This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft File: D-ObQQdMfWrcjuJ04jn3uOs1hek.mft (raw, json) Hash identifier: RSqC17TDHvMGxA3w3ywA0liJ6UHNd9+Q8HZDef2Ebjc= Subject key identifier: FD:73:13:C7:39:57:4D:72:95:B8:DD:87:7D:31:4C:3E:3E:85:E0:44 Authority key identifier: 0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9 Certificate issuer: /CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9 Certificate serial: 019AF49C1DF0CC7F2462E7B108F4DEA3E8F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft Manifest number: 1664 Signing time: Sat 06 Dec 2025 17:01:03 +0000 Manifest this update: Sat 06 Dec 2025 17:01:03 +0000 Manifest next update: Sun 07 Dec 2025 17:01:03 +0000 Files and hashes: 1: 5Nvni1-D_t9292_BqmoyjYIbpMw.roa (hash: TLQzj78uUDb6pP5ISG5g+K+kbONmZOzZ/8l2OVk7XUU=) 2: D-ObQQdMfWrcjuJ04jn3uOs1hek.crl (hash: S5JdNMUu7+lSmFRxlv7aKY2Yo4vpT3iP1DPLgWAAHyc=) 3: DLsbQslMWMAA8m5x5xT2CbKj_PA.roa (hash: BA4GEn1Aa+rFpkRZJ9HDbAjJajVs68qZDjkbK7NP/Xc=) 4: r-rzdWQIevQsRXpy8ArPMXKhl5I.roa (hash: paqGO5ZL3o7kODmIqJwv4WV1pj5fNgUoAM39DR0ohR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:1d:f0:cc:7f:24:62:e7:b1:08:f4:de:a3:e8:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9 Validity Not Before: Dec 6 17:01:03 2025 GMT Not After : Dec 7 17:01:03 2025 GMT Subject: CN=fd7313c739574d7295b8dd877d314c3e3e85e044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:be:e5:50:b8:14:83:3c:8a:aa:8f:02:50:49: b7:cc:1b:3c:9e:ac:8e:02:51:39:1d:75:47:4b:2e: 90:2a:8e:58:d3:20:21:22:60:16:b7:1a:60:50:5d: 1b:2f:eb:ca:69:f2:1d:bf:0a:17:04:6f:6e:9d:b0: 25:43:6b:57:e5:c6:03:9d:bb:22:94:59:85:d7:a2: 9f:7e:b0:80:db:6c:cb:a3:20:5f:cd:94:7e:98:d9: 52:99:b9:3e:37:80:89:42:3b:12:3d:d6:a1:25:6f: b5:22:ce:ed:e6:a4:3e:24:09:a5:62:01:43:15:bb: 38:03:6a:bc:7b:9f:1b:03:77:18:fe:90:44:5f:2e: 0d:f6:b0:1b:1b:b7:55:28:8f:3c:a0:70:06:af:a2: 03:90:01:07:0b:c6:6b:af:89:e4:96:9d:34:b3:0d: 81:eb:46:dc:21:3c:ca:42:87:7e:23:d4:1b:f9:14: 65:49:b1:e8:ba:b2:00:a3:5c:c7:1f:96:a1:34:b7: 93:d8:7d:02:bf:ed:70:28:fe:0d:2f:34:ec:18:6a: 68:bc:17:28:30:35:95:16:a3:81:03:79:c1:4d:2b: 91:7a:c8:cc:7c:85:1d:9c:aa:e4:00:78:d3:bf:d8: bf:c3:3b:8c:4b:5b:af:1d:06:47:a0:30:94:4e:2e: 33:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:73:13:C7:39:57:4D:72:95:B8:DD:87:7D:31:4C:3E:3E:85:E0:44 X509v3 Authority Key Identifier: keyid:0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:d7:ad:d0:0c:2c:ab:70:b9:a8:55:d4:f4:b1:ba:d5:0e:de: a6:c6:97:20:4b:aa:3c:de:47:03:40:0e:b4:b1:d3:da:7f:2e: 01:53:f8:21:c2:f3:5c:1b:79:3e:2d:09:58:5a:b5:35:41:e2: 81:7e:e4:e8:aa:ec:27:ce:3e:8d:d0:0e:5d:24:5a:7f:a3:c0: 75:42:b2:55:e0:17:ac:3c:05:4d:cb:eb:91:a1:a8:5d:8f:16: 58:04:b5:b4:54:24:8b:1a:ea:68:74:1a:f1:73:ca:7e:56:1c: 12:56:15:2f:62:73:7d:4f:83:e6:06:5d:cb:f7:5b:41:0f:11: d5:f4:82:2a:94:52:05:3c:18:56:04:ad:f1:89:73:70:41:cd: e7:8a:e2:94:30:49:bf:ac:60:a3:f9:c5:a5:73:ac:63:5f:97: b1:27:88:fa:39:af:a3:f0:b3:54:23:12:00:d2:fc:6e:ba:e0: c9:93:e4:34:29:8c:3c:41:e8:a3:03:3a:34:59:d6:1c:59:20: cb:d2:f2:13:94:c5:cb:41:c9:55:14:6a:41:75:98:35:bd:80: b6:01:8b:f7:1c:9f:72:66:58:43:cf:5c:45:10:1c:42:2e:82: 49:ef:e6:f9:d2:d5:53:4c:17:1e:da:8c:17:a4:3f:92:d0:10: f5:38:7d:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nB3wzH8kYuexCPTeo+jwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZTM5YjQxMDc0YzdkNmFkYzhlZTI3NGUyMzlmN2I4ZWIz NTg1ZTkwHhcNMjUxMjA2MTcwMTAzWhcNMjUxMjA3MTcwMTAzWjAzMTEwLwYDVQQD EyhmZDczMTNjNzM5NTc0ZDcyOTViOGRkODc3ZDMxNGMzZTNlODVlMDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4r7lULgUgzyKqo8CUEm3zBs8nqyO AlE5HXVHSy6QKo5Y0yAhImAWtxpgUF0bL+vKafIdvwoXBG9unbAlQ2tX5cYDnbsi lFmF16KffrCA22zLoyBfzZR+mNlSmbk+N4CJQjsSPdahJW+1Is7t5qQ+JAmlYgFD Fbs4A2q8e58bA3cY/pBEXy4N9rAbG7dVKI88oHAGr6IDkAEHC8Zrr4nklp00sw2B 60bcITzKQod+I9Qb+RRlSbHourIAo1zHH5ahNLeT2H0Cv+1wKP4NLzTsGGpovBco MDWVFqOBA3nBTSuResjMfIUdnKrkAHjTv9i/wzuMS1uvHQZHoDCUTi4zYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP1zE8c5V01ylbjdh30xTD4+heBEMB8GA1UdIwQY MBaAFA/jm0EHTH1q3I7idOI597jrNYXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRC1PYlFRZE1mV3JjanVKMDRqbjN1T3MxaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8xM2VhMWYtMGJjMS00NTdjLThhYjUt MDRlODEyZDQ4ZTcyLzEvRC1PYlFRZE1mV3JjanVKMDRqbjN1T3MxaGVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8xM2VhMWYtMGJjMS00NTdjLThhYjUtMDRlODEyZDQ4ZTcy LzEvRC1PYlFRZE1mV3JjanVKMDRqbjN1T3MxaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ9et0Aws q3C5qFXU9LG61Q7epsaXIEuqPN5HA0AOtLHT2n8uAVP4IcLzXBt5Pi0JWFq1NUHi gX7k6KrsJ84+jdAOXSRaf6PAdUKyVeAXrDwFTcvrkaGoXY8WWAS1tFQkixrqaHQa 8XPKflYcElYVL2JzfU+D5gZdy/dbQQ8R1fSCKpRSBTwYVgSt8YlzcEHN54rilDBJ v6xgo/nFpXOsY1+XsSeI+jmvo/CzVCMSANL8brrgyZPkNCmMPEHoowM6NFnWHFkg y9LyE5TFy0HJVRRqQXWYNb2AtgGL9xyfcmZYQ89cRRAcQi6CSe/m+dLVU0wXHtqM F6Q/ktAQ9Th9dQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:05:49 2025 by rpki-client