:68:c8:c9:fc:24:0d:cf:29:1e:50:53: 12:9e:30:4c:5c:0f:d6:fd:0f:15:eb:7b:21:24:d7:20:9b:08: fb:8e:a3:d1:c4:d9:98:35:ff:01:ab:0f:d0:b2:cd:32:1a:ba: 79:a7:87:b2:c3:10:0d:7f:9a:fa:e5:db:ea:4b:fd:58:25:7f: 70:7c:87:99:1f:84:95:f1:98:ac:28:15:33:d7:dd:f3:42:60: 33:6c:b7:f3:b1:04:79:42:90:d7:1f:0d:f3:3e:bc:43:6d:fe: 42:10:3f:ac:cc:4d:e7:99:97:93:f7:3d:0c:e8:22:c1:9a:05: c8:92:53:1c:3a:e6:63:65:8e:7d:d6:3d:ce:d3:5e:1b:9d:eb: e7:a1:66:a8:c3:87:be:15:3f:d0:81:da:76:40:5e:5c:fe:98: e8:fb:e4:f9:d1:34:50:91:64:0a:fe:0f:4c:57:a1:2d:77:a2: 60:26:15:2b:bb:20:ab:73:e6:82:89:4e:3b:3e:6f:31:34:b6: f0:33:06:ea:1e:ae:02:be:10:df:4d:d7:f8:77:68:ec:79:1e: 6b:f5:33:77:96:62:40:e0:b3:03:79:6e:66:75:78:9f:fe:f4: b8:61:9d:14:fb:be:91:0f:f4:f8:0d:3b:ac:7b:63:e0:bc:ac: b6:c6:f0:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiG9QXp6vQPSNyhWUk6WWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMGNkNDRlYmJlM2QwZDZhMDcyZTc1MTAzZjIzMTYwNjk5 NWY2YWIwHhcNMjUxMjA1MjIwMTA0WhcNMjUxMjA2MjIwMTA0WjAzMTEwLwYDVQQD Eyg2YWI1NzMzYmFjMjliOTcxMDYzMDQyNThmYjAwNWQxZGU5ZDgxY2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8qolaFe9AGG8fKy1OlG0VHmYwQ4T IHsDDFc1oDPQAiExjlhTQchoQsTLK396fwNU3PUFFn4ZdurtYKx6xAzqkZtbjEcj RhDGizzftjU5b//r5dUEt7JHQ0R1v5g46PYb2ogiruuFRIXbJwwqEOrtWInM94Dv mFWi2XQ/LFPP/7SI17IvPSH73sjhjgluJ86g77SdEBgKEWiBW0jtSNTjjZNfGWa3 DvqF56lALuHu+HQHcqYEPefUIhQkGzxYpCHO8HTJkLIZ5Arwg3WZWzsfUB8+B6ED c27YpeXDV2PTZ5H3mJ773Lx/AxE3QAJU2cH9ybzDMHS6hTSjARX+k+YJJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGq1czusKblxBjBCWPsAXR3p2By4MB8GA1UdIwQY MBaAFDsM1E6749DWoHLnUQPyMWBplfarMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3d6VVRydmowTmFnY3VkUkFfSXhZR21WOXFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy85NzFmMDgtZTU3Yy00MDhhLWI3NzYt ZjdkYTNiODczMmJmLzEvT3d6VVRydmowTmFnY3VkUkFfSXhZR21WOXFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy85NzFmMDgtZTU3Yy00MDhhLWI3NzYtZjdkYTNiODczMmJm LzEvT3d6VVRydmowTmFnY3VkUkFfSXhZR21WOXFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADLkb1Jky WWjIyfwkDc8pHlBTEp4wTFwP1v0PFet7ISTXIJsI+46j0cTZmDX/AasP0LLNMhq6 eaeHssMQDX+a+uXb6kv9WCV/cHyHmR+ElfGYrCgVM9fd80JgM2y387EEeUKQ1x8N 8z68Q23+QhA/rMxN55mXk/c9DOgiwZoFyJJTHDrmY2WOfdY9ztNeG53r56FmqMOH vhU/0IHadkBeXP6Y6Pvk+dE0UJFkCv4PTFehLXeiYCYVK7sgq3PmgolOOz5vMTS2 8DMG6h6uAr4Q303X+Hdo7Hkea/Uzd5ZiQOCzA3luZnV4n/70uGGdFPu+kQ/0+A07 rHtj4LystsbwXQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:34 2025 by rpki-client