This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft File: OBbhmySn6M_xifq6wohSzYdIo4A.mft (raw, json) Hash identifier: cSMKeDQh80AgyiECXGY5seVn/4VSd72668O0cUCMZKs= Subject key identifier: DA:04:10:F6:88:0C:9A:BB:0D:92:DF:14:D8:AD:C3:16:01:BD:D7:D4 Authority key identifier: 38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80 Certificate issuer: /CN=3816e19b24a7e8cff189fabac28852cd8748a380 Certificate serial: 019B3BA200AF619564723DCFE0BA0BAF6833 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 12:00:31 +0000 Manifest this update: Sat 20 Dec 2025 12:00:31 +0000 Manifest next update: Sun 21 Dec 2025 12:00:31 +0000 Files and hashes: 1: 9S8GYL_yFgy6SNOCWbKCBCKwxZQ.roa (hash: lKTcm+yAWil2FIyk6dqKrToacWvPZRMmQqI4XBQAqo0=) 2: OBbhmySn6M_xifq6wohSzYdIo4A.crl (hash: wvUw6LZB4WfdfDNxdawbZlJHoGpmlcs6OglQswJq3yw=) 3: eTebT2XGsz3TR6P2Y8Fzv_Rs33U.roa (hash: 8CvMQ0zbnR8EYLyVhO1PKSoAxhchZeehbyPRq5i/WLw=) 4: vGJfHVLZfMnAGA9tz-k5fjxGNZg.roa (hash: Y+O1z7Za7CP/+yHIIzznuHMKNtcJb361AC63q0+gtog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:00:af:61:95:64:72:3d:cf:e0:ba:0b:af:68:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3816e19b24a7e8cff189fabac28852cd8748a380 Validity Not Before: Dec 20 12:00:31 2025 GMT Not After : Dec 21 12:00:31 2025 GMT Subject: CN=da0410f6880c9abb0d92df14d8adc31601bdd7d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:89:a2:bf:61:3a:4e:aa:6c:ea:37:73:11:ce: f6:80:32:2b:8a:7a:68:22:5c:69:f5:fb:95:8c:1a: 76:26:53:df:82:7d:ab:bd:17:d5:f8:1f:5e:1b:e0: 88:b7:8e:41:ba:c4:5d:b9:60:53:22:8c:a4:2d:b7: dd:41:77:43:22:86:09:ed:e9:c7:63:29:94:ad:24: d9:fb:0f:7f:e9:4b:fc:73:08:95:56:ba:fd:00:d1: 6a:39:b8:d3:85:2a:a8:84:45:2d:4d:67:6c:da:0e: 60:25:39:16:68:32:42:e5:5d:56:49:0f:4e:ea:c9: 46:ba:0b:2b:de:63:fa:f3:eb:cc:7f:5a:bf:a5:b1: 00:1e:e1:cf:b8:c5:54:28:df:e6:81:a3:ad:45:d2: 91:1a:53:6d:6b:0f:c5:78:6e:24:ec:74:79:12:f6: 4b:7b:65:84:99:02:56:cd:df:0a:2e:f1:35:e8:b7: b5:2f:dd:89:47:3e:e4:a7:69:bc:47:e6:af:f9:aa: 05:38:16:41:af:d3:2a:f4:c4:00:4c:59:51:b9:50: 27:cc:4d:df:4b:04:78:ec:0c:6c:e2:00:5a:6b:aa: d3:01:4c:f3:f6:c5:43:0f:24:03:1a:13:ca:ec:73: b2:42:a4:d6:a5:62:b8:a4:99:2f:d4:20:bb:04:79: cb:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:04:10:F6:88:0C:9A:BB:0D:92:DF:14:D8:AD:C3:16:01:BD:D7:D4 X509v3 Authority Key Identifier: keyid:38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:5b:7c:b4:3d:7e:97:3e:42:bf:b4:66:dc:61:61:1e:da:e0: