This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft File: OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft (raw, json) Hash identifier: fIu8Q5DX+DoveocUxX7AC5cNc/4H5XcP94YyvLCkjtw= Subject key identifier: C5:62:B6:84:8D:9D:5B:FB:29:38:D0:C6:D4:A3:BD:BA:FD:95:F5:83 Authority key identifier: 39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B Certificate issuer: /CN=3968ee0b1f40cbb13a88fde4c0b1168304df2d6b Certificate serial: 019AF12D3ADDB46354424D8C57861AB2D684 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft Manifest number: 172A Signing time: Sat 06 Dec 2025 01:01:04 +0000 Manifest this update: Sat 06 Dec 2025 01:01:04 +0000 Manifest next update: Sun 07 Dec 2025 01:01:04 +0000 Files and hashes: 1: OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl (hash: goLamUmzYP+t6ZbYMi3juYiv8uWUjf9IyLLOZgSKm9E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:3a:dd:b4:63:54:42:4d:8c:57:86:1a:b2:d6:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3968ee0b1f40cbb13a88fde4c0b1168304df2d6b Validity Not Before: Dec 6 01:01:04 2025 GMT Not After : Dec 7 01:01:04 2025 GMT Subject: CN=c562b6848d9d5bfb2938d0c6d4a3bdbafd95f583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fa:a2:56:55:c4:45:dd:6a:7a:d8:17:b2:71: d4:bc:cd:40:58:ed:32:f3:f2:8c:8e:3a:7c:58:1d: f5:25:99:64:0d:d2:b5:e8:b5:82:ac:94:48:05:f5: 66:5a:26:a6:01:3a:a1:c8:c4:bc:68:a2:c5:d2:52: e6:89:26:4d:f4:2f:f4:8a:70:fb:f2:cf:00:ec:87: d6:ee:2f:f5:33:b2:5e:1a:1f:47:de:34:2f:3b:6a: 95:7a:62:06:54:f6:f8:38:b5:60:7b:63:5b:c4:b6: 81:56:63:a9:25:2e:51:41:51:c2:98:8b:40:9f:f2: bd:3c:36:67:9c:4c:b7:8a:2d:b4:c0:73:6c:f1:cd: be:d5:b9:30:42:e5:14:56:bb:e4:bf:01:21:05:b1: 51:90:73:b0:42:9c:d8:e1:93:dd:d3:1e:d9:51:49: 30:e4:64:c8:59:b2:b8:97:6e:a5:d0:15:ff:de:f5: a3:df:69:79:25:6a:84:1b:dd:61:0d:83:56:e3:db: 46:56:ca:d0:a2:6b:9f:84:e0:24:ed:71:8e:6d:99: 36:04:18:15:d5:9d:9b:cd:86:91:23:20:d2:7c:5a: 07:17:c8:8e:d5:fe:6e:18:19:2f:3e:83:ae:85:a0: 96:21:5d:c1:df:31:fc:18:29:2c:94:84:9e:86:26: b6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:62:B6:84:8D:9D:5B:FB:29:38:D0:C6:D4:A3:BD:BA:FD:95:F5:83 X509v3 Authority Key Identifier: keyid:39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:dd:34:27:be:ce:a4:7e:00:25:f7:ce:c0:ec:49:ce:a7:71: e2:36:33:20:32:f5:4d:1b:ac:e9:56:08:2d:d4:f6:18:89:fe: 9b:53:63:d4:fa:77:e2:b7:2e:ec:0b:07:74:d7:f9:4a:64:a9: 0a:fe:24:a0:1b:d9:33:db:57:08:59:e9:4d:a2:f9:68:a0:47: 4a:a3:b6:21:0e:66:20:8b:20:6c:b1:2a:a0:c5:15:8e:46:1d: 76:f5:66:f5:12:ca:1d:09:5c:07:f5:30:57:7d:52:9e:84:2f: 92:a4:af:37:55:06:d2:65:2a:ea:4e:5e:2e:91:e4:f3:f5:19: db:d6:3e:70:6b:92:46:c8:dd:a2:ab:33:e7:d9:a7:4b:c2:6c: d7:93:4b:fc:58:45:b7:ed:5e:46:fe:e1:bf:6e:26:0e:53:bb: 4f:30:cd:7f:60:18:70:66:73:4a:60:dc:fa:f7:27:32:79:00: 94:4d:b4:06:67:f4:67:e6:3f:98:3c:f2:62:91:61:d5:4d:6d: 4d:82:b0:98:11:54:9c:d0:8a:43:99:f9:69:fe:9d:eb:74:31: 30:58:09:49:68:35:bd:84:db:1e:99:65:3b:ac:8e:b9:e4:f8: 7b:43:e6:c5:a6:65:eb:39:6e:d5:50:1c:54:f5:b7:ef:a8:59: 0f:27:85:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLTrdtGNUQk2MV4YastaEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5NjhlZTBiMWY0MGNiYjEzYTg4ZmRlNGMwYjExNjgzMDRk ZjJkNmIwHhcNMjUxMjA2MDEwMTA0WhcNMjUxMjA3MDEwMTA0WjAzMTEwLwYDVQQD EyhjNTYyYjY4NDhkOWQ1YmZiMjkzOGQwYzZkNGEzYmRiYWZkOTVmNTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPqiVlXERd1qetgXsnHUvM1AWO0y 8/KMjjp8WB31JZlkDdK16LWCrJRIBfVmWiamATqhyMS8aKLF0lLmiSZN9C/0inD7 8s8A7IfW7i/1M7JeGh9H3jQvO2qVemIGVPb4OLVge2NbxLaBVmOpJS5RQVHCmItA n/K9PDZnnEy3ii20wHNs8c2+1bkwQuUUVrvkvwEhBbFRkHOwQpzY4ZPd0x7ZUUkw 5GTIWbK4l26l0BX/3vWj32l5JWqEG91hDYNW49tGVsrQomufhOAk7XGObZk2BBgV 1Z2bzYaRIyDSfFoHF8iO1f5uGBkvPoOuhaCWIV3B3zH8GCkslISehia22wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMVitoSNnVv7KTjQxtSjvbr9lfWDMB8GA1UdIwQY MBaAFDlo7gsfQMuxOoj95MCxFoME3y1rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1dqdUN4OUF5N0U2aVAza3dMRVdnd1RmTFdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS85ZjY5ZDQtNjVlZi00ZDVlLTljMmYt Nzk5OGY0YmRmMjFjLzEvT1dqdUN4OUF5N0U2aVAza3dMRVdnd1RmTFdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS85ZjY5ZDQtNjVlZi00ZDVlLTljMmYtNzk5OGY0YmRmMjFj LzEvT1dqdUN4OUF5N0U2aVAza3dMRVdnd1RmTFdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUN00J77O pH4AJffOwOxJzqdx4jYzIDL1TRus6VYILdT2GIn+m1Nj1Pp34rcu7AsHdNf5SmSp Cv4koBvZM9tXCFnpTaL5aKBHSqO2IQ5mIIsgbLEqoMUVjkYddvVm9RLKHQlcB/Uw V31SnoQvkqSvN1UG0mUq6k5eLpHk8/UZ29Y+cGuSRsjdoqsz59mnS8Js15NL/FhF t+1eRv7hv24mDlO7TzDNf2AYcGZzSmDc+vcnMnkAlE20Bmf0Z+Y/mDzyYpFh1U1t TYKwmBFUnNCKQ5n5af6d63QxMFgJSWg1vYTbHpllO6yOueT4e0PmxaZl6zlu1VAc VPW376hZDyeFYw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:14 2025 by rpki-client