This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft File: oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft (raw, json) Hash identifier: co6XjrDQMXMfe+QshlbSCUaGWNSkFvdqPguJbaD5Xp8= Subject key identifier: E6:CE:33:4F:42:03:FC:8D:14:54:E3:66:E7:E4:54:2B:F5:BC:88:76 Authority key identifier: A0:17:46:CF:6B:BD:C8:BD:56:66:F3:06:81:1B:DF:FD:21:6B:1A:A6 Certificate issuer: /CN=a01746cf6bbdc8bd5666f306811bdffd216b1aa6 Certificate serial: 019B2BF8DA07746515C6269EA861C1C0A4C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft Manifest number: 177E Signing time: Wed 17 Dec 2025 11:01:27 +0000 Manifest this update: Wed 17 Dec 2025 11:01:27 +0000 Manifest next update: Thu 18 Dec 2025 11:01:27 +0000 Files and hashes: 1: oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl (hash: IHomq1C1w8oZw2idz5Q1KVHiFMMqqzPplBqCLpSDe74=) 2: sociFAoZ9Fk3G3CziQXuWjc_tPc.roa (hash: udf9UdObLF2TzxfJDP0XmSNS06eQxn4HxbhQF0p8yZs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:da:07:74:65:15:c6:26:9e:a8:61:c1:c0:a4:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a01746cf6bbdc8bd5666f306811bdffd216b1aa6 Validity Not Before: Dec 17 11:01:27 2025 GMT Not After : Dec 18 11:01:27 2025 GMT Subject: CN=e6ce334f4203fc8d1454e366e7e4542bf5bc8876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:95:e0:cd:71:a2:c9:2f:99:27:ba:63:eb:1f: b5:b6:d0:f7:b7:82:de:0b:9b:d2:c8:a0:46:9d:1f: e9:24:4d:96:99:93:5d:26:81:a5:cf:c9:62:9b:d4: a9:ad:9f:13:08:69:d3:ff:00:97:8d:e4:48:f8:f1: ae:15:6d:24:c3:50:6a:64:06:16:9d:34:0f:1d:17: 22:fb:dd:e2:f8:08:4b:61:74:7a:2c:8b:b8:af:39: 99:88:fd:d5:02:b5:6a:80:7c:e5:a7:ce:c2:78:49: 2f:d4:04:cb:25:b9:85:fe:64:a0:fd:79:47:11:67: 92:f5:6a:42:c5:c6:48:bd:05:bc:67:f2:d4:7f:76: 2f:20:5a:c0:3c:c3:f3:3b:eb:53:aa:dc:ce:e2:ed: 15:2d:e4:f1:0b:6a:ce:9e:37:bd:48:2f:49:f4:72: 97:c9:88:b5:13:e6:94:59:a9:6e:dd:2b:f6:5c:23: ae:48:2d:29:7b:0f:2e:60:75:f9:26:ad:a1:80:58: f1:e9:02:65:51:ab:dc:05:d6:aa:58:99:e4:37:17: 3a:f7:25:70:2a:0c:78:a2:16:5d:84:1e:16:73:97: 17:ab:6e:1c:bd:63:fc:b8:e0:ba:c9:d7:01:1a:05: 22:c9:61:50:29:8d:45:0b:5a:c3:b0:ef:82:73:00: 9a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:CE:33:4F:42:03:FC:8D:14:54:E3:66:E7:E4:54:2B:F5:BC:88:76 X509v3 Authority Key Identifier: keyid:A0:17:46:CF:6B:BD:C8:BD:56:66:F3:06:81:1B:DF:FD:21:6B:1A:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:6b:ab:de:65:7d:df:87:90:37:fd:fa:a6:34:65:12:f2:8f: 