This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft File: obTdg_xezSEPT2hPtr9A-zFg2yE.mft (raw, json) Hash identifier: 6sFuEcavUjhLsUHAfsuR3tCytZmURSzSvKotXm3wvvI= Subject key identifier: 40:70:11:73:00:2F:2F:5B:BF:51:24:04:DA:5B:BE:01:F2:D9:76:CC Authority key identifier: A1:B4:DD:83:FC:5E:CD:21:0F:4F:68:4F:B6:BF:40:FB:31:60:DB:21 Certificate issuer: /CN=a1b4dd83fc5ecd210f4f684fb6bf40fb3160db21 Certificate serial: 019B4738DE6A206ADD5A0F3B1FF8D41C065F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft Manifest number: 15D4 Signing time: Mon 22 Dec 2025 18:01:07 +0000 Manifest this update: Mon 22 Dec 2025 18:01:07 +0000 Manifest next update: Tue 23 Dec 2025 18:01:07 +0000 Files and hashes: 1: 48HLzEg5hUyysvh2QdFLov5OhmU.roa (hash: bw7hBJRBr+ljNjkA7DMlIt09FqFYCknq6hOA/oTgbSY=) 2: obTdg_xezSEPT2hPtr9A-zFg2yE.crl (hash: SnZckMI8Ba8U2Ykax1Qn6Ql12HG8hLRf3GV3Te1gRiQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.crl rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:38:de:6a:20:6a:dd:5a:0f:3b:1f:f8:d4:1c:06:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1b4dd83fc5ecd210f4f684fb6bf40fb3160db21 Validity Not Before: Dec 22 18:01:07 2025 GMT Not After : Dec 23 18:01:07 2025 GMT Subject: CN=40701173002f2f5bbf512404da5bbe01f2d976cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:45:32:67:ea:d1:17:69:5c:c2:a1:ce:38:35: 98:35:95:d4:30:26:86:e7:1b:52:7b:31:5d:3a:91: 21:f3:30:73:45:8d:d8:fa:60:e8:ea:66:f3:30:87: a5:e6:1d:81:f8:bf:8f:80:d0:18:bb:74:7c:f6:e4: 8e:18:e6:7d:06:85:47:a1:a1:4f:10:e2:fc:73:50: 32:8e:b9:3a:f1:8d:8e:e1:60:91:76:99:cc:d2:94: 37:32:7e:39:06:4a:b9:01:58:d2:18:13:09:9e:fd: 86:29:6d:96:c0:8d:b1:60:45:83:30:11:31:aa:bd: d0:73:95:15:bb:7f:4a:45:5e:9a:fd:47:9d:3e:5c: be:84:a5:79:05:39:9f:76:14:fd:de:5f:a1:2f:1d: 00:61:b5:14:e0:d5:b6:48:49:79:f0:2d:22:2a:3f: 84:36:0d:ca:11:1e:8a:88:d9:db:cb:5b:04:2e:e8: 5b:f4:d8:9c:b8:17:3d:19:cb:02:66:e0:d0:20:90: a3:97:65:4c:25:d0:95:4c:d4:1b:e7:b2:bc:1b:37: 82:6d:47:1f:e3:4c:d8:8a:8d:e7:1f:0b:e8:5f:8e: 4f:da:76:79:2c:84:b6:58:38:45:cb:71:0a:01:19: f8:bb:2a:e8:d9:46:e0:dc:71:75:d7:ec:3a:f5:a0: 97:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:70:11:73:00:2F:2F:5B:BF:51:24:04:DA:5B:BE:01:F2:D9:76:CC X509v3 Authority Key Identifier: keyid:A1:B4:DD:83:FC:5E:CD:21:0F:4F:68:4F:B6:BF:40:FB:31:60:DB:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:ed:43:b4:28:29:36:fc:b4:42:ba:16:5a:4b:b9:2d:c6:23: d8:76:0f:48:7b:90:be:d8:50:c0:06:7c:bc:df:1c:29:7a:be: f5:95:4b:c5:07:38:7d:f8:70:22:78:bd:05:9e:db:93:9b:dd: 8a:fa:6e:30:31:26:78:22:2c:f3:6d:59:75:6d:d3:8b:fe:1e: d2:77:7a:7c:bc:43:62:6e:a1:8a:f4:db:7c:d0:53:89:4f:40: 77:f7:2a:9c:06:ed:28:20:c0:85:c5:6f:a4:df:5f:1b:ee:91: 3f:ab:d0:52:27:01:35:c7:f7:91:3c:40:51:78:c1:ce:ed:3e: d9:51:98:b8:56:7d:5f:38:0a:53:55:11:e5:3a:a0:fa:45:3c: b5:50:9a:5e:9f:60:42:5e:62:1d:c8:63:ab:b9:0b:04:fc:3d: 0e:bb:ce:c3:9f:d5:31:e6:a9:27:b1:e6:8a:59:26:09:b9:0a: 24:82:c1:4f:15:36:87:44:1e:28:f9:8f:e2:f2:5a:97:34:71: 78:cd:89:57:3a:41:3b:1c:c3:69:61:1f:8c:8c:ba:10:dc:ee: 83:f3:03:36:35:ae:99:0c:d6:a7:4b:6a:08:d2:35:42:fe:ea: 1e:ac:1a:48:dc:3c:2a:84:c8:bc:96:40:40:35:e3:3e:52:b8: 73:cd:65:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHON5qIGrdWg87H/jUHAZfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExYjRkZDgzZmM1ZWNkMjEwZjRmNjg0ZmI2YmY0MGZiMzE2 MGRiMjEwHhcNMjUxMjIyMTgwMTA3WhcNMjUxMjIzMTgwMTA3WjAzMTEwLwYDVQQD Eyg0MDcwMTE3MzAwMmYyZjViYmY1MTI0MDRkYTViYmUwMWYyZDk3NmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5EUyZ+rRF2lcwqHOODWYNZXUMCaG 5xtSezFdOpEh8zBzRY3Y+mDo6mbzMIel5h2B+L+PgNAYu3R89uSOGOZ9BoVHoaFP EOL8c1Ayjrk68Y2O4WCRdpnM0pQ3Mn45Bkq5AVjSGBMJnv2GKW2WwI2xYEWDMBEx qr3Qc5UVu39KRV6a/UedPly+hKV5BTmfdhT93l+hLx0AYbUU4NW2SEl58C0iKj+E Ng3KER6KiNnby1sELuhb9NicuBc9GcsCZuDQIJCjl2VMJdCVTNQb57K8GzeCbUcf 40zYio3nHwvoX45P2nZ5LIS2WDhFy3EKARn4uyro2Ubg3HF11+w69aCXOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBwEXMALy9bv1EkBNpbvgHy2XbMMB8GA1UdIwQY MBaAFKG03YP8Xs0hD09oT7a/QPsxYNshMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2JUZGdfeGV6U0VQVDJoUHRyOUEtekZnMnlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xNDZmOGEtZTA2OC00OGNhLWEzODgt ZmIxODZiOTQzMzRmLzEvb2JUZGdfeGV6U0VQVDJoUHRyOUEtekZnMnlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8xNDZmOGEtZTA2OC00OGNhLWEzODgtZmIxODZiOTQzMzRm LzEvb2JUZGdfeGV6U0VQVDJoUHRyOUEtekZnMnlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvu1DtCgp Nvy0QroWWku5LcYj2HYPSHuQvthQwAZ8vN8cKXq+9ZVLxQc4ffhwIni9BZ7bk5vd ivpuMDEmeCIs821ZdW3Ti/4e0nd6fLxDYm6hivTbfNBTiU9Ad/cqnAbtKCDAhcVv pN9fG+6RP6vQUicBNcf3kTxAUXjBzu0+2VGYuFZ9XzgKU1UR5Tqg+kU8tVCaXp9g Ql5iHchjq7kLBPw9DrvOw5/VMeapJ7HmilkmCbkKJILBTxU2h0QeKPmP4vJalzRx eM2JVzpBOxzDaWEfjIy6ENzug/MDNjWumQzWp0tqCNI1Qv7qHqwaSNw8KoTIvJZA QDXjPlK4c81l0g== -----END CERTIFICATE-----Generated at Mon Dec 22 22:22:03 2025 by rpki-client