This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft File: Obi08Elz83zGn7fCNGj5U_FJQg4.mft (raw, json) Hash identifier: 2KwVX62VH26qLbDtuei6ImcerYbJM/IJjXJJC1ju9R0= Subject key identifier: 31:52:DE:89:31:FA:CD:C2:D6:83:34:03:DE:32:F8:57:01:A5:1A:A8 Authority key identifier: 39:B8:B4:F0:49:73:F3:7C:C6:9F:B7:C2:34:68:F9:53:F1:49:42:0E Certificate issuer: /CN=39b8b4f04973f37cc69fb7c23468f953f149420e Certificate serial: 019B390FA27D40ABC986B5028014E13655B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 00:01:24 +0000 Manifest this update: Sat 20 Dec 2025 00:01:24 +0000 Manifest next update: Sun 21 Dec 2025 00:01:24 +0000 Files and hashes: 1: K5dYt7lb9gS6Y4bTS8duva31gvM.roa (hash: JfUFTyGmQsKMLzEfnb5KXENtjRP1+B6pBuw/0roQoKU=) 2: Obi08Elz83zGn7fCNGj5U_FJQg4.crl (hash: pi2mgRQmNhMxfd20p0JSCcdkzTflnDrslcLi0FC3WAE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:a2:7d:40:ab:c9:86:b5:02:80:14:e1:36:55:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39b8b4f04973f37cc69fb7c23468f953f149420e Validity Not Before: Dec 20 00:01:24 2025 GMT Not After : Dec 21 00:01:24 2025 GMT Subject: CN=3152de8931facdc2d6833403de32f85701a51aa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:80:8c:a5:8b:b4:cd:1a:ee:25:a7:dc:85:64: 07:84:81:e0:18:79:e8:a5:34:b6:57:66:10:f2:a3: 2a:fb:0d:4a:f7:72:c3:a6:96:cb:35:b9:ca:c7:c8: 1a:a5:8b:9a:fe:2a:66:f7:dd:97:ef:74:99:4e:80: 0d:46:65:e9:96:8c:1a:c0:c6:66:86:6d:04:87:d6: 93:ef:af:66:86:c4:f5:6d:34:04:6d:1c:a9:c3:d5: 16:6b:6b:06:3c:1e:52:77:6d:5b:31:67:9d:58:d8: 1d:0f:ed:78:8c:4d:3b:90:3c:f9:d7:c4:a8:aa:ba: 13:46:d6:e6:eb:08:b5:4d:43:4c:33:b8:cb:ee:fd: cf:dc:06:12:a5:9b:ad:50:26:32:61:53:9c:f4:10: 63:0f:e7:33:f5:3a:e4:3b:c9:a4:f7:e8:80:33:37: 1a:12:42:82:d6:21:65:db:26:6a:3b:d9:5e:98:00: bc:0e:d1:51:2c:23:82:21:d6:bc:28:6d:ff:0e:b6: 5d:82:a0:54:93:60:42:26:a0:96:97:cd:aa:17:ae: e1:f8:93:2b:40:99:e4:62:3f:61:84:b9:f1:d7:08: 7e:f0:ec:33:9c:c9:e2:4b:a2:6b:6f:51:64:81:21: 83:91:2c:f0:5f:81:fc:64:15:90:e3:cb:e8:90:cc: a8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:52:DE:89:31:FA:CD:C2:D6:83:34:03:DE:32:F8:57:01:A5:1A:A8 X509v3 Authority Key Identifier: keyid:39:B8:B4:F0:49:73:F3:7C:C6:9F:B7:C2:34:68:F9:53:F1:49:42:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:3a:43:9e:6a:b9:2d:4a:96:2b:12:4b:28:a6:ca:7e:08:7a: e0:48:9f:98:b2:b9:4e:3c:ba:fb:23:71:f2:af:12:66:f4:1d: 