This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft File: OBLJfb0yGVtq-pEUC1UgteDCxb4.mft (raw, json) Hash identifier: u4Xadet65Rx65EPzgSUEKOcgIGn0wZnGRrQZrH5MEQ0= Subject key identifier: 95:F6:5C:10:9D:8A:66:8D:DF:15:C7:3C:F1:99:3D:5F:08:CA:5B:AA Authority key identifier: 38:12:C9:7D:BD:32:19:5B:6A:FA:91:14:0B:55:20:B5:E0:C2:C5:BE Certificate issuer: /CN=3812c97dbd32195b6afa91140b5520b5e0c2c5be Certificate serial: 019AF12E3A63E941808996EAE04367C44802 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft Manifest number: 14A6 Signing time: Sat 06 Dec 2025 01:02:09 +0000 Manifest this update: Sat 06 Dec 2025 01:02:09 +0000 Manifest next update: Sun 07 Dec 2025 01:02:09 +0000 Files and hashes: 1: KgcCICa_-hixWZTTUELiCMTd1qc.roa (hash: aB/2vvsZVUV2pqutYR0WS2bhu7nsx+1f1yx0LZyC04o=) 2: OBLJfb0yGVtq-pEUC1UgteDCxb4.crl (hash: 8TK9phlyGSbhTVAAtG9d394krSi0fNMtQZUYJ6H1ngY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:3a:63:e9:41:80:89:96:ea:e0:43:67:c4:48:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3812c97dbd32195b6afa91140b5520b5e0c2c5be Validity Not Before: Dec 6 01:02:09 2025 GMT Not After : Dec 7 01:02:09 2025 GMT Subject: CN=95f65c109d8a668ddf15c73cf1993d5f08ca5baa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cd:6f:09:60:9b:bb:68:49:1d:a3:fe:37:13: ac:5b:3f:e1:4a:b9:fa:9b:d0:eb:c3:03:f4:a4:63: 19:7a:11:48:ee:63:7f:b9:70:45:fa:d3:29:55:b7: ae:24:1b:06:b5:c1:78:8a:3b:b1:2b:15:17:80:1a: 63:57:de:56:a0:6a:9f:40:3b:aa:e9:45:a4:30:59: 4b:6e:06:86:3d:3b:08:7a:72:09:88:7f:f1:91:63: 13:1d:70:cf:fc:9c:b4:96:7d:f0:d4:40:cb:da:ed: ba:f9:c4:e2:0b:4f:05:be:b7:e5:68:ce:91:fc:03: ff:5c:e4:a9:b7:ae:5b:43:43:d8:7b:6d:96:a2:9a: be:53:8e:cf:67:48:66:c3:1d:df:d3:9d:90:4c:66: 66:93:14:83:b5:2b:77:42:3b:62:2f:d7:f2:79:29: 24:67:ae:56:7b:dd:78:ee:14:3f:f3:45:ba:8b:1b: 5a:71:46:72:c6:44:72:db:80:fc:98:53:2b:b2:ea: 5d:04:d5:51:20:53:07:54:7d:33:72:4a:47:6d:dc: f4:a5:68:48:ec:6f:94:07:ee:63:cf:48:99:e8:07: 42:37:e2:1a:fa:b6:2f:16:a5:d7:65:f2:54:a2:56: c4:97:86:b5:e1:d6:c5:2e:04:b3:a9:b4:b3:91:7a: 34:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F6:5C:10:9D:8A:66:8D:DF:15:C7:3C:F1:99:3D:5F:08:CA:5B:AA X509v3 Authority Key Identifier: keyid:38:12:C9:7D:BD:32:19:5B:6A:FA:91:14:0B:55:20:B5:E0:C2:C5:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:84:b9:8e:16:18:fd:7b:4d:57:65:dd:a2:05:51:ff:20:25: 