This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft File: OBgMB0--WYgkxwAxlbMKpKNmFSw.mft (raw, json) Hash identifier: tM1NpFZjWYsAs3IgAMLtJf5qf0fk5eq98DokYe8viVw= Subject key identifier: C9:06:52:80:BB:C4:F7:F2:12:E2:7A:5B:CC:AC:2D:27:3C:8C:22:68 Authority key identifier: 38:18:0C:07:4F:BE:59:88:24:C7:00:31:95:B3:0A:A4:A3:66:15:2C Certificate issuer: /CN=38180c074fbe598824c7003195b30aa4a366152c Certificate serial: 019B5975987D015D8D2F8ABFC30F14D211A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft Manifest number: 1437 Signing time: Fri 26 Dec 2025 07:00:37 +0000 Manifest this update: Fri 26 Dec 2025 07:00:37 +0000 Manifest next update: Sat 27 Dec 2025 07:00:37 +0000 Files and hashes: 1: OBgMB0--WYgkxwAxlbMKpKNmFSw.crl (hash: pPioJS0wRkVmZcjcDl/Adf1hoF9BXtcV3iFoTAzScls=) 2: RgnQQrRta7gI5tMEs8KYLDUw56A.roa (hash: BgqUN0fwjyUmpN6+mMGR9pZDz7pjjDqgWhnYghe6PvM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.crl rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:98:7d:01:5d:8d:2f:8a:bf:c3:0f:14:d2:11:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38180c074fbe598824c7003195b30aa4a366152c Validity Not Before: Dec 26 07:00:37 2025 GMT Not After : Dec 27 07:00:37 2025 GMT Subject: CN=c9065280bbc4f7f212e27a5bccac2d273c8c2268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:dc:f3:df:5c:7e:d8:e1:94:9b:d0:98:ce:99: b3:5c:76:d1:f1:e0:40:44:0b:90:bd:68:5b:35:f6: c6:c5:ef:19:69:99:5a:49:b5:f7:af:ca:da:f3:93: dc:54:b6:68:fa:c8:7c:11:fa:b4:b9:14:0a:d4:af: e5:87:85:5d:33:b9:3a:93:f8:09:06:6d:35:c8:26: 95:37:18:31:f8:3c:64:15:38:e8:a7:b9:37:d8:df: 63:10:d0:dd:40:9b:65:24:a4:b5:c7:8e:91:3e:58: bb:26:7a:d4:ee:05:92:85:3e:6a:41:bf:68:cb:a1: 39:57:e1:37:5f:f2:4a:e7:62:39:f6:a9:56:3b:b5: 9e:9a:ed:69:98:12:4f:8b:1f:2d:cb:3f:19:06:a5: 34:6c:0d:aa:e8:06:5b:63:cc:42:bf:7b:af:02:da: eb:42:20:be:16:d3:1f:c6:75:53:2b:fd:45:5c:f1: 61:84:2c:38:0f:0e:6c:a4:41:01:9e:67:09:5c:4a: f6:ea:3e:53:89:54:33:8a:43:06:11:fa:ee:4d:b3: 3a:2e:13:2f:b1:1d:91:a1:35:eb:40:25:18:95:36: 4f:53:ff:1f:71:7f:bb:63:a5:2b:15:3e:cf:70:90: 27:4e:1b:d2:b7:30:40:25:39:0f:ed:a7:8c:02:38: b7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:06:52:80:BB:C4:F7:F2:12:E2:7A:5B:CC:AC:2D:27:3C:8C:22:68 X509v3 Authority Key Identifier: keyid:38:18:0C:07:4F:BE:59:88:24:C7:00:31:95:B3:0A:A4:A3:66:15:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:f3:4c:d5:46:84:26:a4:1e:ce:e7:60:a4:b4:aa:83:c9:d1: 