This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft File: OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft (raw, json) Hash identifier: j0IQgIjDyO4/MXqckodGJKIOyYAvqpwrc7QrOsWV0QQ= Subject key identifier: E3:2E:64:A2:49:C4:C3:9B:80:86:28:F8:55:59:44:1F:B8:84:09:29 Authority key identifier: 38:12:03:33:7B:0C:D0:6F:CF:C0:45:58:8F:09:7C:BC:24:15:3A:75 Certificate issuer: /CN=381203337b0cd06fcfc045588f097cbc24153a75 Certificate serial: 019AF352C39432F779DE532C037F0697EEA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBIDM3sM0G_PwEVYjwl8vCQVOnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft Manifest number: 0462 Signing time: Sat 06 Dec 2025 11:01:18 +0000 Manifest this update: Sat 06 Dec 2025 11:01:18 +0000 Manifest next update: Sun 07 Dec 2025 11:01:18 +0000 Files and hashes: 1: OBIDM3sM0G_PwEVYjwl8vCQVOnU.crl (hash: B9Gtnxh4rVsA18y/0ccH7T/Ekcv1dI+dTXDkdSScjU0=) 2: e6qgc4D0LObiBDkG-JYeFJ0X1R8.roa (hash: HGLblEw2HtaEUIxL5jALfeyy40mvJ9+sofWltk0ijmU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft rsync://rpki.ripe.net/repository/DEFAULT/OBIDM3sM0G_PwEVYjwl8vCQVOnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:c3:94:32:f7:79:de:53:2c:03:7f:06:97:ee:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=381203337b0cd06fcfc045588f097cbc24153a75 Validity Not Before: Dec 6 11:01:18 2025 GMT Not After : Dec 7 11:01:18 2025 GMT Subject: CN=e32e64a249c4c39b808628f85559441fb8840929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:04:11:60:61:1e:26:2e:72:65:7d:87:96:f3: 17:2b:ce:8a:8c:d4:4b:be:0f:ac:ac:14:9b:7f:71: d2:a5:4c:6b:4d:45:76:fa:f2:a8:d0:b2:52:5c:7c: 36:01:9b:0a:cf:0f:ae:92:43:44:4b:f4:21:d5:09: 16:97:e2:71:94:1b:d5:89:bd:50:b4:6b:12:ca:fa: 61:3c:40:48:ab:5c:16:49:44:e5:56:41:05:0c:b8: 79:c8:4e:67:b7:d6:b1:aa:ef:f0:1a:24:f8:f6:71: 2a:fa:40:60:71:da:24:50:e2:64:df:8c:83:fa:0f: 35:43:34:4f:94:9e:fd:23:37:95:49:fe:e8:36:30: e9:8c:66:b0:ee:62:66:d9:26:e1:e8:b8:17:6c:66: fe:14:a7:a5:26:42:d4:b7:43:c0:99:0c:5f:d3:07: 7b:4a:18:7c:be:e8:5e:cc:d4:db:82:06:d1:42:57: 55:0c:06:f1:71:04:56:55:96:d9:15:0c:b4:fc:cd: cc:56:86:b0:ae:90:d3:c5:ba:d2:25:82:57:fc:ae: c4:32:b4:02:7b:18:d3:57:ca:dc:79:ae:cc:72:6d: 7a:a6:da:c4:a9:7a:10:76:41:69:d9:1c:17:13:85: 58:06:95:73:81:bb:fc:cb:c5:7d:1b:5a:d9:ea:ee: 40:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:2E:64:A2:49:C4:C3:9B:80:86:28:F8:55:59:44:1F:B8:84:09:29 X509v3 Authority Key Identifier: keyid:38:12:03:33:7B:0C:D0:6F:CF:C0:45:58:8F:09:7C:BC:24:15:3A:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBIDM3sM0G_PwEVYjwl8vCQVOnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:e9:83:bd:3e:7f:d5:18:36:94:17:b0:a6:63:32:f2:86:13: 84:ee:b3:e6:e2:e2:65:87:8b:61:d9:3f:98:04:b4:54:f1:2d: 25:2f:5e:de:3c:11:56:ed:12:59:f6:50:3d:36:6b:04:da:9f: c2:ed:53:4f:c3:4b:87:05:e0:3e:bf:ff:28:2f:f4:a8:9a:44: e1:f8:bd:24:50:e1:a4:9c:f4:7a:b4:43:4b:5d:e8:b0:2f:85: 95:46:34:58:e6:f7:3e:28:4d:f8:04:e4:9b:b8:89:01:1c:bd: 91:ee:dc:89:14:09:89:6a:d4:84:83:da:ea:33:31:d5:fb:38: b4:57:af:3b:f7:d2:ab:8f:26:40:9b:c2:b9:ac:7f:49:0e:c4: 02:29:7a:1d:24:f3:e6:4f:be:dd:8b:ab:5e:c9:a6:ba:b7:c0: c3:c1:cc:f7:7a:ac:fb:57:2c:39:df:1d:b1:a1:94:f3:1b:f0: ca:a5:8a:c4:ad:bc:4f:7c:9d:2c:bd:94:4c:d9:eb:6f:50:d9: c7:36:60:49:36:1d:41:5b:a5:78:7b:b4:13:a7:ea:df:93:62: 7f:d5:eb:0f:0d:e1:d2:dd:63:d8:85:2d:7f:f5:bd:e3:90:df: c9:cf:89:67:c8:5e:8e:1d:ea:3b:7c:68:83:74:67:9f:bf:d4: 83:d0:09:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUsOUMvd53lMsA38Gl+6nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MTIwMzMzN2IwY2QwNmZjZmMwNDU1ODhmMDk3Y2JjMjQx NTNhNzUwHhcNMjUxMjA2MTEwMTE4WhcNMjUxMjA3MTEwMTE4WjAzMTEwLwYDVQQD EyhlMzJlNjRhMjQ5YzRjMzliODA4NjI4Zjg1NTU5NDQxZmI4ODQwOTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwQRYGEeJi5yZX2HlvMXK86KjNRL vg+srBSbf3HSpUxrTUV2+vKo0LJSXHw2AZsKzw+ukkNES/Qh1QkWl+JxlBvVib1Q tGsSyvphPEBIq1wWSUTlVkEFDLh5yE5nt9axqu/wGiT49nEq+kBgcdokUOJk34yD +g81QzRPlJ79IzeVSf7oNjDpjGaw7mJm2Sbh6LgXbGb+FKelJkLUt0PAmQxf0wd7 Shh8vuhezNTbggbRQldVDAbxcQRWVZbZFQy0/M3MVoawrpDTxbrSJYJX/K7EMrQC exjTV8rcea7Mcm16ptrEqXoQdkFp2RwXE4VYBpVzgbv8y8V9G1rZ6u5AVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOMuZKJJxMObgIYo+FVZRB+4hAkpMB8GA1UdIwQY MBaAFDgSAzN7DNBvz8BFWI8JfLwkFTp1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0JJRE0zc00wR19Qd0VWWWp3bDh2Q1FWT25VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi80Y2Y1YWQtYTZjYS00NGZmLTlkMTgt YzVjNjRiMTM0MjFkLzEvT0JJRE0zc00wR19Qd0VWWWp3bDh2Q1FWT25VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi80Y2Y1YWQtYTZjYS00NGZmLTlkMTgtYzVjNjRiMTM0MjFk LzEvT0JJRE0zc00wR19Qd0VWWWp3bDh2Q1FWT25VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMumDvT5/ 1Rg2lBewpmMy8oYThO6z5uLiZYeLYdk/mAS0VPEtJS9e3jwRVu0SWfZQPTZrBNqf wu1TT8NLhwXgPr//KC/0qJpE4fi9JFDhpJz0erRDS13osC+FlUY0WOb3PihN+ATk m7iJARy9ke7ciRQJiWrUhIPa6jMx1fs4tFevO/fSq48mQJvCuax/SQ7EAil6HSTz 5k++3YurXsmmurfAw8HM93qs+1csOd8dsaGU8xvwyqWKxK28T3ydLL2UTNnrb1DZ xzZgSTYdQVuleHu0E6fq35Nif9XrDw3h0t1j2IUtf/W945Dfyc+JZ8hejh3qO3xo g3Rnn7/Ug9AJMQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:48:59 2025 by rpki-client