This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft File: AObmXtdPBsIjqaScPqbT7uyyOFA.mft (raw, json) Hash identifier: g97GDbt1Jqepvbz49PlUGOZDkfh/mBvFAw1hHljvth0= Subject key identifier: 88:A9:2F:DC:83:DD:8E:7D:2C:C3:DA:6F:2E:FF:E4:C5:18:FC:55:57 Authority key identifier: 00:E6:E6:5E:D7:4F:06:C2:23:A9:A4:9C:3E:A6:D3:EE:EC:B2:38:50 Certificate issuer: /CN=00e6e65ed74f06c223a9a49c3ea6d3eeecb23850 Certificate serial: 019AF19AE6A1ADB29223D20ED097EE84845A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 03:00:51 +0000 Manifest this update: Sat 06 Dec 2025 03:00:51 +0000 Manifest next update: Sun 07 Dec 2025 03:00:51 +0000 Files and hashes: 1: AObmXtdPBsIjqaScPqbT7uyyOFA.crl (hash: QSmfCtbcD+P9LpOIGnh1+WjJLjmhdnqn0X1eNOk7l9E=) 2: aayHPIzZH8kuE4buX9L9ekn6vNY.roa (hash: l5K0Mav5diQmhRgoJ50XOjjqH5sf6SBC+nvBy0fzfF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:e6:a1:ad:b2:92:23:d2:0e:d0:97:ee:84:84:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00e6e65ed74f06c223a9a49c3ea6d3eeecb23850 Validity Not Before: Dec 6 03:00:51 2025 GMT Not After : Dec 7 03:00:51 2025 GMT Subject: CN=88a92fdc83dd8e7d2cc3da6f2effe4c518fc5557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4a:c5:eb:b3:d1:e7:bc:1b:c3:4b:5d:a2:7d: 32:a0:29:43:94:64:21:b3:d0:a1:54:b5:30:8d:63: 1c:07:5a:53:2e:0c:44:ff:0c:f1:57:25:e3:fa:9b: 66:85:c2:27:cb:d5:0f:3c:e1:a5:c8:d7:0b:51:a5: 50:94:e2:ae:ab:e9:1c:61:dd:6e:c4:a7:31:4e:35: 75:96:98:34:8d:cf:72:28:db:32:fd:6e:50:86:07: c9:14:b2:e6:29:8c:c4:44:7d:b9:0a:c2:21:e2:66: 50:69:e2:e2:79:f9:7b:46:86:d8:e1:42:82:27:76: ed:99:eb:bd:26:df:b7:a8:39:2f:42:e9:0d:f3:83: 39:6e:6f:40:99:39:25:a9:8a:7b:94:94:bb:7f:10: bb:45:fa:1b:99:a9:c6:0f:87:96:51:fd:3e:07:15: bf:08:2d:02:a2:b3:fc:8f:8e:5a:1c:ea:62:fe:12: 92:dd:b0:40:43:e5:60:85:75:d2:fc:c5:c3:9d:10: e4:ab:ba:51:2f:0b:bb:29:02:eb:65:dc:1d:ea:89: 73:35:c8:11:dc:b3:d2:7f:8a:5e:4a:d1:8e:93:a2: d8:07:23:29:bf:05:c6:46:0b:f6:bc:57:9e:87:9c: 22:50:5a:4b:15:c9:65:b6:d6:e2:7e:c9:29:ed:c4: 11:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A9:2F:DC:83:DD:8E:7D:2C:C3:DA:6F:2E:FF:E4:C5:18:FC:55:57 X509v3 Authority Key Identifier: keyid:00:E6:E6:5E:D7:4F:06:C2:23:A9:A4:9C:3E:A6:D3:EE:EC:B2:38:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:12:87:ce:63:7b:1e:43:d7:ef:01:5b:84:20:8e:c8:03:c0: ae:e4:23:d8:23:c6:e2:8a:79:3c:a9:69:35:b9:ff:14:fe:bb: ff:3a:2d:f6:7a:e5:0e:51:30:11:90:6e:8b:c6:2e:f5:a8:63: dc:18:11:29:c8:50:6c:e7:cb:40:45:95:56:a0:ff:79:05:ed: fa:70:ed:5e:1d:29:64:ad:82:8b:26:f9:03:ed:2f:ac:e2:7b: f5:cc:6b:57:c1:09:1c:49:7f:3e:12:31:8a:92:7d:09:36:10: fc:f6:27:7d:7e:ff:ed:89:31:c9:91:8f:03:c3:ff:0f:3f:ad: 85:d6:de:f3:94:6d:4a:a6:62:97:1f:2f:b2:1e:3d:f0:2c:35: 0e:4b:ae:bd:35:00:6e:21:0d:c2:1f:18:23:2a:59:13:59:7a: 58:09:5c:f8:ea:5b:94:1d:52:29:54:1c:f5:c8:f5:c3:13:4a: 48:36:5b:78:52:29:aa:18:52:77:49:72:e3:16:20:4e:8b:3d: 05:09:c8:1f:cb:d3:26:cf:05:38:06:06:0a:be:88:b2:28:b1: 46:38:26:70:d3:1f:77:17:15:9c:d2:4a:8e:63:30:a1:1a:77: cf:e2:eb:a7:6b:fa:a5:7a:a8:ee:dd:42:82:13:52:4c:55:a1: 75:1b:1d:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmuahrbKSI9IO0JfuhIRaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwZTZlNjVlZDc0ZjA2YzIyM2E5YTQ5YzNlYTZkM2VlZWNi MjM4NTAwHhcNMjUxMjA2MDMwMDUxWhcNMjUxMjA3MDMwMDUxWjAzMTEwLwYDVQQD Eyg4OGE5MmZkYzgzZGQ4ZTdkMmNjM2RhNmYyZWZmZTRjNTE4ZmM1NTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0krF67PR57wbw0tdon0yoClDlGQh s9ChVLUwjWMcB1pTLgxE/wzxVyXj+ptmhcIny9UPPOGlyNcLUaVQlOKuq+kcYd1u xKcxTjV1lpg0jc9yKNsy/W5QhgfJFLLmKYzERH25CsIh4mZQaeLiefl7RobY4UKC J3btmeu9Jt+3qDkvQukN84M5bm9AmTklqYp7lJS7fxC7RfobmanGD4eWUf0+BxW/ CC0CorP8j45aHOpi/hKS3bBAQ+VghXXS/MXDnRDkq7pRLwu7KQLrZdwd6olzNcgR 3LPSf4peStGOk6LYByMpvwXGRgv2vFeeh5wiUFpLFcllttbifskp7cQR4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIipL9yD3Y59LMPaby7/5MUY/FVXMB8GA1UdIwQY MBaAFADm5l7XTwbCI6mknD6m0+7ssjhQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU9ibVh0ZFBCc0lqcWFTY1BxYlQ3dXl5T0ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yNGRhNmYtNTA1My00MTRlLTkzNzAt MTZiOWVhZmViNGVhLzEvQU9ibVh0ZFBCc0lqcWFTY1BxYlQ3dXl5T0ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC8yNGRhNmYtNTA1My00MTRlLTkzNzAtMTZiOWVhZmViNGVh LzEvQU9ibVh0ZFBCc0lqcWFTY1BxYlQ3dXl5T0ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGRKHzmN7 HkPX7wFbhCCOyAPAruQj2CPG4op5PKlpNbn/FP67/zot9nrlDlEwEZBui8Yu9ahj 3BgRKchQbOfLQEWVVqD/eQXt+nDtXh0pZK2Ciyb5A+0vrOJ79cxrV8EJHEl/PhIx ipJ9CTYQ/PYnfX7/7YkxyZGPA8P/Dz+thdbe85RtSqZilx8vsh498Cw1DkuuvTUA biENwh8YIypZE1l6WAlc+OpblB1SKVQc9cj1wxNKSDZbeFIpqhhSd0ly4xYgTos9 BQnIH8vTJs8FOAYGCr6IsiixRjgmcNMfdxcVnNJKjmMwoRp3z+Lrp2v6pXqo7t1C ghNSTFWhdRsdIg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:49:13 2025 by rpki-client