This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft File: Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft (raw, json) Hash identifier: dbw4FJc9IOKDRkf+JiDTUYaQNKsRBvI1ZKStUOumJFg= Subject key identifier: 3A:06:2A:D5:0F:CF:D7:65:AE:8A:4F:A1:87:8D:19:5B:2A:38:E9:0C Authority key identifier: 3A:F9:EA:8B:DC:37:1B:5A:66:04:20:0C:51:71:78:97:D6:0C:7D:3D Certificate issuer: /CN=3af9ea8bdc371b5a6604200c51717897d60c7d3d Certificate serial: 019AF12CDC36D8526658FB84262E288CB13D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft Manifest number: 1309 Signing time: Sat 06 Dec 2025 01:00:40 +0000 Manifest this update: Sat 06 Dec 2025 01:00:40 +0000 Manifest next update: Sun 07 Dec 2025 01:00:40 +0000 Files and hashes: 1: Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl (hash: niDzksG8zsTZnzUeJWm5Y4hrf3LTm5VSsNMhynPxjMc=) 2: wGg0J5Z28xFGgoF0T-AWE9a8nD0.roa (hash: kGXsD5CJ+k4dwjP4TcCf3ci1gDFHD1TYaxVZBZkFLBQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:dc:36:d8:52:66:58:fb:84:26:2e:28:8c:b1:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af9ea8bdc371b5a6604200c51717897d60c7d3d Validity Not Before: Dec 6 01:00:40 2025 GMT Not After : Dec 7 01:00:40 2025 GMT Subject: CN=3a062ad50fcfd765ae8a4fa1878d195b2a38e90c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:df:a9:6d:2a:44:fc:46:15:11:d8:39:e2:22: 86:41:df:70:46:dd:fc:62:6f:0e:f2:ca:88:42:a4: cb:70:73:c2:11:07:a6:5f:db:3f:75:a6:c9:c1:e1: ad:7a:f0:0f:9a:65:48:29:4a:a7:6d:4f:28:45:63: 7e:d3:13:8a:2a:b3:43:22:47:00:3d:b4:2c:7a:bd: 07:26:10:b2:29:5d:3a:3d:70:7a:63:11:7a:49:a5: 45:17:3a:3b:fd:09:f1:c1:b9:f7:36:58:03:ee:7d: 9a:4f:0b:4f:2d:00:75:fc:48:9f:89:96:13:c6:5c: 49:2e:2f:21:cb:9b:1b:2f:2e:a2:e9:c9:31:2b:85: e2:b9:3f:57:27:f9:c0:6d:35:fc:e0:1c:6c:ea:4a: d1:65:4e:9c:06:ad:9d:a4:dd:9f:46:8e:08:e8:69: 30:1a:f0:fa:b0:63:0f:e7:6d:14:01:5f:9b:f7:75: f5:04:d8:d6:28:8b:8f:65:62:36:e5:eb:c7:a0:02: d6:5b:b8:dd:f3:29:50:37:ae:ef:31:cf:a1:02:df: 84:2d:2b:b7:55:c6:cc:c4:15:6f:05:e8:c3:17:ec: 26:b7:ce:10:ce:ca:8c:0f:37:c0:80:24:eb:4b:2c: 81:a7:a0:93:2b:d8:1c:cc:dc:9b:f2:a0:ba:8e:e2: 93:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:06:2A:D5:0F:CF:D7:65:AE:8A:4F:A1:87:8D:19:5B:2A:38:E9:0C X509v3 Authority Key Identifier: keyid:3A:F9:EA:8B:DC:37:1B:5A:66:04:20:0C:51:71:78:97:D6:0C:7D:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:78:f5:3a:ef:1e:53:e6:bb:c7:28:4a:c1:46:bc:6f:de:99: 