This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/59907f-7e5f-4d8a-acf2-7720d82f8345/1/OBgxUK8pDQ9tJbA2E28cv2sPF8k.mft File: OBgxUK8pDQ9tJbA2E28cv2sPF8k.mft (raw, json) Hash identifier: m4cGD3Rwuvowq5HelCOxehGoDN2+mk3EMy6wTw7xfME= Subject key identifier: D2:B1:51:3E:13:61:80:3D:85:49:26:18:FA:0C:24:BA:55:41:6D:CF Authority key identifier: 38:18:31:50:AF:29:0D:0F:6D:25:B0:36:13:6F:1C:BF:6B:0F:17:C9 Certificate issuer: /CN=38183150af290d0f6d25b036136f1cbf6b0f17c9 Certificate serial: 019AF209ACD2AEDA809BEBC722975E6190DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBgxUK8pDQ9tJbA2E28cv2sPF8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/59907f-7e5f-4d8a-acf2-7720d82f8345/1/OBgxUK8pDQ9tJbA2E28cv2sPF8k.mft Manifest number: 8C Signing time: Sat 06 Dec 2025 05:01:51 +0000 Manifest this update: Sat 06 Dec 2025 05:01:51 +0000 Manifest next update: Sun 07 Dec 2025 05:01:51 +0000 Files and hashes: 1: OBgxUK8pDQ9tJbA2E28cv2sPF8k.crl (hash: SPe8t12JD9Hqyy3znMjQBA1bNNJfTg9WReLSSUToRbQ=) 2: QibeyjSv1hfxKFEaKrbqmDXpj2I.roa (hash: ifdoDGnGJbL7K4fA7Xk5/reVlWdHN5zJyJBNdlq2ay8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/59907f-7e5f-4d8a-acf2-7720d82f8345/1/OBgxUK8pDQ9tJbA2E28cv2sPF8k.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/59907f-7e5f-4d8a-acf2-7720d82f8345/1/OBgxUK8pDQ9tJbA2E28cv2sPF8k.mft rsync://rpki.ripe.net/repository/DEFAULT/OBgxUK8pDQ9tJbA2E28cv2sPF8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:ac:d2:ae:da:80:9b:eb:c7:22:97:5e:61:90:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38183150af290d0f6d25b036136f1cbf6b0f17c9 Validity Not Before: Dec 6 05:01:51 2025 GMT Not After : Dec 7 05:01:51 2025 GMT Subject: CN=d2b1513e1361803d85492618fa0c24ba55416dcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:56:6b:c2:b0:a9:13:13:c6:63:37:5e:00:2b: f4:b3:a5:ff:ed:03:fd:b6:63:f3:5e:00:8d:8a:72: 1b:89:c3:f7:58:ff:f4:a2:f3:ce:af:09:60:6c:85: 2c:cc:0e:c2:92:6e:61:26:7c:99:40:88:93:b6:a1: bc:79:29:9e:fb:7e:b8:32:c1:80:6b:94:f1:14:96: 9f:2b:94:6b:9c:93:ce:a6:b1:66:be:2a:25:ee:3d: 04:52:b6:bd:fb:1e:1c:55:8b:87:ac:e9:10:ae:1d: 85:61:e4:7f:99:37:cb:08:ea:71:1d:92:98:27:fa: ff:d4:43:9a:fb:87:20:44:d1:4a:40:9a:d4:b2:67: 89:49:b2:03:60:f7:4e:9d:33:63:31:a0:19:57:91: 0c:7d:23:b9:e0:7e:31:ab:3b:40:16:b9:a4:ba:51: 18:cc:4e:f5:3f:5f:78:06:c1:ba:15:04:1a:f3:1d: e1:1e:23:97:13:f5:8c:63:75:cd:c8:09:04:d2:83: 15:53:a0:60:53:0f:b1:57:c8:27:14:d4:64:1c:a2: 30:de:f9:8c:fa:a5:f9:d0:64:57:40:68:d7:48:c2: 41:a3:2c:ef:28:e6:5c:66:c7:87:2a:02:91:95:0c: ff:c2:97:09:b8:5b:78:21:49:1d:91:31:73:cf:5b: 9b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B1:51:3E:13:61:80:3D:85:49:26:18:FA:0C:24:BA:55:41:6D:CF X509v3 Authority Key Identifier: keyid:38:18:31:50:AF:29:0D:0F:6D:25:B0:36:13:6F:1C:BF:6B:0F:17:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBgxUK8pDQ9tJbA2E28cv2sPF8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/59907f-7e5f-4d8a-acf2-7720d82f8345/1/OBgxUK8pDQ9tJbA2E28cv2sPF8k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/59907f-7e5f-4d8a-acf2-7720d82f8345/1/OBgxUK8pDQ9tJbA2E28cv2sPF8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:fe:7b:81:9e:69:a5:cd:63:0c:09:b7:c2:32:8e:82:86:8d: 59:05:a1:8e:59:b4:38:e7:15:e2:40:70:a7:13:0c:71:a5:28: 38:ed:f4:63:e2:e8:1a:ef:55:37:db:8b:6d:87:a1:2e:04:71: 63:d2:c1:00:a3:ca:3e:aa:3a:46:6c:47:0b:21:a6:4d:4e:50: 30:91:57:a8:d2:e2:e2:7e:c2:28:1d:9e:9e:da:eb:9b:9d:88: e8:e4:54:0e:bc:a3:68:12:2a:c9:d0:4c:fc:aa:41:77:ce:08: db:f2:a9:64:85:dc:70:0a:fe:9e:d6:28:e1:af:b6:e5:df:d4: 10:29:9d:48:13:49:44:3d:29:f0:a8:c4:9b:59:7c:ed:50:eb: 9a:2c:ef:e0:1e:de:62:29:55:1f:99:00:89:f4:1e:59:39:10: 36:fd:08:fa:60:c9:67:66:dd:9a:b5:9a:64:1c:4d:19:93:29: 41:9c:f6:81:65:a1:aa:c1:38:f6:9e:12:8f:e5:43:d9:5d:05: 82:29:7c:19:2c:65:2f:87:07:46:8e:24:b9:89:34:f3:fb:e2: a8:d2:f3:5f:c3:73:1a:48:50:8a:50:d9:04:c1:dd:cb:07:bc: fe:56:d3:b0:a5:f0:91:dd:cf:4b:b4:68:42:37:21:24:7d:88: 8e:50:a0:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCazSrtqAm+vHIpdeYZDdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MTgzMTUwYWYyOTBkMGY2ZDI1YjAzNjEzNmYxY2JmNmIw ZjE3YzkwHhcNMjUxMjA2MDUwMTUxWhcNMjUxMjA3MDUwMTUxWjAzMTEwLwYDVQQD EyhkMmIxNTEzZTEzNjE4MDNkODU0OTI2MThmYTBjMjRiYTU1NDE2ZGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1ZrwrCpExPGYzdeACv0s6X/7QP9 tmPzXgCNinIbicP3WP/0ovPOrwlgbIUszA7Ckm5hJnyZQIiTtqG8eSme+364MsGA a5TxFJafK5RrnJPOprFmviol7j0EUra9+x4cVYuHrOkQrh2FYeR/mTfLCOpxHZKY J/r/1EOa+4cgRNFKQJrUsmeJSbIDYPdOnTNjMaAZV5EMfSO54H4xqztAFrmkulEY zE71P194BsG6FQQa8x3hHiOXE/WMY3XNyAkE0oMVU6BgUw+xV8gnFNRkHKIw3vmM +qX50GRXQGjXSMJBoyzvKOZcZseHKgKRlQz/wpcJuFt4IUkdkTFzz1ubzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNKxUT4TYYA9hUkmGPoMJLpVQW3PMB8GA1UdIwQY MBaAFDgYMVCvKQ0PbSWwNhNvHL9rDxfJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0JneFVLOHBEUTl0SmJBMkUyOGN2MnNQRjhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS81OTkwN2YtN2U1Zi00ZDhhLWFjZjIt NzcyMGQ4MmY4MzQ1LzEvT0JneFVLOHBEUTl0SmJBMkUyOGN2MnNQRjhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS81OTkwN2YtN2U1Zi00ZDhhLWFjZjItNzcyMGQ4MmY4MzQ1 LzEvT0JneFVLOHBEUTl0SmJBMkUyOGN2MnNQRjhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/57gZ5p pc1jDAm3wjKOgoaNWQWhjlm0OOcV4kBwpxMMcaUoOO30Y+LoGu9VN9uLbYehLgRx Y9LBAKPKPqo6RmxHCyGmTU5QMJFXqNLi4n7CKB2entrrm52I6ORUDryjaBIqydBM /KpBd84I2/KpZIXccAr+ntYo4a+25d/UECmdSBNJRD0p8KjEm1l87VDrmizv4B7e YilVH5kAifQeWTkQNv0I+mDJZ2bdmrWaZBxNGZMpQZz2gWWhqsE49p4Sj+VD2V0F gil8GSxlL4cHRo4kuYk08/viqNLzX8NzGkhQilDZBMHdywe8/lbTsKXwkd3PS7Ro QjchJH2IjlCgwg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:06:45 2025 by rpki-client