This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft File: oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft (raw, json) Hash identifier: Dnv8w0TPyLvshQUCKeAA5h9NGu0rTz1hxZZFVSCcGxw= Subject key identifier: 56:FB:58:B9:1F:6A:EB:45:8A:6F:06:64:E5:59:60:90:60:FF:62:89 Authority key identifier: A0:17:46:CF:6B:BD:C8:BD:56:66:F3:06:81:1B:DF:FD:21:6B:1A:A6 Certificate issuer: /CN=a01746cf6bbdc8bd5666f306811bdffd216b1aa6 Certificate serial: 019B378F3ECF47C4A8C7C59376BA5994F360 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 17:01:33 +0000 Manifest this update: Fri 19 Dec 2025 17:01:33 +0000 Manifest next update: Sat 20 Dec 2025 17:01:33 +0000 Files and hashes: 1: oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl (hash: srKfQdQsbimuedIDWqz1INGwMrC++HAToUuzGvU+ZA4=) 2: sociFAoZ9Fk3G3CziQXuWjc_tPc.roa (hash: udf9UdObLF2TzxfJDP0XmSNS06eQxn4HxbhQF0p8yZs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8f:3e:cf:47:c4:a8:c7:c5:93:76:ba:59:94:f3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a01746cf6bbdc8bd5666f306811bdffd216b1aa6 Validity Not Before: Dec 19 17:01:33 2025 GMT Not After : Dec 20 17:01:33 2025 GMT Subject: CN=56fb58b91f6aeb458a6f0664e559609060ff6289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3f:c9:24:4e:8c:be:d6:2b:35:e0:92:0c:9c: ee:f0:e4:4d:40:7a:58:3f:f5:08:62:82:72:75:f3: be:f6:07:b8:0c:6d:3a:a3:ef:58:5c:d5:71:8d:4b: 84:e8:8e:a8:a7:ef:f7:89:44:f6:2a:49:41:93:80: b4:fc:4d:30:7e:6f:a4:c5:11:dc:83:54:2e:d7:2a: 8f:3a:b6:03:9f:88:60:e8:82:9e:97:83:65:d0:5d: 6a:1e:79:93:54:7d:68:22:33:86:49:31:41:3c:0d: 5b:66:10:82:ff:40:2d:6f:87:0b:39:e9:0f:7d:3b: 1b:e3:04:a9:82:26:4e:c3:7f:aa:02:dc:cf:93:dd: a3:46:d0:94:ce:d9:2c:40:9d:16:bb:bc:0a:8f:0e: d7:c6:2a:26:70:89:92:e9:ce:96:0e:26:90:26:e5: f3:27:52:8f:e9:78:53:87:3b:49:3d:fc:e5:58:f8: 9f:dc:dd:5a:ca:bf:da:22:c8:0c:bc:51:4e:e6:73: a4:af:ff:45:22:ec:96:1d:3b:9a:67:66:81:3f:eb: 0e:91:b0:e4:ce:43:82:b6:76:8a:29:4a:d6:99:e1: 98:34:52:e9:0b:ed:42:66:2a:c9:dc:26:38:ee:3b: 9e:1a:98:9c:33:fe:77:32:90:42:37:7b:7f:83:16: 70:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:FB:58:B9:1F:6A:EB:45:8A:6F:06:64:E5:59:60:90:60:FF:62:89 X509v3 Authority Key Identifier: keyid:A0:17:46:CF:6B:BD:C8:BD:56:66:F3:06:81:1B:DF:FD:21:6B:1A:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:ba:b6:b1:82:c8:b2:79:75:e7:d4:10:a1:01:fd:f0:5d:e7: f5:27:a1:8d:fa:fa:d5:ae:d9:65:5e:82:58:68:4d:f5:82:80: b9:94:12:c4:3d:fc:b0:19:e3:06:87:d2:f5:e7:b6:3e:14:8d: 8a:6c:28:67:c1:5c:bb:32:01:d8:15:31:61:2c:50:83:19:9c: d0:ce:f2:a8:02:b7:d7:bb:67:7f:ca:ac:f9:8f:56:82:25:65: 66:44:d5:7a:f9:68:86:42:d3:a3:be:d5:df:94:23:53:6c:d8: 04:cf:40:9d:01:2a:dc:0a:cb:90:4d:f1:44:d0:78:f6:d8:8c: a3:a0:64:3a:e2:48:03:cd:a1:b8:bf:70:67:00:cb:9f:7f:7d: 80:b9:de:1b:aa:97:5a:70:2d:41:d8:5c:4e:7a:79:6c:d6:84: e1:bb:70:c6:43:d5:a9:26:c7:01:3d:43:e4:5d:f0:4e:84:7d: f4:5f:23:0f:6c:49:ea:a6:98:00:41:91:c0:59:fb:07:a4:07: 6a:22:a1:ea:ad:61:a1:02:ee:8c:5e:9b:ad:e5:c5:58:32:40: 5c:55:ae:ea:24:f2:80:1b:75:94:aa:19:cf:45:30:46:33:50: e8:f6:d5:06:53:9e:5b:b9:2e:09:80:5f:98:0e:9f:15:dd:ad: 2f:cd:de:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jz7PR8Sox8WTdrpZlPNgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwMTc0NmNmNmJiZGM4YmQ1NjY2ZjMwNjgxMWJkZmZkMjE2 YjFhYTYwHhcNMjUxMjE5MTcwMTMzWhcNMjUxMjIwMTcwMTMzWjAzMTEwLwYDVQQD Eyg1NmZiNThiOTFmNmFlYjQ1OGE2ZjA2NjRlNTU5NjA5MDYwZmY2Mjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD/JJE6MvtYrNeCSDJzu8ORNQHpY P/UIYoJydfO+9ge4DG06o+9YXNVxjUuE6I6op+/3iUT2KklBk4C0/E0wfm+kxRHc g1Qu1yqPOrYDn4hg6IKel4Nl0F1qHnmTVH1oIjOGSTFBPA1bZhCC/0Atb4cLOekP fTsb4wSpgiZOw3+qAtzPk92jRtCUztksQJ0Wu7wKjw7XxiomcImS6c6WDiaQJuXz J1KP6XhThztJPfzlWPif3N1ayr/aIsgMvFFO5nOkr/9FIuyWHTuaZ2aBP+sOkbDk zkOCtnaKKUrWmeGYNFLpC+1CZirJ3CY47jueGpicM/53MpBCN3t/gxZwEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFb7WLkfautFim8GZOVZYJBg/2KJMB8GA1UdIwQY MBaAFKAXRs9rvci9VmbzBoEb3/0haxqmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0JkR3oydTl5TDFXWnZNR2dSdmZfU0ZyR3FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNzY0Y2UtMTJhZS00MWI1LTgxYjYt MDJhYmE1ZDFiM2E0LzEvb0JkR3oydTl5TDFXWnZNR2dSdmZfU0ZyR3FZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNzY0Y2UtMTJhZS00MWI1LTgxYjYtMDJhYmE1ZDFiM2E0 LzEvb0JkR3oydTl5TDFXWnZNR2dSdmZfU0ZyR3FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhrq2sYLI snl159QQoQH98F3n9Sehjfr61a7ZZV6CWGhN9YKAuZQSxD38sBnjBofS9ee2PhSN imwoZ8FcuzIB2BUxYSxQgxmc0M7yqAK317tnf8qs+Y9WgiVlZkTVevlohkLTo77V 35QjU2zYBM9AnQEq3ArLkE3xRNB49tiMo6BkOuJIA82huL9wZwDLn399gLneG6qX WnAtQdhcTnp5bNaE4btwxkPVqSbHAT1D5F3wToR99F8jD2xJ6qaYAEGRwFn7B6QH aiKh6q1hoQLujF6breXFWDJAXFWu6iTygBt1lKoZz0UwRjNQ6PbVBlOeW7kuCYBf mA6fFd2tL83ehQ== -----END CERTIFICATE-----Generated at Fri Dec 19 21:49:29 2025 by rpki-client