This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft File: obBHf50JosdPTEWegLcpr-6zEtQ.mft (raw, json) Hash identifier: RSiEBzNq66QIxm4IYVREKoiDP41wgHs1PeacOGBCYAg= Subject key identifier: 57:FC:17:D3:C9:1B:22:98:2C:BF:B5:11:51:CF:72:B9:38:6F:F8:31 Authority key identifier: A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4 Certificate issuer: /CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4 Certificate serial: 019AF578678662EB47558066639F02795ED2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft Manifest number: 0CFE Signing time: Sat 06 Dec 2025 21:01:39 +0000 Manifest this update: Sat 06 Dec 2025 21:01:39 +0000 Manifest next update: Sun 07 Dec 2025 21:01:39 +0000 Files and hashes: 1: 72WUZg4a8Mn3wM6qcS6lKaFMvy4.roa (hash: J12B/L+u1x8UjkZE3gEtXs8elHp+K5+c+2ncMirPn90=) 2: GvxdNTfKZ8cK6T0E1lcMYR0-Eug.roa (hash: mWN38f7I4P8OFBnEBE5XW/rXhM8WqbQ5XVGNq6kRS/Y=) 3: HoVqlvj2DjGVdZLOvKg3TFq5rLM.roa (hash: WucuWrLb+R81SwXSHnAbfiXE85yoaiYHwxSfh36VGn0=) 4: obBHf50JosdPTEWegLcpr-6zEtQ.crl (hash: yaaB6vm5c3o1o3iKc2qbLt+pvKRvIUV9p1ambkTKBE0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:67:86:62:eb:47:55:80:66:63:9f:02:79:5e:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4 Validity Not Before: Dec 6 21:01:39 2025 GMT Not After : Dec 7 21:01:39 2025 GMT Subject: CN=57fc17d3c91b22982cbfb51151cf72b9386ff831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e0:e2:c7:37:d6:63:2d:c0:82:19:56:90:1b: 6f:62:ba:65:18:44:25:76:94:42:f0:98:65:e9:31: b2:11:06:c0:1d:ef:7c:df:35:2d:d0:20:f5:09:c4: a1:87:e3:62:ad:74:21:93:af:77:ed:37:db:9f:06: d6:ff:cc:6c:cb:76:d9:9b:86:21:ae:37:a7:32:1c: e4:b3:7a:09:42:86:dd:59:49:ed:b6:7f:d4:88:ee: 33:a2:6c:a0:24:c1:62:e9:06:b8:19:af:7c:19:67: b5:b0:a9:c7:16:e2:8c:c6:45:be:1e:62:16:30:a1: fe:59:39:eb:bc:14:2f:6d:15:32:3e:09:cf:93:01: ec:15:ed:3f:4e:79:69:79:27:c2:96:63:94:1e:47: 15:02:cd:fd:7d:88:5a:9c:b0:a7:7c:12:82:04:61: 61:b5:06:49:fd:96:5a:64:b9:2d:8d:74:eb:d6:10: 34:2d:0e:7f:d2:0c:44:f1:ed:56:c7:f9:f2:97:42: 1e:fb:10:9c:8c:a1:2a:ed:d0:a7:91:13:ce:6f:9c: df:0b:9d:ad:c5:35:54:df:5f:3f:cf:ec:a4:bb:f6: c7:e3:d7:0b:74:fc:4d:43:4e:7d:25:b6:e7:62:b4: e8:7c:59:a0:cf:bc:65:9c:be:a0:f5:36:f2:4b:78: 7e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:FC:17:D3:C9:1B:22:98:2C:BF:B5:11:51:CF:72:B9:38:6F:F8:31 X509v3 Authority Key Identifier: keyid:A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:66:b1:f8:a8:3c:8d:e5:4f:12:c7:88:4e:70:8a:7a:31:88: 