This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft File: oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft (raw, json) Hash identifier: Fo/haOL7ympfXLnuMXS0XOq3VgGVTGmGm43OD4PjV88= Subject key identifier: 41:C5:16:D8:76:11:B1:62:97:4B:43:C8:5F:24:A9:EA:50:B3:F6:1E Authority key identifier: A0:10:12:EC:84:55:00:71:8C:AB:76:C9:DD:0A:F0:10:89:0D:E2:6D Certificate issuer: /CN=a01012ec845500718cab76c9dd0af010890de26d Certificate serial: 019AF2765308002F8258CAFF1C2568BF06DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft Manifest number: 1103 Signing time: Sat 06 Dec 2025 07:00:31 +0000 Manifest this update: Sat 06 Dec 2025 07:00:31 +0000 Manifest next update: Sun 07 Dec 2025 07:00:31 +0000 Files and hashes: 1: 94JdYbCitrO6Jgv_ISBvhyruOI0.roa (hash: ALw/2LB5laoxpSR4lEunBO8y3yvQ4uuSEUEx3sv689w=) 2: oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl (hash: b+DVGLmZYvtj7xXHnseQQuaYbwFAzZNI4ovx/hT42+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:53:08:00:2f:82:58:ca:ff:1c:25:68:bf:06:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a01012ec845500718cab76c9dd0af010890de26d Validity Not Before: Dec 6 07:00:31 2025 GMT Not After : Dec 7 07:00:31 2025 GMT Subject: CN=41c516d87611b162974b43c85f24a9ea50b3f61e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3e:1d:1c:1a:ad:5f:3f:2d:11:21:81:90:e2: f0:df:c1:28:80:c8:37:b3:31:68:f5:07:f9:d6:c3: 70:72:99:4d:e7:91:71:32:25:cd:ae:2d:3a:ba:90: f9:6e:59:b3:76:f1:70:34:63:8f:9f:24:82:43:90: f5:a3:20:a2:17:1b:96:5d:b1:1a:df:99:f5:7d:8d: d7:a2:6f:91:8a:bd:5b:7a:74:fe:ee:8d:e4:b4:e1: e9:9a:af:16:57:78:44:ec:c6:f9:de:9a:7c:ab:63: 66:2f:61:53:af:2b:d7:65:28:a5:21:7c:de:52:20: 5e:bc:e9:eb:e7:c1:fe:41:9a:27:63:b9:d7:d3:89: 49:b9:14:ef:c0:7f:0d:f0:20:5a:81:b3:2b:48:fe: 26:e3:cf:c8:60:db:75:7a:6a:85:27:92:36:09:71: b7:f6:49:c3:42:cb:6a:da:b6:92:24:59:cd:1b:49: d7:a8:c5:fc:d0:2c:51:2d:58:13:d7:10:14:a2:b2: fe:6a:b0:e6:a2:32:16:10:06:ad:df:87:4a:8b:9b: 4e:52:df:41:b8:01:f4:e3:4a:f9:b2:fe:ed:eb:e8: 4a:74:cc:1f:af:b2:db:43:9d:63:a7:69:c3:3a:84: a2:25:0c:57:de:21:68:9a:50:8b:6e:8d:3a:c2:33: e4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C5:16:D8:76:11:B1:62:97:4B:43:C8:5F:24:A9:EA:50:B3:F6:1E X509v3 Authority Key Identifier: keyid:A0:10:12:EC:84:55:00:71:8C:AB:76:C9:DD:0A:F0:10:89:0D:E2:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:43:4a:8a:18:91:02:a7:4a:21:8e:a5:eb:a9:97:92:bf:d0: fa:2b:e1:ec:03:92:a8:9f:63:d9:28:3e:f7:5b:2d:c2:31:ff: 40:d7:ea:9a:63:31:bf:d1:30:67:5d:b0:ad:d4:df:27:25:d2: 28:69:17:da:90:5e:3f:c8:54:91:79:ba:db:c6:1f:ab:d2:60: 8f:d8:71:57:38:17:2a:97:c2:70:00:0f:13:07:59:c6:e0:25: ba:07:29:b3:5c:a0:2b:92:2b:72:3a:bb:08:61:4a:f5:03:fa: 84:f4:23:70:1c:8c:31:fb:b9:8f:7d:47:89:8c:27:44:5a:92: 9e:9a:bc:b5:d0:16:a8:e3:06:1b:f6:45:f7:0a:78:ff:6b:0a: 39:9f:e0:7d:9c:43:20:75:36:11:9d:49:a1:7d:0e:9d:d4:09: c9:f3:58:8f:36:d0:87:8c:c6:64:94:fc:d0:72:ae:48:d3:c6: 3c:25:52:be:7d:92:0e:0f:c8:43:c7:87:51:5a:3d:41:c9:57: 5c:1e:ee:12:18:0d:d4:79:32:e3:31:fd:21:79:fa:1b:ae:ab: e1:54:47:bb:31:bc:82:8c:99:8a:cf:6c:bd:5f:13:71:dd:1f: 20:bd:d5:3c:70:f4:6e:0d:c2:c1:81:ae:e1:a0:31:d1:d8:78: 5d:c7:24:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydlMIAC+CWMr/HCVovwbaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwMTAxMmVjODQ1NTAwNzE4Y2FiNzZjOWRkMGFmMDEwODkw ZGUyNmQwHhcNMjUxMjA2MDcwMDMxWhcNMjUxMjA3MDcwMDMxWjAzMTEwLwYDVQQD Eyg0MWM1MTZkODc2MTFiMTYyOTc0YjQzYzg1ZjI0YTllYTUwYjNmNjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvj4dHBqtXz8tESGBkOLw38EogMg3 szFo9Qf51sNwcplN55FxMiXNri06upD5blmzdvFwNGOPnySCQ5D1oyCiFxuWXbEa 35n1fY3Xom+Rir1benT+7o3ktOHpmq8WV3hE7Mb53pp8q2NmL2FTryvXZSilIXze UiBevOnr58H+QZonY7nX04lJuRTvwH8N8CBagbMrSP4m48/IYNt1emqFJ5I2CXG3 9knDQstq2raSJFnNG0nXqMX80CxRLVgT1xAUorL+arDmojIWEAat34dKi5tOUt9B uAH040r5sv7t6+hKdMwfr7LbQ51jp2nDOoSiJQxX3iFomlCLbo06wjPk1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEHFFth2EbFil0tDyF8kqepQs/YeMB8GA1UdIwQY MBaAFKAQEuyEVQBxjKt2yd0K8BCJDeJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0JBUzdJUlZBSEdNcTNiSjNRcndFSWtONG0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS83YjMwOGMtNzBjZC00ZjI0LWI2MTAt N2FiYTU2OTY1OGQ1LzEvb0JBUzdJUlZBSEdNcTNiSjNRcndFSWtONG0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS83YjMwOGMtNzBjZC00ZjI0LWI2MTAtN2FiYTU2OTY1OGQ1 LzEvb0JBUzdJUlZBSEdNcTNiSjNRcndFSWtONG0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaENKihiR AqdKIY6l66mXkr/Q+ivh7AOSqJ9j2Sg+91stwjH/QNfqmmMxv9EwZ12wrdTfJyXS KGkX2pBeP8hUkXm628Yfq9Jgj9hxVzgXKpfCcAAPEwdZxuAlugcps1ygK5Ircjq7 CGFK9QP6hPQjcByMMfu5j31HiYwnRFqSnpq8tdAWqOMGG/ZF9wp4/2sKOZ/gfZxD IHU2EZ1JoX0OndQJyfNYjzbQh4zGZJT80HKuSNPGPCVSvn2SDg/IQ8eHUVo9QclX XB7uEhgN1Hky4zH9IXn6G66r4VRHuzG8goyZis9svV8Tcd0fIL3VPHD0bg3CwYGu 4aAx0dh4Xcckpg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:21 2025 by rpki-client