This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
File: 0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft (raw, json)
Hash identifier: pZiQGGek4kNuKkcFtB8HvtV9kTIy/Te7rFJ7rsQexWk=
Subject key identifier: 90:30:11:3C:A4:06:F9:42:E2:A1:D7:FD:88:E7:5F:A9:72:12:89:F8
Authority key identifier: D2:86:C3:39:AA:C8:8D:DF:33:43:0E:46:BC:9F:5E:07:EF:CD:AE:A8
Certificate issuer: /CN=d286c339aac88ddf33430e46bc9f5e07efcdaea8
Certificate serial: 019AF6F9B034C734D8EF5E4BE1643E2187EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
Manifest number: 0E76
Signing time: Sun 07 Dec 2025 04:02:29 +0000
Manifest this update: Sun 07 Dec 2025 04:02:29 +0000
Manifest next update: Mon 08 Dec 2025 04:02:29 +0000
Files and hashes: 1: 0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl (hash: Luh4dXrS4SS6elXfiytVA3reJMOLhBpKE+E3pHbBKuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 21:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f6:f9:b0:34:c7:34:d8:ef:5e:4b:e1:64:3e:21:87:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d286c339aac88ddf33430e46bc9f5e07efcdaea8
Validity
Not Before: Dec 7 04:02:29 2025 GMT
Not After : Dec 8 04:02:29 2025 GMT
Subject: CN=9030113ca406f942e2a1d7fd88e75fa9721289f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:43:a2:c6:74:5c:b5:0f:9d:4d:bb:2a:79:0f:
65:e0:67:96:89:e4:39:1e:e0:e4:ce:38:5f:2e:56:
78:80:4d:c7:f2:1b:fc:e1:12:5d:45:ea:f1:ed:76:
a2:0f:b8:42:d4:0c:76:d7:e7:f2:63:42:c1:ee:19:
1d:9a:75:d0:6e:b0:44:a0:da:6f:e9:77:e6:1a:1d:
e9:e5:5b:a7:92:4d:2c:67:44:f5:f0:a6:0f:db:6d:
e4:37:ae:20:2f:f0:50:c7:ff:67:b3:65:18:38:7b:
fb:94:4a:33:fd:eb:82:15:ac:4a:f4:db:3c:4d:7c:
30:ab:bd:78:46:97:21:e5:93:ed:e7:e4:a1:eb:a4:
40:54:da:a6:af:4d:2a:e8:55:0b:d2:e1:e8:8b:2f:
9c:3b:3d:69:61:9a:ae:c7:b2:d2:a6:5c:2e:6f:d4:
e5:93:7a:7b:d0:3f:9d:3f:96:d6:d1:54:06:bf:cb:
56:a5:3c:3d:36:72:6e:42:e5:42:0b:df:30:35:61:
b5:b8:53:26:8a:66:b0:fd:77:f7:c1:99:39:36:3b:
fc:cc:4d:71:9a:ad:b3:10:6e:a2:12:c1:c4:7e:28:
09:b0:8d:4c:51:8a:62:a7:05:b4:9b:ca:94:49:56:
06:59:2e:ca:fa:4f:db:02:24:fb:46:4e:a7:f3:d1:
9d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:30:11:3C:A4:06:F9:42:E2:A1:D7:FD:88:E7:5F:A9:72:12:89:F8
X509v3 Authority Key Identifier:
keyid:D2:86:C3:39:AA:C8:8D:DF:33:43:0E:46:BC:9F:5E:07:EF:CD:AE:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:0a:a9:64:7d:19:91:43:5d:99:32:c4:d5:76:cd:74:72:2e:
98:31:6f:04:5e:b4:2f:4a:15:f2:14:1a:d4:37:31:ca:b7:3c:
b9:b7:02:6d:08:7c:2b:07:23:8e:9f:e6:4d:4a:ab:8c:40:d7:
95:fe:8a:9c:be:cc:52:8f:f5:ff:65:d8:4a:d0:98:a8:72:52:
07:62:c8:82:13:fd:e9:1d:d2:07:48:05:01:c5:88:2f:da:f5:
d4:45:73:63:64:96:3f:56:89:a1:0e:4a:a0:5f:a7:9d:cb:f9:
13:e8:95:37:3b:89:6d:0f:b8:82:9a:f9:95:01:80:3d:e4:f2:
24:a9:b0:17:11:b6:1b:70:77:57:31:6b:f6:85:e4:26:08:df:
58:a4:4f:37:8d:d6:21:d0:bf:81:ef:ce:11:d4:a6:a2:30:25:
03:6b:25:2a:eb:da:52:ef:f4:ce:34:d0:1b:69:62:22:aa:15:
9f:f2:72:74:b3:d4:ee:96:fd:06:b3:b8:bf:15:81:21:8e:0c:
b8:19:93:00:b7:2b:f4:99:3e:1a:c3:4c:40:09:c1:f1:5b:2e:
a2:0d:20:e9:40:69:e8:fc:59:4e:d7:7c:ad:37:84:e6:26:0a:
80:53:09:85:4a:25:69:65:1f:58:49:c8:c4:55:c9:8c:31:af:
d4:23:f8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:24:37 2025 by rpki-client