This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft File: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft (raw, json) Hash identifier: hmgsy3bPoriEwPd/JnJACEm6VZdCakzd1MhZmS3EndE= Subject key identifier: BB:11:09:2D:0A:37:C4:6D:CB:D4:4A:C8:44:0E:7F:0A:7B:BE:6D:BC Authority key identifier: A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43 Certificate issuer: /CN=a2f516bf42214086db39847f9f563b4cf4a0ff43 Certificate serial: 019B2D0BBB5717F9D6B67B0ECB87AFC3D960 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft Manifest number: 0CD9 Signing time: Wed 17 Dec 2025 16:01:42 +0000 Manifest this update: Wed 17 Dec 2025 16:01:42 +0000 Manifest next update: Thu 18 Dec 2025 16:01:42 +0000 Files and hashes: 1: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl (hash: wt77oLqnbLMxxd6fe1zCc8IKX7bsw3/b3m9IjFniC10=) 2: qIsWYTGGyTWdcMi1EBNZy3-Gz6s.roa (hash: 7m+uP5vyUA/FJoMPvZCOt04fNaOUpHbFnR+UKfmp0FA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 16:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:bb:57:17:f9:d6:b6:7b:0e:cb:87:af:c3:d9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2f516bf42214086db39847f9f563b4cf4a0ff43 Validity Not Before: Dec 17 16:01:42 2025 GMT Not After : Dec 18 16:01:42 2025 GMT Subject: CN=bb11092d0a37c46dcbd44ac8440e7f0a7bbe6dbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3f:ad:e8:08:9a:93:d7:34:07:fb:88:84:e8: b0:9e:85:23:c7:28:88:98:25:38:68:ab:90:1b:02: ce:43:f5:8e:f2:f2:eb:c3:bb:9e:c6:5b:94:c1:78: 22:61:10:52:32:de:e6:bd:97:10:8d:c4:5a:50:11: e7:37:85:02:ab:8b:28:61:35:00:d9:af:a1:d8:9c: a5:0e:4c:ae:db:f0:d5:17:12:b9:e5:80:cd:90:d0: ec:1a:39:6f:78:a0:e5:e1:94:a7:0d:e0:b4:de:f3: e4:9f:0b:c0:c4:ae:e3:49:52:dc:73:c3:de:59:d9: ac:ab:4f:d1:cb:9a:e4:b8:b0:92:43:16:59:1d:85: 08:ed:26:af:e0:71:ff:16:80:aa:a0:6a:b8:8c:f9: bf:fc:e3:7d:16:cd:ea:50:2b:b6:c7:bb:02:76:dc: 06:4a:67:43:c8:0f:25:14:47:25:3c:a8:95:eb:d6: 24:64:1a:73:3b:99:cb:db:01:e8:24:be:39:de:35: 5a:00:0d:72:d0:6d:e2:ee:ef:34:ad:f6:fe:ed:5f: 05:7d:81:fb:03:0a:35:91:b5:15:e3:72:d1:df:f7: 91:81:3f:7d:e2:fa:7c:30:5e:cd:6c:62:9b:33:43: f2:5b:9b:0c:c1:35:94:f7:49:e3:c2:ec:3a:b8:ad: 6a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:11:09:2D:0A:37:C4:6D:CB:D4:4A:C8:44:0E:7F:0A:7B:BE:6D:BC X509v3 Authority Key Identifier: keyid:A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:25:60:c3:df:ce:c9:f2:d4:75:22:c5:1e:01:c6:65:a0:39: 