This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft File: ova8jxY69JwD2a1p5xa0LFuW7nk.mft (raw, json) Hash identifier: amv1XrVNNcw3jy5YL04jxzmjy0e7oSK78sjiE8SPUFY= Subject key identifier: AF:BC:B9:AA:1F:5F:C5:E6:8E:29:A4:CC:04:06:ED:E8:3D:CD:D1:B8 Authority key identifier: A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79 Certificate issuer: /CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79 Certificate serial: 019B3C104CDEBBC4FAD165920A75AB672AC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft Manifest number: 1381 Signing time: Sat 20 Dec 2025 14:00:59 +0000 Manifest this update: Sat 20 Dec 2025 14:00:59 +0000 Manifest next update: Sun 21 Dec 2025 14:00:59 +0000 Files and hashes: 1: ivvK2rH3Da0XFb0CtPI6-c8j9iw.roa (hash: y+fDNhHN305IuCvhhyl0+Ku7rbokWctafP7Dlneuvb8=) 2: ova8jxY69JwD2a1p5xa0LFuW7nk.crl (hash: q+M6l06oMdXU5Ey+pKqU3HxzkA/3FX4g83k9ExPhfgk=) 3: tB6VFRP5A8-dHCyfbuK5W6EfmO0.roa (hash: fBvgu7KJJRGq3XvqIRdFtimL7QHl3Bi00rxcK3wEvVw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:4c:de:bb:c4:fa:d1:65:92:0a:75:ab:67:2a:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79 Validity Not Before: Dec 20 14:00:59 2025 GMT Not After : Dec 21 14:00:59 2025 GMT Subject: CN=afbcb9aa1f5fc5e68e29a4cc0406ede83dcdd1b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:45:c7:ff:fb:f2:ce:99:0b:2d:70:f5:ba:4b: 62:48:76:24:35:27:a4:6c:77:e9:77:45:0e:fe:0f: 66:a8:74:3f:b1:07:8e:ca:15:26:a3:48:75:2d:15: 8d:fe:f5:ec:53:e8:41:dd:41:3c:a4:25:9c:5d:3e: 1f:7d:c5:f6:e2:5b:09:9a:b3:f8:0b:85:93:77:50: 8c:30:ee:c4:68:29:bc:d7:ad:1e:29:25:e3:79:2e: 0a:96:e6:eb:27:f4:2f:c0:ab:84:f4:88:89:fd:c2: b7:64:e9:98:a9:5d:99:d6:13:ab:d0:94:fa:b4:ba: 83:5e:84:7e:50:89:c9:82:0a:5f:ca:3b:cf:6a:a5: 01:5a:c6:0f:84:f9:1a:37:14:65:1b:c7:d8:6e:73: 6f:bd:75:ff:61:57:8f:57:0b:d1:76:cb:ac:69:51: 45:07:36:b6:ed:14:e8:3b:5b:77:ab:5e:9c:ca:7d: 54:09:76:3c:c9:fb:9d:b8:d6:8d:5b:26:2c:03:0a: d2:65:9d:23:29:42:00:5b:32:b1:22:4f:bc:76:3f: c0:bf:2d:c7:4e:d1:80:e0:6e:36:b8:8b:6b:2b:14: b6:c3:91:aa:46:f2:2f:94:24:de:3d:67:b0:3c:2a: 3e:cf:7b:6f:4f:93:45:57:a7:74:72:db:90:c2:4d: 8c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:BC:B9:AA:1F:5F:C5:E6:8E:29:A4:CC:04:06:ED:E8:3D:CD:D1:B8 X509v3 Authority Key Identifier: keyid:A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:6e:10:96:be:9b:b5:a0:47:68:88:9b:f4:b5:6c:61:d7:9d: e0:65:f7:1c:b8:fe:24:64:1f:55:07:9e:10:54:c2:4b:9d:0d: 2a:0a:3f:22:e9:57:61:11:3b:8f:9d:5b:10:76:00:3b:8b:77: 81:a5:22:d9:e4:59:62:44:6e:1d:15:77:17:20:d1:ec:b6:34: cd:3c:83:8d:99:0c:6b:7c:f6:21:41:ca:b9:75:07:bb:9c:6b: 94:03:c0:6d:29:eb:e4:6d:31:eb:c5:0d:7f:15:75:69:74:1b: 3a:ad:03:b7:92:ac:22:b4:a7:8c:99:c2:df:10:f3:7b:55:8e: 7a:30:6c:4a:23:6e:92:6d:33:9f:77:3a:ac:b3:f5:bc:19:02: 69:4d:55:4e:48:fa:ca:d3:4a:01:ef:07:06:b6:be:7f:b6:37: a5:d2:4e:0a:64:d5:8e:cd:a6:52:de:9c:08:51:62:bf:d9:16: 4e:82:1a:ac:0a:f4:83:fe:81:1c:eb:45:f6:77:04:7d:04:64: e1:56:83:d6:37:39:60:11:17:3e:54:0f:b7:9c:c4:d5:9f:1d: 6d:c6:28:88:54:f8:4b:14:0a:3c:2d:07:5c:79:a2:e7:ae:cb: 93:d0:b3:c2:96:9b:36:a8:b2:8d:85:bc:c4:c6:f5:49:51:6a: 99:31:44:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EEzeu8T60WWSCnWrZyrBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZjZiYzhmMTYzYWY0OWMwM2Q5YWQ2OWU3MTZiNDJjNWI5 NmVlNzkwHhcNMjUxMjIwMTQwMDU5WhcNMjUxMjIxMTQwMDU5WjAzMTEwLwYDVQQD EyhhZmJjYjlhYTFmNWZjNWU2OGUyOWE0Y2MwNDA2ZWRlODNkY2RkMWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0XH//vyzpkLLXD1uktiSHYkNSek bHfpd0UO/g9mqHQ/sQeOyhUmo0h1LRWN/vXsU+hB3UE8pCWcXT4ffcX24lsJmrP4 C4WTd1CMMO7EaCm8160eKSXjeS4KlubrJ/QvwKuE9IiJ/cK3ZOmYqV2Z1hOr0JT6 tLqDXoR+UInJggpfyjvPaqUBWsYPhPkaNxRlG8fYbnNvvXX/YVePVwvRdsusaVFF Bza27RToO1t3q16cyn1UCXY8yfuduNaNWyYsAwrSZZ0jKUIAWzKxIk+8dj/Avy3H TtGA4G42uItrKxS2w5GqRvIvlCTePWewPCo+z3tvT5NFV6d0ctuQwk2M8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK+8uaofX8XmjimkzAQG7eg9zdG4MB8GA1UdIwQY MBaAFKL2vI8WOvScA9mtaecWtCxblu55MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3ZhOGp4WTY5SndEMmExcDV4YTBMRnVXN25rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yODUxYjYtMmU2NS00ODU5LTljMDUt NTA2YmI2YzY3OWNlLzEvb3ZhOGp4WTY5SndEMmExcDV4YTBMRnVXN25rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8yODUxYjYtMmU2NS00ODU5LTljMDUtNTA2YmI2YzY3OWNl LzEvb3ZhOGp4WTY5SndEMmExcDV4YTBMRnVXN25rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0m4Qlr6b taBHaIib9LVsYded4GX3HLj+JGQfVQeeEFTCS50NKgo/IulXYRE7j51bEHYAO4t3 gaUi2eRZYkRuHRV3FyDR7LY0zTyDjZkMa3z2IUHKuXUHu5xrlAPAbSnr5G0x68UN fxV1aXQbOq0Dt5KsIrSnjJnC3xDze1WOejBsSiNukm0zn3c6rLP1vBkCaU1VTkj6 ytNKAe8HBra+f7Y3pdJOCmTVjs2mUt6cCFFiv9kWToIarAr0g/6BHOtF9ncEfQRk 4VaD1jc5YBEXPlQPt5zE1Z8dbcYoiFT4SxQKPC0HXHmi567Lk9CzwpabNqiyjYW8 xMb1SVFqmTFEYQ== -----END CERTIFICATE-----Generated at Sat Dec 20 22:23:43 2025 by rpki-client