This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft File: oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft (raw, json) Hash identifier: SBPkfrufUv2lzC7OtsQhKqROOTjBz3x2Ls1Em4aj/RE= Subject key identifier: 4E:AC:5B:C8:99:FB:40:36:19:A0:0C:09:C9:CA:20:48:0C:F4:CE:B2 Authority key identifier: A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA Certificate issuer: /CN=a018d68115dc4b730f157906b04426e599b3a8ca Certificate serial: 019B597645A59CE5A52E9A3FE026293D8AA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft Manifest number: 0D60 Signing time: Fri 26 Dec 2025 07:01:21 +0000 Manifest this update: Fri 26 Dec 2025 07:01:21 +0000 Manifest next update: Sat 27 Dec 2025 07:01:21 +0000 Files and hashes: 1: OwUS3NXybv4j2e2fp7XuRCsj9G8.roa (hash: 1wSHkE+/1+8ByWbwo11cGeXiOHBKl5OZ9BEstqVoHFw=) 2: oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl (hash: Lbvzuv/fWlSrJHx6yvAoXdBZhcEpGnghcbz0YCEPPIg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:45:a5:9c:e5:a5:2e:9a:3f:e0:26:29:3d:8a:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a018d68115dc4b730f157906b04426e599b3a8ca Validity Not Before: Dec 26 07:01:21 2025 GMT Not After : Dec 27 07:01:21 2025 GMT Subject: CN=4eac5bc899fb403619a00c09c9ca20480cf4ceb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ec:d3:50:87:e6:86:a0:76:8a:65:ec:b2:3f: 7e:09:f8:25:1f:83:9d:f9:c6:7b:48:c2:36:2c:20: 33:88:24:0e:d0:cf:a5:d5:01:53:77:8d:a2:fd:34: 97:ce:dd:51:2a:ca:ff:7b:a5:fa:da:16:1c:5b:3c: 2d:0c:9d:84:73:de:22:3d:1b:3d:e4:de:3c:33:de: 76:ff:55:b9:0a:cd:61:5a:e2:ef:87:1a:ff:01:08: 15:cc:fd:0b:fc:3e:16:6c:04:86:94:eb:9a:84:26: 4b:81:ac:95:7d:69:98:ab:5c:e5:47:80:99:b9:a1: 6e:16:93:a7:69:ab:c3:95:02:c8:55:85:da:37:b0: 0c:46:dd:95:ab:5d:67:6d:12:92:6a:a0:22:db:af: 6d:1a:1b:ed:05:06:45:8c:52:3b:36:32:98:02:0c: 7b:55:03:c3:f8:84:08:6a:77:df:30:2f:c7:19:55: e7:ab:99:b0:2c:ff:a8:6a:70:26:7c:e4:71:1b:60: 89:ad:fc:c6:56:a3:c9:57:bb:cf:e6:cc:44:82:54: 5a:19:a2:ef:d2:a7:07:51:d5:36:52:07:93:87:0b: 21:a7:77:61:af:2e:41:99:6c:cc:58:83:b0:48:85: 28:86:87:1f:2c:f7:a2:65:14:50:06:bc:0a:79:4b: d4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:AC:5B:C8:99:FB:40:36:19:A0:0C:09:C9:CA:20:48:0C:F4:CE:B2 X509v3 Authority Key Identifier: keyid:A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:b4:3b:6f:8a:43:26:02:d2:f7:5f:22:79:97:93:da:b1:28: 