77:99:d8:a6:4b:d5:86:1e:19:6d:92:d7:59:58:1d:7c:cb:45: 3d:21:e5:49:60:68:36:68:26:8e:60:f4:cf:20:e0:d3:a3:a8: aa:2e:74:b9:e7:e1:ba:ac:73:1e:8e:1a:e3:d9:f7:22:b1:7e: f9:86:12:c7:15:34:3a:39:8d:9d:8d:c3:52:1f:e0:01:cd:8d: fc:25:2f:38:82:71:d3:22:9f:a9:3c:17:78:ce:96:2d:59:82: bc:4f:61:24:95:ba:22:72:23:55:28:d8:ca:51:ca:5e:75:81: c0:00:73:d8:a7:61:e5:3a:fa:86:85:1d:37:a0:d4:85:7c:26: 3b:ea:73:93:1f:40:d3:89:a8:ef:a4:5e:3e:0a:ea:14:1f:34: d1:43:76:01:a6:5f:85:70:c5:a2:d5:d8:50:77:c1:16:3b:9c: e3:05:dc:cd:e7:64:16:8d:89:1a:af:a1:7c:98:7b:d7:f5:1c: 00:3e:66:b5:af:59:3a:0f:6d:37:40:73:ce:e7:eb:4f:ea:13: a7:fc:2d:4d:5b:fd:57:5b:b9:54:4f:af:64:b9:a5:41:02:12: 4b:c9:f7:b9:29:38:f2:28:0a:bb:67:f5:f1:ef:ec:e4:09:ee: 74:7b:eb:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdZh9AV2NL4q/ww8U0hGiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MTgwYzA3NGZiZTU5ODgyNGM3MDAzMTk1YjMwYWE0YTM2 NjE1MmMwHhcNMjUxMjI2MDcwMDM3WhcNMjUxMjI3MDcwMDM3WjAzMTEwLwYDVQQD EyhjOTA2NTI4MGJiYzRmN2YyMTJlMjdhNWJjY2FjMmQyNzNjOGMyMjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9zz31x+2OGUm9CYzpmzXHbR8eBA RAuQvWhbNfbGxe8ZaZlaSbX3r8ra85PcVLZo+sh8Efq0uRQK1K/lh4VdM7k6k/gJ Bm01yCaVNxgx+DxkFTjop7k32N9jENDdQJtlJKS1x46RPli7JnrU7gWShT5qQb9o y6E5V+E3X/JK52I59qlWO7Wemu1pmBJPix8tyz8ZBqU0bA2q6AZbY8xCv3uvAtrr QiC+FtMfxnVTK/1FXPFhhCw4Dw5spEEBnmcJXEr26j5TiVQzikMGEfruTbM6LhMv sR2RoTXrQCUYlTZPU/8fcX+7Y6UrFT7PcJAnThvStzBAJTkP7aeMAji3yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMkGUoC7xPfyEuJ6W8ysLSc8jCJoMB8GA1UdIwQY MBaAFDgYDAdPvlmIJMcAMZWzCqSjZhUsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0JnTUIwLS1XWWdreHdBeGxiTUtwS05tRlN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yMzllYzctN2QyYy00MmU1LWI0OWEt MmY5ZTkzYTY1YzA4LzEvT0JnTUIwLS1XWWdreHdBeGxiTUtwS05tRlN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yMzllYzctN2QyYy00MmU1LWI0OWEtMmY5ZTkzYTY1YzA4 LzEvT0JnTUIwLS1XWWdreHdBeGxiTUtwS05tRlN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl/NM1UaE JqQezudgpLSqg8nRd5nYpkvVhh4ZbZLXWVgdfMtFPSHlSWBoNmgmjmD0zyDg06Oo qi50uefhuqxzHo4a49n3IrF++YYSxxU0OjmNnY3DUh/gAc2N/CUvOIJx0yKfqTwX eM6WLVmCvE9hJJW6InIjVSjYylHKXnWBwABz2Kdh5Tr6hoUdN6DUhXwmO+pzkx9A 04mo76RePgrqFB800UN2AaZfhXDFotXYUHfBFjuc4wXczedkFo2JGq+hfJh71/Uc AD5mta9ZOg9tN0BzzufrT+oTp/wtTVv9V1u5VE+vZLmlQQISS8n3uSk48igKu2f1 8e/s5AnudHvrEg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:41 2025 by rpki-client