This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft File: ow3ap0lNabocrLRX75G23NIujdk.mft (raw, json) Hash identifier: CMtrR100Z0NgqCxltlOA4u8lvan/29vqsydQeqnUv40= Subject key identifier: 57:B2:B8:04:35:98:90:01:06:CD:E0:DA:43:63:17:31:F2:5E:35:8F Authority key identifier: A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9 Certificate issuer: /CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9 Certificate serial: 019AF0BF90A70F6B95B267250224F35916B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft Manifest number: 1764 Signing time: Fri 05 Dec 2025 23:01:17 +0000 Manifest this update: Fri 05 Dec 2025 23:01:17 +0000 Manifest next update: Sat 06 Dec 2025 23:01:17 +0000 Files and hashes: 1: Fq4kg0SRGVzzVSs9_o69LfwOT3A.roa (hash: 2HbnhpvQtG7vsaYBmi0+gk3Ea1ph0D7Fi3q1e56Ae5s=) 2: ow3ap0lNabocrLRX75G23NIujdk.crl (hash: iAL1H/j4oEv1WwuDGxhIzbjWf7QfBBqvik3+C5JCRkQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:90:a7:0f:6b:95:b2:67:25:02:24:f3:59:16:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9 Validity Not Before: Dec 5 23:01:17 2025 GMT Not After : Dec 6 23:01:17 2025 GMT Subject: CN=57b2b8043598900106cde0da43631731f25e358f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6d:56:3d:15:2e:36:8c:7e:34:2a:28:59:d6: 43:f1:20:3c:b1:67:25:e1:36:e2:8d:1f:27:61:e5: b3:e3:56:cd:55:22:0e:8b:c9:e0:fa:fe:82:9a:0b: 21:8f:7a:6d:a7:e4:ff:90:85:ab:a0:67:48:86:12: 5a:78:2f:53:b7:0a:e6:b4:bf:21:5b:02:81:80:68: a2:6d:9d:bb:06:be:49:cc:3f:9c:53:89:63:dc:24: 34:ec:07:9c:16:85:2f:86:25:81:2f:ce:64:c1:8a: 2e:94:a2:61:b5:e1:6c:50:60:61:b0:11:46:2e:23: 4e:c6:33:a6:d8:3f:56:54:4d:03:bb:cc:18:97:1b: ea:c6:f0:0b:5b:56:fa:0e:4f:35:eb:ef:75:d5:ec: 07:8e:7a:fc:1f:b2:48:cf:e2:e8:f7:1a:26:84:8d: 1d:2d:cd:a4:18:fa:18:87:48:0d:1e:30:76:a5:5b: 6c:6e:d9:44:0e:e2:a7:2d:a0:42:3f:b0:8e:bb:ee: 69:65:2e:88:e1:e8:10:ac:a0:14:8d:e9:7d:d3:36: 4f:98:cd:5a:77:a6:90:6a:78:85:62:0a:7a:cb:c6: 15:ab:69:a9:f3:6e:28:4b:af:c1:61:d9:b6:ac:36: 3f:6b:81:0b:28:06:56:bd:4d:62:d2:70:02:a4:fc: a8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B2:B8:04:35:98:90:01:06:CD:E0:DA:43:63:17:31:F2:5E:35:8F X509v3 Authority Key Identifier: keyid:A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:74:77:55:f4:b7:a4:d3:69:1e:4d:dc:c9:ec:de:0b:56:c0: 32:27:af:4f:7c:90:1c:b5:28:92:b6:a9:70:5e:21:43:fb:d3: