This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft File: obTdg_xezSEPT2hPtr9A-zFg2yE.mft (raw, json) Hash identifier: p7kafZ0ujTpZVrq8Ull+HOtoTD8bgZOW0qrHPsqc/Jg= Subject key identifier: D1:5C:A5:73:24:0E:C1:ED:71:58:54:70:D2:04:CA:CE:9A:05:CE:E0 Authority key identifier: A1:B4:DD:83:FC:5E:CD:21:0F:4F:68:4F:B6:BF:40:FB:31:60:DB:21 Certificate issuer: /CN=a1b4dd83fc5ecd210f4f684fb6bf40fb3160db21 Certificate serial: 019AF42DF490CD151F019DC4C23CBDB0DA61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft Manifest number: 15A9 Signing time: Sat 06 Dec 2025 15:00:43 +0000 Manifest this update: Sat 06 Dec 2025 15:00:43 +0000 Manifest next update: Sun 07 Dec 2025 15:00:43 +0000 Files and hashes: 1: 48HLzEg5hUyysvh2QdFLov5OhmU.roa (hash: bw7hBJRBr+ljNjkA7DMlIt09FqFYCknq6hOA/oTgbSY=) 2: obTdg_xezSEPT2hPtr9A-zFg2yE.crl (hash: E2qJACcE5vuVi/sJ3OoNjrYAY6S8LCswNRdeDfSW0yE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.crl rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:f4:90:cd:15:1f:01:9d:c4:c2:3c:bd:b0:da:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1b4dd83fc5ecd210f4f684fb6bf40fb3160db21 Validity Not Before: Dec 6 15:00:43 2025 GMT Not After : Dec 7 15:00:43 2025 GMT Subject: CN=d15ca573240ec1ed71585470d204cace9a05cee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ff:70:8c:74:91:aa:63:a5:b2:d0:0d:32:f0: c9:7b:86:ac:2b:ef:7b:b9:68:a3:f3:cd:68:92:3e: 42:15:56:d4:08:40:a1:82:d6:59:80:03:5d:e2:d9: 6b:83:86:5d:07:16:72:1e:7b:56:65:d9:c8:67:61: 13:af:60:f7:18:f6:b8:4d:f4:73:b9:7f:d0:51:7e: f1:b2:f8:45:91:0a:96:47:20:3b:99:d5:7f:7b:7e: e2:f9:b9:55:0f:a1:41:09:da:9d:96:48:ff:cc:c9: 31:ab:78:94:7a:49:a4:9c:36:31:4a:e5:cd:d9:be: 82:03:0c:f0:6a:b3:a5:02:6b:0b:72:0b:90:f2:f2: dd:30:25:da:a0:bd:90:9f:a1:7b:6a:ee:88:33:65: aa:ea:bd:2a:a0:13:e0:b0:7c:60:85:87:7e:5e:57: 13:b2:6c:94:ea:a2:8c:d2:0c:ca:eb:bc:b4:ed:1c: 4f:7c:0f:e6:a0:69:29:83:f8:cf:47:57:fa:1e:ab: d8:91:d2:fd:8b:35:96:f8:de:d5:3d:23:d7:98:9f: 11:4b:70:f8:b1:68:60:c9:88:98:5a:e7:3a:ca:4e: a6:0a:dd:d8:1c:8b:8e:2d:50:f9:1e:87:c2:32:63: 06:ef:81:ae:3b:11:15:a5:d7:19:63:be:59:59:d7: 12:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:5C:A5:73:24:0E:C1:ED:71:58:54:70:D2:04:CA:CE:9A:05:CE:E0 X509v3 Authority Key Identifier: keyid:A1:B4:DD:83:FC:5E:CD:21:0F:4F:68:4F:B6:BF:40:FB:31:60:DB:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:4d:0f:86:47:01:48:6a:4a:7c:4c:b8:fd:1d:21:80:8a:56: 