This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.mft File: obceuN8XHmQvGyuQQZAB8fxEXk0.mft (raw, json) Hash identifier: 0BRmSz1txeSkcTlFpZ4O7A0EtNxdY0tnCZRYeHGbTkg= Subject key identifier: A2:95:D4:E2:50:4F:F9:A8:F6:C0:51:0E:9D:BC:48:FC:6D:0F:F2:C7 Authority key identifier: A1:B7:1E:B8:DF:17:1E:64:2F:1B:2B:90:41:90:01:F1:FC:44:5E:4D Certificate issuer: /CN=a1b71eb8df171e642f1b2b90419001f1fc445e4d Certificate serial: 019AF5779ABAC6E69ED3D84FCF56CAE3C38C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obceuN8XHmQvGyuQQZAB8fxEXk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.mft Manifest number: 1029 Signing time: Sat 06 Dec 2025 21:00:47 +0000 Manifest this update: Sat 06 Dec 2025 21:00:47 +0000 Manifest next update: Sun 07 Dec 2025 21:00:47 +0000 Files and hashes: 1: cGMojoHA_ji4dpM9uQ1afR_tOH0.roa (hash: i1gFi8NRL0iquVx1S2o3krHyHH6AFrbXa2Ge0Nqnor8=) 2: obceuN8XHmQvGyuQQZAB8fxEXk0.crl (hash: KcqDn7J1ilMcGZODMq7Gs9X3nfnCkqg0TQTlhT/Icww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.mft rsync://rpki.ripe.net/repository/DEFAULT/obceuN8XHmQvGyuQQZAB8fxEXk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:9a:ba:c6:e6:9e:d3:d8:4f:cf:56:ca:e3:c3:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1b71eb8df171e642f1b2b90419001f1fc445e4d Validity Not Before: Dec 6 21:00:47 2025 GMT Not After : Dec 7 21:00:47 2025 GMT Subject: CN=a295d4e2504ff9a8f6c0510e9dbc48fc6d0ff2c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a2:1e:b5:6d:05:8e:d3:43:2b:b2:8c:08:28: ee:d4:9b:9a:b1:c4:f2:10:81:79:47:58:d0:10:c0: ca:6d:94:7e:84:8a:2d:00:02:5d:67:bd:0f:6d:eb: 37:5b:b2:e2:59:1d:c0:33:28:8d:f7:d7:58:f9:22: 56:36:30:51:67:be:e9:a7:b8:3f:19:fd:26:dc:b1: ce:55:b6:13:13:11:71:18:18:84:09:b9:c9:e8:4a: 43:3e:04:95:ae:d6:c1:a0:13:77:9b:9b:fe:45:b6: c6:64:30:8d:bb:47:d0:a4:2d:8a:8c:42:d0:22:33: 42:8d:ba:d2:8e:b9:e3:6e:94:b9:cd:b7:2e:25:f8: 97:ff:09:8a:5f:84:b0:04:67:d4:be:6b:f7:a0:52: 42:7b:49:6e:97:d0:8e:48:7b:13:1b:74:ed:e5:62: 2c:79:ab:3f:d3:33:b2:0c:7e:4b:42:5e:4e:d5:59: d0:b0:71:88:45:53:46:a0:85:c8:fa:b5:23:9a:fa: 25:26:b0:d5:f5:08:cb:7a:df:84:6b:5c:0d:d1:4a: 16:cd:66:aa:6a:e4:aa:78:92:8f:dc:a7:cc:dc:91: b4:ea:52:22:e1:21:e1:e9:f1:37:8e:70:54:cc:1f: 8a:d0:59:a2:b9:6f:8b:50:f2:d1:14:18:14:d3:61: 2d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:95:D4:E2:50:4F:F9:A8:F6:C0:51:0E:9D:BC:48:FC:6D:0F:F2:C7 X509v3 Authority Key Identifier: keyid:A1:B7:1E:B8:DF:17:1E:64:2F:1B:2B:90:41:90:01:F1:FC:44:5E:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obceuN8XHmQvGyuQQZAB8fxEXk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:7e:93:ed:7c:58:78:e4:eb:84:21:80:71:cb:12:9c:f3:9f: 