1b:b7:09:f1:0e:66:bb:94:32:bf:a8:c9:29:b0:b0:3d:d1:45: 86:a4:72:36:40:61:3b:d0:04:02:bb:1a:f8:b2:61:21:8b:69: 9c:45:7c:d6:54:b8:39:35:45:f9:a0:15:a7:66:23:60:43:f7: 73:dd:fb:64:c9:fb:cb:ae:67:99:0a:ca:b2:25:39:2c:6e:56: d9:6c:32:9f:e1:3d:8f:d2:19:72:37:9b:80:f6:b8:c3:78:e6: d1:f5:01:30:7d:f5:80:12:a5:5e:1e:a7:30:d3:5a:30:3e:cf: 2b:a1:1e:74:60:c4:9a:f4:70:ab:59:eb:8c:da:64:34:67:87: 47:49:93:f7:6a:c5:d5:68:dc:4d:86:00:dd:29:84:ac:c7:44: 09:d5:60:32:0f:6c:5c:b2:9b:79:86:fa:12:23:2f:f1:2c:72: c6:8d:34:e8:e3:a3:71:d2:df:4f:94:52:7f:c5:c8:8c:ce:48: 00:23:9f:49:c3:78:e3:a6:f3:b3:72:f0:d8:04:a2:1e:b0:f7: 49:73:21:b4:fc:23:ca:5d:25:8b:89:9b:0f:2d:fe:c7:93:76: 46:a4:ee:bf:80:f5:47:ef:61:e5:91:f3:ce:5f:7f:c7:c6:f6: 26:c7:4c:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLjpj6UGAiZbq4ENnxEgCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MTJjOTdkYmQzMjE5NWI2YWZhOTExNDBiNTUyMGI1ZTBj MmM1YmUwHhcNMjUxMjA2MDEwMjA5WhcNMjUxMjA3MDEwMjA5WjAzMTEwLwYDVQQD Eyg5NWY2NWMxMDlkOGE2NjhkZGYxNWM3M2NmMTk5M2Q1ZjA4Y2E1YmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs1vCWCbu2hJHaP+NxOsWz/hSrn6 m9DrwwP0pGMZehFI7mN/uXBF+tMpVbeuJBsGtcF4ijuxKxUXgBpjV95WoGqfQDuq 6UWkMFlLbgaGPTsIenIJiH/xkWMTHXDP/Jy0ln3w1EDL2u26+cTiC08FvrflaM6R /AP/XOSpt65bQ0PYe22Wopq+U47PZ0hmwx3f052QTGZmkxSDtSt3QjtiL9fyeSkk Z65We9147hQ/80W6ixtacUZyxkRy24D8mFMrsupdBNVRIFMHVH0zckpHbdz0pWhI 7G+UB+5jz0iZ6AdCN+Ia+rYvFqXXZfJUolbEl4a14dbFLgSzqbSzkXo0+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJX2XBCdimaN3xXHPPGZPV8IyluqMB8GA1UdIwQY MBaAFDgSyX29MhlbavqRFAtVILXgwsW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0JMSmZiMHlHVnRxLXBFVUMxVWd0ZURDeGI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jYjUzZmMtNzA5Ni00NTk0LTkxYjEt ZDkyNzg1YTYxMjE5LzEvT0JMSmZiMHlHVnRxLXBFVUMxVWd0ZURDeGI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9jYjUzZmMtNzA5Ni00NTk0LTkxYjEtZDkyNzg1YTYxMjE5 LzEvT0JMSmZiMHlHVnRxLXBFVUMxVWd0ZURDeGI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzoS5jhYY /XtNV2XdogVR/yAlG7cJ8Q5mu5Qyv6jJKbCwPdFFhqRyNkBhO9AEArsa+LJhIYtp nEV81lS4OTVF+aAVp2YjYEP3c937ZMn7y65nmQrKsiU5LG5W2Wwyn+E9j9IZcjeb gPa4w3jm0fUBMH31gBKlXh6nMNNaMD7PK6EedGDEmvRwq1nrjNpkNGeHR0mT92rF 1WjcTYYA3SmErMdECdVgMg9sXLKbeYb6EiMv8Sxyxo006OOjcdLfT5RSf8XIjM5I ACOfScN446bzs3Lw2ASiHrD3SXMhtPwjyl0li4mbDy3+x5N2RqTuv4D1R+9h5ZHz zl9/x8b2JsdMBw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:44 2025 by rpki-client