This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft File: ow9vtvXIDKSmA4J8lrO99grVY6o.mft (raw, json) Hash identifier: y5tx3oy4NDwypjyii05GuXrxsNmL6+TlyQwh6bRsfKw= Subject key identifier: 76:DE:B8:FB:C3:F2:6E:35:3F:64:99:A2:08:0F:AC:3B:A1:3C:36:D9 Authority key identifier: A3:0F:6F:B6:F5:C8:0C:A4:A6:03:82:7C:96:B3:BD:F6:0A:D5:63:AA Certificate issuer: /CN=a30f6fb6f5c80ca4a603827c96b3bdf60ad563aa Certificate serial: 019AF4654B4324C86619A4E992FD55E35B36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 16:01:10 +0000 Manifest this update: Sat 06 Dec 2025 16:01:10 +0000 Manifest next update: Sun 07 Dec 2025 16:01:10 +0000 Files and hashes: 1: heeGDLviBMl1vF5Zbjvq6fTed7g.roa (hash: cRDDBBpd8BeTbZa8h3z0CLG5of55GqXqgBbWU/LBe+M=) 2: ow9vtvXIDKSmA4J8lrO99grVY6o.crl (hash: W1nkjADDiyAtFFjVZ4ffW1ARW9qQT9qeL8fG6K0gdhM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.crl rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:4b:43:24:c8:66:19:a4:e9:92:fd:55:e3:5b:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a30f6fb6f5c80ca4a603827c96b3bdf60ad563aa Validity Not Before: Dec 6 16:01:10 2025 GMT Not After : Dec 7 16:01:10 2025 GMT Subject: CN=76deb8fbc3f26e353f6499a2080fac3ba13c36d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:70:fc:c3:e4:cb:b4:34:13:b0:32:81:af:c9: e8:25:2e:2c:df:5c:73:2f:23:84:8b:e4:9a:eb:ea: 0c:a6:a1:6a:ad:99:51:f8:ef:64:b3:92:e2:b6:37: 14:09:89:ab:0d:5c:43:96:9e:f5:d3:99:c5:5a:99: c0:c3:af:25:95:58:34:c0:fa:7f:05:cc:e6:72:7d: bf:5a:7e:82:c6:3f:6f:29:2b:e8:74:56:4d:68:e6: e2:df:c1:b6:c8:e4:3d:af:d6:4d:2a:c5:1c:ff:3f: 22:18:d4:a8:f4:b9:7e:b6:27:90:4b:47:97:f3:e0: c1:ee:78:43:ae:94:a5:fd:37:7f:35:e4:46:d2:43: 89:42:85:f8:84:6d:9f:7c:dc:6d:3a:74:70:58:5c: 2c:f2:3f:01:65:02:6f:f7:be:05:9e:c0:f5:25:a2: 72:5d:50:9a:34:7d:ae:1f:b4:1c:b1:a8:31:ba:b0: d1:18:a1:ad:5c:18:ec:97:3b:78:a9:2b:f2:43:6b: 35:d4:e7:e3:eb:02:95:49:9a:f1:86:69:87:b7:eb: 0b:80:df:64:70:d1:fd:3e:f6:2d:19:93:50:ab:32: 17:f8:9a:f7:ec:ce:79:c5:d3:7f:b2:49:3c:17:a5: 3f:c5:f5:8e:c7:af:7f:2e:c4:1c:f2:77:c4:0f:3e: 66:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:DE:B8:FB:C3:F2:6E:35:3F:64:99:A2:08:0F:AC:3B:A1:3C:36:D9 X509v3 Authority Key Identifier: keyid:A3:0F:6F:B6:F5:C8:0C:A4:A6:03:82:7C:96:B3:BD:F6:0A:D5:63:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d2:01:81:be:4a:fc:1b:db:14:b8:15:62:ec:98:13:24:38: c2:74:44:04:62:a8:30:1d:ee:76:72:7c:09:9a:66:19:c6:84: 0b:5c:d7:1d:a7:58:13:80:89:4e:10:01:ed:73:e3:d0:39:30: ce:66:bd:9c:37:90:eb:97:b3:7c:70:18:e9:7c:7f:6e:11:da: ca:76:ae:ef:0a:4a:54:3e:93:48:a1:b1:b8:8d:22:ea:08:3f: 03:5d:25:4b:0a:46:f3:43:88:17:10:eb:ad:ea:67:a7:18:10: cd:3b:34:e0:af:27:d5:ff:58:d5:59:61:65:e8:0b:a5:75:a4: c8:8d:63:a5:0d:e2:70:18:bc:c3:cb:45:5d:0d:b5:76:b1:94: cb:da:4e:b8:33:2b:63:a9:ed:bc:6b:70:f5:ac:ec:c7:fb:72: fc:5d:26:d1:9e:1b:7f:50:63:89:44:49:d1:bc:a4:3d:b8:5f: d0:b3:3d:51:4c:5c:e4:c5:d0:9a:68:83:80:19:6b:ac:02:6b: 9d:f2:d6:a6:8c:79:46:94:55:30:9a:a7:21:ea:64:cb:55:24: f1:d4:91:f4:53:1b:26:7f:9c:1d:63:67:72:9b:db:35:a0:7a: f4:60:1c:a1:8e:87:23:42:c9:90:38:87:43:1f:d2:e6:42:e1: 39:62:2f:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZUtDJMhmGaTpkv1V41s2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzMGY2ZmI2ZjVjODBjYTRhNjAzODI3Yzk2YjNiZGY2MGFk NTYzYWEwHhcNMjUxMjA2MTYwMTEwWhcNMjUxMjA3MTYwMTEwWjAzMTEwLwYDVQQD Eyg3NmRlYjhmYmMzZjI2ZTM1M2Y2NDk5YTIwODBmYWMzYmExM2MzNmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnD8w+TLtDQTsDKBr8noJS4s31xz LyOEi+Sa6+oMpqFqrZlR+O9ks5LitjcUCYmrDVxDlp7105nFWpnAw68llVg0wPp/ Bczmcn2/Wn6Cxj9vKSvodFZNaObi38G2yOQ9r9ZNKsUc/z8iGNSo9Ll+tieQS0eX 8+DB7nhDrpSl/Td/NeRG0kOJQoX4hG2ffNxtOnRwWFws8j8BZQJv974FnsD1JaJy XVCaNH2uH7QcsagxurDRGKGtXBjslzt4qSvyQ2s11Ofj6wKVSZrxhmmHt+sLgN9k cNH9PvYtGZNQqzIX+Jr37M55xdN/skk8F6U/xfWOx69/LsQc8nfEDz5m/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHbeuPvD8m41P2SZoggPrDuhPDbZMB8GA1UdIwQY MBaAFKMPb7b1yAykpgOCfJazvfYK1WOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3c5dnR2WElES1NtQTRKOGxyTzk5Z3JWWTZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9kN2U2NjgtZjA3ZS00MzhiLTlmYTgt ODBhYjc3OWVlZDEwLzEvb3c5dnR2WElES1NtQTRKOGxyTzk5Z3JWWTZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9kN2U2NjgtZjA3ZS00MzhiLTlmYTgtODBhYjc3OWVlZDEw LzEvb3c5dnR2WElES1NtQTRKOGxyTzk5Z3JWWTZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfdIBgb5K /BvbFLgVYuyYEyQ4wnREBGKoMB3udnJ8CZpmGcaEC1zXHadYE4CJThAB7XPj0Dkw zma9nDeQ65ezfHAY6Xx/bhHaynau7wpKVD6TSKGxuI0i6gg/A10lSwpG80OIFxDr repnpxgQzTs04K8n1f9Y1VlhZegLpXWkyI1jpQ3icBi8w8tFXQ21drGUy9pOuDMr Y6ntvGtw9azsx/ty/F0m0Z4bf1BjiURJ0bykPbhf0LM9UUxc5MXQmmiDgBlrrAJr nfLWpox5RpRVMJqnIepky1Uk8dSR9FMbJn+cHWNncpvbNaB69GAcoY6HI0LJkDiH Qx/S5kLhOWIvqw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:30:03 2025 by rpki-client