47:ec:65:da:f8:a8:e6:0e:18:b3:eb:d3:ca:f6:b6:a9:49:f2: cf:7d:79:32:fa:c1:a0:e8:e3:da:bd:8f:b3:23:4b:1a:49:44: d7:5d:49:56:7f:a4:e3:5b:34:28:97:87:00:75:14:66:42:4a: 6b:f1:78:57:39:6d:0e:57:a7:5e:8f:96:09:cb:73:28:80:7c: 7b:66:61:35:e4:54:ac:80:f4:9b:a4:b6:1c:bc:76:aa:bd:44: 4c:ed:f0:23:b9:d6:0f:cc:54:37:27:87:da:53:26:9c:1f:c0: 95:8e:d2:c0:6d:0d:81:61:78:96:03:65:84:52:eb:cd:35:d2: 88:3e:2d:83:69:07:c5:ca:51:d5:81:ae:0c:54:1c:d7:cd:9b: c5:3c:97:f5:33:18:14:07:1d:18:26:85:ad:99:af:fc:de:ee: 9e:2a:e5:af:79:2e:67:f9:a3:66:36:08:e7:01:3c:ae:ac:87: d2:ab:c3:30:18:1e:13:83:39:e3:88:e1:3a:81:5d:be:6a:70: 8c:fb:14:8f:92:10:b0:57:47:a9:b7:21:ed:61:e8:d0:e4:1f: d5:7c:c7:35:49:c3:8c:df:8c:bc:5d:2e:aa:9a:0f:e2:fd:cc: b0:74:2b:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d5q6xuae09hPz1bK48OMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExYjcxZWI4ZGYxNzFlNjQyZjFiMmI5MDQxOTAwMWYxZmM0 NDVlNGQwHhcNMjUxMjA2MjEwMDQ3WhcNMjUxMjA3MjEwMDQ3WjAzMTEwLwYDVQQD EyhhMjk1ZDRlMjUwNGZmOWE4ZjZjMDUxMGU5ZGJjNDhmYzZkMGZmMmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqIetW0FjtNDK7KMCCju1JuascTy EIF5R1jQEMDKbZR+hIotAAJdZ70Pbes3W7LiWR3AMyiN99dY+SJWNjBRZ77pp7g/ Gf0m3LHOVbYTExFxGBiECbnJ6EpDPgSVrtbBoBN3m5v+RbbGZDCNu0fQpC2KjELQ IjNCjbrSjrnjbpS5zbcuJfiX/wmKX4SwBGfUvmv3oFJCe0lul9COSHsTG3Tt5WIs eas/0zOyDH5LQl5O1VnQsHGIRVNGoIXI+rUjmvolJrDV9QjLet+Ea1wN0UoWzWaq auSqeJKP3KfM3JG06lIi4SHh6fE3jnBUzB+K0FmiuW+LUPLRFBgU02EtuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKKV1OJQT/mo9sBRDp28SPxtD/LHMB8GA1UdIwQY MBaAFKG3HrjfFx5kLxsrkEGQAfH8RF5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2JjZXVOOFhIbVF2R3l1UVFaQUI4ZnhFWGswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9mMDg4YmQtNTAyOS00OTAzLTk2MTYt MDY3MmVhMDQ0MGJiLzEvb2JjZXVOOFhIbVF2R3l1UVFaQUI4ZnhFWGswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9mMDg4YmQtNTAyOS00OTAzLTk2MTYtMDY3MmVhMDQ0MGJi LzEvb2JjZXVOOFhIbVF2R3l1UVFaQUI4ZnhFWGswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACn6T7XxY eOTrhCGAccsSnPOfR+xl2vio5g4Ys+vTyva2qUnyz315MvrBoOjj2r2PsyNLGklE 111JVn+k41s0KJeHAHUUZkJKa/F4VzltDlenXo+WCctzKIB8e2ZhNeRUrID0m6S2 HLx2qr1ETO3wI7nWD8xUNyeH2lMmnB/AlY7SwG0NgWF4lgNlhFLrzTXSiD4tg2kH xcpR1YGuDFQc182bxTyX9TMYFAcdGCaFrZmv/N7unirlr3kuZ/mjZjYI5wE8rqyH 0qvDMBgeE4M544jhOoFdvmpwjPsUj5IQsFdHqbch7WHo0OQf1XzHNUnDjN+MvF0u qpoP4v3MsHQrSQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:09:54 2025 by rpki-client