This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft File: ovrHXzkOiAUoM33Qvc3HeTS43zw.mft (raw, json) Hash identifier: fKD9+qkvme1CwAHqv5NyoLBftXCCMsRz1FJ4OKlOoRc= Subject key identifier: C9:F0:7A:AF:B2:DF:91:08:6D:56:1C:14:B8:87:0F:6B:88:C9:B2:51 Authority key identifier: A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C Certificate issuer: /CN=a2fac75f390e880528337dd0bdcdc77934b8df3c Certificate serial: 019AF2ADB978991EE29202E8D5A6ADE46B40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 08:01:02 +0000 Manifest this update: Sat 06 Dec 2025 08:01:02 +0000 Manifest next update: Sun 07 Dec 2025 08:01:02 +0000 Files and hashes: 1: X4Bg17E-_zOoMsBVsaZHzSWTfnk.roa (hash: AeQay084Jh565kJCkX0/ofutgBRWTrNcsxqVgKztthY=) 2: ovrHXzkOiAUoM33Qvc3HeTS43zw.crl (hash: 7IwUbQr3n9RqhUVpgW82jGBuNQfq/J6kmZkTqBQ7sgE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:b9:78:99:1e:e2:92:02:e8:d5:a6:ad:e4:6b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2fac75f390e880528337dd0bdcdc77934b8df3c Validity Not Before: Dec 6 08:01:02 2025 GMT Not After : Dec 7 08:01:02 2025 GMT Subject: CN=c9f07aafb2df91086d561c14b8870f6b88c9b251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:60:fd:a5:16:18:f5:86:58:89:bf:c3:e2:69: 10:e9:2f:3f:20:6e:7b:96:16:08:07:c5:d4:c8:7b: 2c:16:ed:d2:26:2c:28:77:f7:cb:36:98:72:ac:5d: 3c:55:3a:9a:aa:47:0f:fd:de:fa:d4:54:11:2e:63: ea:a7:2c:fe:6e:fc:9b:4f:b3:3f:23:16:bd:6f:65: 90:48:30:59:60:fc:1b:f3:6f:4d:df:66:5f:87:7a: 7d:93:9a:db:54:ed:01:35:3b:3a:5d:a2:dd:41:35: 61:13:07:42:ce:d3:12:68:6e:60:04:c7:09:1a:42: c3:6f:f5:41:9e:40:60:05:e8:b0:e4:58:11:71:92: 65:b9:02:8f:58:43:2f:71:c6:40:89:31:09:43:27: 36:73:ba:8d:7f:a9:c9:47:a3:80:58:54:04:62:07: a3:6f:09:c0:41:24:cb:11:90:8d:75:78:38:b0:bd: a7:2a:08:e4:07:51:d0:19:61:fd:44:53:9e:2c:f8: f5:f2:7e:fc:e5:fe:04:ab:37:f5:81:87:81:45:ef: 2d:5b:f4:c3:29:a3:c7:4e:d6:7f:a5:81:e5:6e:2c: 87:4b:23:99:8b:5d:6b:f2:d5:77:39:2b:6f:bf:9c: c8:85:83:16:f9:32:5f:9e:8c:ce:f2:23:63:5c:b7: 5b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:F0:7A:AF:B2:DF:91:08:6D:56:1C:14:B8:87:0F:6B:88:C9:B2:51 X509v3 Authority Key Identifier: keyid:A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:31:61:c4:cd:9a:12:30:ae:0b:8a:33:fc:94:4a:33:38:9a: e5:c6:8e:d3:d9:7b:b5:9b:dd:12:d5:08:5e:be:71:4d:df:cc: 