18:8f:af:1d:c7:83:43:47:30:9e:42:aa:77:ce:7e:db:bd:90: ba:9c:71:a6:b4:a3:be:09:ec:c8:f2:96:64:be:17:78:96:b5: 78:87:f1:fe:57:b8:3c:b6:65:17:a9:e4:4e:7e:73:6e:cf:d9: d8:5a:02:80:b5:4f:7d:6b:bb:ef:82:e7:0d:ac:c0:39:58:be: 9d:5b:e7:1d:b5:08:57:f7:32:0d:35:98:53:60:b6:cd:d3:ed: 50:72:04:96:b4:66:fd:a5:40:3a:92:60:e5:c7:54:f0:7d:43: b4:6c:71:a2:44:55:5e:25:ff:23:bf:e1:53:9b:c1:d6:d6:7c: 8c:da:9f:5b:4c:ce:6d:dc:0b:ed:b3:50:f4:1f:b7:c8:ca:f0: 38:3a:8b:e1:5b:26:3f:91:07:82:69:88:f7:b7:45:48:d7:d4: 88:d2:95:45:59:0e:e7:18:41:bf:49:b4:b0:b3:77:2d:e9:e5: 40:f5:90:6a:34:63:50:02:62:75:20:b1:19:88:32:19:59:5a: 14:38:8b:87:d0:a0:ce:9a:9e:94:24:9b:ef:b5:fd:ac:14:4f: 78:d1:97:2d:e7:24:30:12:a9:a1:6a:44:1b:2e:82:3a:b2:27: 78:1a:0e:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstC7tXF/nWtnsOy4evw9lgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZjUxNmJmNDIyMTQwODZkYjM5ODQ3ZjlmNTYzYjRjZjRh MGZmNDMwHhcNMjUxMjE3MTYwMTQyWhcNMjUxMjE4MTYwMTQyWjAzMTEwLwYDVQQD EyhiYjExMDkyZDBhMzdjNDZkY2JkNDRhYzg0NDBlN2YwYTdiYmU2ZGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArT+t6Aiak9c0B/uIhOiwnoUjxyiI mCU4aKuQGwLOQ/WO8vLrw7uexluUwXgiYRBSMt7mvZcQjcRaUBHnN4UCq4soYTUA 2a+h2JylDkyu2/DVFxK55YDNkNDsGjlveKDl4ZSnDeC03vPknwvAxK7jSVLcc8Pe Wdmsq0/Ry5rkuLCSQxZZHYUI7Sav4HH/FoCqoGq4jPm//ON9Fs3qUCu2x7sCdtwG SmdDyA8lFEclPKiV69YkZBpzO5nL2wHoJL453jVaAA1y0G3i7u80rfb+7V8FfYH7 Awo1kbUV43LR3/eRgT994vp8MF7NbGKbM0PyW5sMwTWU90njwuw6uK1qBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLsRCS0KN8Rty9RKyEQOfwp7vm28MB8GA1UdIwQY MBaAFKL1Fr9CIUCG2zmEf59WO0z0oP9DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3ZVV3YwSWhRSWJiT1lSX24xWTdUUFNnXzBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9kMWRmZDYtY2NkZi00NjIxLWI0NTQt NmUzZmE2MmNkMmRmLzEvb3ZVV3YwSWhRSWJiT1lSX24xWTdUUFNnXzBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9kMWRmZDYtY2NkZi00NjIxLWI0NTQtNmUzZmE2MmNkMmRm LzEvb3ZVV3YwSWhRSWJiT1lSX24xWTdUUFNnXzBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIiVgw9/O yfLUdSLFHgHGZaA5GI+vHceDQ0cwnkKqd85+272QupxxprSjvgnsyPKWZL4XeJa1 eIfx/le4PLZlF6nkTn5zbs/Z2FoCgLVPfWu774LnDazAOVi+nVvnHbUIV/cyDTWY U2C2zdPtUHIElrRm/aVAOpJg5cdU8H1DtGxxokRVXiX/I7/hU5vB1tZ8jNqfW0zO bdwL7bNQ9B+3yMrwODqL4VsmP5EHgmmI97dFSNfUiNKVRVkO5xhBv0m0sLN3Lenl QPWQajRjUAJidSCxGYgyGVlaFDiLh9CgzpqelCSb77X9rBRPeNGXLeckMBKpoWpE Gy6COrIneBoOuw== -----END CERTIFICATE-----Generated at Wed Dec 17 22:26:20 2025 by rpki-client