This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.mft File: owVfB71HqGR4w79HOSVzrNU9Y24.mft (raw, json) Hash identifier: 6giLBlvIg40I/JBeg4FC8sL5GvcNhoQCVYaZqCfMQ+E= Subject key identifier: C2:3F:BD:0A:D3:28:F0:BF:5A:04:44:0F:AE:E2:61:CF:FB:77:FD:A9 Authority key identifier: A3:05:5F:07:BD:47:A8:64:78:C3:BF:47:39:25:73:AC:D5:3D:63:6E Certificate issuer: /CN=a3055f07bd47a86478c3bf47392573acd53d636e Certificate serial: 019AF19AB8217D91F72733123515D8E148FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/owVfB71HqGR4w79HOSVzrNU9Y24.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 03:00:39 +0000 Manifest this update: Sat 06 Dec 2025 03:00:39 +0000 Manifest next update: Sun 07 Dec 2025 03:00:39 +0000 Files and hashes: 1: owVfB71HqGR4w79HOSVzrNU9Y24.crl (hash: Ft2bhfTg5EDH4Qld9M8+dWtOMS5bMW8mDqBNPm33t/c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.mft rsync://rpki.ripe.net/repository/DEFAULT/owVfB71HqGR4w79HOSVzrNU9Y24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:b8:21:7d:91:f7:27:33:12:35:15:d8:e1:48:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3055f07bd47a86478c3bf47392573acd53d636e Validity Not Before: Dec 6 03:00:39 2025 GMT Not After : Dec 7 03:00:39 2025 GMT Subject: CN=c23fbd0ad328f0bf5a04440faee261cffb77fda9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:17:20:84:b7:60:9d:9a:e2:f6:96:11:55:81: 02:99:f1:5f:fe:af:76:0f:ec:b6:cf:10:8b:f0:10: ce:13:8c:62:3d:e0:3b:b6:0d:80:bc:b4:db:a9:55: e9:ff:4b:ee:77:0c:b0:9d:2f:70:b4:e4:24:a2:ba: 47:ec:76:f9:af:ad:c8:ed:f0:39:63:b8:1b:45:9c: 42:4d:9c:fa:8c:89:bf:9d:ea:1e:44:e8:ac:f1:75: 8d:9d:29:2b:60:35:7d:2e:d5:7f:c2:05:9d:df:da: 95:ec:42:b5:63:56:0b:f7:ee:fe:47:6d:84:3e:e0: a7:c2:b6:45:7a:48:18:7f:2c:6a:00:8d:b6:d5:16: af:68:61:fa:8a:09:10:18:a3:95:cb:a7:88:7e:aa: 21:78:b1:a7:e1:e3:4d:83:f6:e2:85:b9:bb:cf:48: 74:ee:98:4a:78:5d:00:8f:61:bb:98:e9:82:24:44: 9d:09:88:5b:c9:f5:3e:8c:b3:c1:ba:31:0d:f4:62: 16:68:3d:a8:00:de:3b:b2:6c:a9:66:ee:e1:ac:ba: 56:20:de:6a:96:0d:3d:e5:c9:8e:a4:c4:79:38:ca: 02:b3:be:6e:04:cf:d2:a4:43:3e:7c:73:4e:ab:41: 6d:7b:f5:f8:83:15:71:3b:7c:9f:8c:62:87:ce:df: 1c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:3F:BD:0A:D3:28:F0:BF:5A:04:44:0F:AE:E2:61:CF:FB:77:FD:A9 X509v3 Authority Key Identifier: keyid:A3:05:5F:07:BD:47:A8:64:78:C3:BF:47:39:25:73:AC:D5:3D:63:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/owVfB71HqGR4w79HOSVzrNU9Y24.