a6:a5:46:bf:63:4a:a2:6e:1e:cc:6d:a5:e4:fd:e1:c8:ad:74: 6a:1c:be:8b:77:35:97:e5:53:94:67:1c:d5:35:22:d8:d7:ad: cb:e9:da:39:c3:e6:90:14:ba:0c:cb:54:af:d3:d6:52:39:3f: ec:cc:8c:a2:dd:cb:48:22:0b:43:70:eb:dc:7e:24:f4:14:ce: f9:87:b5:61:04:f8:25:42:82:fa:89:7c:b7:7a:2d:3d:31:ae: ce:31:34:a4:ce:13:26:38:8c:c9:25:03:d1:92:6f:27:81:25: 0b:20:b5:67:bf:a8:bb:d4:7a:cd:25:ac:a4:37:a7:7a:cc:b9: 0d:4f:26:ff:fa:b8:2e:89:57:87:ba:c2:4c:dd:dd:76:62:8b: fa:cf:7d:0a:dc:09:4f:bc:41:17:37:2f:ad:93:34:85:9c:3a: fe:a5:9c:b7:98:bb:7e:90:62:b8:18:58:eb:8e:c6:b3:72:ff: 05:78:9c:97:9f:b4:37:dd:03:f1:29:c4:4d:6d:fc:05:e4:76: 22:76:09:71:95:9e:e0:83:0b:c3:0d:93:dd:9c:56:cd:71:cb: 14:86:a7:45:13:40:f1:69:b9:3d:d5:4e:d0:da:8b:30:a3:74: 9a:4b:15:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ogCvYZVkcj3P4LoLr2gzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MTZlMTliMjRhN2U4Y2ZmMTg5ZmFiYWMyODg1MmNkODc0 OGEzODAwHhcNMjUxMjIwMTIwMDMxWhcNMjUxMjIxMTIwMDMxWjAzMTEwLwYDVQQD EyhkYTA0MTBmNjg4MGM5YWJiMGQ5MmRmMTRkOGFkYzMxNjAxYmRkN2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4miv2E6Tqps6jdzEc72gDIrinpo Ilxp9fuVjBp2JlPfgn2rvRfV+B9eG+CIt45BusRduWBTIoykLbfdQXdDIoYJ7enH YymUrSTZ+w9/6Uv8cwiVVrr9ANFqObjThSqohEUtTWds2g5gJTkWaDJC5V1WSQ9O 6slGugsr3mP68+vMf1q/pbEAHuHPuMVUKN/mgaOtRdKRGlNtaw/FeG4k7HR5EvZL e2WEmQJWzd8KLvE16Le1L92JRz7kp2m8R+av+aoFOBZBr9Mq9MQATFlRuVAnzE3f SwR47Axs4gBaa6rTAUzz9sVDDyQDGhPK7HOyQqTWpWK4pJkv1CC7BHnLQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNoEEPaIDJq7DZLfFNitwxYBvdfUMB8GA1UdIwQY MBaAFDgW4Zskp+jP8Yn6usKIUs2HSKOAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0JiaG15U242TV94aWZxNndvaFN6WWRJbzRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9kNjEyNzUtZTAwYS00YmZiLWJlOGEt MTZiMzZkMDgwMWU5LzEvT0JiaG15U242TV94aWZxNndvaFN6WWRJbzRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9kNjEyNzUtZTAwYS00YmZiLWJlOGEtMTZiMzZkMDgwMWU5 LzEvT0JiaG15U242TV94aWZxNndvaFN6WWRJbzRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALFt8tD1+ lz5Cv7Rm3GFhHtrgpqVGv2NKom4ezG2l5P3hyK10ahy+i3c1l+VTlGcc1TUi2Net y+naOcPmkBS6DMtUr9PWUjk/7MyMot3LSCILQ3Dr3H4k9BTO+Ye1YQT4JUKC+ol8 t3otPTGuzjE0pM4TJjiMySUD0ZJvJ4ElCyC1Z7+ou9R6zSWspDenesy5DU8m//q4 LolXh7rCTN3ddmKL+s99CtwJT7xBFzcvrZM0hZw6/qWct5i7fpBiuBhY647Gs3L/ BXicl5+0N90D8SnETW38BeR2InYJcZWe4IMLww2T3ZxWzXHLFIanRRNA8Wm5PdVO 0NqLMKN0mksVAg== -----END CERTIFICATE-----Generated at Sat Dec 20 19:13:24 2025 by rpki-client