8a:01:65:f9:af:07:cf:9d:00:d9:e8:65:d4:be:d4:63:64:c1: 1f:f4:b8:e7:2b:8b:ff:d5:47:3f:f7:33:a6:9e:7f:18:1f:3e: 95:f0:53:a8:98:64:c4:92:a2:aa:dd:3a:d6:28:ca:f2:c2:46: 02:9d:04:76:4c:0e:43:73:48:dc:17:54:d5:df:c5:34:f2:1c: 77:f1:bd:5c:61:21:d9:a6:51:bf:5c:d2:c3:f4:90:51:c4:18: 1f:05:3f:9b:e2:d2:ef:94:1d:81:06:2f:f6:94:e1:91:ae:f9: ff:60:c4:c9:f3:55:1b:01:f8:e7:1e:f3:00:91:f4:be:ab:10: d7:44:94:41:fe:95:68:22:6c:8f:db:6b:91:53:9f:4c:04:62: 3a:ad:a6:16:62:61:aa:ea:7c:a7:e0:88:e0:d6:c5:46:c1:30: a7:86:9e:b4:0c:a8:36:80:a3:18:c6:0d:36:ef:f7:41:b9:22: af:7f:ec:72:d5:98:77:84:30:76:36:ef:52:97:26:15:f8:56: b4:23:38:46:49:31:82:ca:52:a8:56:42:f5:47:34:b4:89:0f: 68:45:c4:41:f3:4d:ce:e8:7c:b8:bc:49:5a:b8:4d:d9:d6:f1: 37:22:3d:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLNw22FJmWPuEJi4ojLE9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjllYThiZGMzNzFiNWE2NjA0MjAwYzUxNzE3ODk3ZDYw YzdkM2QwHhcNMjUxMjA2MDEwMDQwWhcNMjUxMjA3MDEwMDQwWjAzMTEwLwYDVQQD EygzYTA2MmFkNTBmY2ZkNzY1YWU4YTRmYTE4NzhkMTk1YjJhMzhlOTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9+pbSpE/EYVEdg54iKGQd9wRt38 Ym8O8sqIQqTLcHPCEQemX9s/dabJweGtevAPmmVIKUqnbU8oRWN+0xOKKrNDIkcA PbQser0HJhCyKV06PXB6YxF6SaVFFzo7/Qnxwbn3NlgD7n2aTwtPLQB1/EifiZYT xlxJLi8hy5sbLy6i6ckxK4XiuT9XJ/nAbTX84Bxs6krRZU6cBq2dpN2fRo4I6Gkw GvD6sGMP520UAV+b93X1BNjWKIuPZWI25evHoALWW7jd8ylQN67vMc+hAt+ELSu3 VcbMxBVvBejDF+wmt84QzsqMDzfAgCTrSyyBp6CTK9gczNyb8qC6juKTBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDoGKtUPz9dlropPoYeNGVsqOOkMMB8GA1UdIwQY MBaAFDr56ovcNxtaZgQgDFFxeJfWDH09MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZucWk5dzNHMXBtQkNBTVVYRjRsOVlNZlQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi84MmM2ZmItMDkzMS00NDJjLWFiZTUt YWE4OTgxMzg5OTRjLzEvT3ZucWk5dzNHMXBtQkNBTVVYRjRsOVlNZlQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi84MmM2ZmItMDkzMS00NDJjLWFiZTUtYWE4OTgxMzg5OTRj LzEvT3ZucWk5dzNHMXBtQkNBTVVYRjRsOVlNZlQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFXj1Ou8e U+a7xyhKwUa8b96ZigFl+a8Hz50A2ehl1L7UY2TBH/S45yuL/9VHP/czpp5/GB8+ lfBTqJhkxJKiqt061ijK8sJGAp0EdkwOQ3NI3BdU1d/FNPIcd/G9XGEh2aZRv1zS w/SQUcQYHwU/m+LS75QdgQYv9pThka75/2DEyfNVGwH45x7zAJH0vqsQ10SUQf6V aCJsj9trkVOfTARiOq2mFmJhqup8p+CI4NbFRsEwp4aetAyoNoCjGMYNNu/3Qbki r3/sctWYd4QwdjbvUpcmFfhWtCM4RkkxgspSqFZC9Uc0tIkPaEXEQfNNzuh8uLxJ WrhN2dbxNyI9QA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:53:38 2025 by rpki-client