This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/59907f-7e5f-4d8a-acf2-7720d82f8345/1/OBgxUK8pDQ9tJbA2E28cv2sPF8k.mft File: OBgxUK8pDQ9tJbA2E28cv2sPF8k.mft (raw, json) Hash identifier: JPFPTSpTsDX/2AIc3SZSu/odx/dMgbUSazHyfK3PGng= Subject key identifier: 40:DC:AA:0C:6A:47:8C:E4:E3:5D:84:26:42:30:CA:8E:67:05:0F:B4 Authority key identifier: 38:18:31:50:AF:29:0D:0F:6D:25:B0:36:13:6F:1C:BF:6B:0F:17:C9 Certificate issuer: /CN=38183150af290d0f6d25b036136f1cbf6b0f17c9 Certificate serial: 019B5A51E620CB55F233F451A1DAD8C4D263 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBgxUK8pDQ9tJbA2E28cv2sPF8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/59907f-7e5f-4d8a-acf2-7720d82f8345/1/OBgxUK8pDQ9tJbA2E28cv2sPF8k.mft Manifest number: C2 Signing time: Fri 26 Dec 2025 11:01:15 +0000 Manifest this update: Fri 26 Dec 2025 11:01:15 +0000 Manifest next update: Sat 27 Dec 2025 11:01:15 +0000 Files and hashes: 1: OBgxUK8pDQ9tJbA2E28cv2sPF8k.crl (hash: pOkK0fwAlkgEm4jriHOaQw8xCvR0cy45zv6yDVV7lnQ=) 2: QibeyjSv1hfxKFEaKrbqmDXpj2I.roa (hash: ifdoDGnGJbL7K4fA7Xk5/reVlWdHN5zJyJBNdlq2ay8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/59907f-7e5f-4d8a-acf2-7720d82f8345/1/OBgxUK8pDQ9tJbA2E28cv2sPF8k.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/59907f-7e5f-4d8a-acf2-7720d82f8345/1/OBgxUK8pDQ9tJbA2E28cv2sPF8k.mft rsync://rpki.ripe.net/repository/DEFAULT/OBgxUK8pDQ9tJbA2E28cv2sPF8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:e6:20:cb:55:f2:33:f4:51:a1:da:d8:c4:d2:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38183150af290d0f6d25b036136f1cbf6b0f17c9 Validity Not Before: Dec 26 11:01:15 2025 GMT Not After : Dec 27 11:01:15 2025 GMT Subject: CN=40dcaa0c6a478ce4e35d84264230ca8e67050fb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:01:3e:c6:db:e0:3a:da:bd:aa:b2:ab:21:9a: fb:3b:1c:8a:4c:80:39:b2:fb:d0:99:e9:0e:e1:60: 3d:eb:08:d5:44:5b:14:2f:ca:18:08:5d:8a:c0:95: 40:01:42:ad:53:4d:46:3f:06:3e:c1:a0:37:14:b6: db:34:14:72:b8:2d:f9:21:8c:96:44:f1:5d:7d:61: ce:3f:ef:f0:32:7c:af:df:03:9c:d8:cf:c6:7b:8d: 63:f2:85:9e:0a:4b:3e:0e:d9:71:e0:31:da:16:c0: 16:b4:eb:7c:b4:4f:98:58:be:73:2a:0c:6b:29:b8: 12:65:18:83:04:c4:98:ab:b8:2f:60:86:7b:79:2f: 5a:3f:2f:b0:14:77:bd:cb:e1:6a:1e:40:b4:41:6b: 04:f8:d5:89:bc:10:86:6a:12:01:d3:ab:eb:7b:c3: 8b:40:91:7a:e2:2c:98:0b:53:d0:33:ae:c2:05:e5: d8:38:d3:84:cf:66:dc:55:8d:71:3c:f5:4f:05:58: af:93:1c:41:61:88:5e:9e:58:e8:5d:bf:42:5f:d5: d0:b9:75:ea:7e:b0:ba:c9:8d:9a:58:27:37:60:e2: b8:7f:d7:ee:62:e8:96:2e:95:c7:a9:14:6d:49:6a: 83:99:83:4a:41:0a:d3:0b:fd:73:f7:b4:18:e0:90: 3e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:DC:AA:0C:6A:47:8C:E4:E3:5D:84:26:42:30:CA:8E:67:05:0F:B4 X509v3 Authority Key Identifier: keyid:38:18:31:50:AF:29:0D:0F:6D:25:B0:36:13:6F:1C:BF:6B:0F:17:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBgxUK8pDQ9tJbA2E28cv2sPF8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/59907f-7e5f-4d8a-acf2-7720d82f8345/1/OBgxUK8pDQ9tJbA2E28cv2sPF8k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/59907f-7e5f-4d8a-acf2-7720d82f8345/1/OBgxUK8pDQ9tJbA2E28cv2sPF8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:8f:1d:27:28:fa:61:a0:ca:4d:fa:5b:88:10:9e:a1:bb:b2: 08:2d:c3:e1:79:5d:8c:c5:af:17:f3:64:9e:29:43:b8:8e:1a: 3e:8b:4a:4c:3b:31:82:4d:76:0f:00:94:55:0f:94:78:11:9d: b3:2d:52:ad:d2:55:87:9f:9b:37:a6:0f:60:b6:98:05:04:34: be:4b:a2:ca:e9:60:39:e8:6d:a6:3e:55:b6:d3:29:12:d5:a4: 9f:63:40:97:a1:40:1a:09:2e:84:08:b5:c4:b2:f4:c4:6b:34: ac:f4:d2:7e:5f:f0:de:63:2e:4c:b3:36:28:08:04:79:1d:99: 3a:43:bc:36:28:47:86:f0:4b:af:8b:c1:2e:c7:58:e7:55:f0: 4c:4c:5a:be:51:7a:a3:11:6d:b7:6d:bc:f2:e7:8d:cc:46:3d: 96:94:a8:42:42:4d:b7:12:1f:2a:a6:17:6c:8b:58:d2:06:24: 53:44:6f:e8:cd:84:b8:b2:1d:92:e2:5d:d8:3c:f6:c5:5d:97: 3a:a0:05:56:bb:6c:b0:62:b8:a9:d4:08:2a:ed:b4:78:55:12: 08:24:06:c5:74:3e:fa:d0:b6:96:5b:a9:4e:8f:3f:04:01:5a: 11:2d:69:2c:1c:d6:79:09:f3:dc:7c:1c:78:9c:cc:f9:6f:25: 6a:11:87:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUeYgy1XyM/RRodrYxNJjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MTgzMTUwYWYyOTBkMGY2ZDI1YjAzNjEzNmYxY2JmNmIw ZjE3YzkwHhcNMjUxMjI2MTEwMTE1WhcNMjUxMjI3MTEwMTE1WjAzMTEwLwYDVQQD Eyg0MGRjYWEwYzZhNDc4Y2U0ZTM1ZDg0MjY0MjMwY2E4ZTY3MDUwZmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAE+xtvgOtq9qrKrIZr7OxyKTIA5 svvQmekO4WA96wjVRFsUL8oYCF2KwJVAAUKtU01GPwY+waA3FLbbNBRyuC35IYyW RPFdfWHOP+/wMnyv3wOc2M/Ge41j8oWeCks+Dtlx4DHaFsAWtOt8tE+YWL5zKgxr KbgSZRiDBMSYq7gvYIZ7eS9aPy+wFHe9y+FqHkC0QWsE+NWJvBCGahIB06vre8OL QJF64iyYC1PQM67CBeXYONOEz2bcVY1xPPVPBVivkxxBYYhenljoXb9CX9XQuXXq frC6yY2aWCc3YOK4f9fuYuiWLpXHqRRtSWqDmYNKQQrTC/1z97QY4JA+/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEDcqgxqR4zk412EJkIwyo5nBQ+0MB8GA1UdIwQY MBaAFDgYMVCvKQ0PbSWwNhNvHL9rDxfJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0JneFVLOHBEUTl0SmJBMkUyOGN2MnNQRjhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS81OTkwN2YtN2U1Zi00ZDhhLWFjZjIt NzcyMGQ4MmY4MzQ1LzEvT0JneFVLOHBEUTl0SmJBMkUyOGN2MnNQRjhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS81OTkwN2YtN2U1Zi00ZDhhLWFjZjItNzcyMGQ4MmY4MzQ1 LzEvT0JneFVLOHBEUTl0SmJBMkUyOGN2MnNQRjhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYI8dJyj6 YaDKTfpbiBCeobuyCC3D4XldjMWvF/NknilDuI4aPotKTDsxgk12DwCUVQ+UeBGd sy1SrdJVh5+bN6YPYLaYBQQ0vkuiyulgOehtpj5VttMpEtWkn2NAl6FAGgkuhAi1 xLL0xGs0rPTSfl/w3mMuTLM2KAgEeR2ZOkO8NihHhvBLr4vBLsdY51XwTExavlF6 oxFtt2288ueNzEY9lpSoQkJNtxIfKqYXbItY0gYkU0Rv6M2EuLIdkuJd2Dz2xV2X OqAFVrtssGK4qdQIKu20eFUSCCQGxXQ++tC2llupTo8/BAFaES1pLBzWeQnz3Hwc eJzM+W8lahGHYg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:17 2025 by rpki-client