56:61:2b:ab:f8:32:21:87:4e:4a:60:44:1c:5f:8c:75:92:f1: 36:c8:a7:07:fa:3e:b4:5d:0e:20:bd:10:3c:c1:1b:23:64:5f: 2b:32:60:7e:c4:cf:4e:86:20:73:d4:25:9d:96:66:30:29:f5: 99:92:1f:6c:50:00:83:18:ed:bb:79:0c:04:bd:9c:9f:d3:e8: fa:3a:e8:22:37:95:a3:22:1b:9b:da:bb:16:1a:78:24:7c:a5: 18:f6:96:14:73:0b:7b:29:be:29:12:af:4f:79:78:86:ff:26: 68:76:9c:a4:8c:a0:a7:9e:a3:6c:73:37:2a:cd:c9:89:4a:e1: 2a:d4:26:70:83:9c:3c:32:40:0e:75:6c:28:4a:cc:05:98:bf: a2:87:29:4f:ca:e6:ef:97:3c:8f:23:7d:e7:b5:26:bb:bf:31: 4b:0b:4e:be:72:5a:23:7f:a5:04:0c:63:56:b7:6b:d4:e4:40: ae:80:e0:d0:f0:f2:f5:68:2b:9a:0b:06:5f:b8:ba:b8:ae:e4: ee:b6:52:34:f3:6a:b4:19:41:45:db:ce:2f:d3:b4:4a:79:78: 65:e3:c3:64:72:61:e9:cc:df:f1:e5:2c:8e:87:dc:98:f9:e6: 83:ca:83:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+NoHdGUVxiaeqGHBwKTIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwMTc0NmNmNmJiZGM4YmQ1NjY2ZjMwNjgxMWJkZmZkMjE2 YjFhYTYwHhcNMjUxMjE3MTEwMTI3WhcNMjUxMjE4MTEwMTI3WjAzMTEwLwYDVQQD EyhlNmNlMzM0ZjQyMDNmYzhkMTQ1NGUzNjZlN2U0NTQyYmY1YmM4ODc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5XgzXGiyS+ZJ7pj6x+1ttD3t4Le C5vSyKBGnR/pJE2WmZNdJoGlz8lim9SprZ8TCGnT/wCXjeRI+PGuFW0kw1BqZAYW nTQPHRci+93i+AhLYXR6LIu4rzmZiP3VArVqgHzlp87CeEkv1ATLJbmF/mSg/XlH EWeS9WpCxcZIvQW8Z/LUf3YvIFrAPMPzO+tTqtzO4u0VLeTxC2rOnje9SC9J9HKX yYi1E+aUWalu3Sv2XCOuSC0pew8uYHX5Jq2hgFjx6QJlUavcBdaqWJnkNxc69yVw Kgx4ohZdhB4Wc5cXq24cvWP8uOC6ydcBGgUiyWFQKY1FC1rDsO+CcwCaBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFObOM09CA/yNFFTjZufkVCv1vIh2MB8GA1UdIwQY MBaAFKAXRs9rvci9VmbzBoEb3/0haxqmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0JkR3oydTl5TDFXWnZNR2dSdmZfU0ZyR3FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNzY0Y2UtMTJhZS00MWI1LTgxYjYt MDJhYmE1ZDFiM2E0LzEvb0JkR3oydTl5TDFXWnZNR2dSdmZfU0ZyR3FZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNzY0Y2UtMTJhZS00MWI1LTgxYjYtMDJhYmE1ZDFiM2E0 LzEvb0JkR3oydTl5TDFXWnZNR2dSdmZfU0ZyR3FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAamur3mV9 34eQN/36pjRlEvKPVmErq/gyIYdOSmBEHF+MdZLxNsinB/o+tF0OIL0QPMEbI2Rf KzJgfsTPToYgc9QlnZZmMCn1mZIfbFAAgxjtu3kMBL2cn9Po+jroIjeVoyIbm9q7 Fhp4JHylGPaWFHMLeym+KRKvT3l4hv8maHacpIygp56jbHM3Ks3JiUrhKtQmcIOc PDJADnVsKErMBZi/oocpT8rm75c8jyN957Umu78xSwtOvnJaI3+lBAxjVrdr1ORA roDg0PDy9WgrmgsGX7i6uK7k7rZSNPNqtBlBRdvOL9O0Snl4ZePDZHJh6czf8eUs jofcmPnmg8qD9Q== -----END CERTIFICATE-----Generated at Wed Dec 17 18:32:05 2025 by rpki-client