This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft File: ObCMosZLpzX0sUUhbdFNmfCCnw8.mft (raw, json) Hash identifier: GzfNsWYKQB9Wvus/iKI1eymsTt3pxUxXSBWDWMTy3Eo= Subject key identifier: 97:E0:FE:2C:9F:28:10:AE:71:AF:33:8C:F1:4A:7D:EB:E8:3B:3A:D8 Authority key identifier: 39:B0:8C:A2:C6:4B:A7:35:F4:B1:45:21:6D:D1:4D:99:F0:82:9F:0F Certificate issuer: /CN=39b08ca2c64ba735f4b145216dd14d99f0829f0f Certificate serial: 019B45EEC696CD62AC89932C33FD8E252D17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft Manifest number: DD Signing time: Mon 22 Dec 2025 12:00:34 +0000 Manifest this update: Mon 22 Dec 2025 12:00:34 +0000 Manifest next update: Tue 23 Dec 2025 12:00:34 +0000 Files and hashes: 1: 1xRN2ISB9yDhR3Q54HcBc-sUzRM.roa (hash: ggo342L8QjroxZeBPHXxlyJmrWPYU4LhAqkE4B3nRK4=) 2: ObCMosZLpzX0sUUhbdFNmfCCnw8.crl (hash: I7S2WLTRpyTPjKE0pV3f4mHCFCOzh3yTt2bY/k6fDZA=) 3: tnM9DnrSRmOo18qNgvvkTy18Wls.roa (hash: a6GY2FMx4xs8RMENf2iVpRjn282lRrR2VnauLywusWI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:ee:c6:96:cd:62:ac:89:93:2c:33:fd:8e:25:2d:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39b08ca2c64ba735f4b145216dd14d99f0829f0f Validity Not Before: Dec 22 12:00:34 2025 GMT Not After : Dec 23 12:00:34 2025 GMT Subject: CN=97e0fe2c9f2810ae71af338cf14a7debe83b3ad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:78:19:3a:a1:8c:48:b0:6f:d9:38:8a:90:a8: cd:77:c0:fb:9d:72:9d:c9:54:f5:47:93:5a:65:c4: 81:60:10:a5:98:88:96:ff:ec:f7:64:a7:17:07:92: b4:cc:c1:ed:d7:67:80:97:5b:cc:a0:73:f3:74:f8: 33:c3:73:c0:92:cf:c8:96:73:29:62:b6:48:17:6e: 41:d6:b5:ab:f0:54:85:4c:69:0c:11:a6:66:34:0a: 3c:fd:28:cb:93:ed:45:64:4c:15:e2:ec:e1:ea:ae: 24:c9:f9:a2:d1:3e:6a:be:52:a1:62:be:37:b0:90: 42:7a:86:2c:5e:9b:73:1e:64:24:a3:45:e4:23:e4: e8:f5:12:43:df:0b:fe:f9:24:f5:50:52:22:db:84: 55:90:7b:81:6f:fc:37:fa:1d:a8:ae:f6:43:22:63: 14:71:12:f8:31:a9:b0:5c:2e:4b:32:94:85:1d:11: e6:22:d2:aa:eb:45:b9:2e:b5:a8:68:91:a2:49:39: 8e:53:29:c6:c9:6d:3d:4a:ba:24:3f:19:79:e6:b4: 35:23:65:ed:08:c6:3c:78:4e:9e:68:d7:e8:5c:ae: b3:60:73:55:f0:6a:91:be:d8:b1:97:77:a4:17:f8: bf:25:a6:e9:35:6f:97:cb:44:10:a2:c8:23:ae:3a: e3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:E0:FE:2C:9F:28:10:AE:71:AF:33:8C:F1:4A:7D:EB:E8:3B:3A:D8 X509v3 Authority Key Identifier: keyid:39:B0:8C:A2:C6:4B:A7:35:F4:B1:45:21:6D:D1:4D:99:F0:82:9F:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:58:27:e4:68:0a:7a:7b:ed:65:75:08:1b:f4:ec:20:f8:67: 