This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft File: OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft (raw, json) Hash identifier: IgIcqfsjpmT7sErIGOSeQJNv0ifS67pScm60uDwi310= Subject key identifier: D2:CC:9B:D4:A4:C9:11:91:8A:CD:3B:E8:A6:C3:B0:7D:46:9E:09:12 Authority key identifier: 38:12:03:33:7B:0C:D0:6F:CF:C0:45:58:8F:09:7C:BC:24:15:3A:75 Certificate issuer: /CN=381203337b0cd06fcfc045588f097cbc24153a75 Certificate serial: 019B3CB4E194FA0B9789C9FB53CAC8322395 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBIDM3sM0G_PwEVYjwl8vCQVOnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft Manifest number: 0488 Signing time: Sat 20 Dec 2025 17:00:45 +0000 Manifest this update: Sat 20 Dec 2025 17:00:45 +0000 Manifest next update: Sun 21 Dec 2025 17:00:45 +0000 Files and hashes: 1: OBIDM3sM0G_PwEVYjwl8vCQVOnU.crl (hash: z8SlVL1k7UAanK0Dop30ayeVqhnY8xmfcTxA00+G/fI=) 2: e6qgc4D0LObiBDkG-JYeFJ0X1R8.roa (hash: HGLblEw2HtaEUIxL5jALfeyy40mvJ9+sofWltk0ijmU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft rsync://rpki.ripe.net/repository/DEFAULT/OBIDM3sM0G_PwEVYjwl8vCQVOnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:e1:94:fa:0b:97:89:c9:fb:53:ca:c8:32:23:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=381203337b0cd06fcfc045588f097cbc24153a75 Validity Not Before: Dec 20 17:00:45 2025 GMT Not After : Dec 21 17:00:45 2025 GMT Subject: CN=d2cc9bd4a4c911918acd3be8a6c3b07d469e0912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6a:8c:fb:64:5f:91:f5:40:9a:db:8b:9e:26: 0a:8e:7b:5e:52:20:41:95:5a:43:03:f9:21:41:62: 7a:41:d9:65:07:ca:58:dc:c6:0c:68:9c:0e:d6:c2: 7d:f8:50:58:99:75:92:81:2d:26:c9:47:3d:40:fc: 03:36:eb:8a:1d:33:b7:45:8f:59:0e:ff:0e:5d:e6: 6b:e5:b0:4d:34:fe:c1:4c:29:05:80:98:2a:64:b1: 57:37:06:a8:85:c0:b9:c6:45:b9:90:30:a3:48:3d: 70:a4:3f:65:4d:dc:1d:74:66:d1:f2:28:58:b1:71: 9e:8b:2e:53:8e:4b:7f:80:d6:a4:11:56:73:4c:c0: ff:d5:43:35:d4:d8:8b:14:2e:08:e4:74:41:bd:c3: bb:0b:19:d4:29:8b:f1:36:1d:dd:13:2f:4e:5b:aa: 1a:82:87:99:de:13:03:b4:71:c9:e1:68:c4:5e:6a: a6:23:9d:4b:09:1a:e7:21:09:58:db:e8:dc:50:65: ef:e9:68:5e:4c:e4:c7:b9:f0:cd:56:43:3f:2f:f2: 87:6f:77:59:92:c1:bd:5f:9b:f5:35:65:b7:bd:51: b5:b1:dd:6e:4b:a9:d9:a4:40:0f:86:7f:44:01:16: a2:b1:2f:02:c9:35:ea:74:67:69:29:32:a4:34:2b: 95:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:CC:9B:D4:A4:C9:11:91:8A:CD:3B:E8:A6:C3:B0:7D:46:9E:09:12 X509v3 Authority Key Identifier: keyid:38:12:03:33:7B:0C:D0:6F:CF:C0:45:58:8F:09:7C:BC:24:15:3A:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBIDM3sM0G_PwEVYjwl8vCQVOnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:19:7a:fe:bf:52:0f:26:44:51:d6:1b:59:2e:0c:28:a4:c9: e2:c4:a4:28:77:87:42:8e:f7:e1:b3:b4:01:c5:e9:a1:b6:77: e3:fe:fd:e3:ec:2f:9b:1d:91:34:d8:0c:ee:7f:c8:ac:9a:5a: 8e:f9:79:58:c8:32:88:32:92:e8:2d:19:c5:42:13:aa:08:53: 2b:ba:2e:b0:03:1a:54:68:25:aa:69:f1:3a:a8:c0:27:61:5e: 9a:40:f4:04:98:ff:e0:fe:43:5d:14:79:5b:03:52:05:bf:77: 45:b4:a9:50:9e:81:da:18:57:2b:9b:3f:e0:2c:fc:5a:09:17: 19:01:f4:e5:51:85:ce:92:84:4c:4d:d1:a9:21:67:ab:85:f1: e0:d2:70:13:30:b1:4f:9a:69:62:4d:0d:d7:a6:46:18:5b:7a: 26:c3:36:2c:b6:dd:70:d9:7e:64:55:22:92:cc:a7:dd:9c:e4: 7b:2f:b9:b9:3d:a3:31:16:13:87:46:39:72:24:41:b6:e5:ca: 8f:e4:e3:33:51:59:96:6d:17:9f:c0:3a:7e:06:73:f0:da:6e: 0a:bd:7e:e3:1f:99:7e:5c:10:7d:84:d4:24:5c:a6:f3:e3:d8: 34:4e:bd:dc:ab:8a:03:71:ce:85:81:ea:2a:df:57:5f:64:5a: 50:5a:33:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tOGU+guXicn7U8rIMiOVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MTIwMzMzN2IwY2QwNmZjZmMwNDU1ODhmMDk3Y2JjMjQx NTNhNzUwHhcNMjUxMjIwMTcwMDQ1WhcNMjUxMjIxMTcwMDQ1WjAzMTEwLwYDVQQD EyhkMmNjOWJkNGE0YzkxMTkxOGFjZDNiZThhNmMzYjA3ZDQ2OWUwOTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmqM+2RfkfVAmtuLniYKjnteUiBB lVpDA/khQWJ6QdllB8pY3MYMaJwO1sJ9+FBYmXWSgS0myUc9QPwDNuuKHTO3RY9Z Dv8OXeZr5bBNNP7BTCkFgJgqZLFXNwaohcC5xkW5kDCjSD1wpD9lTdwddGbR8ihY sXGeiy5Tjkt/gNakEVZzTMD/1UM11NiLFC4I5HRBvcO7CxnUKYvxNh3dEy9OW6oa goeZ3hMDtHHJ4WjEXmqmI51LCRrnIQlY2+jcUGXv6WheTOTHufDNVkM/L/KHb3dZ ksG9X5v1NWW3vVG1sd1uS6nZpEAPhn9EARaisS8CyTXqdGdpKTKkNCuVBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNLMm9SkyRGRis076KbDsH1GngkSMB8GA1UdIwQY MBaAFDgSAzN7DNBvz8BFWI8JfLwkFTp1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0JJRE0zc00wR19Qd0VWWWp3bDh2Q1FWT25VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi80Y2Y1YWQtYTZjYS00NGZmLTlkMTgt YzVjNjRiMTM0MjFkLzEvT0JJRE0zc00wR19Qd0VWWWp3bDh2Q1FWT25VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi80Y2Y1YWQtYTZjYS00NGZmLTlkMTgtYzVjNjRiMTM0MjFk LzEvT0JJRE0zc00wR19Qd0VWWWp3bDh2Q1FWT25VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkBl6/r9S DyZEUdYbWS4MKKTJ4sSkKHeHQo734bO0AcXpobZ34/794+wvmx2RNNgM7n/IrJpa jvl5WMgyiDKS6C0ZxUITqghTK7ousAMaVGglqmnxOqjAJ2FemkD0BJj/4P5DXRR5 WwNSBb93RbSpUJ6B2hhXK5s/4Cz8WgkXGQH05VGFzpKETE3RqSFnq4Xx4NJwEzCx T5ppYk0N16ZGGFt6JsM2LLbdcNl+ZFUiksyn3Zzkey+5uT2jMRYTh0Y5ciRBtuXK j+TjM1FZlm0Xn8A6fgZz8NpuCr1+4x+ZflwQfYTUJFym8+PYNE693KuKA3HOhYHq Kt9XX2RaUFozcQ== -----END CERTIFICATE-----Generated at Sat Dec 20 18:56:24 2025 by rpki-client