This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft File: D-ObQQdMfWrcjuJ04jn3uOs1hek.mft (raw, json) Hash identifier: RDfXnPg5235sm8ZEMq/oZv50CHQYYMR/YCvfryZ4ulM= Subject key identifier: DA:E3:5C:DF:40:D4:F3:6C:87:9A:90:41:1A:D8:DD:2F:32:52:35:73 Authority key identifier: 0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9 Certificate issuer: /CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9 Certificate serial: 019B3DFEC9E14BB08FB496C9C9C20442E250 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft Manifest number: 168A Signing time: Sat 20 Dec 2025 23:01:06 +0000 Manifest this update: Sat 20 Dec 2025 23:01:06 +0000 Manifest next update: Sun 21 Dec 2025 23:01:06 +0000 Files and hashes: 1: 5Nvni1-D_t9292_BqmoyjYIbpMw.roa (hash: TLQzj78uUDb6pP5ISG5g+K+kbONmZOzZ/8l2OVk7XUU=) 2: D-ObQQdMfWrcjuJ04jn3uOs1hek.crl (hash: FJnyoAZI/M3Mz/0yLY68RmXVBbqPkaTnMbyRmEtNoew=) 3: DLsbQslMWMAA8m5x5xT2CbKj_PA.roa (hash: BA4GEn1Aa+rFpkRZJ9HDbAjJajVs68qZDjkbK7NP/Xc=) 4: r-rzdWQIevQsRXpy8ArPMXKhl5I.roa (hash: paqGO5ZL3o7kODmIqJwv4WV1pj5fNgUoAM39DR0ohR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:c9:e1:4b:b0:8f:b4:96:c9:c9:c2:04:42:e2:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9 Validity Not Before: Dec 20 23:01:06 2025 GMT Not After : Dec 21 23:01:06 2025 GMT Subject: CN=dae35cdf40d4f36c879a90411ad8dd2f32523573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:56:d6:75:0f:de:44:9e:62:e5:1b:1f:5f:cc: ac:54:17:f8:4a:6f:b0:c6:71:91:c8:a7:96:26:31: e0:98:36:c8:7d:3e:29:5c:06:fb:17:3e:72:4d:a4: 73:1b:95:ce:c9:c1:2e:ea:89:60:51:b9:24:f6:5b: 79:bb:aa:86:3d:26:32:c5:8d:06:82:11:d8:a4:b6: e1:f0:e3:28:9d:a5:75:94:1d:ce:89:69:19:6d:97: 2e:e4:ce:f4:db:71:5d:f0:81:f3:7f:07:b3:27:02: 6a:1c:5d:8d:44:8c:c3:0d:d5:5d:8c:a7:9d:88:f8: 3f:db:3f:7b:d3:75:0d:17:58:68:b9:23:04:1f:83: d7:27:73:83:a6:42:79:f4:ec:65:ec:6e:4a:ff:0f: c7:b6:05:b9:64:c6:79:7a:87:bc:e9:2a:e5:61:89: eb:4d:87:7b:73:ce:41:4d:7a:de:ff:67:4f:32:dc: 4e:ba:2c:02:a2:4a:a0:ab:5b:64:f2:84:34:41:fc: bf:aa:56:9c:dd:33:9c:30:8d:35:dd:57:83:52:df: e8:a3:59:47:70:0d:6a:89:dc:50:f7:b3:bf:2a:ba: e2:4d:3c:b6:09:39:02:45:35:e6:a6:08:87:f2:13: 0d:6f:80:7e:91:23:b2:5c:24:3d:70:c1:65:4e:b3: d8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:E3:5C:DF:40:D4:F3:6C:87:9A:90:41:1A:D8:DD:2F:32:52:35:73 X509v3 Authority Key Identifier: keyid:0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:46:97:fb:a8:a6:a1:1a:3c:26:79:b4:ba:83:c2:79:cb:17: 