79:8a:e4:61:74:46:a6:3b:c5:c3:dd:74:80:95:43:f5:a8:36: 2f:2b:89:c1:fe:df:4b:25:39:21:c8:d3:75:72:b6:8e:98:67: 20:46:ac:2f:03:55:5c:2a:5d:cd:94:0a:b9:51:b0:e3:bc:bc: 5b:9f:62:e8:cf:5a:ad:c5:64:be:12:08:44:27:d8:b5:93:2f: de:02:55:9e:4c:59:79:94:fa:73:fd:c3:13:fd:94:af:fc:dd: 09:bb:b4:d3:43:79:c9:de:3d:09:d5:c2:ab:ba:6e:3e:6d:cf: ca:ad:64:87:ac:8b:19:9f:fa:8f:8f:e5:12:d5:51:99:33:c5: c2:f8:47:02:70:5f:7c:be:27:ea:af:51:f1:f0:04:a7:95:46: 65:41:a8:42:ef:66:5d:17:05:85:a4:f0:40:a5:a6:0d:e4:1c: a8:7f:e4:26:bb:d0:71:a2:13:7e:9c:ad:d4:77:88:9b:53:1d: fa:f3:96:f6:e1:58:00:f6:ac:72:f0:75:b7:5f:cb:c1:52:d0: f4:14:bf:ea:56:21:b9:a4:5c:45:0f:da:ff:34:db:a5:e8:5b: 87:3c:75:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D6J9QKvJhrUCgBThNlWzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5YjhiNGYwNDk3M2YzN2NjNjlmYjdjMjM0NjhmOTUzZjE0 OTQyMGUwHhcNMjUxMjIwMDAwMTI0WhcNMjUxMjIxMDAwMTI0WjAzMTEwLwYDVQQD EygzMTUyZGU4OTMxZmFjZGMyZDY4MzM0MDNkZTMyZjg1NzAxYTUxYWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4CMpYu0zRruJafchWQHhIHgGHno pTS2V2YQ8qMq+w1K93LDppbLNbnKx8gapYua/ipm992X73SZToANRmXplowawMZm hm0Eh9aT769mhsT1bTQEbRypw9UWa2sGPB5Sd21bMWedWNgdD+14jE07kDz518So qroTRtbm6wi1TUNMM7jL7v3P3AYSpZutUCYyYVOc9BBjD+cz9TrkO8mk9+iAMzca EkKC1iFl2yZqO9lemAC8DtFRLCOCIda8KG3/DrZdgqBUk2BCJqCWl82qF67h+JMr QJnkYj9hhLnx1wh+8OwznMniS6Jrb1FkgSGDkSzwX4H8ZBWQ48vokMyoYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDFS3okx+s3C1oM0A94y+FcBpRqoMB8GA1UdIwQY MBaAFDm4tPBJc/N8xp+3wjRo+VPxSUIOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2JpMDhFbHo4M3pHbjdmQ05HajVVX0ZKUWc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi84YWNjNGItZTBhMi00ZDIxLWI4NjQt OTkwMzA3ZDIwM2M4LzEvT2JpMDhFbHo4M3pHbjdmQ05HajVVX0ZKUWc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi84YWNjNGItZTBhMi00ZDIxLWI4NjQtOTkwMzA3ZDIwM2M4 LzEvT2JpMDhFbHo4M3pHbjdmQ05HajVVX0ZKUWc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIDpDnmq5 LUqWKxJLKKbKfgh64EifmLK5Tjy6+yNx8q8SZvQdeYrkYXRGpjvFw910gJVD9ag2 LyuJwf7fSyU5IcjTdXK2jphnIEasLwNVXCpdzZQKuVGw47y8W59i6M9arcVkvhII RCfYtZMv3gJVnkxZeZT6c/3DE/2Ur/zdCbu000N5yd49CdXCq7puPm3Pyq1kh6yL GZ/6j4/lEtVRmTPFwvhHAnBffL4n6q9R8fAEp5VGZUGoQu9mXRcFhaTwQKWmDeQc qH/kJrvQcaITfpyt1HeIm1Md+vOW9uFYAPascvB1t1/LwVLQ9BS/6lYhuaRcRQ/a /zTbpehbhzx1lA== -----END CERTIFICATE-----Generated at Sat Dec 20 07:39:56 2025 by rpki-client