This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft File: OvdxDfit1ku5aI4PRYG-pn5ALGY.mft (raw, json) Hash identifier: sjyNibhlrVIlQ/AybglKE+9WsWD7hetefCDY86VxJJY= Subject key identifier: 96:63:F5:1B:50:4E:08:4B:40:00:F7:A0:6D:07:2C:72:89:1D:4D:4D Authority key identifier: 3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66 Certificate issuer: /CN=3af7710df8add64bb9688e0f4581bea67e402c66 Certificate serial: 019AF16405AC7144E858E33C72BA359EBC15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft Manifest number: 0C9D Signing time: Sat 06 Dec 2025 02:00:55 +0000 Manifest this update: Sat 06 Dec 2025 02:00:55 +0000 Manifest next update: Sun 07 Dec 2025 02:00:55 +0000 Files and hashes: 1: 1-5V6RXgQOXjxU3mO34q_0PmmYk4.roa (hash: UBzppXP3Ubih2qJBoeebTWZSAjaul2dwW+uHzrrKrpI=) 2: OvdxDfit1ku5aI4PRYG-pn5ALGY.crl (hash: m/TBdjOXtvTzFrS6Q6crvqipaDqx7oIGaFPziRgAwN8=) 3: XSqKcr4vohHwUX7C_jwkOz3T4S8.roa (hash: S5RGDFj4AygaOQ9nMJnUMnAW4DmVGX2kAbpxmhv1Nxo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:05:ac:71:44:e8:58:e3:3c:72:ba:35:9e:bc:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af7710df8add64bb9688e0f4581bea67e402c66 Validity Not Before: Dec 6 02:00:55 2025 GMT Not After : Dec 7 02:00:55 2025 GMT Subject: CN=9663f51b504e084b4000f7a06d072c72891d4d4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ec:9d:ef:34:6c:7b:49:15:a7:c0:74:55:8d: 73:af:e0:b9:fa:c7:8e:66:d3:e2:c2:c0:e1:f7:c1: 2b:88:94:75:85:7b:41:f1:07:57:04:33:e6:f4:c8: 23:76:f5:84:45:07:f1:00:e7:bf:5d:49:25:49:c6: de:98:d9:3a:b0:80:81:d2:74:58:d0:a8:c0:93:f1: 44:75:0f:c8:86:a5:5d:e8:22:db:61:c5:58:9e:83: 31:b3:43:ab:f5:d3:2a:0b:99:71:22:d6:33:2e:7c: 3b:47:4c:e1:1d:27:73:6d:6e:d5:f0:f3:c1:4b:af: 85:96:3f:33:ec:db:24:29:c5:a1:06:cf:83:3b:eb: a9:c5:96:ae:b6:6f:bd:d5:9a:e1:c3:7d:39:f8:7d: b9:41:23:81:c2:36:ef:5c:df:bb:63:62:d0:47:7d: 2f:96:96:0c:60:fb:84:a7:bd:87:ef:b0:9e:05:93: a3:c2:a7:5f:1b:99:04:c3:f2:03:f1:7b:f8:21:c3: af:5d:68:2b:31:fb:fa:a3:ba:37:e0:cb:cf:7a:09: 5a:87:6e:c4:5c:f5:9b:f2:f9:27:5e:6e:bf:91:9f: 00:2f:52:86:11:91:a7:14:e7:d1:7d:d8:35:6e:fc: 15:b1:07:0c:c6:0a:09:01:05:8d:16:9c:be:a9:8b: 48:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:63:F5:1B:50:4E:08:4B:40:00:F7:A0:6D:07:2C:72:89:1D:4D:4D X509v3 Authority Key Identifier: keyid:3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:60:b8:19:0d:03:03:7f:bd:b0:58:51:37:93:fd:d9:9a:cc: 