This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft File: OBbhmySn6M_xifq6wohSzYdIo4A.mft (raw, json) Hash identifier: RYVv/ML9aLvItNfVJlhluEX5p/t9p0Y69vBgRCtj5Dg= Subject key identifier: D7:1B:BE:D5:FF:3B:46:28:86:17:47:05:D6:32:C1:DD:AA:DE:FC:8D Authority key identifier: 38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80 Certificate issuer: /CN=3816e19b24a7e8cff189fabac28852cd8748a380 Certificate serial: 019B35D6DBF7D4C86563419CF24B83AEAF23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 09:00:31 +0000 Manifest this update: Fri 19 Dec 2025 09:00:31 +0000 Manifest next update: Sat 20 Dec 2025 09:00:31 +0000 Files and hashes: 1: 9S8GYL_yFgy6SNOCWbKCBCKwxZQ.roa (hash: lKTcm+yAWil2FIyk6dqKrToacWvPZRMmQqI4XBQAqo0=) 2: OBbhmySn6M_xifq6wohSzYdIo4A.crl (hash: GG5U1JJfqQ10FlQB2VvCpCGZlA3hbFYb5ueZPtB4178=) 3: eTebT2XGsz3TR6P2Y8Fzv_Rs33U.roa (hash: 8CvMQ0zbnR8EYLyVhO1PKSoAxhchZeehbyPRq5i/WLw=) 4: vGJfHVLZfMnAGA9tz-k5fjxGNZg.roa (hash: Y+O1z7Za7CP/+yHIIzznuHMKNtcJb361AC63q0+gtog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d6:db:f7:d4:c8:65:63:41:9c:f2:4b:83:ae:af:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3816e19b24a7e8cff189fabac28852cd8748a380 Validity Not Before: Dec 19 09:00:31 2025 GMT Not After : Dec 20 09:00:31 2025 GMT Subject: CN=d71bbed5ff3b462886174705d632c1ddaadefc8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:af:22:a9:b0:8a:f6:71:07:af:f0:85:e5:31: 23:e1:41:d6:fa:2e:7e:76:8b:02:2b:57:87:ea:7d: 57:b5:81:b3:28:3c:3c:8f:23:f2:ae:b1:b2:21:cb: 03:05:92:24:4a:ae:08:74:90:66:37:30:dd:eb:44: 28:f6:df:12:b8:5f:8b:25:4c:1a:1e:fc:a6:e2:5c: 22:46:c6:3c:3a:b8:2f:5d:04:92:63:41:c0:a5:e1: c9:37:25:0b:12:77:aa:f9:93:2e:e0:24:7e:01:e7: 78:e8:f2:13:d1:d3:e3:85:b4:92:72:2c:06:93:6c: 3c:bd:6b:f1:fa:56:a9:d2:95:2f:4c:c3:26:d5:73: a2:d7:2f:16:9f:3e:0e:74:b9:07:aa:91:53:a0:7a: 77:8a:09:53:2b:34:b7:68:07:02:a0:a2:12:cd:5c: ed:48:f7:a2:8d:5c:7a:38:c3:e2:88:35:7f:e6:66: 46:db:71:de:38:65:c7:c4:3d:a3:ea:18:6c:5a:18: da:06:12:18:3b:0a:88:46:03:17:ca:ea:08:17:ec: 81:44:68:40:8a:05:89:a8:47:18:88:e1:ae:f8:32: b4:5b:31:9f:3d:09:de:ce:95:03:66:0e:5e:46:76: a5:42:cf:af:36:66:9b:d4:8e:50:75:57:c4:5e:10: 53:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:1B:BE:D5:FF:3B:46:28:86:17:47:05:D6:32:C1:DD:AA:DE:FC:8D X509v3 Authority Key Identifier: keyid:38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:95:67:9d:72:e4:d6:15:9a:9e:e3:12:7f:0d:ee:05:90:ea: ef:0e:9d:eb:27:b0:5e:75:21:96:cd:87:c4:58:dc:59:dd:6e: 01:be:0f:4e:93:62:13:3c:cc:33:7e:aa:3a:d4:3f:9c:6f:22: 42:81:97:dd:c8:e6:a3:55:39:61:89:76:55:db:47:8e:9e:82: cb:19:30:c0:db:4c:52:f4:6b:b5:9e:4e:0c:16:bf:73:6f:e9: f6:57:fb:04:79:d5:52:de:53:1b:06:8a:03:a1:4f:d6:59:42: 1c:7f:9d:d2:39:82:b9:7b:49:7a:c6:77:49:f2:8b:a5:cf:9b: 2c:62:b6:a3:8b:65:b7:3d:84:e3:60:07:30:99:f0:bd:05:b6: 50:58:c7:b2:c4:f3:50:0c:6d:11:c4:9d:af:e6:94:33:7b:a8: 6d:a6:84:8f:cc:ed:e0:0a:0a:77:16:33:a5:34:cf:12:16:35: c1:6d:c3:27:f2:1f:67:05:8d:5d:1e:c0:0a:41:37:13:7f:a8: 84:39:97:c8:a9:4c:75:bc:3c:3a:de:38:04:d1:fc:2a:b1:56: 6b:8a:da:fe:c3:a4:31:e9:f0:e0:c2:82:c1:05:b9:4d:21:e3: 07:ec:80:a4:41:fd:21:6c:01:6a:1b:9e:ff:c6:c1:8c:83:54: fa:6d:cf:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs11tv31MhlY0Gc8kuDrq8jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MTZlMTliMjRhN2U4Y2ZmMTg5ZmFiYWMyODg1MmNkODc0 OGEzODAwHhcNMjUxMjE5MDkwMDMxWhcNMjUxMjIwMDkwMDMxWjAzMTEwLwYDVQQD EyhkNzFiYmVkNWZmM2I0NjI4ODYxNzQ3MDVkNjMyYzFkZGFhZGVmYzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5a8iqbCK9nEHr/CF5TEj4UHW+i5+ dosCK1eH6n1XtYGzKDw8jyPyrrGyIcsDBZIkSq4IdJBmNzDd60Qo9t8SuF+LJUwa Hvym4lwiRsY8OrgvXQSSY0HApeHJNyULEneq+ZMu4CR+Aed46PIT0dPjhbSSciwG k2w8vWvx+lap0pUvTMMm1XOi1y8Wnz4OdLkHqpFToHp3iglTKzS3aAcCoKISzVzt SPeijVx6OMPiiDV/5mZG23HeOGXHxD2j6hhsWhjaBhIYOwqIRgMXyuoIF+yBRGhA igWJqEcYiOGu+DK0WzGfPQnezpUDZg5eRnalQs+vNmab1I5QdVfEXhBTowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNcbvtX/O0YohhdHBdYywd2q3vyNMB8GA1UdIwQY MBaAFDgW4Zskp+jP8Yn6usKIUs2HSKOAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0JiaG15U242TV94aWZxNndvaFN6WWRJbzRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9kNjEyNzUtZTAwYS00YmZiLWJlOGEt MTZiMzZkMDgwMWU5LzEvT0JiaG15U242TV94aWZxNndvaFN6WWRJbzRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9kNjEyNzUtZTAwYS00YmZiLWJlOGEtMTZiMzZkMDgwMWU5 LzEvT0JiaG15U242TV94aWZxNndvaFN6WWRJbzRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIJVnnXLk 1hWanuMSfw3uBZDq7w6d6yewXnUhls2HxFjcWd1uAb4PTpNiEzzMM36qOtQ/nG8i QoGX3cjmo1U5YYl2VdtHjp6CyxkwwNtMUvRrtZ5ODBa/c2/p9lf7BHnVUt5TGwaK A6FP1llCHH+d0jmCuXtJesZ3SfKLpc+bLGK2o4tltz2E42AHMJnwvQW2UFjHssTz UAxtEcSdr+aUM3uobaaEj8zt4AoKdxYzpTTPEhY1wW3DJ/IfZwWNXR7ACkE3E3+o hDmXyKlMdbw8Ot44BNH8KrFWa4ra/sOkMenw4MKCwQW5TSHjB+yApEH9IWwBahue /8bBjINU+m3PFQ== -----END CERTIFICATE-----Generated at Fri Dec 19 13:54:33 2025 by rpki-client