9c:9b:84:2a:e5:b3:fa:e9:4d:0e:19:1a:bc:66:48:9f:a1:9d: f8:3d:65:79:e0:cb:06:fb:17:38:ed:84:8e:0b:04:ad:55:e9: f0:ff:35:f4:b8:ef:e0:b8:a9:a0:67:16:65:cf:f9:78:c3:f1: 7e:fa:1d:20:9b:c1:0f:3c:7a:29:fc:5f:fb:c8:a8:99:03:ba: 76:40:33:51:88:46:33:e7:47:dd:96:44:7f:cc:33:c2:57:ba: ff:49:54:90:5f:95:e8:8a:f2:38:e7:a3:32:08:33:48:f3:bf: 01:ea:51:6e:19:30:58:d7:d7:ae:08:07:0d:03:e4:aa:84:51: aa:1b:6a:46:9e:51:e1:55:39:90:1b:de:52:6e:7f:81:26:97: bf:7d:7d:1f:2c:51:0b:15:0b:2e:3a:ec:86:73:ff:f4:9a:ab: cc:c4:24:bd:85:d3:f1:3e:56:d6:34:34:35:4e:e4:ba:c2:e9: 64:2c:7b:d5:e8:0d:be:f1:ee:9a:0c:a3:7b:81:f3:a8:fa:8d: fa:02:07:20:d3:e1:d2:4e:cc:68:93:52:5a:1e:a2:e9:0d:50: e0:0f:6a:80:16:cd:88:2b:ae:3b:53:84:e4:b9:1a:28:ae:b3: ca:cb:2f:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LfSQzRUfAZ3Ewjy9sNphMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExYjRkZDgzZmM1ZWNkMjEwZjRmNjg0ZmI2YmY0MGZiMzE2 MGRiMjEwHhcNMjUxMjA2MTUwMDQzWhcNMjUxMjA3MTUwMDQzWjAzMTEwLwYDVQQD EyhkMTVjYTU3MzI0MGVjMWVkNzE1ODU0NzBkMjA0Y2FjZTlhMDVjZWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4v9wjHSRqmOlstANMvDJe4asK+97 uWij881okj5CFVbUCEChgtZZgANd4tlrg4ZdBxZyHntWZdnIZ2ETr2D3GPa4TfRz uX/QUX7xsvhFkQqWRyA7mdV/e37i+blVD6FBCdqdlkj/zMkxq3iUekmknDYxSuXN 2b6CAwzwarOlAmsLcguQ8vLdMCXaoL2Qn6F7au6IM2Wq6r0qoBPgsHxghYd+XlcT smyU6qKM0gzK67y07RxPfA/moGkpg/jPR1f6HqvYkdL9izWW+N7VPSPXmJ8RS3D4 sWhgyYiYWuc6yk6mCt3YHIuOLVD5HofCMmMG74GuOxEVpdcZY75ZWdcSAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNFcpXMkDsHtcVhUcNIEys6aBc7gMB8GA1UdIwQY MBaAFKG03YP8Xs0hD09oT7a/QPsxYNshMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2JUZGdfeGV6U0VQVDJoUHRyOUEtekZnMnlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xNDZmOGEtZTA2OC00OGNhLWEzODgt ZmIxODZiOTQzMzRmLzEvb2JUZGdfeGV6U0VQVDJoUHRyOUEtekZnMnlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8xNDZmOGEtZTA2OC00OGNhLWEzODgtZmIxODZiOTQzMzRm LzEvb2JUZGdfeGV6U0VQVDJoUHRyOUEtekZnMnlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC00PhkcB SGpKfEy4/R0hgIpWnJuEKuWz+ulNDhkavGZIn6Gd+D1leeDLBvsXOO2EjgsErVXp 8P819Ljv4LipoGcWZc/5eMPxfvodIJvBDzx6Kfxf+8iomQO6dkAzUYhGM+dH3ZZE f8wzwle6/0lUkF+V6IryOOejMggzSPO/AepRbhkwWNfXrggHDQPkqoRRqhtqRp5R 4VU5kBveUm5/gSaXv319HyxRCxULLjrshnP/9JqrzMQkvYXT8T5W1jQ0NU7kusLp ZCx71egNvvHumgyje4HzqPqN+gIHINPh0k7MaJNSWh6i6Q1Q4A9qgBbNiCuuO1OE 5LkaKK6zyssvgA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:29:49 2025 by rpki-client