This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft File: ova8jxY69JwD2a1p5xa0LFuW7nk.mft (raw, json) Hash identifier: f2b9UVVpW/3GuDr7MUqx6KiJs9ux0M6cQIQSifY2T2k= Subject key identifier: 3C:3D:37:06:F7:E0:80:94:6C:71:85:29:13:58:60:44:38:34:35:4B Authority key identifier: A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79 Certificate issuer: /CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79 Certificate serial: 019AF38953C07A873BA5A800EF15BEB1F473 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft Manifest number: 1359 Signing time: Sat 06 Dec 2025 12:00:54 +0000 Manifest this update: Sat 06 Dec 2025 12:00:54 +0000 Manifest next update: Sun 07 Dec 2025 12:00:54 +0000 Files and hashes: 1: 7Bmeidkfn6YfbmewKgjKoXuxpPk.roa (hash: WWQfoyMgy0p6lbikPKbuJ/C2nkuTZ1Iwu382Tvm165I=) 2: ivvK2rH3Da0XFb0CtPI6-c8j9iw.roa (hash: y+fDNhHN305IuCvhhyl0+Ku7rbokWctafP7Dlneuvb8=) 3: ova8jxY69JwD2a1p5xa0LFuW7nk.crl (hash: xBGQtr5fTkYcTxvJnJ1vjhmeOR/L4gZvEttwA3Gu6UU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:53:c0:7a:87:3b:a5:a8:00:ef:15:be:b1:f4:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79 Validity Not Before: Dec 6 12:00:54 2025 GMT Not After : Dec 7 12:00:54 2025 GMT Subject: CN=3c3d3706f7e080946c718529135860443834354b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:43:c6:c8:b6:18:9e:d5:fe:8b:a5:3e:51:98: 67:d5:a2:83:64:c1:32:59:b0:b8:05:3b:2b:3e:5f: 7b:2c:19:ad:a8:6a:ea:2d:82:91:25:e0:19:d1:2f: 23:75:9f:e3:02:7a:71:a2:e8:4c:12:0a:34:02:8e: 4c:99:d6:0c:a2:b2:e0:5f:bb:ac:43:a2:30:83:cf: 11:9d:43:75:4e:06:dd:fe:7c:3a:fd:80:bb:68:c9: 64:96:82:cf:be:dd:65:eb:d0:7c:82:f6:f2:e7:5f: d2:7c:f9:7b:f1:ed:44:c4:87:83:49:f1:23:9b:3d: 80:2f:23:44:c3:6e:7e:19:05:98:c2:9b:08:a5:4b: b6:d3:d3:76:49:be:57:97:f6:50:57:33:dd:c2:02: e4:c7:91:81:75:2f:7e:67:3c:7b:82:c0:af:4a:12: de:e2:8b:d7:d4:5a:aa:f5:86:5b:04:e3:3b:a2:3a: d6:d4:2e:2b:14:08:48:ae:71:99:a4:1f:7a:bf:15: 95:b0:75:01:57:ba:c1:31:7c:b9:d0:88:46:80:27: 13:12:8b:98:d5:0a:68:d1:52:74:10:23:57:45:f6: 2c:1d:45:c0:49:4b:d5:a0:f5:4a:db:ad:46:7d:dd: 0b:c3:58:d2:eb:38:92:f8:a7:31:59:99:22:43:51: 67:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:3D:37:06:F7:E0:80:94:6C:71:85:29:13:58:60:44:38:34:35:4B X509v3 Authority Key Identifier: keyid:A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:c9:2d:e2:67:f1:f0:d5:07:32:a3:5d:59:68:7f:a3:c8:20: 