This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft File: Oab1TSH1N6neJHh90Oj7pAapyt0.mft (raw, json) Hash identifier: rvdqkMCkW+roahEcSCi13PkLgcdhbF4kAjL3BquZauE= Subject key identifier: 10:CD:D0:91:9D:C4:AB:0D:95:8C:13:67:E5:B6:3B:FF:36:76:A6:A1 Authority key identifier: 39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD Certificate issuer: /CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd Certificate serial: 019B33B2807BD90E9032CFBC24227A5ED972 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 23:01:34 +0000 Manifest this update: Thu 18 Dec 2025 23:01:34 +0000 Manifest next update: Fri 19 Dec 2025 23:01:34 +0000 Files and hashes: 1: Oab1TSH1N6neJHh90Oj7pAapyt0.crl (hash: 2MXkaLxXaY0A+UwMpi1T7ms1KoUbWJWnH6EekcHk76E=) 2: pDgcJBf96EMv4X7AtJpEDVK25IM.roa (hash: Ar5Gw+93T25Y1llBxZfk1/rjZ4JNjjhQm1mEv32a/os=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 23:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b2:80:7b:d9:0e:90:32:cf:bc:24:22:7a:5e:d9:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd Validity Not Before: Dec 18 23:01:34 2025 GMT Not After : Dec 19 23:01:34 2025 GMT Subject: CN=10cdd0919dc4ab0d958c1367e5b63bff3676a6a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6a:e9:a4:65:46:8c:97:69:dc:53:11:89:b4: 16:36:05:4d:86:2d:1d:f3:24:ca:91:87:d8:83:22: 74:b4:ac:2f:26:19:28:87:f8:21:2c:ed:5a:ae:64: e3:95:73:fe:92:6c:aa:61:22:91:ce:2b:6a:24:4e: 61:e6:7c:a6:f1:5f:2b:40:b5:7c:ef:26:87:32:37: 95:79:e8:9b:b3:f4:98:4a:73:61:8f:86:e7:de:ed: 56:4d:b5:1e:6f:68:f2:57:87:23:78:24:52:33:17: aa:f1:af:8f:ac:4a:41:9f:51:b1:5d:3e:04:9b:04: d4:be:3e:a1:d4:12:5e:47:6a:d4:8b:ea:20:5c:8a: dc:1c:6c:2e:ce:7c:87:ee:67:67:8e:61:ee:e3:5d: d9:9e:b0:ab:96:e3:0a:a3:f9:6d:c6:6a:bd:e3:f4: 24:68:eb:05:71:dc:33:4f:02:b0:f2:17:5b:0c:e8: b1:9b:8e:0e:98:c7:68:97:7a:11:cb:06:a2:f2:6f: 32:69:c4:ce:24:73:5a:43:3e:12:26:04:c0:92:91: 23:b5:af:6e:ec:e2:ea:52:9a:c5:0d:1a:59:35:ce: 54:d7:f9:a1:5e:4c:12:64:d5:9d:cb:33:64:6c:e7: 62:e2:44:3b:41:e0:e9:ea:a9:36:4a:5c:ef:61:aa: 5e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:CD:D0:91:9D:C4:AB:0D:95:8C:13:67:E5:B6:3B:FF:36:76:A6:A1 X509v3 Authority Key Identifier: keyid:39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:07:24:11:25:b5:64:53:4d:9a:27:1b:21:27:e8:0b:34:82: 9c:a3:16:dc:1d:a5:77:63:4f:60:61:db:65:69:34:e6:aa:e1: 