This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft File: obOdgkR51Np7EvZcFeXEJyX1Jgs.mft (raw, json) Hash identifier: 1sM8UK6kk+L8A+ubHMbFg2XIXSWE0O4oqr57ybzAZu8= Subject key identifier: 7D:29:AD:B7:B0:17:FA:F9:E2:1E:0E:F5:E2:99:27:1C:60:7C:7B:E6 Authority key identifier: A1:B3:9D:82:44:79:D4:DA:7B:12:F6:5C:15:E5:C4:27:25:F5:26:0B Certificate issuer: /CN=a1b39d824479d4da7b12f65c15e5c42725f5260b Certificate serial: 019AF0BF55BCE4816996FA5C89F1A07870F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft Manifest number: 11F6 Signing time: Fri 05 Dec 2025 23:01:02 +0000 Manifest this update: Fri 05 Dec 2025 23:01:02 +0000 Manifest next update: Sat 06 Dec 2025 23:01:02 +0000 Files and hashes: 1: Ahr8cLoMjuhdLqjDmUtP7XZpYek.roa (hash: +5UAkntpANzuu6Eiv6TWU+2W0yxLaSEMeiDxRWb4xso=) 2: obOdgkR51Np7EvZcFeXEJyX1Jgs.crl (hash: qhFA7maXZXD7ZATTxkkhfVXuceQpdtzK2j8IChU/m0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:55:bc:e4:81:69:96:fa:5c:89:f1:a0:78:70:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1b39d824479d4da7b12f65c15e5c42725f5260b Validity Not Before: Dec 5 23:01:02 2025 GMT Not After : Dec 6 23:01:02 2025 GMT Subject: CN=7d29adb7b017faf9e21e0ef5e299271c607c7be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ee:8b:54:dc:96:69:b5:77:b8:fb:fb:82:a9: e6:5a:26:a2:71:01:6c:a3:d7:6a:da:a6:da:49:49: 74:7f:75:cc:3e:07:af:5f:5c:6c:4a:72:db:49:3d: 0a:a8:48:09:3b:92:db:62:25:7e:63:47:aa:6b:34: 75:aa:33:10:a0:ca:21:43:a2:84:a8:6c:c2:ef:1e: fc:e7:a3:f0:7f:45:31:17:36:50:34:dc:4c:0a:78: d9:4e:fa:4e:91:9e:f4:69:aa:c4:3f:e6:e3:be:c5: 92:6d:81:9f:61:01:7f:cc:00:ce:41:f7:dd:eb:0b: ac:9a:56:57:92:a5:d0:9c:cb:f8:96:9d:31:51:97: c6:0f:4d:30:3e:50:2d:a0:a1:62:51:3c:ee:a2:97: c8:e2:af:db:6e:ee:5c:a7:09:c5:41:60:3f:e4:6a: c4:1a:65:9b:fb:92:45:6a:a9:4f:a0:df:cb:f4:b4: cc:87:b8:a9:95:32:a7:2a:05:68:d8:b6:44:6e:49: 47:cd:01:3c:44:8c:cc:e4:3e:f6:89:40:c9:ce:1a: 6e:71:08:fb:2e:ae:5a:c9:16:ff:25:2a:6c:82:c1: 5b:28:94:f0:45:68:8c:70:72:c1:74:ae:d4:01:03: 4c:7f:39:42:4f:a3:81:dd:02:df:ac:c8:44:95:34: a6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:29:AD:B7:B0:17:FA:F9:E2:1E:0E:F5:E2:99:27:1C:60:7C:7B:E6 X509v3 Authority Key Identifier: keyid:A1:B3:9D:82:44:79:D4:DA:7B:12:F6:5C:15:E5:C4:27:25:F5:26:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:cf:f8:03:c1:4d:36:de:c2:cc:33:3c:2b:f7:3a:e1:f6:d1: 