f1:43:14:6e:ff:d5:31:a0:5a:94:ee:89:db:e7:de:7a:ef:44: 8f:14:ed:94:64:00:d4:34:0d:48:38:83:ed:59:c0:e5:0d:dd: 03:39:3e:bc:3e:b4:54:71:ee:2a:0d:22:b9:34:17:1b:26:14: ae:c4:74:0d:7c:b5:fb:8c:42:9b:b2:6f:6c:05:bc:3c:1e:74: 96:de:df:71:c6:4c:9e:82:9e:3f:7a:03:12:d2:45:1a:43:e9: f3:91:3e:f5:64:d2:d9:61:69:dc:f4:9d:b1:09:70:5b:1c:54: fb:a3:61:1a:40:62:26:85:3c:02:a4:9d:9d:f7:ab:c1:1b:e9: 15:16:0b:80:d0:fa:f7:6a:69:6d:96:70:62:23:99:72:80:48: 46:72:07:f5:4f:b7:0e:26:29:99:29:fa:e9:84:02:10:0f:e1: 72:ed:ed:96:bb:72:cb:6c:6f:c9:90:1d:cc:1c:07:90:72:12: ab:78:fe:a6:4a:a6:b3:9e:e6:00:27:97:3b:b5:50:c7:d0:e3: f0:6f:d5:df:08:e1:d0:22:11:86:f1:df:7f:0b:2d:ce:1b:f7: d3:b7:de:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv5CnD2uVsmclAiTzWRa1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzMGRkYWE3NDk0ZDY5YmExY2FjYjQ1N2VmOTFiNmRjZDIy ZThkZDkwHhcNMjUxMjA1MjMwMTE3WhcNMjUxMjA2MjMwMTE3WjAzMTEwLwYDVQQD Eyg1N2IyYjgwNDM1OTg5MDAxMDZjZGUwZGE0MzYzMTczMWYyNWUzNThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw21WPRUuNox+NCooWdZD8SA8sWcl 4TbijR8nYeWz41bNVSIOi8ng+v6Cmgshj3ptp+T/kIWroGdIhhJaeC9TtwrmtL8h WwKBgGiibZ27Br5JzD+cU4lj3CQ07AecFoUvhiWBL85kwYoulKJhteFsUGBhsBFG LiNOxjOm2D9WVE0Du8wYlxvqxvALW1b6Dk816+911ewHjnr8H7JIz+Lo9xomhI0d Lc2kGPoYh0gNHjB2pVtsbtlEDuKnLaBCP7COu+5pZS6I4egQrKAUjel90zZPmM1a d6aQaniFYgp6y8YVq2mp824oS6/BYdm2rDY/a4ELKAZWvU1i0nACpPyoGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFeyuAQ1mJABBs3g2kNjFzHyXjWPMB8GA1UdIwQY MBaAFKMN2qdJTWm6HKy0V++RttzSLo3ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3czYXAwbE5hYm9jckxSWDc1RzIzTkl1amRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NjExMmMtZjE3ZS00ZGMxLWJhNTIt NjU0NGEyYjk5ODE3LzEvb3czYXAwbE5hYm9jckxSWDc1RzIzTkl1amRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NjExMmMtZjE3ZS00ZGMxLWJhNTItNjU0NGEyYjk5ODE3 LzEvb3czYXAwbE5hYm9jckxSWDc1RzIzTkl1amRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOHR3VfS3 pNNpHk3cyezeC1bAMievT3yQHLUokrapcF4hQ/vT8UMUbv/VMaBalO6J2+feeu9E jxTtlGQA1DQNSDiD7VnA5Q3dAzk+vD60VHHuKg0iuTQXGyYUrsR0DXy1+4xCm7Jv bAW8PB50lt7fccZMnoKeP3oDEtJFGkPp85E+9WTS2WFp3PSdsQlwWxxU+6NhGkBi JoU8AqSdnferwRvpFRYLgND692ppbZZwYiOZcoBIRnIH9U+3DiYpmSn66YQCEA/h cu3tlrtyy2xvyZAdzBwHkHISq3j+pkqms57mACeXO7VQx9Dj8G/V3wjh0CIRhvHf fwstzhv307feIg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:21:33 2025 by rpki-client