This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft File: oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft (raw, json) Hash identifier: Z6CYj+gre/P7eMYKZefz0nOw5VbIjCFCL72naSq1Hek= Subject key identifier: 77:E1:69:8E:BD:8F:AF:74:DF:C3:6A:EA:16:FB:BE:BE:AA:95:59:86 Authority key identifier: A0:11:A0:2E:92:9C:43:F0:19:9C:83:26:30:2E:24:89:9C:4A:41:51 Certificate issuer: /CN=a011a02e929c43f0199c8326302e24899c4a4151 Certificate serial: 019AF49BB649F31AB9C43CC1859CC3680944 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft Manifest number: 14CD Signing time: Sat 06 Dec 2025 17:00:36 +0000 Manifest this update: Sat 06 Dec 2025 17:00:36 +0000 Manifest next update: Sun 07 Dec 2025 17:00:36 +0000 Files and hashes: 1: ZgCbU_j-D8W_yz4NxjG1uIsvyRs.roa (hash: XLCyo6svOneJBnox9Jy1GVfURxAN14ccdkNtugIRAH8=) 2: oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl (hash: 8rmJAEO6RrRoscoVpdDUMQRXPchIj9l+e+/W7JBtTl0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:b6:49:f3:1a:b9:c4:3c:c1:85:9c:c3:68:09:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a011a02e929c43f0199c8326302e24899c4a4151 Validity Not Before: Dec 6 17:00:36 2025 GMT Not After : Dec 7 17:00:36 2025 GMT Subject: CN=77e1698ebd8faf74dfc36aea16fbbebeaa955986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:db:39:4f:8b:69:ef:63:b9:c5:63:bc:29:d8: a5:30:62:fe:3a:34:5d:8d:f3:04:ac:3a:ab:7b:3f: c9:79:35:31:a1:4a:ad:4c:26:60:78:19:38:2a:e8: 0a:13:5d:a5:af:3b:5d:d2:e6:30:ec:f7:9c:81:4f: 54:18:1b:f3:73:a2:a5:cb:60:e3:b4:52:59:bc:27: 16:9f:e8:8c:88:8a:4a:60:ff:14:f1:d5:cf:69:22: 8a:a0:65:11:1d:31:91:2d:51:ba:ce:85:a0:fa:cb: 7c:22:c5:a4:53:85:67:e2:a4:a8:d4:59:61:77:64: f3:5d:82:71:f2:df:91:05:ca:35:ac:b1:5b:b9:11: 8e:a1:d6:8d:25:e8:e0:75:42:45:49:7e:54:7f:5d: 2d:47:cd:bb:8d:6b:db:68:19:3c:6c:64:44:64:fb: 29:a4:8f:2b:c4:38:75:1e:8c:c9:65:ea:be:26:7d: 7a:05:c3:bd:c6:96:30:7c:7f:da:7a:41:7e:23:0a: c2:38:e1:43:58:69:8c:dd:92:ab:81:a9:cf:42:40: 9e:f1:5f:2e:89:c8:22:78:d7:dd:49:7c:5b:59:6b: 91:b3:5c:27:a9:66:b2:00:0e:41:b7:e0:c7:53:fa: c2:c3:16:bf:b4:e5:5c:14:19:e1:ed:39:0a:f7:be: e5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:E1:69:8E:BD:8F:AF:74:DF:C3:6A:EA:16:FB:BE:BE:AA:95:59:86 X509v3 Authority Key Identifier: keyid:A0:11:A0:2E:92:9C:43:F0:19:9C:83:26:30:2E:24:89:9C:4A:41:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:82:ca:e3:27:2c:1a:b6:f8:d1:2e:94:2f:d0:4c:b5:4a:9f: 