This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft File: AObmXtdPBsIjqaScPqbT7uyyOFA.mft (raw, json) Hash identifier: uthxSSXnhQ5dnx6rM4esqRlmpzn6laNjPzm289kVXS4= Subject key identifier: CA:B4:3D:57:2E:56:36:7D:48:4C:C6:28:AC:3D:38:86:EC:21:51:57 Authority key identifier: 00:E6:E6:5E:D7:4F:06:C2:23:A9:A4:9C:3E:A6:D3:EE:EC:B2:38:50 Certificate issuer: /CN=00e6e65ed74f06c223a9a49c3ea6d3eeecb23850 Certificate serial: 019B42B72A3F595244FD294BCEF5448B2FD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft Manifest number: 171E Signing time: Sun 21 Dec 2025 21:00:58 +0000 Manifest this update: Sun 21 Dec 2025 21:00:58 +0000 Manifest next update: Mon 22 Dec 2025 21:00:58 +0000 Files and hashes: 1: AObmXtdPBsIjqaScPqbT7uyyOFA.crl (hash: PYS0I2ciUVGZXGjPb8WRGXJ2gEd3eYpKm5NHWAtABoE=) 2: aayHPIzZH8kuE4buX9L9ekn6vNY.roa (hash: l5K0Mav5diQmhRgoJ50XOjjqH5sf6SBC+nvBy0fzfF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:2a:3f:59:52:44:fd:29:4b:ce:f5:44:8b:2f:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00e6e65ed74f06c223a9a49c3ea6d3eeecb23850 Validity Not Before: Dec 21 21:00:58 2025 GMT Not After : Dec 22 21:00:58 2025 GMT Subject: CN=cab43d572e56367d484cc628ac3d3886ec215157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:01:cc:d1:f4:f9:55:13:d5:ce:8d:e7:48:a5: 40:2e:e5:3f:a1:63:74:f1:6f:2a:7b:4a:e9:2e:1d: 45:c6:b4:8f:70:cd:b9:13:e7:40:0d:49:3d:51:02: 37:e1:d7:a1:76:2d:92:68:60:1c:d2:88:70:68:7c: 53:ac:7c:9a:f8:7c:ba:b9:16:2d:6b:58:e9:3b:4d: 00:81:9a:9b:cf:bd:85:7a:4b:2f:ea:8a:a7:55:c1: 7e:c5:0d:d0:81:fa:c9:2f:ba:34:12:95:62:e4:a5: 08:3f:51:ee:dc:82:57:19:1e:5e:3f:1a:e2:d8:d5: 61:5b:21:42:5c:88:5f:35:34:d3:8e:be:06:d0:f5: 49:d5:bf:f7:ce:69:aa:81:74:a6:e7:16:c2:aa:23: f6:13:8b:92:46:e0:23:a5:9d:e1:6e:ea:cb:06:a0: 6f:04:88:ba:39:1f:1b:23:e8:b4:b9:8b:ac:d3:52: 32:33:7d:3b:50:d5:6f:f3:e1:fe:ed:7a:82:0d:29: cf:48:5e:da:bc:cb:fa:fb:b7:f5:79:21:34:5e:b4: 25:5b:f8:0b:6b:49:99:a8:a5:19:d4:55:d6:ce:d4: 1e:86:b2:06:e7:0a:5a:9e:d3:c8:d6:92:c9:ce:0a: 3e:5b:e7:c8:05:4b:cd:b1:8a:39:2a:32:32:f9:ba: a6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B4:3D:57:2E:56:36:7D:48:4C:C6:28:AC:3D:38:86:EC:21:51:57 X509v3 Authority Key Identifier: keyid:00:E6:E6:5E:D7:4F:06:C2:23:A9:A4:9C:3E:A6:D3:EE:EC:B2:38:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:59:1b:76:68:b2:19:23:d8:3e:d6:31:d3:9f:a4:aa:6d:21: 