This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft File: OBXtD6YgyAGqqabxT2WW1-yXUKE.mft (raw, json) Hash identifier: kwn9C/+5nHf1Mw/glcaxRxLu42cHIfms9+w6Mvn97hU= Subject key identifier: 84:0D:15:46:42:F3:49:38:0D:8E:B7:9D:1A:5E:AF:CC:21:26:CC:2C Authority key identifier: 38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1 Certificate issuer: /CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1 Certificate serial: 019AF35294F263D41BAADDACBFFC763A080C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 11:01:06 +0000 Manifest this update: Sat 06 Dec 2025 11:01:06 +0000 Manifest next update: Sun 07 Dec 2025 11:01:06 +0000 Files and hashes: 1: OBXtD6YgyAGqqabxT2WW1-yXUKE.crl (hash: LUJLFkm24vlDQrI7wXSfhw7S24RE7xXYFVLpW/my6rI=) 2: u-w9Flj7fkevQpf-dpXISzIby2Y.roa (hash: +ftWzfsK6bMqWx5+3ThvbgDjBdiFZmrC2eI3EPi2YVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.crl rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:94:f2:63:d4:1b:aa:dd:ac:bf:fc:76:3a:08:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1 Validity Not Before: Dec 6 11:01:06 2025 GMT Not After : Dec 7 11:01:06 2025 GMT Subject: CN=840d154642f349380d8eb79d1a5eafcc2126cc2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c6:e5:47:72:9a:27:c9:d1:30:67:48:d1:f3: f2:a5:a3:07:98:99:2c:1a:ce:9b:4e:5f:00:1c:6f: 36:a5:59:44:ee:eb:04:0b:47:de:35:44:b2:0d:fd: a7:d8:b7:17:62:b8:3e:e3:95:5d:e3:bc:38:f4:5b: 44:9f:e2:00:24:3b:6d:72:72:e5:76:a2:a0:9a:ca: 08:bd:31:e5:f7:e3:7c:c7:42:29:23:f3:49:59:c6: 88:89:35:b2:f6:26:36:10:26:3e:6a:27:fe:c9:f4: 85:e9:6c:81:a5:e3:33:55:16:b9:76:ff:60:de:7e: 69:d3:a8:d4:a6:23:1c:4d:81:39:80:a0:a8:21:8e: 2b:d9:60:e9:06:f5:de:d2:f1:70:0a:6a:8a:bb:aa: d3:1b:cf:2c:6d:ac:e3:51:15:ac:13:82:f6:b3:30: ba:a4:53:30:bc:ed:ca:04:b8:9c:f6:c4:df:1f:2b: 49:c4:09:f8:07:15:dc:1b:eb:cf:dc:5d:d8:26:22: ed:cd:0c:7b:58:5d:70:e0:e9:ce:93:ca:85:bf:50: 3b:2a:48:1b:8c:42:5c:91:86:90:d5:a5:48:f3:0a: ee:f1:cc:59:d4:96:5d:22:6e:4b:89:b6:52:91:0c: a5:84:f8:fb:97:7f:3e:c9:8c:4c:d3:72:ca:9e:9c: 80:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:0D:15:46:42:F3:49:38:0D:8E:B7:9D:1A:5E:AF:CC:21:26:CC:2C X509v3 Authority Key Identifier: keyid:38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:25:18:ed:c5:6c:f1:c0:45:06:0e:3d:f8:5e:9b:00:90:e2: 42:dc:d9:54:05:fd:f5:00:bc:7f:c2:e4:72:e3:4e:82:bb:6a: fa:92:a0:d0:7e:43:a2:df:bb:31:b1:26:60:81:b8:23:00:08: 0a:46:4c:3a:56:38:50:33:5a:12:7a:73:c0:2e:df:ff:6d:2f: 0b:bf:81:08:ce:32:f9:c2:fd:5d:32:b7:03:51:3a:31:08:ce: 50:ea:c3:73:92:02:24:94:6a:a9:f0:71:7a:c0:7f:68:01:d6: cd:72:5c:1d:50:4d:52:30:3f:74:44:49:05:50:c1:ed:3c:e3: 34:bf:97:34:e0:d9:e5:c2:8c:15:92:77:fa:7c:a2:2b:53:9f: df:1e:b7:59:24:a9:e2:3d:08:a2:47:64:8b:ee:b9:05:81:b9: 50:c6:7a:fa:41:79:72:71:1d:66:59:f6:e2:a1:9b:2a:9a:56: 0c:05:3a:71:12:67:4d:6f:18:d1:09:4e:37:e0:a9:fe:8b:39: 4e:22:59:75:f0:ca:1b:85:63:57:c0:f0:5a:6e:c3:05:36:9d: a6:25:8e:20:31:89:e2:1c:ce:e1:07:96:26:22:bb:fb:46:c0: 15:a2:37:75:1f:5d:3d:21:aa:05:41:45:9d:2d:65:8b:b7:49: f7:99:5a:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUpTyY9Qbqt2sv/x2OggMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MTVlZDBmYTYyMGM4MDFhYWE5YTZmMTRmNjU5NmQ3ZWM5 NzUwYTEwHhcNMjUxMjA2MTEwMTA2WhcNMjUxMjA3MTEwMTA2WjAzMTEwLwYDVQQD Eyg4NDBkMTU0NjQyZjM0OTM4MGQ4ZWI3OWQxYTVlYWZjYzIxMjZjYzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMblR3KaJ8nRMGdI0fPypaMHmJks Gs6bTl8AHG82pVlE7usEC0feNUSyDf2n2LcXYrg+45Vd47w49FtEn+IAJDttcnLl dqKgmsoIvTHl9+N8x0IpI/NJWcaIiTWy9iY2ECY+aif+yfSF6WyBpeMzVRa5dv9g 3n5p06jUpiMcTYE5gKCoIY4r2WDpBvXe0vFwCmqKu6rTG88sbazjURWsE4L2szC6 pFMwvO3KBLic9sTfHytJxAn4BxXcG+vP3F3YJiLtzQx7WF1w4OnOk8qFv1A7Kkgb jEJckYaQ1aVI8wru8cxZ1JZdIm5LibZSkQylhPj7l38+yYxM03LKnpyA9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQNFUZC80k4DY63nRper8whJswsMB8GA1UdIwQY MBaAFDgV7Q+mIMgBqqmm8U9lltfsl1ChMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0JYdEQ2WWd5QUdxcWFieFQyV1cxLXlYVUtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8zMmRhNDAtMGNiZi00MjQ0LWIxYTQt ZjM1YTQ0NTYzNWNhLzEvT0JYdEQ2WWd5QUdxcWFieFQyV1cxLXlYVUtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8zMmRhNDAtMGNiZi00MjQ0LWIxYTQtZjM1YTQ0NTYzNWNh LzEvT0JYdEQ2WWd5QUdxcWFieFQyV1cxLXlYVUtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwyUY7cVs 8cBFBg49+F6bAJDiQtzZVAX99QC8f8LkcuNOgrtq+pKg0H5Dot+7MbEmYIG4IwAI CkZMOlY4UDNaEnpzwC7f/20vC7+BCM4y+cL9XTK3A1E6MQjOUOrDc5ICJJRqqfBx esB/aAHWzXJcHVBNUjA/dERJBVDB7TzjNL+XNODZ5cKMFZJ3+nyiK1Of3x63WSSp 4j0Iokdki+65BYG5UMZ6+kF5cnEdZln24qGbKppWDAU6cRJnTW8Y0QlON+Cp/os5 TiJZdfDKG4VjV8DwWm7DBTadpiWOIDGJ4hzO4QeWJiK7+0bAFaI3dR9dPSGqBUFF nS1li7dJ95laXg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:28:56 2025 by rpki-client