This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft File: ObCMosZLpzX0sUUhbdFNmfCCnw8.mft (raw, json) Hash identifier: zjXL9vDMexWvF8jiVIjg9VcLZRkWGu0vEpj03yLQ/vo= Subject key identifier: E7:66:E7:33:58:8A:37:EB:9E:18:A0:EE:1C:F2:E5:85:6E:34:97:42 Authority key identifier: 39:B0:8C:A2:C6:4B:A7:35:F4:B1:45:21:6D:D1:4D:99:F0:82:9F:0F Certificate issuer: /CN=39b08ca2c64ba735f4b145216dd14d99f0829f0f Certificate serial: 019AF2E450AB84065ABBE071D2C04FE07DBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft Manifest number: B2 Signing time: Sat 06 Dec 2025 09:00:40 +0000 Manifest this update: Sat 06 Dec 2025 09:00:40 +0000 Manifest next update: Sun 07 Dec 2025 09:00:40 +0000 Files and hashes: 1: 1xRN2ISB9yDhR3Q54HcBc-sUzRM.roa (hash: ggo342L8QjroxZeBPHXxlyJmrWPYU4LhAqkE4B3nRK4=) 2: ObCMosZLpzX0sUUhbdFNmfCCnw8.crl (hash: p/xNRl3yKh2ARgMsqrCHgVLiCi+4HUJbUTi6DuOPQyw=) 3: tnM9DnrSRmOo18qNgvvkTy18Wls.roa (hash: a6GY2FMx4xs8RMENf2iVpRjn282lRrR2VnauLywusWI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:50:ab:84:06:5a:bb:e0:71:d2:c0:4f:e0:7d:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39b08ca2c64ba735f4b145216dd14d99f0829f0f Validity Not Before: Dec 6 09:00:40 2025 GMT Not After : Dec 7 09:00:40 2025 GMT Subject: CN=e766e733588a37eb9e18a0ee1cf2e5856e349742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:67:52:51:86:d1:9f:e5:8f:8c:24:fd:a6:d8: 62:ca:03:d5:ab:d8:7c:68:d7:0a:d8:7b:85:2b:36: ae:50:1c:ce:b2:dc:1f:16:c5:e7:aa:00:17:a9:c1: cf:2d:6a:22:50:2a:89:be:01:b3:d3:2b:ae:8e:36: df:18:36:19:e7:6f:28:75:f0:fc:b7:59:2b:a4:70: 9b:1a:04:5a:82:62:6a:e0:ef:46:9d:f5:3f:99:8a: ef:34:f5:c8:53:57:64:6b:71:a2:e6:0c:22:77:2a: 30:cf:bb:5d:1e:72:e9:60:03:ad:6f:9d:c2:73:32: 25:35:7c:85:e6:1d:db:90:3f:62:ab:93:7d:a2:8b: 6a:cb:66:4a:45:ec:2a:27:58:d0:b0:11:46:a5:27: b9:ec:00:95:0d:2c:e4:74:7a:30:2c:20:4e:33:cc: 4c:89:f0:7e:7e:3e:0e:80:b8:4a:7a:93:95:3e:8d: 85:5a:93:35:03:93:bb:ec:6f:68:31:ec:fa:c5:ca: 40:d7:8e:16:97:b8:b9:c8:1a:8b:f7:8b:75:02:54: d1:eb:2b:5c:bc:bb:e1:00:17:a4:8c:0e:aa:9b:c0: f9:1b:75:d9:86:e0:ca:68:2a:71:3a:98:11:f8:ba: ee:e0:9e:b3:f4:23:21:92:4d:59:3f:18:03:f7:4f: 9d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:66:E7:33:58:8A:37:EB:9E:18:A0:EE:1C:F2:E5:85:6E:34:97:42 X509v3 Authority Key Identifier: keyid:39:B0:8C:A2:C6:4B:A7:35:F4:B1:45:21:6D:D1:4D:99:F0:82:9F:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:d6:d7:fa:91:ed:83:4a:52:c8:9e:1a:e6:54:e0:74:f6:95: de:ce:37:cd:1e:62:e0:65:35:20:5c:91:4b:09:e4:16:e7:ab: 75:b4:c7:c4:ce:0d:6d:37:c7:6f:55:c1:6c:8a:2f:4a:b1:33: d4:2c:27:d5:4d:d1:7e:bb:9d:da:7d:c2:75:e3:53:6a:f5:8f: ef:de:80:bc:64:f7:ef:e6:d4:51:fd:3a:21:bc:a0:da:06:55: 91:d0:0c:70:81:39:98:04:9f:5c:08:71:16:ee:22:40:e4:09: 04:d6:51:89:5d:c0:cd:f8:20:04:4c:45:c9:1f:73:69:0f:49: 72:d0:d9:7a:d2:2d:a4:e0:77:1f:c2:55:05:be:9e:3a:cb:ea: dd:a0:f6:09:d2:b2:d5:bb:df:f4:65:44:77:cf:d2:53:e1:55: de:c7:bc:19:10:b8:2d:16:1d:4c:75:c2:6d:ce:2b:6b:67:f7: d4:5c:81:06:73:4f:22:d9:a7:62:83:69:23:ca:9c:33:72:2d: f5:60:6d:d3:be:98:92:9e:5a:33:f6:e1:02:c6:ee:77:53:f0: c9:4f:41:83:ae:67:ff:17:8f:28:b9:de:38:eb:b7:79:f1:ef: 62:b2:94:41:a6:6a:f7:f9:c8:53:4c:9a:7a:d0:60:5b:00:be: 52:41:93:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5FCrhAZau+Bx0sBP4H26MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5YjA4Y2EyYzY0YmE3MzVmNGIxNDUyMTZkZDE0ZDk5ZjA4 MjlmMGYwHhcNMjUxMjA2MDkwMDQwWhcNMjUxMjA3MDkwMDQwWjAzMTEwLwYDVQQD EyhlNzY2ZTczMzU4OGEzN2ViOWUxOGEwZWUxY2YyZTU4NTZlMzQ5NzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32dSUYbRn+WPjCT9pthiygPVq9h8 aNcK2HuFKzauUBzOstwfFsXnqgAXqcHPLWoiUCqJvgGz0yuujjbfGDYZ528odfD8 t1krpHCbGgRagmJq4O9GnfU/mYrvNPXIU1dka3Gi5gwidyowz7tdHnLpYAOtb53C czIlNXyF5h3bkD9iq5N9ootqy2ZKRewqJ1jQsBFGpSe57ACVDSzkdHowLCBOM8xM ifB+fj4OgLhKepOVPo2FWpM1A5O77G9oMez6xcpA144Wl7i5yBqL94t1AlTR6ytc vLvhABekjA6qm8D5G3XZhuDKaCpxOpgR+Lru4J6z9CMhkk1ZPxgD90+d7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOdm5zNYijfrnhig7hzy5YVuNJdCMB8GA1UdIwQY MBaAFDmwjKLGS6c19LFFIW3RTZnwgp8PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2JDTW9zWkxwelgwc1VVaGJkRk5tZkNDbnc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hYzAwYjctZGE0Mi00NDY0LWJiYzUt MzQxNjA0NGUzNThlLzEvT2JDTW9zWkxwelgwc1VVaGJkRk5tZkNDbnc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9hYzAwYjctZGE0Mi00NDY0LWJiYzUtMzQxNjA0NGUzNThl LzEvT2JDTW9zWkxwelgwc1VVaGJkRk5tZkNDbnc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAftbX+pHt g0pSyJ4a5lTgdPaV3s43zR5i4GU1IFyRSwnkFuerdbTHxM4NbTfHb1XBbIovSrEz 1Cwn1U3Rfrud2n3CdeNTavWP796AvGT37+bUUf06Ibyg2gZVkdAMcIE5mASfXAhx Fu4iQOQJBNZRiV3AzfggBExFyR9zaQ9JctDZetItpOB3H8JVBb6eOsvq3aD2CdKy 1bvf9GVEd8/SU+FV3se8GRC4LRYdTHXCbc4ra2f31FyBBnNPItmnYoNpI8qcM3It 9WBt076Ykp5aM/bhAsbud1PwyU9Bg65n/xePKLneOOu3efHvYrKUQaZq9/nIU0ya etBgWwC+UkGTBA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:41:33 2025 by rpki-client