68:83:f7:0b:4f:56:35:eb:d5:a8:a6:56:bb:2a:37:f9:5d:a9: 7c:5f:09:0b:56:d3:af:49:50:ac:56:3a:66:4f:b4:57:03:e7: 6e:3c:ee:3a:04:cd:45:a4:81:e7:70:16:da:0a:73:5c:fa:15: 01:6b:47:0b:eb:6b:c6:a1:8c:36:45:a9:5d:b6:44:16:26:0d: 0b:47:0e:3e:20:8d:7d:7d:86:8b:8b:82:3d:cf:64:c6:b8:6e: 13:3d:1d:f1:f5:23:0d:47:aa:bc:92:c6:82:9e:e1:d8:48:4c: 62:f1:39:1a:81:bc:67:ea:6a:57:23:d0:f8:68:ac:1d:af:bf: b9:a5:3a:fc:6d:99:24:cb:b4:a7:01:67:92:c9:24:7e:03:b8: 29:a1:9c:77:b3:a5:ed:29:2b:5d:45:f5:0f:52:62:5d:a4:0b: b4:45:71:91:84:5a:4b:9e:4c:77:47:2f:84:13:90:90:4b:ea: 79:b2:8c:8a:4a:1c:37:2b:4a:91:72:68:48:52:e4:bb:25:b6: 59:59:6b:c8:c6:42:52:79:4b:cb:3a:72:f3:94:3e:f6:52:72: b6:30:f6:58:43:70:e1:aa:b5:63:73:9f:3b:7c:18:04:24:27: 32:a8:a8:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eGeGYutHVYBmY58CeV7SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExYjA0NzdmOWQwOWEyYzc0ZjRjNDU5ZTgwYjcyOWFmZWVi MzEyZDQwHhcNMjUxMjA2MjEwMTM5WhcNMjUxMjA3MjEwMTM5WjAzMTEwLwYDVQQD Eyg1N2ZjMTdkM2M5MWIyMjk4MmNiZmI1MTE1MWNmNzJiOTM4NmZmODMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuDixzfWYy3AghlWkBtvYrplGEQl dpRC8Jhl6TGyEQbAHe983zUt0CD1CcShh+NirXQhk6937TfbnwbW/8xsy3bZm4Yh rjenMhzks3oJQobdWUnttn/UiO4zomygJMFi6Qa4Ga98GWe1sKnHFuKMxkW+HmIW MKH+WTnrvBQvbRUyPgnPkwHsFe0/TnlpeSfClmOUHkcVAs39fYhanLCnfBKCBGFh tQZJ/ZZaZLktjXTr1hA0LQ5/0gxE8e1Wx/nyl0Ie+xCcjKEq7dCnkRPOb5zfC52t xTVU318/z+yku/bH49cLdPxNQ059JbbnYrTofFmgz7xlnL6g9TbyS3h+ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFf8F9PJGyKYLL+1EVHPcrk4b/gxMB8GA1UdIwQY MBaAFKGwR3+dCaLHT0xFnoC3Ka/usxLUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2JCSGY1MEpvc2RQVEVXZWdMY3ByLTZ6RXRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8yNDUxYjctOTA5MS00YTI3LWFiOTEt MzQ4ZjlmZmJkODgzLzEvb2JCSGY1MEpvc2RQVEVXZWdMY3ByLTZ6RXRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8yNDUxYjctOTA5MS00YTI3LWFiOTEtMzQ4ZjlmZmJkODgz LzEvb2JCSGY1MEpvc2RQVEVXZWdMY3ByLTZ6RXRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKmax+Kg8 jeVPEseITnCKejGIaIP3C09WNevVqKZWuyo3+V2pfF8JC1bTr0lQrFY6Zk+0VwPn bjzuOgTNRaSB53AW2gpzXPoVAWtHC+trxqGMNkWpXbZEFiYNC0cOPiCNfX2Gi4uC Pc9kxrhuEz0d8fUjDUeqvJLGgp7h2EhMYvE5GoG8Z+pqVyPQ+GisHa+/uaU6/G2Z JMu0pwFnkskkfgO4KaGcd7Ol7SkrXUX1D1JiXaQLtEVxkYRaS55Md0cvhBOQkEvq ebKMikocNytKkXJoSFLkuyW2WVlryMZCUnlLyzpy85Q+9lJytjD2WENw4aq1Y3Of O3wYBCQnMqioqg== -----END CERTIFICATE-----Generated at Sun Dec 7 03:20:06 2025 by rpki-client