18:9c:e4:32:89:3b:1b:79:35:ad:e6:cf:82:b7:51:47:72:95: 6b:05:04:98:ba:be:d3:3d:f8:0b:2f:0c:fe:0f:e6:08:43:8b: 65:3d:3a:07:2a:7e:24:60:28:84:ad:83:21:7f:d7:01:58:54: 48:22:52:16:c0:16:51:8c:58:dc:02:3a:37:5e:b9:1e:29:db: ab:97:a4:b3:10:50:ab:35:d3:4d:70:21:7f:c8:00:6d:ee:73: 28:63:33:fe:f0:ec:e7:b7:02:23:a6:98:5c:1a:b7:5a:75:86: a6:7f:dd:39:3e:a4:5e:c6:29:01:a0:ef:5d:3d:78:6f:19:9e: 31:4f:49:b4:e7:48:7c:96:fb:d7:c7:81:37:10:6a:c9:70:d5: fa:9e:7e:84:31:3f:8d:6c:b9:25:18:2e:82:63:8a:b4:94:d0: 8f:3a:2f:0b:dc:26:1c:0b:db:00:0d:6b:5d:df:5f:60:46:89: f5:11:33:90:47:42:f7:75:d7:e5:96:1e:dd:62:79:c9:b1:87: fc:3a:7b:bf:76:70:0e:c6:56:17:3d:6a:9c:57:69:e0:0e:d8: bc:b9:cf:4b:93:31:61:5f:82:87:24:5e:f5:02:5c:1a:2b:d0: 86:89:5e:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv1W85IFplvpcifGgeHD3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExYjM5ZDgyNDQ3OWQ0ZGE3YjEyZjY1YzE1ZTVjNDI3MjVm NTI2MGIwHhcNMjUxMjA1MjMwMTAyWhcNMjUxMjA2MjMwMTAyWjAzMTEwLwYDVQQD Eyg3ZDI5YWRiN2IwMTdmYWY5ZTIxZTBlZjVlMjk5MjcxYzYwN2M3YmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+6LVNyWabV3uPv7gqnmWiaicQFs o9dq2qbaSUl0f3XMPgevX1xsSnLbST0KqEgJO5LbYiV+Y0eqazR1qjMQoMohQ6KE qGzC7x7856Pwf0UxFzZQNNxMCnjZTvpOkZ70aarEP+bjvsWSbYGfYQF/zADOQffd 6wusmlZXkqXQnMv4lp0xUZfGD00wPlAtoKFiUTzuopfI4q/bbu5cpwnFQWA/5GrE GmWb+5JFaqlPoN/L9LTMh7iplTKnKgVo2LZEbklHzQE8RIzM5D72iUDJzhpucQj7 Lq5ayRb/JSpsgsFbKJTwRWiMcHLBdK7UAQNMfzlCT6OB3QLfrMhElTSmSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0prbewF/r54h4O9eKZJxxgfHvmMB8GA1UdIwQY MBaAFKGznYJEedTaexL2XBXlxCcl9SYLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2JPZGdrUjUxTnA3RXZaY0ZlWEVKeVgxSmdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8xNzlmODAtODgzOC00ZDRjLWI4ZDEt MzFhOTY0ZjhhMzdmLzEvb2JPZGdrUjUxTnA3RXZaY0ZlWEVKeVgxSmdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8xNzlmODAtODgzOC00ZDRjLWI4ZDEtMzFhOTY0ZjhhMzdm LzEvb2JPZGdrUjUxTnA3RXZaY0ZlWEVKeVgxSmdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm8/4A8FN Nt7CzDM8K/c64fbRGJzkMok7G3k1rebPgrdRR3KVawUEmLq+0z34Cy8M/g/mCEOL ZT06Byp+JGAohK2DIX/XAVhUSCJSFsAWUYxY3AI6N165Hinbq5eksxBQqzXTTXAh f8gAbe5zKGMz/vDs57cCI6aYXBq3WnWGpn/dOT6kXsYpAaDvXT14bxmeMU9JtOdI fJb718eBNxBqyXDV+p5+hDE/jWy5JRgugmOKtJTQjzovC9wmHAvbAA1rXd9fYEaJ 9REzkEdC93XX5ZYe3WJ5ybGH/Dp7v3ZwDsZWFz1qnFdp4A7YvLnPS5MxYV+ChyRe 9QJcGivQholecQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:34:42 2025 by rpki-client