9e:bc:b4:33:a8:a7:4a:33:dd:ba:88:60:9a:9a:b9:7c:55:db: 44:0c:67:bd:29:b8:18:6e:a7:4f:8d:74:04:bb:81:a2:5f:07: ee:ff:71:69:e8:a2:ef:d7:65:6c:fc:63:03:af:cd:0b:a4:33: ee:3a:a4:2a:7c:6a:ff:41:0c:01:01:bf:5f:26:2b:b5:73:5a: c2:95:53:c3:1b:a4:c2:9a:72:a9:aa:47:e5:45:b6:2b:42:11: 95:77:9d:62:8f:90:f0:b6:8b:91:b0:ad:42:8a:04:64:20:39: e2:fe:cb:c9:2b:29:58:58:9a:89:6a:67:64:24:fd:d2:f7:1f: c1:03:93:36:da:ea:49:c8:fd:6c:8c:e6:af:b3:2c:a6:ef:c4: d0:b7:48:62:7e:c8:b6:b5:d8:94:41:2a:64:f6:bc:46:41:cc: c0:32:2b:0e:34:11:ba:01:2e:e1:29:6c:c1:0b:a7:ba:43:4b: 55:6c:79:1a:1a:29:a5:61:74:16:cc:e4:0e:7b:75:00:5c:d1: b4:dd:34:5c:ff:0f:e2:e6:50:77:32:e8:62:87:2b:de:ab:2e: 6d:27:e9:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsoB72Q6QMs+8JCJ6XtlyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5YTZmNTRkMjFmNTM3YTlkZTI0Nzg3ZGQwZThmYmE0MDZh OWNhZGQwHhcNMjUxMjE4MjMwMTM0WhcNMjUxMjE5MjMwMTM0WjAzMTEwLwYDVQQD EygxMGNkZDA5MTlkYzRhYjBkOTU4YzEzNjdlNWI2M2JmZjM2NzZhNmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWrppGVGjJdp3FMRibQWNgVNhi0d 8yTKkYfYgyJ0tKwvJhkoh/ghLO1armTjlXP+kmyqYSKRzitqJE5h5nym8V8rQLV8 7yaHMjeVeeibs/SYSnNhj4bn3u1WTbUeb2jyV4cjeCRSMxeq8a+PrEpBn1GxXT4E mwTUvj6h1BJeR2rUi+ogXIrcHGwuznyH7mdnjmHu413ZnrCrluMKo/ltxmq94/Qk aOsFcdwzTwKw8hdbDOixm44OmMdol3oRywai8m8yacTOJHNaQz4SJgTAkpEjta9u 7OLqUprFDRpZNc5U1/mhXkwSZNWdyzNkbOdi4kQ7QeDp6qk2SlzvYape+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBDN0JGdxKsNlYwTZ+W2O/82dqahMB8GA1UdIwQY MBaAFDmm9U0h9Tep3iR4fdDo+6QGqcrdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2FiMVRTSDFONm5lSkhoOTBPajdwQWFweXQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jOThmYjUtZGM5NC00YjdkLWE5ODkt NmMyZmFiNWE0MDg1LzEvT2FiMVRTSDFONm5lSkhoOTBPajdwQWFweXQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9jOThmYjUtZGM5NC00YjdkLWE5ODktNmMyZmFiNWE0MDg1 LzEvT2FiMVRTSDFONm5lSkhoOTBPajdwQWFweXQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHAckESW1 ZFNNmicbISfoCzSCnKMW3B2ld2NPYGHbZWk05qrhnry0M6inSjPduohgmpq5fFXb RAxnvSm4GG6nT410BLuBol8H7v9xaeii79dlbPxjA6/NC6Qz7jqkKnxq/0EMAQG/ XyYrtXNawpVTwxukwppyqapH5UW2K0IRlXedYo+Q8LaLkbCtQooEZCA54v7LySsp WFiaiWpnZCT90vcfwQOTNtrqScj9bIzmr7Mspu/E0LdIYn7ItrXYlEEqZPa8RkHM wDIrDjQRugEu4SlswQunukNLVWx5GhoppWF0FszkDnt1AFzRtN00XP8P4uZQdzLo Yocr3qsubSfpIA== -----END CERTIFICATE-----Generated at Fri Dec 19 08:52:46 2025 by rpki-client