This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft File: OBXtD6YgyAGqqabxT2WW1-yXUKE.mft (raw, json) Hash identifier: TDnXh3q8JdlmDfD7X/lGL2Iq4Xaj50QOevJnW1YVIRw= Subject key identifier: C0:05:53:5E:D0:C4:0C:64:F2:37:C4:25:E7:A5:1F:14:D7:BC:D2:05 Authority key identifier: 38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1 Certificate issuer: /CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1 Certificate serial: 019B3CB5137536CE4F87F3AF9BCD52FD3708 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 17:00:58 +0000 Manifest this update: Sat 20 Dec 2025 17:00:58 +0000 Manifest next update: Sun 21 Dec 2025 17:00:58 +0000 Files and hashes: 1: OBXtD6YgyAGqqabxT2WW1-yXUKE.crl (hash: m5XRuGvlp7TeMJKNmXOD1R5fourExzVcRMSxbgb818w=) 2: u-w9Flj7fkevQpf-dpXISzIby2Y.roa (hash: +ftWzfsK6bMqWx5+3ThvbgDjBdiFZmrC2eI3EPi2YVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.crl rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:13:75:36:ce:4f:87:f3:af:9b:cd:52:fd:37:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1 Validity Not Before: Dec 20 17:00:58 2025 GMT Not After : Dec 21 17:00:58 2025 GMT Subject: CN=c005535ed0c40c64f237c425e7a51f14d7bcd205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:46:54:b7:ff:ce:7c:32:6d:9d:76:13:aa:e6: 10:e2:f0:4e:75:b0:47:ce:e9:01:d4:de:f6:7e:77: d3:33:5c:75:52:c5:67:b6:96:d6:d2:cd:06:9b:78: 97:95:ac:69:7c:47:81:0a:d9:43:7c:5f:93:14:aa: ec:1b:f2:cf:f8:6c:33:06:4b:ba:39:52:8b:cd:a6: 31:f7:39:2d:94:ce:cc:eb:80:ae:6b:9c:4f:68:aa: df:a6:98:6e:80:79:a6:fe:e9:c5:dc:9a:f5:5c:56: 70:36:99:b4:3e:36:46:43:0a:d3:74:dd:e1:e3:88: da:e1:1c:63:45:cf:c5:13:00:a0:9b:be:f9:d2:ff: 21:b2:0e:88:c3:c4:4f:f1:a0:88:07:e7:68:80:4e: bb:c3:31:a8:f3:ea:07:3c:58:2b:fb:a8:71:1c:2c: e2:58:6e:8a:36:69:2b:d0:c0:b6:3f:60:cd:ae:99: fe:e4:ac:5b:14:8a:c5:4c:f0:a7:17:d3:4c:37:d0: b5:13:3d:71:b0:ac:48:46:61:05:ce:dd:35:2b:96: cf:b6:02:bd:cd:60:36:c9:0c:a4:37:8d:06:d3:81: 16:6e:57:9d:1e:dc:62:da:e6:df:a2:7f:b4:9d:07: 66:02:e2:f7:d5:14:d0:0c:b3:8b:c6:a2:e2:ed:af: 6d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:05:53:5E:D0:C4:0C:64:F2:37:C4:25:E7:A5:1F:14:D7:BC:D2:05 X509v3 Authority Key Identifier: keyid:38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:2e:a9:d3:f0:70:1e:bb:0c:a3:96:e9:97:25:26:95:96:8b: be:81:2b:15:1b:dc:74:6d:f5:60:ad:25:a8:e0:6d:5c:37:73: 