This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.mft File: obfHtAmGdKBPsXeELOxO65v4nh4.mft (raw, json) Hash identifier: 8dHgi8zlR/iTeuaUuH5xhj4RC0umyc8OQjvcL2o5UfE= Subject key identifier: B9:70:78:E7:CD:27:9B:1E:9D:8E:AA:D0:65:F3:1F:E6:22:55:60:16 Authority key identifier: A1:B7:C7:B4:09:86:74:A0:4F:B1:77:84:2C:EC:4E:EB:9B:F8:9E:1E Certificate issuer: /CN=a1b7c7b4098674a04fb177842cec4eeb9bf89e1e Certificate serial: 019AF31C3CFB0D06E78F62494EFF7E517F75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obfHtAmGdKBPsXeELOxO65v4nh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 10:01:45 +0000 Manifest this update: Sat 06 Dec 2025 10:01:45 +0000 Manifest next update: Sun 07 Dec 2025 10:01:45 +0000 Files and hashes: 1: obfHtAmGdKBPsXeELOxO65v4nh4.crl (hash: NxR2Vg5icX4azStMMsh7fp39YnWRNET4MGL5K9Zqyxs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.crl rsync://rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.mft rsync://rpki.ripe.net/repository/DEFAULT/obfHtAmGdKBPsXeELOxO65v4nh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:3c:fb:0d:06:e7:8f:62:49:4e:ff:7e:51:7f:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1b7c7b4098674a04fb177842cec4eeb9bf89e1e Validity Not Before: Dec 6 10:01:45 2025 GMT Not After : Dec 7 10:01:45 2025 GMT Subject: CN=b97078e7cd279b1e9d8eaad065f31fe622556016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f4:c7:4e:3a:be:47:85:4b:d5:8e:0c:5e:d7: 7a:c0:87:48:53:63:76:cd:5b:5f:61:fb:a0:30:12: d1:31:ed:99:df:1a:af:1f:0f:78:57:f1:32:f4:55: 6f:0b:ab:e0:62:be:15:1a:22:ea:d3:d3:14:b0:f4: 0a:6f:f7:26:b0:05:f7:a9:08:4c:cc:fc:d1:29:d7: 36:c6:29:36:c1:ba:7d:24:91:ff:ad:b9:44:d3:36: ea:16:04:7b:07:cc:be:bb:ec:ac:76:4d:e6:6e:ec: af:1e:29:f5:b8:73:ad:27:56:35:96:4d:8c:75:68: 8b:fe:97:0d:13:5e:84:66:e7:37:83:bd:03:b9:19: 68:96:68:a9:65:27:10:f7:5e:2e:3d:61:dc:f4:08: 10:55:e8:28:2a:2a:16:f5:08:de:21:9b:de:33:0e: c3:8b:1b:2a:66:70:2c:4c:ea:f4:41:22:92:34:99: 13:4d:62:93:95:1c:ef:9f:fa:6c:52:48:89:e6:e6: 00:a5:7d:ac:a4:f6:c6:2b:6e:44:1d:59:37:89:47: b8:7c:90:8a:f7:37:9a:d3:3f:bb:9f:19:76:20:fe: 76:df:3a:df:fb:df:bb:2e:5c:ee:7e:78:ac:58:9d: 89:9a:c4:eb:39:d7:d0:72:bb:4f:21:5a:fc:a6:56: f0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:70:78:E7:CD:27:9B:1E:9D:8E:AA:D0:65:F3:1F:E6:22:55:60:16 X509v3 Authority Key Identifier: keyid:A1:B7:C7:B4:09:86:74:A0:4F:B1:77:84:2C:EC:4E:EB:9B:F8:9E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obfHtAmGdKBPsXeELOxO65v4nh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:40:12:56:b7:8e:75:5c:88:18:2d:58:7d:5f:65:81:70:55: ec:e1:87:5c:16:c9:f0:ff:fd:ab:d6:e9:ba:59:84:52:5d:0d: bc:3e:bf:0e:03:55:8a:d4:9c:2f:42:a9:09:a7:a8:33:1f:4f: 26:cb:71:48:38:23:7c:4a:fa:f9:99:9b:86:f8:00:60:06:e7: 01:87:da:47:b8:1f:e2:e1:18:e0:7f:a2:2e:ad:3a:cf:05:7e: 1a:ec:85:14:27:1c:0d:55:3b:4c:98:5c:8d:f4:d9:03:47:3c: 74:d5:a1:fa:a9:4f:39:d2:d7:66:a3:63:f3:b4:e6:ab:7f:b7: bc:81:49:9a:e6:3c:97:9f:1d:ce:7a:3d:49:c6:e2:0e:b7:81: 7e:b5:6c:ff:6e:c4:53:6a:4f:64:cc:5e:58:8a:eb:e3:7c:66: b9:5d:a1:73:bf:54:36:1f:5b:56:f0:d2:a2:01:ab:48:93:f7: 86:5f:b5:57:7e:99:6c:19:da:3f:2b:44:06:7e:73:e3:9f:12: 56:74:de:a6:b8:ad:94:3f:18:dc:85:8e:9f:57:b9:00:f0:06: 62:0d:3c:58:6a:67:f0:c1:b2:46:6a:5d:7d:af:47:ab:94:41: 8e:5a:5f:4a:a8:cb:d4:98:a0:21:90:00:6e:e2:8e:1c:82:91: f1:1c:c7:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHDz7DQbnj2JJTv9+UX91MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExYjdjN2I0MDk4Njc0YTA0ZmIxNzc4NDJjZWM0ZWViOWJm ODllMWUwHhcNMjUxMjA2MTAwMTQ1WhcNMjUxMjA3MTAwMTQ1WjAzMTEwLwYDVQQD EyhiOTcwNzhlN2NkMjc5YjFlOWQ4ZWFhZDA2NWYzMWZlNjIyNTU2MDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/THTjq+R4VL1Y4MXtd6wIdIU2N2 zVtfYfugMBLRMe2Z3xqvHw94V/Ey9FVvC6vgYr4VGiLq09MUsPQKb/cmsAX3qQhM zPzRKdc2xik2wbp9JJH/rblE0zbqFgR7B8y+u+ysdk3mbuyvHin1uHOtJ1Y1lk2M dWiL/pcNE16EZuc3g70DuRlolmipZScQ914uPWHc9AgQVegoKioW9QjeIZveMw7D ixsqZnAsTOr0QSKSNJkTTWKTlRzvn/psUkiJ5uYApX2spPbGK25EHVk3iUe4fJCK 9zea0z+7nxl2IP523zrf+9+7LlzufnisWJ2JmsTrOdfQcrtPIVr8plbwuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLlweOfNJ5senY6q0GXzH+YiVWAWMB8GA1UdIwQY MBaAFKG3x7QJhnSgT7F3hCzsTuub+J4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2JmSHRBbUdkS0JQc1hlRUxPeE82NXY0bmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84NWFlMWItYjA3Ny00NDhlLWEzMjgt N2MwNWExZmY1NDliLzEvb2JmSHRBbUdkS0JQc1hlRUxPeE82NXY0bmg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS84NWFlMWItYjA3Ny00NDhlLWEzMjgtN2MwNWExZmY1NDli LzEvb2JmSHRBbUdkS0JQc1hlRUxPeE82NXY0bmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH0ASVreO dVyIGC1YfV9lgXBV7OGHXBbJ8P/9q9bpulmEUl0NvD6/DgNVitScL0KpCaeoMx9P JstxSDgjfEr6+ZmbhvgAYAbnAYfaR7gf4uEY4H+iLq06zwV+GuyFFCccDVU7TJhc jfTZA0c8dNWh+qlPOdLXZqNj87Tmq3+3vIFJmuY8l58dzno9ScbiDreBfrVs/27E U2pPZMxeWIrr43xmuV2hc79UNh9bVvDSogGrSJP3hl+1V36ZbBnaPytEBn5z458S VnTepritlD8Y3IWOn1e5APAGYg08WGpn8MGyRmpdfa9Hq5RBjlpfSqjL1JigIZAA buKOHIKR8RzHrw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:48:43 2025 by rpki-client