05:39:8b:22:19:a4:48:40:07:c2:eb:55:86:4c:01:44:39:f8: 95:04:14:69:04:45:84:04:4f:4d:e2:97:9d:69:2b:a8:a9:5e: e5:89:40:e3:46:bc:c6:a6:51:6a:12:d1:4f:a6:12:dd:41:0d: 4e:f7:55:f8:26:8a:d8:ff:ff:00:20:3f:8d:39:90:b4:2f:93: 7f:26:eb:b1:d3:03:45:47:cc:e6:92:7d:ba:26:93:8e:cf:8f: f2:4e:6d:38:45:4a:7f:bb:16:8d:c7:32:8c:b0:26:44:84:f2: 31:66:b2:76:e2:60:e7:61:a1:44:0a:9e:13:af:53:0c:b5:83: dd:d5:40:1c:1c:28:44:b7:98:a5:1c:e4:fd:61:e4:4a:89:c1: 56:11:c7:f7:83:95:55:40:f4:2c:8d:cd:f0:dc:bb:79:f8:57: 72:35:7d:61:c0:44:2c:3d:5d:43:5f:8d:48:4b:77:df:92:69: e8:86:b4:f6:6a:9b:12:23:5b:c4:9d:05:b7:c7:59:08:37:33: 24:71:63:36:8b:4d:9a:79:1d:ef:c4:07:f1:bd:49:84:0f:ce: 37:27:8d:31:ac:c1:56:da:33:e8:27:52:b7:56:63:a5:26:99: cf:ad:cb:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZAWscUToWOM8cro1nrwVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjc3MTBkZjhhZGQ2NGJiOTY4OGUwZjQ1ODFiZWE2N2U0 MDJjNjYwHhcNMjUxMjA2MDIwMDU1WhcNMjUxMjA3MDIwMDU1WjAzMTEwLwYDVQQD Eyg5NjYzZjUxYjUwNGUwODRiNDAwMGY3YTA2ZDA3MmM3Mjg5MWQ0ZDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+yd7zRse0kVp8B0VY1zr+C5+seO ZtPiwsDh98EriJR1hXtB8QdXBDPm9MgjdvWERQfxAOe/XUklScbemNk6sICB0nRY 0KjAk/FEdQ/IhqVd6CLbYcVYnoMxs0Or9dMqC5lxItYzLnw7R0zhHSdzbW7V8PPB S6+Flj8z7NskKcWhBs+DO+upxZautm+91Zrhw305+H25QSOBwjbvXN+7Y2LQR30v lpYMYPuEp72H77CeBZOjwqdfG5kEw/ID8Xv4IcOvXWgrMfv6o7o34MvPeglah27E XPWb8vknXm6/kZ8AL1KGEZGnFOfRfdg1bvwVsQcMxgoJAQWNFpy+qYtISwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJZj9RtQTghLQAD3oG0HLHKJHU1NMB8GA1UdIwQY MBaAFDr3cQ34rdZLuWiOD0WBvqZ+QCxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZkeERmaXQxa3U1YUk0UFJZRy1wbjVBTEdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9mNTlmZTMtOTU2ZS00OTM3LTg1OGQt ZWVjNDE2YTg4NmY3LzEvT3ZkeERmaXQxa3U1YUk0UFJZRy1wbjVBTEdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9mNTlmZTMtOTU2ZS00OTM3LTg1OGQtZWVjNDE2YTg4NmY3 LzEvT3ZkeERmaXQxa3U1YUk0UFJZRy1wbjVBTEdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWC4GQ0D A3+9sFhRN5P92ZrMBTmLIhmkSEAHwutVhkwBRDn4lQQUaQRFhARPTeKXnWkrqKle 5YlA40a8xqZRahLRT6YS3UENTvdV+CaK2P//ACA/jTmQtC+TfybrsdMDRUfM5pJ9 uiaTjs+P8k5tOEVKf7sWjccyjLAmRITyMWayduJg52GhRAqeE69TDLWD3dVAHBwo RLeYpRzk/WHkSonBVhHH94OVVUD0LI3N8Ny7efhXcjV9YcBELD1dQ1+NSEt335Jp 6Ia09mqbEiNbxJ0Ft8dZCDczJHFjNotNmnkd78QH8b1JhA/ONyeNMazBVtoz6CdS t1ZjpSaZz63L4g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:41 2025 by rpki-client