16:09:92:3b:20:7f:a1:13:30:3f:58:58:64:b3:11:de:e4:52: 1c:55:86:e0:d5:6d:b9:bc:b6:9b:22:35:bf:b7:fc:41:b0:09: 22:c9:b2:0f:fb:ed:98:9e:39:5a:67:78:40:7b:8a:97:1a:bd: 11:9a:36:46:7e:85:5b:f4:fa:8f:87:5f:12:a5:4a:7b:c2:03: 1d:fd:67:4d:d6:15:0b:47:ac:53:51:ff:29:eb:62:e8:31:d2: 01:54:23:22:b5:c0:26:a3:28:88:08:b5:bc:40:70:c4:96:1d: 99:36:d0:c4:9b:e9:fd:f7:0e:da:77:59:d0:17:a7:a0:1b:25: 80:67:fd:9a:91:4e:62:5f:32:7e:83:bd:0e:a4:0d:55:e5:99: 81:e4:de:45:b1:2e:cd:96:4d:69:da:f5:f3:be:a2:5e:f3:79: 38:8d:68:c4:6d:17:f0:47:6d:42:cd:cb:e4:22:77:66:62:9c: a1:70:ba:f4:f2:ed:d0:3b:5c:5a:ce:95:c6:7b:2a:bf:3b:cf: 54:a1:76:dd:56:a9:5f:67:bd:2b:92:22:56:e5:59:a5:ad:9c: e3:7f:aa:b0:35:c8:f9:f5:bf:42:99:3b:69:8b:58:59:2a:9c: 52:a8:bb:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m7ZJ8xq5xDzBhZzDaAlEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwMTFhMDJlOTI5YzQzZjAxOTljODMyNjMwMmUyNDg5OWM0 YTQxNTEwHhcNMjUxMjA2MTcwMDM2WhcNMjUxMjA3MTcwMDM2WjAzMTEwLwYDVQQD Eyg3N2UxNjk4ZWJkOGZhZjc0ZGZjMzZhZWExNmZiYmViZWFhOTU1OTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNs5T4tp72O5xWO8KdilMGL+OjRd jfMErDqrez/JeTUxoUqtTCZgeBk4KugKE12lrztd0uYw7PecgU9UGBvzc6Kly2Dj tFJZvCcWn+iMiIpKYP8U8dXPaSKKoGURHTGRLVG6zoWg+st8IsWkU4Vn4qSo1Flh d2TzXYJx8t+RBco1rLFbuRGOodaNJejgdUJFSX5Uf10tR827jWvbaBk8bGREZPsp pI8rxDh1HozJZeq+Jn16BcO9xpYwfH/aekF+IwrCOOFDWGmM3ZKrganPQkCe8V8u icgieNfdSXxbWWuRs1wnqWayAA5Bt+DHU/rCwxa/tOVcFBnh7TkK977ljwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHfhaY69j69038Nq6hb7vr6qlVmGMB8GA1UdIwQY MBaAFKARoC6SnEPwGZyDJjAuJImcSkFRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0JHZ0xwS2NRX0FabklNbU1DNGtpWnhLUVZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mOTdkN2UtODA3OC00Y2VlLWFmNzYt OWY2ZDBiZmQyMDU4LzEvb0JHZ0xwS2NRX0FabklNbU1DNGtpWnhLUVZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9mOTdkN2UtODA3OC00Y2VlLWFmNzYtOWY2ZDBiZmQyMDU4 LzEvb0JHZ0xwS2NRX0FabklNbU1DNGtpWnhLUVZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArILK4ycs Grb40S6UL9BMtUqfFgmSOyB/oRMwP1hYZLMR3uRSHFWG4NVtuby2myI1v7f8QbAJ IsmyD/vtmJ45Wmd4QHuKlxq9EZo2Rn6FW/T6j4dfEqVKe8IDHf1nTdYVC0esU1H/ Keti6DHSAVQjIrXAJqMoiAi1vEBwxJYdmTbQxJvp/fcO2ndZ0BenoBslgGf9mpFO Yl8yfoO9DqQNVeWZgeTeRbEuzZZNadr1876iXvN5OI1oxG0X8EdtQs3L5CJ3ZmKc oXC69PLt0DtcWs6VxnsqvzvPVKF23VapX2e9K5IiVuVZpa2c43+qsDXI+fW/Qpk7 aYtYWSqcUqi70A== -----END CERTIFICATE-----Generated at Sun Dec 7 00:53:14 2025 by rpki-client