This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft File: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft (raw, json) Hash identifier: MjZ9OYHODR+rmG86PbjPFMNClIDc5pU99FFigK3QqDE= Subject key identifier: E0:C6:9E:4D:CA:6A:30:48:3A:3E:5E:C1:50:C6:06:0E:E4:36:94:4F Authority key identifier: A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43 Certificate issuer: /CN=a2f516bf42214086db39847f9f563b4cf4a0ff43 Certificate serial: 019AF509F108AADA2151F79944AF0123093F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft Manifest number: 0CBC Signing time: Sat 06 Dec 2025 19:01:00 +0000 Manifest this update: Sat 06 Dec 2025 19:01:00 +0000 Manifest next update: Sun 07 Dec 2025 19:01:00 +0000 Files and hashes: 1: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl (hash: M0wpZ2wdadV49/UxjX08L83rDis5Xg5WpVjRcq5jSPU=) 2: qIsWYTGGyTWdcMi1EBNZy3-Gz6s.roa (hash: 7m+uP5vyUA/FJoMPvZCOt04fNaOUpHbFnR+UKfmp0FA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:f1:08:aa:da:21:51:f7:99:44:af:01:23:09:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2f516bf42214086db39847f9f563b4cf4a0ff43 Validity Not Before: Dec 6 19:01:00 2025 GMT Not After : Dec 7 19:01:00 2025 GMT Subject: CN=e0c69e4dca6a30483a3e5ec150c6060ee436944f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:39:28:df:6a:da:fb:e9:d1:0a:b3:89:aa:92: dd:21:e6:41:11:55:11:fc:14:4e:88:64:65:12:18: 54:6f:67:8a:63:ef:47:95:99:20:19:8e:0d:9f:13: 8f:30:dc:47:87:82:73:1f:b3:4c:60:49:e6:fa:a3: a4:aa:5a:63:c4:62:e1:90:01:94:a2:3e:b4:1f:15: a6:59:41:61:91:ee:77:3f:d5:ab:ec:80:69:e9:75: ff:87:aa:1b:e7:57:24:30:37:be:c4:2f:07:ae:38: 2c:73:6f:bf:1c:45:71:2a:25:d4:74:47:4d:6f:80: 56:5e:88:e3:1a:c7:b1:5f:58:e8:d1:bc:4d:6a:0f: 06:ab:83:14:0a:7c:85:fa:e5:40:c4:95:31:eb:fd: 4e:f0:d6:df:05:28:8a:7b:94:22:15:ea:79:01:35: 11:43:c7:c7:c2:0a:ff:13:e3:65:f6:c5:ea:80:c7: 27:6c:53:72:92:95:72:03:a2:ac:50:4f:67:be:36: 80:e8:27:8d:26:f9:c5:cc:b7:23:f5:14:56:40:d6: f4:0c:1f:ad:ad:4a:a0:31:93:ba:0c:a3:c4:92:67: c7:66:40:af:b2:cf:d2:95:03:68:11:aa:46:10:cf: 4e:b7:49:fe:8c:93:2a:e4:a9:f3:0f:37:68:ec:8e: b1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C6:9E:4D:CA:6A:30:48:3A:3E:5E:C1:50:C6:06:0E:E4:36:94:4F X509v3 Authority Key Identifier: keyid:A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:59:26:12:d9:d4:31:eb:36:65:21:d3:26:90:06:1e:30:4b: 