This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft File: obgXVrYRDyp1SVx0yCDg5zTuimw.mft (raw, json) Hash identifier: QJT4VocVOorbcckv3tcm8fAsNbIXiVCdgHNrpZTSuWI= Subject key identifier: 2D:D1:AF:55:94:94:BE:03:7E:6B:97:27:DE:1F:16:7D:B7:F5:9D:6A Authority key identifier: A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C Certificate issuer: /CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c Certificate serial: 019B03338B18CA9166535EAA534C96771134 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft Manifest number: 0C4A Signing time: Tue 09 Dec 2025 13:01:08 +0000 Manifest this update: Tue 09 Dec 2025 13:01:08 +0000 Manifest next update: Wed 10 Dec 2025 13:01:08 +0000 Files and hashes: 1: XuoB2Xg2V8sDLR0FcXE9_KgeaNE.roa (hash: 8weZHHb2/AwELkcsnpwE6+GAIsY98yWhXTvCdqaPCb0=) 2: obgXVrYRDyp1SVx0yCDg5zTuimw.crl (hash: l0wgRx4raBJ4uigCwmOm4OwvUOKsPJCuaLj1KDzNASM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 13:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:33:8b:18:ca:91:66:53:5e:aa:53:4c:96:77:11:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c Validity Not Before: Dec 9 13:01:08 2025 GMT Not After : Dec 10 13:01:08 2025 GMT Subject: CN=2dd1af559494be037e6b9727de1f167db7f59d6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b1:cf:98:dd:b1:f5:33:a0:79:09:df:cd:d6: 03:e7:43:8a:1b:ba:27:d1:91:6d:41:81:83:1d:61: e5:4b:73:26:43:3e:81:6d:cc:2f:bc:49:d7:8c:ab: 80:72:74:65:29:1e:ca:f8:fd:31:85:c2:42:8c:6d: 09:cc:38:6b:d0:bd:27:b6:91:81:10:d0:2d:7b:fb: 77:8f:79:47:42:20:44:3e:20:a6:37:ff:d4:6e:44: 41:3e:cc:d3:27:e2:b5:78:89:4b:bf:c5:75:dd:ac: 07:e8:9e:f7:2d:ec:fc:2e:19:c4:5a:79:e3:d2:d8: a6:37:2d:f7:76:ef:59:22:9b:da:67:8d:43:0c:4b: 00:e7:4e:bd:31:9a:a6:21:ac:18:c5:06:70:a1:2d: d4:33:9d:95:36:7e:5a:2f:fb:67:cd:2e:5d:7d:dd: bb:43:a6:0e:23:02:a3:bd:1b:b9:3f:09:a5:11:3d: 58:b9:b8:bb:fd:ce:38:f3:ab:bd:c1:f6:59:65:d8: b1:89:ec:73:b7:81:95:87:6a:1d:3e:8d:83:e1:88: ad:f8:59:d5:58:04:4e:7c:88:c1:0b:ef:73:ea:ea: e8:f6:da:65:79:58:f3:21:85:b3:1f:ed:68:bc:d9: 40:f4:e1:73:57:c3:27:53:3f:db:c2:20:24:6e:3e: 35:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D1:AF:55:94:94:BE:03:7E:6B:97:27:DE:1F:16:7D:B7:F5:9D:6A X509v3 Authority Key Identifier: keyid:A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ab:3d:7f:5e:77:7a:b6:db:26:0c:b8:e0:eb:bb:7a:81:f7: 4e:75:ac:63:a2:a4:62:3c:6d:e4:6d:ef:7a:fc:f9:cc:8e:ed: c9:d1:73:30:25:34:b1:29:ac:f1:0c:23:d5:0b:d9:72:76:7b: 3f:25:e9:ec:28:71:50:33:74:77:b4:ef:8d:fa:1f:28:27:0c: 1b:e0:15:60:88:99:2c:fb:3b:ea:1b:05:72:fb:92:0b:d9:a0: 3d:54:12:e2:19:22:86:17:ff:69:7b:54:71:6a:9a:4a:35:f8: b1:84:93:4f:12:ef:d0:4b:e9:48:67:16:b0:1e:fd:05:b4:95: d3:83:53:ea:c6:99:1f:59:a7:da:fd:7e:2f:f2:75:ef:61:bd: e0:81:65:65:b5:1b:53:a9:7f:cc:66:2b:3b:66:5f:5e:91:53: 0e:1e:34:cf:f8:9d:e7:62:11:40:3f:a1:a0:3e:1f:37:ac:ea: 40:99:7c:16:1c:7e:1c:d2:29:6d:b0:0a:e8:99:fe:68:2b:ae: c4:bb:6f:7d:9e:fa:7f:90:37:7e:9c:7b:bd:8d:2d:31:96:ff: c2:14:a7:d4:9e:a3:7e:68:12:45:cf:70:bd:87:8f:6e:ce:fa: 7d:4e:26:f1:fa:27:8f:01:cc:02:35:f5:f0:28:7c:61:f1:3b: a2:6a:11:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsDM4sYypFmU16qU0yWdxE0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExYjgxNzU2YjYxMTBmMmE3NTQ5NWM3NGM4MjBlMGU3MzRl ZThhNmMwHhcNMjUxMjA5MTMwMTA4WhcNMjUxMjEwMTMwMTA4WjAzMTEwLwYDVQQD EygyZGQxYWY1NTk0OTRiZTAzN2U2Yjk3MjdkZTFmMTY3ZGI3ZjU5ZDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorHPmN2x9TOgeQnfzdYD50OKG7on 0ZFtQYGDHWHlS3MmQz6BbcwvvEnXjKuAcnRlKR7K+P0xhcJCjG0JzDhr0L0ntpGB ENAte/t3j3lHQiBEPiCmN//UbkRBPszTJ+K1eIlLv8V13awH6J73Lez8LhnEWnnj 0timNy33du9ZIpvaZ41DDEsA5069MZqmIawYxQZwoS3UM52VNn5aL/tnzS5dfd27 Q6YOIwKjvRu5PwmlET1Yubi7/c4486u9wfZZZdixiexzt4GVh2odPo2D4Yit+FnV WAROfIjBC+9z6uro9tpleVjzIYWzH+1ovNlA9OFzV8MnUz/bwiAkbj41awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3Rr1WUlL4DfmuXJ94fFn239Z1qMB8GA1UdIwQY MBaAFKG4F1a2EQ8qdUlcdMgg4Oc07opsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2JnWFZyWVJEeXAxU1Z4MHlDRGc1elR1aW13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wODE3Y2ItNmRkMi00Zjc1LThiYjUt YWJjY2EyYjQ0ZTlmLzEvb2JnWFZyWVJEeXAxU1Z4MHlDRGc1elR1aW13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wODE3Y2ItNmRkMi00Zjc1LThiYjUtYWJjY2EyYjQ0ZTlm LzEvb2JnWFZyWVJEeXAxU1Z4MHlDRGc1elR1aW13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX6s9f153 erbbJgy44Ou7eoH3TnWsY6KkYjxt5G3vevz5zI7tydFzMCU0sSms8Qwj1QvZcnZ7 PyXp7ChxUDN0d7TvjfofKCcMG+AVYIiZLPs76hsFcvuSC9mgPVQS4hkihhf/aXtU cWqaSjX4sYSTTxLv0EvpSGcWsB79BbSV04NT6saZH1mn2v1+L/J172G94IFlZbUb U6l/zGYrO2ZfXpFTDh40z/id52IRQD+hoD4fN6zqQJl8Fhx+HNIpbbAK6Jn+aCuu xLtvfZ76f5A3fpx7vY0tMZb/whSn1J6jfmgSRc9wvYePbs76fU4m8fonjwHMAjX1 8Ch8YfE7omoRFQ== -----END CERTIFICATE-----Generated at Tue Dec 9 19:06:30 2025 by rpki-client