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:c3:ca:63:47:f1:9b:33:0e:b1:31:29:18:b0:70:00:09:c0: 7c:a0:c9:30:1f:8c:fd:79:d9:46:08:68:8d:ce:dd:5f:fa:29: 89:79:e4:ce:f2:1a:d2:71:50:c9:fa:3e:2d:d6:7d:23:aa:9f: 05:dd:90:43:b0:4c:0a:d3:57:bc:2b:05:bd:7d:9d:4c:4a:e2: a0:54:d1:a0:94:91:90:a9:58:ec:e2:03:8b:68:a6:3e:aa:21: d0:f8:06:99:45:be:ae:66:54:a8:6a:83:01:2b:04:43:52:4d: 60:b4:48:ee:4e:01:5b:8a:35:33:f7:86:aa:77:0b:34:17:47: 2a:4a:61:a8:0d:82:68:a4:68:48:63:13:c6:35:19:7e:30:07: f5:d4:39:57:35:09:02:61:f6:21:ee:8f:6c:06:8d:13:ee:9f: 78:74:7a:5f:fd:e5:9a:c8:5e:a8:08:7d:06:0f:0f:c0:b4:7e: 3f:52:b9:52:80:4c:ed:f0:17:6d:d4:89:29:96:14:36:13:cc: 76:0e:00:ef:87:89:8c:df:3d:33:af:b6:89:18:53:c6:d6:aa: da:ea:e8:b9:da:4e:a0:30:6a:73:9e:c5:ba:85:ba:28:fa:cb: f3:4b:5b:30:08:1d:14:11:7e:68:59:05:9a:41:eb:c0:c6:95: e1:47:64:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmrghfZH3JzMSNRXY4Uj8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzMDU1ZjA3YmQ0N2E4NjQ3OGMzYmY0NzM5MjU3M2FjZDUz ZDYzNmUwHhcNMjUxMjA2MDMwMDM5WhcNMjUxMjA3MDMwMDM5WjAzMTEwLwYDVQQD EyhjMjNmYmQwYWQzMjhmMGJmNWEwNDQ0MGZhZWUyNjFjZmZiNzdmZGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhcghLdgnZri9pYRVYECmfFf/q92 D+y2zxCL8BDOE4xiPeA7tg2AvLTbqVXp/0vudwywnS9wtOQkorpH7Hb5r63I7fA5 Y7gbRZxCTZz6jIm/neoeROis8XWNnSkrYDV9LtV/wgWd39qV7EK1Y1YL9+7+R22E PuCnwrZFekgYfyxqAI221RavaGH6igkQGKOVy6eIfqoheLGn4eNNg/bihbm7z0h0 7phKeF0Aj2G7mOmCJESdCYhbyfU+jLPBujEN9GIWaD2oAN47smypZu7hrLpWIN5q lg095cmOpMR5OMoCs75uBM/SpEM+fHNOq0Fte/X4gxVxO3yfjGKHzt8cTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMI/vQrTKPC/WgRED67iYc/7d/2pMB8GA1UdIwQY MBaAFKMFXwe9R6hkeMO/Rzklc6zVPWNuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3dWZkI3MUhxR1I0dzc5SE9TVnpyTlU5WTI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9kOWQwYmYtNmQ1MS00MDhmLWI3YWUt YTNhYWQxMTc4Y2Q0LzEvb3dWZkI3MUhxR1I0dzc5SE9TVnpyTlU5WTI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9kOWQwYmYtNmQ1MS00MDhmLWI3YWUtYTNhYWQxMTc4Y2Q0 LzEvb3dWZkI3MUhxR1I0dzc5SE9TVnpyTlU5WTI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi8PKY0fx mzMOsTEpGLBwAAnAfKDJMB+M/XnZRghojc7dX/opiXnkzvIa0nFQyfo+LdZ9I6qf Bd2QQ7BMCtNXvCsFvX2dTErioFTRoJSRkKlY7OIDi2imPqoh0PgGmUW+rmZUqGqD ASsEQ1JNYLRI7k4BW4o1M/eGqncLNBdHKkphqA2CaKRoSGMTxjUZfjAH9dQ5VzUJ AmH2Ie6PbAaNE+6feHR6X/3lmsheqAh9Bg8PwLR+P1K5UoBM7fAXbdSJKZYUNhPM dg4A74eJjN89M6+2iRhTxtaq2uroudpOoDBqc57FuoW6KPrL80tbMAgdFBF+aFkF mkHrwMaV4UdkhA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:47:34 2025 by rpki-client