14:65:f4:95:28:d8:e2:7c:d7:9f:80:3e:3f:89:99:95:91:bd: 58:24:31:83:27:c7:fc:a9:91:bc:1d:2d:98:46:3a:12:01:d6: 42:42:f7:7a:20:f6:78:c5:a0:cc:ce:0e:8a:65:03:ef:d5:1b: 0e:6f:99:f9:0c:31:81:cf:95:00:5b:cd:15:7b:c2:49:92:6c: ba:6e:ce:09:86:bd:6c:57:ad:fa:4d:05:03:bb:ae:f2:d4:48: 37:5f:ac:88:01:01:d1:b2:39:3a:4d:11:cd:c2:5f:e8:93:36: 72:8c:a4:b0:9c:46:dd:f6:9c:a2:65:5e:7d:25:c0:00:30:51: 7d:19:30:70:e0:ff:d2:fb:2d:c7:de:83:dd:e6:26:0f:15:7f: 49:52:df:60:e8:cf:cb:9e:ed:4c:10:eb:84:b4:96:e2:ce:82: 62:6f:fb:1f:d5:1e:80:6f:73:da:55:bc:df:bd:47:fe:5e:1a: 5c:f4:ea:69:c5:08:67:8d:7d:79:74:cf:ce:4c:db:a2:41:99: b4:9b:38:58:6b:ef:79:80:83:7a:20:e6:62:14:88:9f:23:68: 67:88:dc:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tRN1Ns5Ph/Ovm81S/TcIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MTVlZDBmYTYyMGM4MDFhYWE5YTZmMTRmNjU5NmQ3ZWM5 NzUwYTEwHhcNMjUxMjIwMTcwMDU4WhcNMjUxMjIxMTcwMDU4WjAzMTEwLwYDVQQD EyhjMDA1NTM1ZWQwYzQwYzY0ZjIzN2M0MjVlN2E1MWYxNGQ3YmNkMjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUZUt//OfDJtnXYTquYQ4vBOdbBH zukB1N72fnfTM1x1UsVntpbW0s0Gm3iXlaxpfEeBCtlDfF+TFKrsG/LP+GwzBku6 OVKLzaYx9zktlM7M64Cua5xPaKrfpphugHmm/unF3Jr1XFZwNpm0PjZGQwrTdN3h 44ja4RxjRc/FEwCgm7750v8hsg6Iw8RP8aCIB+dogE67wzGo8+oHPFgr+6hxHCzi WG6KNmkr0MC2P2DNrpn+5KxbFIrFTPCnF9NMN9C1Ez1xsKxIRmEFzt01K5bPtgK9 zWA2yQykN40G04EWbledHtxi2ubfon+0nQdmAuL31RTQDLOLxqLi7a9t4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMAFU17QxAxk8jfEJeelHxTXvNIFMB8GA1UdIwQY MBaAFDgV7Q+mIMgBqqmm8U9lltfsl1ChMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0JYdEQ2WWd5QUdxcWFieFQyV1cxLXlYVUtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8zMmRhNDAtMGNiZi00MjQ0LWIxYTQt ZjM1YTQ0NTYzNWNhLzEvT0JYdEQ2WWd5QUdxcWFieFQyV1cxLXlYVUtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8zMmRhNDAtMGNiZi00MjQ0LWIxYTQtZjM1YTQ0NTYzNWNh LzEvT0JYdEQ2WWd5QUdxcWFieFQyV1cxLXlYVUtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOi6p0/Bw HrsMo5bplyUmlZaLvoErFRvcdG31YK0lqOBtXDdzFGX0lSjY4nzXn4A+P4mZlZG9 WCQxgyfH/KmRvB0tmEY6EgHWQkL3eiD2eMWgzM4OimUD79UbDm+Z+Qwxgc+VAFvN FXvCSZJsum7OCYa9bFet+k0FA7uu8tRIN1+siAEB0bI5Ok0RzcJf6JM2coyksJxG 3facomVefSXAADBRfRkwcOD/0vstx96D3eYmDxV/SVLfYOjPy57tTBDrhLSW4s6C Ym/7H9UegG9z2lW8371H/l4aXPTqacUIZ419eXTPzkzbokGZtJs4WGvveYCDeiDm YhSInyNoZ4jcOw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:24:32 2025 by rpki-client