5b:ee:cb:d4:e6:69:e9:9c:7e:4c:db:9b:fa:ee:fd:32:87:60: be:20:ab:35:8d:2a:b9:5b:99:18:1f:ae:e9:0b:1f:e4:05:3d: d9:88:c4:2b:63:fe:ab:43:c9:40:ed:af:e8:26:b4:f5:1f:12: d1:75:be:3a:40:04:ca:89:a5:82:df:b3:a1:29:ca:7c:35:a0: a0:b0:be:5b:2a:d6:45:61:82:63:44:6a:5c:a2:e3:00:df:18: 61:16:47:9a:d5:e0:e0:a2:7b:23:83:a0:6a:43:86:29:c6:40: 2f:e6:6a:82:d0:64:d9:f5:58:98:3b:d2:38:63:63:93:ef:0b: 5a:11:c7:ba:da:8f:22:fd:92:8d:6e:b1:b1:23:29:49:66:82: ab:8e:af:f8:66:52:31:72:4c:7c:6d:b0:f4:e0:59:a9:9a:7c: 82:79:04:26:d4:be:49:0b:26:54:4c:73:ea:a5:a4:9e:58:c8: 5f:24:da:e5:07:74:0f:16:90:b1:2a:0d:f5:48:e7:be:f7:34: 97:db:ad:fc:97:11:2e:b5:76:5d:4c:4c:b6:e2:a1:06:40:53: 4d:e0:1f:8b:23:7c:f2:f4:e5:eb:12:d4:82:14:0b:9a:d5:8d: 68:b1:31:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziVPAeoc7pagA7xW+sfRzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZjZiYzhmMTYzYWY0OWMwM2Q5YWQ2OWU3MTZiNDJjNWI5 NmVlNzkwHhcNMjUxMjA2MTIwMDU0WhcNMjUxMjA3MTIwMDU0WjAzMTEwLwYDVQQD EygzYzNkMzcwNmY3ZTA4MDk0NmM3MTg1MjkxMzU4NjA0NDM4MzQzNTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUPGyLYYntX+i6U+UZhn1aKDZMEy WbC4BTsrPl97LBmtqGrqLYKRJeAZ0S8jdZ/jAnpxouhMEgo0Ao5MmdYMorLgX7us Q6Iwg88RnUN1Tgbd/nw6/YC7aMlkloLPvt1l69B8gvby51/SfPl78e1ExIeDSfEj mz2ALyNEw25+GQWYwpsIpUu209N2Sb5Xl/ZQVzPdwgLkx5GBdS9+Zzx7gsCvShLe 4ovX1Fqq9YZbBOM7ojrW1C4rFAhIrnGZpB96vxWVsHUBV7rBMXy50IhGgCcTEouY 1Qpo0VJ0ECNXRfYsHUXASUvVoPVK261Gfd0Lw1jS6ziS+KcxWZkiQ1FnZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDw9Nwb34ICUbHGFKRNYYEQ4NDVLMB8GA1UdIwQY MBaAFKL2vI8WOvScA9mtaecWtCxblu55MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3ZhOGp4WTY5SndEMmExcDV4YTBMRnVXN25rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yODUxYjYtMmU2NS00ODU5LTljMDUt NTA2YmI2YzY3OWNlLzEvb3ZhOGp4WTY5SndEMmExcDV4YTBMRnVXN25rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8yODUxYjYtMmU2NS00ODU5LTljMDUtNTA2YmI2YzY3OWNl LzEvb3ZhOGp4WTY5SndEMmExcDV4YTBMRnVXN25rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ8kt4mfx 8NUHMqNdWWh/o8ggW+7L1OZp6Zx+TNub+u79ModgviCrNY0quVuZGB+u6Qsf5AU9 2YjEK2P+q0PJQO2v6Ca09R8S0XW+OkAEyomlgt+zoSnKfDWgoLC+WyrWRWGCY0Rq XKLjAN8YYRZHmtXg4KJ7I4OgakOGKcZAL+ZqgtBk2fVYmDvSOGNjk+8LWhHHutqP Iv2SjW6xsSMpSWaCq46v+GZSMXJMfG2w9OBZqZp8gnkEJtS+SQsmVExz6qWknljI XyTa5Qd0DxaQsSoN9Ujnvvc0l9ut/JcRLrV2XUxMtuKhBkBTTeAfiyN88vTl6xLU ghQLmtWNaLEx1g== -----END CERTIFICATE-----Generated at Sat Dec 6 16:30:41 2025 by rpki-client