This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft File: OBgMB0--WYgkxwAxlbMKpKNmFSw.mft (raw, json) Hash identifier: triYuyeCsTpkBPJuqrLBAfQwiuQyEx2p/v9/O/BP8wc= Subject key identifier: 95:70:BF:51:39:E5:4C:F2:6D:2E:D8:9A:E9:27:81:B6:7E:72:62:9F Authority key identifier: 38:18:0C:07:4F:BE:59:88:24:C7:00:31:95:B3:0A:A4:A3:66:15:2C Certificate issuer: /CN=38180c074fbe598824c7003195b30aa4a366152c Certificate serial: 019AF31B8C012778A35BB8130591814B86AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft Manifest number: 1402 Signing time: Sat 06 Dec 2025 10:01:00 +0000 Manifest this update: Sat 06 Dec 2025 10:01:00 +0000 Manifest next update: Sun 07 Dec 2025 10:01:00 +0000 Files and hashes: 1: OBgMB0--WYgkxwAxlbMKpKNmFSw.crl (hash: 1oUHI+ZOg40G+t4M+uO9RxGq0LpoYh8es2wnyD+p+I8=) 2: RgnQQrRta7gI5tMEs8KYLDUw56A.roa (hash: BgqUN0fwjyUmpN6+mMGR9pZDz7pjjDqgWhnYghe6PvM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.crl rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:8c:01:27:78:a3:5b:b8:13:05:91:81:4b:86:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38180c074fbe598824c7003195b30aa4a366152c Validity Not Before: Dec 6 10:01:00 2025 GMT Not After : Dec 7 10:01:00 2025 GMT Subject: CN=9570bf5139e54cf26d2ed89ae92781b67e72629f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ab:16:d1:8f:77:5f:ab:8b:60:00:8f:e8:a6: 99:59:d1:bc:8e:0e:cf:92:d2:99:59:ee:f2:97:d5: 11:cb:d3:99:64:c9:c7:f6:69:2e:8e:47:80:cc:0b: 5b:79:a8:27:e3:5a:86:90:1a:9f:6c:b3:53:78:cd: f0:9e:ef:a5:aa:9d:ce:2f:8e:74:26:41:d7:ee:01: ba:66:0f:e0:45:f8:fd:5e:5e:19:19:2e:c7:76:7c: b0:ff:96:ec:05:c8:5c:81:1f:6a:60:0b:f4:ba:0a: f2:1e:e9:06:a3:10:db:20:91:da:1c:bd:6d:ba:fe: 22:42:3b:20:61:5a:0f:b6:db:d4:5f:27:86:26:40: 0f:15:c1:55:ec:af:c4:5a:f2:7b:6c:42:bc:93:31: 75:30:ac:bc:e8:9d:75:65:3f:f4:5c:15:12:c1:23: f0:08:49:5b:a7:f0:da:7c:db:9d:de:3b:14:55:cf: 8a:24:b6:10:02:c5:f7:e4:9e:93:b9:62:8b:6f:b5: ee:93:02:9e:24:2f:f3:0e:85:4c:6f:10:74:80:b5: 71:8e:88:1a:67:94:9f:2d:f9:1b:6f:a3:f3:db:4a: c7:d4:eb:74:3a:8e:d5:53:ac:23:76:76:d0:7c:36: ae:fb:90:86:45:3a:27:9c:64:8b:df:f1:d5:b8:03: 37:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:70:BF:51:39:E5:4C:F2:6D:2E:D8:9A:E9:27:81:B6:7E:72:62:9F X509v3 Authority Key Identifier: keyid:38:18:0C:07:4F:BE:59:88:24:C7:00:31:95:B3:0A:A4:A3:66:15:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:40:34:29:0c:ba:a1:54:09:be:92:85:93:cb:d3:91:b0:b7: 