6e:ce:b4:16:10:67:44:f5:2e:34:a7:5d:1b:1b:0c:c6:0d:1c: 3e:0a:b7:c9:82:61:58:16:a4:a7:fd:a0:8c:c1:c0:6e:bd:be: 4e:83:ee:a5:12:b1:eb:25:0e:22:61:e0:e1:98:bb:d6:e0:8c: 7c:5c:44:84:70:c5:b7:91:d7:29:bc:35:b9:2b:f8:48:d5:00: 65:e9:61:b7:ad:68:51:2a:53:7c:94:1e:59:5c:b9:27:f1:b9: 29:b2:9a:0d:b7:87:7d:2e:e1:9d:6e:6d:44:52:b9:6a:75:88: 7b:a6:ef:03:42:f5:bb:e0:a5:be:c5:19:5b:18:61:00:c7:2f: 8e:b0:cb:a5:2c:ac:2b:0c:85:54:00:5d:24:f4:16:06:9a:2b: db:a4:ca:12:87:b5:a6:21:f6:c5:e4:67:1a:48:c3:11:31:06: 0f:df:46:fb:5f:53:5f:3b:67:c3:b0:81:7a:44:e0:5f:e4:9a: 71:64:df:d2:ac:6e:57:18:2c:20:8f:5a:c9:0b:6c:3e:2c:c1: 7a:8f:88:36:e2:38:54:f1:b1:d7:5a:8f:2a:64:c0:34:35:69: 3b:b9:ef:50:0a:99:4a:f5:35:ed:99:47:0a:d1:53:a8:f1:00: 68:f0:54:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/snhS7CPtJbJycIEQuJQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZTM5YjQxMDc0YzdkNmFkYzhlZTI3NGUyMzlmN2I4ZWIz NTg1ZTkwHhcNMjUxMjIwMjMwMTA2WhcNMjUxMjIxMjMwMTA2WjAzMTEwLwYDVQQD EyhkYWUzNWNkZjQwZDRmMzZjODc5YTkwNDExYWQ4ZGQyZjMyNTIzNTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVbWdQ/eRJ5i5RsfX8ysVBf4Sm+w xnGRyKeWJjHgmDbIfT4pXAb7Fz5yTaRzG5XOycEu6olgUbkk9lt5u6qGPSYyxY0G ghHYpLbh8OMonaV1lB3OiWkZbZcu5M7023Fd8IHzfwezJwJqHF2NRIzDDdVdjKed iPg/2z9703UNF1houSMEH4PXJ3ODpkJ59Oxl7G5K/w/HtgW5ZMZ5eoe86SrlYYnr TYd7c85BTXre/2dPMtxOuiwCokqgq1tk8oQ0Qfy/qlac3TOcMI013VeDUt/oo1lH cA1qidxQ97O/KrriTTy2CTkCRTXmpgiH8hMNb4B+kSOyXCQ9cMFlTrPYjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNrjXN9A1PNsh5qQQRrY3S8yUjVzMB8GA1UdIwQY MBaAFA/jm0EHTH1q3I7idOI597jrNYXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRC1PYlFRZE1mV3JjanVKMDRqbjN1T3MxaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8xM2VhMWYtMGJjMS00NTdjLThhYjUt MDRlODEyZDQ4ZTcyLzEvRC1PYlFRZE1mV3JjanVKMDRqbjN1T3MxaGVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8xM2VhMWYtMGJjMS00NTdjLThhYjUtMDRlODEyZDQ4ZTcy LzEvRC1PYlFRZE1mV3JjanVKMDRqbjN1T3MxaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASUaX+6im oRo8Jnm0uoPCecsXbs60FhBnRPUuNKddGxsMxg0cPgq3yYJhWBakp/2gjMHAbr2+ ToPupRKx6yUOImHg4Zi71uCMfFxEhHDFt5HXKbw1uSv4SNUAZelht61oUSpTfJQe WVy5J/G5KbKaDbeHfS7hnW5tRFK5anWIe6bvA0L1u+ClvsUZWxhhAMcvjrDLpSys KwyFVABdJPQWBpor26TKEoe1piH2xeRnGkjDETEGD99G+19TXztnw7CBekTgX+Sa cWTf0qxuVxgsII9ayQtsPizBeo+INuI4VPGx11qPKmTANDVpO7nvUAqZSvU17ZlH CtFTqPEAaPBUpw== -----END CERTIFICATE-----Generated at Sun Dec 21 04:42:42 2025 by rpki-client