09:fd:14:9c:23:93:e1:39:f1:1c:f4:d1:d1:d8:3e:b8:71:b7: c7:9e:dd:cc:73:1e:8b:1c:64:9d:94:1c:26:f8:12:d6:59:77: 2c:8f:b9:38:ec:a4:b7:b2:01:96:14:b7:dd:01:99:f6:9e:ca: 28:42:13:42:c2:48:54:5e:0d:df:a0:94:b2:82:3b:2d:aa:04: a8:5d:b7:79:38:40:8b:7a:56:df:47:c1:97:5c:79:3e:55:75: f3:5b:27:2a:a6:68:4b:e4:3c:92:3b:eb:6e:d4:3d:2f:6a:e9: 3e:35:dd:5a:74:d1:8c:6a:ed:87:ad:df:d4:38:64:16:9a:49: 0f:bb:b2:f1:81:9f:93:58:bc:7a:fc:0a:ad:02:fc:58:c4:bd: 1c:67:9a:1c:33:3c:23:aa:38:ed:62:33:aa:45:f6:d3:dc:32: 3f:d2:50:0a:b0:15:da:65:17:ca:e6:3c:f0:e4:51:ff:3c:4e: c1:70:36:e2:18:d5:55:e6:dd:f4:e1:82:09:95:3b:09:f2:a2: 39:39:c9:7e:a5:07:21:60:f6:18:b2:51:72:ac:a1:22:d3:e1: e7:4e:13:84:29:60:67:f7:58:ee:95:5c:eb:35:32:14:aa:b0: 85:50:24:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtF7saWzWKsiZMsM/2OJS0XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5YjA4Y2EyYzY0YmE3MzVmNGIxNDUyMTZkZDE0ZDk5ZjA4 MjlmMGYwHhcNMjUxMjIyMTIwMDM0WhcNMjUxMjIzMTIwMDM0WjAzMTEwLwYDVQQD Eyg5N2UwZmUyYzlmMjgxMGFlNzFhZjMzOGNmMTRhN2RlYmU4M2IzYWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXgZOqGMSLBv2TiKkKjNd8D7nXKd yVT1R5NaZcSBYBClmIiW/+z3ZKcXB5K0zMHt12eAl1vMoHPzdPgzw3PAks/IlnMp YrZIF25B1rWr8FSFTGkMEaZmNAo8/SjLk+1FZEwV4uzh6q4kyfmi0T5qvlKhYr43 sJBCeoYsXptzHmQko0XkI+To9RJD3wv++ST1UFIi24RVkHuBb/w3+h2orvZDImMU cRL4MamwXC5LMpSFHRHmItKq60W5LrWoaJGiSTmOUynGyW09SrokPxl55rQ1I2Xt CMY8eE6eaNfoXK6zYHNV8GqRvtixl3ekF/i/JabpNW+Xy0QQosgjrjrjJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJfg/iyfKBCuca8zjPFKfevoOzrYMB8GA1UdIwQY MBaAFDmwjKLGS6c19LFFIW3RTZnwgp8PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2JDTW9zWkxwelgwc1VVaGJkRk5tZkNDbnc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hYzAwYjctZGE0Mi00NDY0LWJiYzUt MzQxNjA0NGUzNThlLzEvT2JDTW9zWkxwelgwc1VVaGJkRk5tZkNDbnc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9hYzAwYjctZGE0Mi00NDY0LWJiYzUtMzQxNjA0NGUzNThl LzEvT2JDTW9zWkxwelgwc1VVaGJkRk5tZkNDbnc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAVgn5GgK envtZXUIG/TsIPhnCf0UnCOT4TnxHPTR0dg+uHG3x57dzHMeixxknZQcJvgS1ll3 LI+5OOykt7IBlhS33QGZ9p7KKEITQsJIVF4N36CUsoI7LaoEqF23eThAi3pW30fB l1x5PlV181snKqZoS+Q8kjvrbtQ9L2rpPjXdWnTRjGrth63f1DhkFppJD7uy8YGf k1i8evwKrQL8WMS9HGeaHDM8I6o47WIzqkX209wyP9JQCrAV2mUXyuY88ORR/zxO wXA24hjVVebd9OGCCZU7CfKiOTnJfqUHIWD2GLJRcqyhItPh504ThClgZ/dY7pVc 6zUyFKqwhVAkSA== -----END CERTIFICATE-----Generated at Mon Dec 22 15:44:19 2025 by rpki-client