9f:24:a5:23:f1:d5:50:37:2f:34:bf:5a:92:ae:6b:69:90:58: b0:b9:9c:87:8f:f5:0e:31:e0:d5:48:5b:14:d8:b6:65:88:5d: 0c:e5:cc:39:db:c0:fa:59:85:55:25:b9:8b:18:97:69:54:fb: 95:5c:bb:8c:47:ca:0c:64:32:69:77:04:06:cc:b6:27:43:50: c0:03:fd:c8:4a:ac:2f:72:d6:e6:69:98:e6:e6:97:4c:af:e9: 85:3b:a1:86:64:15:ef:f2:c3:98:7d:9f:a8:71:2b:e5:da:07: f1:50:fa:9d:d2:af:0b:70:f4:f9:37:f8:c1:e3:af:84:b3:73: 33:2f:f0:6d:5b:8a:34:82:0d:4f:72:2c:cb:3c:d9:e1:c6:52: 17:b9:6c:52:de:8a:e2:17:b8:ab:48:fe:5d:8c:3e:29:b1:0b: e4:33:51:e5:59:ee:30:f1:29:a9:4c:73:ca:a6:63:ae:f8:f6: 26:36:4e:1c:be:4b:2e:c9:ef:92:b2:2f:aa:2b:38:b4:f9:df: 14:60:5f:f0:c4:40:17:33:b9:57:f0:60:b8:86:31:24:71:b0: 65:9e:20:72:9a:6c:94:40:2b:b5:e3:50:cc:db:76:0f:91:dd: 75:42:fe:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG4wBJ3ijW7gTBZGBS4arMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MTgwYzA3NGZiZTU5ODgyNGM3MDAzMTk1YjMwYWE0YTM2 NjE1MmMwHhcNMjUxMjA2MTAwMTAwWhcNMjUxMjA3MTAwMTAwWjAzMTEwLwYDVQQD Eyg5NTcwYmY1MTM5ZTU0Y2YyNmQyZWQ4OWFlOTI3ODFiNjdlNzI2MjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8KsW0Y93X6uLYACP6KaZWdG8jg7P ktKZWe7yl9URy9OZZMnH9mkujkeAzAtbeagn41qGkBqfbLNTeM3wnu+lqp3OL450 JkHX7gG6Zg/gRfj9Xl4ZGS7Hdnyw/5bsBchcgR9qYAv0ugryHukGoxDbIJHaHL1t uv4iQjsgYVoPttvUXyeGJkAPFcFV7K/EWvJ7bEK8kzF1MKy86J11ZT/0XBUSwSPw CElbp/DafNud3jsUVc+KJLYQAsX35J6TuWKLb7XukwKeJC/zDoVMbxB0gLVxjoga Z5SfLfkbb6Pz20rH1Ot0Oo7VU6wjdnbQfDau+5CGRTonnGSL3/HVuAM3zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJVwv1E55UzybS7YmukngbZ+cmKfMB8GA1UdIwQY MBaAFDgYDAdPvlmIJMcAMZWzCqSjZhUsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0JnTUIwLS1XWWdreHdBeGxiTUtwS05tRlN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yMzllYzctN2QyYy00MmU1LWI0OWEt MmY5ZTkzYTY1YzA4LzEvT0JnTUIwLS1XWWdreHdBeGxiTUtwS05tRlN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yMzllYzctN2QyYy00MmU1LWI0OWEtMmY5ZTkzYTY1YzA4 LzEvT0JnTUIwLS1XWWdreHdBeGxiTUtwS05tRlN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFUA0KQy6 oVQJvpKFk8vTkbC3nySlI/HVUDcvNL9akq5raZBYsLmch4/1DjHg1UhbFNi2ZYhd DOXMOdvA+lmFVSW5ixiXaVT7lVy7jEfKDGQyaXcEBsy2J0NQwAP9yEqsL3LW5mmY 5uaXTK/phTuhhmQV7/LDmH2fqHEr5doH8VD6ndKvC3D0+Tf4weOvhLNzMy/wbVuK NIINT3IsyzzZ4cZSF7lsUt6K4he4q0j+XYw+KbEL5DNR5VnuMPEpqUxzyqZjrvj2 JjZOHL5LLsnvkrIvqis4tPnfFGBf8MRAFzO5V/BguIYxJHGwZZ4gcppslEArteNQ zNt2D5HddUL+TA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:06 2025 by rpki-client