6f:59:e3:88:06:97:da:27:44:69:eb:fc:0d:2a:67:63:70:86: 3b:89:c6:cf:ba:f6:9c:04:6b:1f:c5:1a:5a:2a:e9:9c:57:4c: ff:db:2b:f9:a8:ce:07:52:c5:fa:9e:f4:83:21:eb:3e:d8:2e: 44:c7:0f:2f:5a:86:3e:c4:fb:dd:83:9e:96:21:56:c2:74:8d: 64:5b:67:65:57:e6:9a:8d:e8:f5:cd:1e:fa:a6:e1:87:60:24: 4e:1a:ed:3a:f1:b5:4c:80:81:0c:10:f5:e8:76:a3:21:e9:bb: 2b:32:82:08:a4:f0:12:13:c6:10:d1:f6:12:9d:47:c9:b6:0a: 7c:41:36:09:30:8b:b0:2d:af:9d:39:2b:7e:a3:a6:34:88:2e: e3:1d:a9:54:c5:e8:66:06:14:3c:61:9f:dd:f7:3e:05:e0:2a: f3:96:00:b3:71:ee:11:a2:43:4b:10:2c:18:9f:0d:c7:8d:ee: 77:2e:75:b2:2f:57:79:04:87:29:02:5b:14:11:aa:7d:0f:4b: 40:da:c2:74:50:6d:b8:a4:09:af:5e:e0:d9:2f:29:1c:5a:de: 08:31:92:96:78:87:9b:33:bd:59:6d:90:d7:21:85:f5:c1:a0: 97:08:11:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdkWlnOWlLpo/4CYpPYqmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwMThkNjgxMTVkYzRiNzMwZjE1NzkwNmIwNDQyNmU1OTli M2E4Y2EwHhcNMjUxMjI2MDcwMTIxWhcNMjUxMjI3MDcwMTIxWjAzMTEwLwYDVQQD Eyg0ZWFjNWJjODk5ZmI0MDM2MTlhMDBjMDljOWNhMjA0ODBjZjRjZWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOzTUIfmhqB2imXssj9+CfglH4Od +cZ7SMI2LCAziCQO0M+l1QFTd42i/TSXzt1RKsr/e6X62hYcWzwtDJ2Ec94iPRs9 5N48M952/1W5Cs1hWuLvhxr/AQgVzP0L/D4WbASGlOuahCZLgayVfWmYq1zlR4CZ uaFuFpOnaavDlQLIVYXaN7AMRt2Vq11nbRKSaqAi269tGhvtBQZFjFI7NjKYAgx7 VQPD+IQIanffMC/HGVXnq5mwLP+oanAmfORxG2CJrfzGVqPJV7vP5sxEglRaGaLv 0qcHUdU2UgeThwshp3dhry5BmWzMWIOwSIUohocfLPeiZRRQBrwKeUvUCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE6sW8iZ+0A2GaAMCcnKIEgM9M6yMB8GA1UdIwQY MBaAFKAY1oEV3EtzDxV5BrBEJuWZs6jKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0JqV2dSWGNTM01QRlhrR3NFUW01Wm16cU1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC80NjQ2NjAtN2E2ZS00OWE3LTkwM2Qt NWNiYzYzNmJkN2U3LzEvb0JqV2dSWGNTM01QRlhrR3NFUW01Wm16cU1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC80NjQ2NjAtN2E2ZS00OWE3LTkwM2QtNWNiYzYzNmJkN2U3 LzEvb0JqV2dSWGNTM01QRlhrR3NFUW01Wm16cU1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABLQ7b4pD JgLS918ieZeT2rEob1njiAaX2idEaev8DSpnY3CGO4nGz7r2nARrH8UaWirpnFdM /9sr+ajOB1LF+p70gyHrPtguRMcPL1qGPsT73YOeliFWwnSNZFtnZVfmmo3o9c0e +qbhh2AkThrtOvG1TICBDBD16HajIem7KzKCCKTwEhPGENH2Ep1HybYKfEE2CTCL sC2vnTkrfqOmNIgu4x2pVMXoZgYUPGGf3fc+BeAq85YAs3HuEaJDSxAsGJ8Nx43u dy51si9XeQSHKQJbFBGqfQ9LQNrCdFBtuKQJr17g2S8pHFreCDGSlniHmzO9WW2Q 1yGF9cGglwgRQQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:11 2025 by rpki-client