13:ae:f6:95:8c:e8:d0:29:f1:9d:44:d5:1d:a8:e1:8f:bf:0a: ed:3e:0b:93:a6:44:9b:b9:ed:6f:f9:42:17:ff:5a:82:3e:b2: 31:c1:01:81:75:ac:1a:9c:d6:0f:70:b1:32:ab:8f:83:22:23: b5:58:9f:e6:66:98:07:13:37:cf:02:e5:7f:64:0b:a3:66:b1: 58:65:a0:57:7f:8a:0d:f9:57:7b:b6:f6:ec:69:36:11:b2:25: 93:dd:ee:07:f1:fe:22:ec:85:33:34:3f:a6:d6:33:63:5b:3c: 2d:53:20:8c:23:3b:47:6a:67:16:29:81:27:d0:4e:62:ed:44: ab:3f:99:f2:b2:7a:62:cc:74:10:8b:b4:a8:c0:13:a8:da:fa: 65:b8:8a:0e:c3:4b:00:d4:d5:16:98:2f:ea:43:e6:89:ff:09: 12:95:93:22:99:b1:04:b1:0d:21:93:f7:ac:de:35:29:07:38: 86:4c:7d:99:00:c7:19:fc:05:3e:b8:cd:a4:5b:a9:36:40:99: d0:49:cb:28:8e:4c:17:ea:5f:8f:46:85:f5:96:aa:2e:d0:9f: 66:3d:0e:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrbl4mR7ikgLo1aat5GtAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZmFjNzVmMzkwZTg4MDUyODMzN2RkMGJkY2RjNzc5MzRi OGRmM2MwHhcNMjUxMjA2MDgwMTAyWhcNMjUxMjA3MDgwMTAyWjAzMTEwLwYDVQQD EyhjOWYwN2FhZmIyZGY5MTA4NmQ1NjFjMTRiODg3MGY2Yjg4YzliMjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWD9pRYY9YZYib/D4mkQ6S8/IG57 lhYIB8XUyHssFu3SJiwod/fLNphyrF08VTqaqkcP/d761FQRLmPqpyz+bvybT7M/ Ixa9b2WQSDBZYPwb829N32Zfh3p9k5rbVO0BNTs6XaLdQTVhEwdCztMSaG5gBMcJ GkLDb/VBnkBgBeiw5FgRcZJluQKPWEMvccZAiTEJQyc2c7qNf6nJR6OAWFQEYgej bwnAQSTLEZCNdXg4sL2nKgjkB1HQGWH9RFOeLPj18n785f4Eqzf1gYeBRe8tW/TD KaPHTtZ/pYHlbiyHSyOZi11r8tV3OStvv5zIhYMW+TJfnozO8iNjXLdbqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMnweq+y35EIbVYcFLiHD2uIybJRMB8GA1UdIwQY MBaAFKL6x185DogFKDN90L3Nx3k0uN88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3ZySFh6a09pQVVvTTMzUXZjM0hlVFM0M3p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC80ODMwOTMtMzZkYi00MDQzLWI2ZDYt NzYyMjU5YWI5NTAwLzEvb3ZySFh6a09pQVVvTTMzUXZjM0hlVFM0M3p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC80ODMwOTMtMzZkYi00MDQzLWI2ZDYtNzYyMjU5YWI5NTAw LzEvb3ZySFh6a09pQVVvTTMzUXZjM0hlVFM0M3p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPDFhxM2a EjCuC4oz/JRKMzia5caO09l7tZvdEtUIXr5xTd/ME672lYzo0CnxnUTVHajhj78K 7T4Lk6ZEm7ntb/lCF/9agj6yMcEBgXWsGpzWD3CxMquPgyIjtVif5maYBxM3zwLl f2QLo2axWGWgV3+KDflXe7b27Gk2EbIlk93uB/H+IuyFMzQ/ptYzY1s8LVMgjCM7 R2pnFimBJ9BOYu1Eqz+Z8rJ6Ysx0EIu0qMATqNr6ZbiKDsNLANTVFpgv6kPmif8J EpWTIpmxBLENIZP3rN41KQc4hkx9mQDHGfwFPrjNpFupNkCZ0EnLKI5MF+pfj0aF 9ZaqLtCfZj0Odg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:37:46 2025 by rpki-client