This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft File: obgXVrYRDyp1SVx0yCDg5zTuimw.mft (raw, json) Hash identifier: pmUfobAuk2YwUV7RbnBCeMdhCanjeqlqvHyeOxigWi4= Subject key identifier: CC:70:AA:74:AD:41:5A:48:09:AA:00:2D:49:05:A6:9F:88:7D:1E:5C Authority key identifier: A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C Certificate issuer: /CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c Certificate serial: 019AF1D25EEE3B750D44348BBF795CF3744E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft Manifest number: 0C41 Signing time: Sat 06 Dec 2025 04:01:27 +0000 Manifest this update: Sat 06 Dec 2025 04:01:27 +0000 Manifest next update: Sun 07 Dec 2025 04:01:27 +0000 Files and hashes: 1: XuoB2Xg2V8sDLR0FcXE9_KgeaNE.roa (hash: 8weZHHb2/AwELkcsnpwE6+GAIsY98yWhXTvCdqaPCb0=) 2: obgXVrYRDyp1SVx0yCDg5zTuimw.crl (hash: tTGk21TIfMpg1WlOZ2067Iv7VdDMTDlqn24W8+8G01A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:5e:ee:3b:75:0d:44:34:8b:bf:79:5c:f3:74:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c Validity Not Before: Dec 6 04:01:27 2025 GMT Not After : Dec 7 04:01:27 2025 GMT Subject: CN=cc70aa74ad415a4809aa002d4905a69f887d1e5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8c:73:45:e6:94:30:96:63:78:8f:37:fc:04: b0:fa:0a:22:63:fc:f4:4f:08:52:84:96:fd:ff:02: 15:ab:2f:8f:c8:c2:c1:e2:1b:cb:ee:cb:4f:c0:5d: e7:b2:7f:80:f0:28:90:c7:e1:11:81:8e:07:ad:d5: 7d:43:4f:3b:3a:94:37:ac:1f:92:51:91:e7:97:4f: f2:a7:16:89:25:d5:ee:fd:d7:4d:d0:fb:0b:42:6a: 8c:a2:d3:ea:36:42:0f:28:3c:0a:ba:b9:c9:c0:ee: 8d:6b:48:6f:7f:d8:4c:40:f9:28:29:ad:54:76:0c: 6d:b1:d3:82:f2:57:19:e5:46:dc:d1:ca:b9:df:3a: 97:66:40:c0:20:1c:ef:48:bc:3a:09:3a:c6:e8:ea: 54:70:0e:bd:ef:73:88:74:bb:90:ee:2f:76:a1:4f: 66:69:77:93:48:9c:78:db:b4:d9:51:11:6b:e6:a9: b4:3d:d5:a3:59:be:65:56:13:4c:b5:72:8b:0a:e9: cf:9f:81:00:36:b2:07:75:84:77:ca:f4:c6:c1:d9: 2a:24:e8:d2:c9:90:88:33:93:5e:09:84:b4:7e:28: ae:3d:01:c5:a0:c1:b7:51:46:b1:b3:24:25:40:b4: cf:48:60:17:40:57:d8:ad:40:b1:16:b9:81:8c:85: 40:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:70:AA:74:AD:41:5A:48:09:AA:00:2D:49:05:A6:9F:88:7D:1E:5C X509v3 Authority Key Identifier: keyid:A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:b3:17:83:91:f8:ca:d3:eb:1b:91:76:f2:16:dc:93:b4:d0: b9:ec:c2:9f:53:f1:73:3d:c0:24:e5:41:31:13:ff:f9:47:f9: fd:e6:7a:13:92:a6:41:98:56:c5:9b:f1:ea:3d:f9:ef:b1:aa: 23:59:b6:73:13:55:eb:cf:9e:4b:78:86:7e:65:fe:ff:99:c5: d3:64:55:54:04:6b:1d:0f:a0:c4:df:f6:a0:a1:ef:11:8b:f3: f4:6c:3a:4f:05:0c:3c:7a:e0:da:15:43:85:49:8b:c5:8d:83: ad:5c:80:41:2b:65:96:4b:2f:09:a8:47:00:9b:24:d9:88:b4: 93:b4:e4:61:3e:71:9c:4e:ff:b9:a3:1d:43:6a:aa:0d:11:1a: 40:95:13:c4:bc:c6:e6:c4:ac:10:8c:be:e1:cb:d1:ba:15:bf: 0c:71:e0:1c:15:30:86:b6:4c:84:3f:0b:54:f0:ad:bf:6c:ec: 57:7a:c3:81:6e:a4:a8:37:7f:4d:e8:67:d3:7f:e8:2a:6a:8a: 9c:a8:08:23:e4:2e:cc:14:15:4c:b2:a8:30:23:d6:64:3f:9d: 05:ed:b4:14:39:ff:92:36:9d:65:a6:87:b5:99:62:14:60:ca: 3e:26:35:69:96:86:48:65:08:f8:ea:a9:9e:89:c6:10:43:d7: 8b:9e:0b:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0l7uO3UNRDSLv3lc83ROMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExYjgxNzU2YjYxMTBmMmE3NTQ5NWM3NGM4MjBlMGU3MzRl ZThhNmMwHhcNMjUxMjA2MDQwMTI3WhcNMjUxMjA3MDQwMTI3WjAzMTEwLwYDVQQD EyhjYzcwYWE3NGFkNDE1YTQ4MDlhYTAwMmQ0OTA1YTY5Zjg4N2QxZTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIxzReaUMJZjeI83/ASw+goiY/z0 TwhShJb9/wIVqy+PyMLB4hvL7stPwF3nsn+A8CiQx+ERgY4HrdV9Q087OpQ3rB+S UZHnl0/ypxaJJdXu/ddN0PsLQmqMotPqNkIPKDwKurnJwO6Na0hvf9hMQPkoKa1U dgxtsdOC8lcZ5Ubc0cq53zqXZkDAIBzvSLw6CTrG6OpUcA6973OIdLuQ7i92oU9m aXeTSJx427TZURFr5qm0PdWjWb5lVhNMtXKLCunPn4EANrIHdYR3yvTGwdkqJOjS yZCIM5NeCYS0fiiuPQHFoMG3UUaxsyQlQLTPSGAXQFfYrUCxFrmBjIVA0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMxwqnStQVpICaoALUkFpp+IfR5cMB8GA1UdIwQY MBaAFKG4F1a2EQ8qdUlcdMgg4Oc07opsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2JnWFZyWVJEeXAxU1Z4MHlDRGc1elR1aW13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wODE3Y2ItNmRkMi00Zjc1LThiYjUt YWJjY2EyYjQ0ZTlmLzEvb2JnWFZyWVJEeXAxU1Z4MHlDRGc1elR1aW13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wODE3Y2ItNmRkMi00Zjc1LThiYjUtYWJjY2EyYjQ0ZTlm LzEvb2JnWFZyWVJEeXAxU1Z4MHlDRGc1elR1aW13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQbMXg5H4 ytPrG5F28hbck7TQuezCn1Pxcz3AJOVBMRP/+Uf5/eZ6E5KmQZhWxZvx6j3577Gq I1m2cxNV68+eS3iGfmX+/5nF02RVVARrHQ+gxN/2oKHvEYvz9Gw6TwUMPHrg2hVD hUmLxY2DrVyAQStllksvCahHAJsk2Yi0k7TkYT5xnE7/uaMdQ2qqDREaQJUTxLzG 5sSsEIy+4cvRuhW/DHHgHBUwhrZMhD8LVPCtv2zsV3rDgW6kqDd/Tehn03/oKmqK nKgII+QuzBQVTLKoMCPWZD+dBe20FDn/kjadZaaHtZliFGDKPiY1aZaGSGUI+Oqp nonGEEPXi54LUw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:22 2025 by rpki-client