This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft File: OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft (raw, json) Hash identifier: m2CxTBm+fznDJpsUx3jP+VDq4LlZftLBi7PVSEi0cTI= Subject key identifier: 6B:0F:6D:EE:6B:6A:75:38:68:CA:11:7A:F0:C4:89:BA:20:07:9E:14 Authority key identifier: 38:14:B6:48:DD:57:42:02:5C:3D:DA:5E:AA:66:49:1F:FD:B2:E5:D9 Certificate issuer: /CN=3814b648dd5742025c3dda5eaa66491ffdb2e5d9 Certificate serial: 019AF12E30E05B62F7D539ED59C082238758 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBS2SN1XQgJcPdpeqmZJH_2y5dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft Manifest number: 0E40 Signing time: Sat 06 Dec 2025 01:02:07 +0000 Manifest this update: Sat 06 Dec 2025 01:02:07 +0000 Manifest next update: Sun 07 Dec 2025 01:02:07 +0000 Files and hashes: 1: OBS2SN1XQgJcPdpeqmZJH_2y5dk.crl (hash: IuNfbSqGB3woj6jfgeTaaM1vZlenEdngD0DZq/jC3xI=) 2: b85MZ4WinFf_UE0cBlcSvifgg7I.roa (hash: uJf/EeGTiSuFi2jO3q5f34ZIMuvCCFqx997bjLZrpdM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.crl rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft rsync://rpki.ripe.net/repository/DEFAULT/OBS2SN1XQgJcPdpeqmZJH_2y5dk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:30:e0:5b:62:f7:d5:39:ed:59:c0:82:23:87:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3814b648dd5742025c3dda5eaa66491ffdb2e5d9 Validity Not Before: Dec 6 01:02:07 2025 GMT Not After : Dec 7 01:02:07 2025 GMT Subject: CN=6b0f6dee6b6a753868ca117af0c489ba20079e14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8d:db:07:c0:48:47:f0:d1:f0:90:2a:3a:55: d9:eb:47:d8:67:da:72:ff:1f:f1:40:40:d4:9e:98: b6:14:86:a5:26:b8:e4:59:00:e5:af:b2:d1:27:44: 1d:ce:18:1e:37:41:4b:b1:62:9a:c2:3d:a0:d7:cf: 96:2b:54:2d:14:5c:19:f6:15:bf:b4:a2:6e:b3:12: 99:70:11:6e:d8:27:08:90:c8:48:4a:e5:31:e8:6b: 03:b8:c7:9f:6b:8c:12:d9:2f:bf:5f:00:0d:bb:6f: 4f:31:51:ee:d3:2e:9d:8d:e8:c7:92:19:9a:dc:eb: 0b:e8:ff:74:af:51:23:29:97:aa:99:e8:5f:34:1a: 98:86:f1:f5:bf:4a:b1:fe:3a:23:4e:54:f6:d2:47: 60:00:bd:61:d0:b2:8f:4c:c1:7d:55:25:55:0d:c6: af:ff:13:6a:eb:d2:13:4b:20:33:57:de:ad:33:86: a1:db:2f:c8:01:48:c6:64:ec:c9:e3:7c:64:c1:ac: f8:16:55:86:c9:8d:a9:4b:00:e6:a3:58:63:02:a2: df:90:35:fa:d8:8c:30:0c:ae:c4:64:11:5a:52:91: 57:ad:e3:85:75:75:da:c6:23:f9:a0:b2:00:c7:62: e2:5e:6d:7a:ba:8d:f7:f1:f5:8b:44:ee:b5:cc:e0: 79:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:0F:6D:EE:6B:6A:75:38:68:CA:11:7A:F0:C4:89:BA:20:07:9E:14 X509v3 Authority Key Identifier: keyid:38:14:B6:48:DD:57:42:02:5C:3D:DA:5E:AA:66:49:1F:FD:B2:E5:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBS2SN1XQgJcPdpeqmZJH_2y5dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:eb:54:c1:cb:ac:06:b9:ba:7a:11:22:ac:84:ff:8b:32:53: ba:7f:9b:aa:c4:a5:38:74:94:d8:03:70:4e:03:a9:20:34:ce: 64:6d:68:cc:a7:5b:d3:72:d0:30:dc:32:71:62:a2:da:aa:3b: 59:19:d7:f5:f5:3f:91:49:93:a4:55:6e:0b:88:1c:81:79:27: da:09:0b:2a:22:36:39:05:15:b8:80:ec:e1:4e:f7:d5:4f:14: bc:3b:2d:b2:a8:24:6e:88:bc:5b:7c:b8:af:84:1b:3a:60:9e: 35:d0:d9:2b:4a:5f:2b:6f:de:2d:2c:9b:6e:e3:84:cb:0a:ce: 21:ba:c3:e9:2f:fd:ff:c2:0d:1e:21:96:1d:fa:e8:8f:15:1e: 66:20:e5:f0:a8:ca:37:bb:83:85:67:5c:03:65:46:e2:2a:b5: 29:48:45:a6:20:f5:fc:38:a1:8c:44:52:a8:8f:df:97:94:13: ce:c2:33:82:d1:e4:77:62:c5:bd:9d:47:3f:7c:d9:b3:50:f8: 4b:a5:69:94:38:ee:58:f6:3d:fd:53:0a:f3:9f:10:da:91:55: 32:24:f9:6f:db:06:90:bf:6e:c0:85:bd:8e:b4:34:8b:bc:7e: 97:45:63:79:5b:23:cd:17:24:64:f4:05:2c:f2:ee:7d:84:38: de:7a:75:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLjDgW2L31TntWcCCI4dYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MTRiNjQ4ZGQ1NzQyMDI1YzNkZGE1ZWFhNjY0OTFmZmRi MmU1ZDkwHhcNMjUxMjA2MDEwMjA3WhcNMjUxMjA3MDEwMjA3WjAzMTEwLwYDVQQD Eyg2YjBmNmRlZTZiNmE3NTM4NjhjYTExN2FmMGM0ODliYTIwMDc5ZTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuI3bB8BIR/DR8JAqOlXZ60fYZ9py /x/xQEDUnpi2FIalJrjkWQDlr7LRJ0QdzhgeN0FLsWKawj2g18+WK1QtFFwZ9hW/ tKJusxKZcBFu2CcIkMhISuUx6GsDuMefa4wS2S+/XwANu29PMVHu0y6djejHkhma 3OsL6P90r1EjKZeqmehfNBqYhvH1v0qx/jojTlT20kdgAL1h0LKPTMF9VSVVDcav /xNq69ITSyAzV96tM4ah2y/IAUjGZOzJ43xkwaz4FlWGyY2pSwDmo1hjAqLfkDX6 2IwwDK7EZBFaUpFXreOFdXXaxiP5oLIAx2LiXm16uo338fWLRO61zOB5TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGsPbe5ranU4aMoRevDEibogB54UMB8GA1UdIwQY MBaAFDgUtkjdV0ICXD3aXqpmSR/9suXZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0JTMlNOMVhRZ0pjUGRwZXFtWkpIXzJ5NWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8xMmRmMmQtOTRmMS00ZDEwLTk0YTQt MWY4MzY4ODAxZmRjLzEvT0JTMlNOMVhRZ0pjUGRwZXFtWkpIXzJ5NWRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8xMmRmMmQtOTRmMS00ZDEwLTk0YTQtMWY4MzY4ODAxZmRj LzEvT0JTMlNOMVhRZ0pjUGRwZXFtWkpIXzJ5NWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQetUwcus Brm6ehEirIT/izJTun+bqsSlOHSU2ANwTgOpIDTOZG1ozKdb03LQMNwycWKi2qo7 WRnX9fU/kUmTpFVuC4gcgXkn2gkLKiI2OQUVuIDs4U731U8UvDstsqgkboi8W3y4 r4QbOmCeNdDZK0pfK2/eLSybbuOEywrOIbrD6S/9/8INHiGWHfrojxUeZiDl8KjK N7uDhWdcA2VG4iq1KUhFpiD1/DihjERSqI/fl5QTzsIzgtHkd2LFvZ1HP3zZs1D4 S6VplDjuWPY9/VMK858Q2pFVMiT5b9sGkL9uwIW9jrQ0i7x+l0VjeVsjzRckZPQF LPLufYQ43np1Fw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:05 2025 by rpki-client