65:d4:16:14:0c:0a:1d:38:39:34:95:6e:a1:49:33:b3:67:3b: 60:2b:ac:ad:fc:fa:1b:14:17:8d:9a:5d:55:4e:78:2f:39:12: ae:26:2b:c5:92:d9:2d:b5:7a:8f:88:ea:41:5b:dc:c1:60:8b: ae:29:2c:05:c2:89:06:45:3d:b3:16:94:9f:71:52:aa:92:5f: 7e:4c:31:ea:e0:b9:fe:de:85:aa:74:c2:4e:70:7c:b1:e1:28: 0f:11:85:3b:ca:ab:aa:7f:b6:af:b2:65:04:1d:59:62:14:13: 7b:75:f6:ff:c5:8b:bd:57:af:f5:dc:8d:5d:14:96:cb:fb:51: a7:87:03:bc:43:42:40:2d:2f:de:2a:9e:bb:76:a8:1d:a5:88: 21:04:ba:cb:30:78:49:fa:19:3c:d0:ef:66:34:a6:02:86:e0: b4:0e:4d:6c:a6:98:ef:0a:f7:90:c8:b0:81:07:b3:29:89:db: 85:8e:5f:f8:d1:1d:84:b3:26:be:0c:4a:c4:62:30:33:62:fd: 4e:f7:c8:1b:6c:da:3f:ae:18:64:a3:a0:a3:ef:df:ed:34:f1: 2e:af:a8:d5:5c:0a:33:f6:a2:bf:8a:c6:77:9a:25:c3:bb:50: 17:1f:cf:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CfEIqtohUfeZRK8BIwk/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZjUxNmJmNDIyMTQwODZkYjM5ODQ3ZjlmNTYzYjRjZjRh MGZmNDMwHhcNMjUxMjA2MTkwMTAwWhcNMjUxMjA3MTkwMTAwWjAzMTEwLwYDVQQD EyhlMGM2OWU0ZGNhNmEzMDQ4M2EzZTVlYzE1MGM2MDYwZWU0MzY5NDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDko32ra++nRCrOJqpLdIeZBEVUR /BROiGRlEhhUb2eKY+9HlZkgGY4NnxOPMNxHh4JzH7NMYEnm+qOkqlpjxGLhkAGU oj60HxWmWUFhke53P9Wr7IBp6XX/h6ob51ckMDe+xC8Hrjgsc2+/HEVxKiXUdEdN b4BWXojjGsexX1jo0bxNag8Gq4MUCnyF+uVAxJUx6/1O8NbfBSiKe5QiFep5ATUR Q8fHwgr/E+Nl9sXqgMcnbFNykpVyA6KsUE9nvjaA6CeNJvnFzLcj9RRWQNb0DB+t rUqgMZO6DKPEkmfHZkCvss/SlQNoEapGEM9Ot0n+jJMq5KnzDzdo7I6xEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFODGnk3KajBIOj5ewVDGBg7kNpRPMB8GA1UdIwQY MBaAFKL1Fr9CIUCG2zmEf59WO0z0oP9DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3ZVV3YwSWhRSWJiT1lSX24xWTdUUFNnXzBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9kMWRmZDYtY2NkZi00NjIxLWI0NTQt NmUzZmE2MmNkMmRmLzEvb3ZVV3YwSWhRSWJiT1lSX24xWTdUUFNnXzBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9kMWRmZDYtY2NkZi00NjIxLWI0NTQtNmUzZmE2MmNkMmRm LzEvb3ZVV3YwSWhRSWJiT1lSX24xWTdUUFNnXzBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH1kmEtnU Mes2ZSHTJpAGHjBLZdQWFAwKHTg5NJVuoUkzs2c7YCusrfz6GxQXjZpdVU54LzkS riYrxZLZLbV6j4jqQVvcwWCLriksBcKJBkU9sxaUn3FSqpJffkwx6uC5/t6FqnTC TnB8seEoDxGFO8qrqn+2r7JlBB1ZYhQTe3X2/8WLvVev9dyNXRSWy/tRp4cDvENC QC0v3iqeu3aoHaWIIQS6yzB4SfoZPNDvZjSmAobgtA5NbKaY7wr3kMiwgQezKYnb hY5f+NEdhLMmvgxKxGIwM2L9TvfIG2zaP64YZKOgo+/f7TTxLq+o1VwKM/aiv4rG d5olw7tQFx/PUQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:36:48 2025 by rpki-client