3c:e2:bb:30:d0:cd:de:d8:26:14:9a:41:93:ce:f4:4f:79:a0: 4b:7b:ff:b9:7b:79:37:6b:15:a9:05:f6:a9:24:8d:ff:ea:4c: 76:4d:c6:79:86:0b:c6:1e:95:a8:37:36:e2:07:06:a5:41:96: ff:2f:67:49:9a:ed:1f:88:05:83:bd:c2:7e:b8:f4:9e:60:a1: 0c:d4:fe:cb:c0:9f:08:ca:64:1c:2b:52:67:d2:c2:1d:42:7b: b4:03:ea:be:1d:07:4b:8e:ae:b0:ab:7d:16:b6:9a:d3:1c:0b: 51:a0:12:02:66:ff:da:5a:3a:26:72:b6:b8:ce:d5:e0:ae:be: ba:67:2e:4a:02:96:2c:13:90:f4:c0:e0:c7:e3:c6:f0:bf:9c: 57:f7:30:6d:4e:01:6a:77:73:8a:ee:97:06:7b:ce:c7:37:28: 69:70:7e:48:10:90:20:34:fd:88:72:91:39:bd:d6:f7:51:f1: fe:da:33:c0:a3:ba:aa:89:09:b0:ab:4a:2e:cb:56:81:d3:14: 9b:c2:ae:cf:f3:51:c8:de:28:f1:25:e8:23:66:25:5f:17:23: 89:f9:a0:bb:35:3e:1a:49:8c:03:66:fe:81:84:41:45:c5:f5: fc:05:0f:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCtyo/WVJE/SlLzvVEiy/SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwZTZlNjVlZDc0ZjA2YzIyM2E5YTQ5YzNlYTZkM2VlZWNi MjM4NTAwHhcNMjUxMjIxMjEwMDU4WhcNMjUxMjIyMjEwMDU4WjAzMTEwLwYDVQQD EyhjYWI0M2Q1NzJlNTYzNjdkNDg0Y2M2MjhhYzNkMzg4NmVjMjE1MTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QHM0fT5VRPVzo3nSKVALuU/oWN0 8W8qe0rpLh1FxrSPcM25E+dADUk9UQI34dehdi2SaGAc0ohwaHxTrHya+Hy6uRYt a1jpO00AgZqbz72Feksv6oqnVcF+xQ3QgfrJL7o0EpVi5KUIP1Hu3IJXGR5ePxri 2NVhWyFCXIhfNTTTjr4G0PVJ1b/3zmmqgXSm5xbCqiP2E4uSRuAjpZ3hburLBqBv BIi6OR8bI+i0uYus01IyM307UNVv8+H+7XqCDSnPSF7avMv6+7f1eSE0XrQlW/gL a0mZqKUZ1FXWztQehrIG5wpantPI1pLJzgo+W+fIBUvNsYo5KjIy+bqm5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMq0PVcuVjZ9SEzGKKw9OIbsIVFXMB8GA1UdIwQY MBaAFADm5l7XTwbCI6mknD6m0+7ssjhQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU9ibVh0ZFBCc0lqcWFTY1BxYlQ3dXl5T0ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yNGRhNmYtNTA1My00MTRlLTkzNzAt MTZiOWVhZmViNGVhLzEvQU9ibVh0ZFBCc0lqcWFTY1BxYlQ3dXl5T0ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC8yNGRhNmYtNTA1My00MTRlLTkzNzAtMTZiOWVhZmViNGVh LzEvQU9ibVh0ZFBCc0lqcWFTY1BxYlQ3dXl5T0ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGlkbdmiy GSPYPtYx05+kqm0hPOK7MNDN3tgmFJpBk870T3mgS3v/uXt5N2sVqQX2qSSN/+pM dk3GeYYLxh6VqDc24gcGpUGW/y9nSZrtH4gFg73Cfrj0nmChDNT+y8CfCMpkHCtS Z9LCHUJ7tAPqvh0HS46usKt9Fraa0xwLUaASAmb/2lo6JnK2uM7V4K6+umcuSgKW LBOQ9MDgx+PG8L+cV/cwbU4Bandziu6XBnvOxzcoaXB+SBCQIDT9iHKROb3W91Hx /tozwKO6qokJsKtKLstWgdMUm8Kuz/NRyN4o8SXoI2YlXxcjifmguzU+GkmMA2b+ gYRBRcX1/AUPYg== -----END CERTIFICATE-----Generated at Sun Dec 21 22:58:18 2025 by rpki-client