This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft File: obOdgkR51Np7EvZcFeXEJyX1Jgs.mft (raw, json) Hash identifier: 2Dgw+qD/DbFwAdt/bKi4quguR6jPFftmubFkCwKzwfY= Subject key identifier: C3:F6:E2:0C:6A:D8:4C:AD:29:EB:E5:D6:B2:03:6C:AE:CE:A8:43:31 Authority key identifier: A1:B3:9D:82:44:79:D4:DA:7B:12:F6:5C:15:E5:C4:27:25:F5:26:0B Certificate issuer: /CN=a1b39d824479d4da7b12f65c15e5c42725f5260b Certificate serial: 019B514EAC64619FA3F12C7292B90627605F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft Manifest number: 1228 Signing time: Wed 24 Dec 2025 17:01:08 +0000 Manifest this update: Wed 24 Dec 2025 17:01:08 +0000 Manifest next update: Thu 25 Dec 2025 17:01:08 +0000 Files and hashes: 1: Ahr8cLoMjuhdLqjDmUtP7XZpYek.roa (hash: +5UAkntpANzuu6Eiv6TWU+2W0yxLaSEMeiDxRWb4xso=) 2: obOdgkR51Np7EvZcFeXEJyX1Jgs.crl (hash: cKM6+MRtYD0F7n7OvVdMkZfA2yvf09OPdEZuzrZB+zE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:4e:ac:64:61:9f:a3:f1:2c:72:92:b9:06:27:60:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1b39d824479d4da7b12f65c15e5c42725f5260b Validity Not Before: Dec 24 17:01:08 2025 GMT Not After : Dec 25 17:01:08 2025 GMT Subject: CN=c3f6e20c6ad84cad29ebe5d6b2036caecea84331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f1:72:55:8e:0b:75:78:7e:df:23:12:ba:9b: db:0d:a8:7c:00:23:24:b8:2c:17:41:b2:09:db:25: 4a:2d:c6:f1:a3:8a:45:3d:a1:80:2c:96:67:02:7e: 95:cb:15:13:1b:84:d6:ad:c2:8c:7a:0f:d0:65:a0: 50:06:f5:f9:a1:21:d5:5b:66:b9:fe:43:92:2b:de: 3a:73:16:f6:dd:89:8b:11:8c:3b:7e:4a:c7:41:ef: 88:ae:81:75:70:5a:8d:e3:55:f5:d4:93:03:f0:a7: c0:1f:b1:5a:cc:3c:d7:fa:ad:80:a7:eb:cc:e2:e4: 06:88:92:af:b1:07:e2:61:dd:50:af:43:c8:23:a6: a9:af:b9:50:eb:34:57:5e:3a:ff:29:7e:46:94:5b: d8:33:e6:ad:85:ca:64:f8:40:c4:b5:e7:b3:0e:f4: 5f:c1:eb:6c:17:fd:67:b3:0a:d7:9b:dd:37:0b:40: 4a:ad:3a:94:8e:1e:85:7d:a2:38:c6:17:ac:c4:ed: 77:d1:82:cb:68:30:8c:75:a3:0c:51:a7:2a:0a:35: d9:d2:75:27:ce:2e:c9:0e:76:21:0a:30:2e:67:22: 46:20:c8:09:d9:0b:4f:4f:1b:59:63:a1:18:a0:7f: 1d:e0:db:6b:ff:b3:99:5a:3c:76:bc:d3:68:c6:8b: d0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F6:E2:0C:6A:D8:4C:AD:29:EB:E5:D6:B2:03:6C:AE:CE:A8:43:31 X509v3 Authority Key Identifier: keyid:A1:B3:9D:82:44:79:D4:DA:7B:12:F6:5C:15:E5:C4:27:25:F5:26:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:b7:de:fd:e3:52:b0:2e:33:f2:10:22:7a:03:54:7f:7d:e2: 69:65:c0:d4:f5:53:56:2e:47:8f:27:b7:2f:eb:51:74:00:45: 66:b1:d7:ee:04:38:85:1c:39:12:58:20:29:81:99:32:e1:95: ba:20:ff:f4:b9:c0:c8:60:cd:85:b0:30:f9:92:79:24:ae:c7: 4f:2f:68:15:d3:14:c1:e9:15:b0:44:97:fb:91:fe:5d:68:89: 3e:62:da:bf:2e:28:7b:dd:6f:09:0e:5d:39:a8:b6:43:a5:5a: d3:aa:47:4d:cf:b1:8b:56:13:9c:ed:bd:1d:ed:ce:08:43:62: 41:f3:8c:2d:5a:06:46:b7:09:6c:c2:8d:27:25:26:98:e4:d0: 16:f2:03:3f:d1:50:81:37:1f:cc:12:c0:ee:a5:81:e4:55:35: ff:ab:be:2e:cc:4f:f1:46:3e:65:35:03:9c:2c:17:32:6c:f0: 9c:c5:34:b9:bc:ef:9f:c1:36:0d:65:49:8e:56:67:ae:d1:7f: f4:e0:37:58:b5:a1:67:6b:26:c3:df:76:5c:80:f9:3f:fc:a0: 95:c9:df:0b:9b:92:0e:94:88:77:96:94:1d:0b:a6:36:f1:1b: 37:c1:38:9a:da:f4:6e:eb:b4:f1:1f:ad:cf:a4:1b:d7:4c:2b: b4:67:21:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRTqxkYZ+j8SxykrkGJ2BfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExYjM5ZDgyNDQ3OWQ0ZGE3YjEyZjY1YzE1ZTVjNDI3MjVm NTI2MGIwHhcNMjUxMjI0MTcwMTA4WhcNMjUxMjI1MTcwMTA4WjAzMTEwLwYDVQQD EyhjM2Y2ZTIwYzZhZDg0Y2FkMjllYmU1ZDZiMjAzNmNhZWNlYTg0MzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/FyVY4LdXh+3yMSupvbDah8ACMk uCwXQbIJ2yVKLcbxo4pFPaGALJZnAn6VyxUTG4TWrcKMeg/QZaBQBvX5oSHVW2a5 /kOSK946cxb23YmLEYw7fkrHQe+IroF1cFqN41X11JMD8KfAH7FazDzX+q2Ap+vM 4uQGiJKvsQfiYd1Qr0PII6apr7lQ6zRXXjr/KX5GlFvYM+athcpk+EDEteezDvRf wetsF/1nswrXm903C0BKrTqUjh6FfaI4xhesxO130YLLaDCMdaMMUacqCjXZ0nUn zi7JDnYhCjAuZyJGIMgJ2QtPTxtZY6EYoH8d4Ntr/7OZWjx2vNNoxovQpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMP24gxq2EytKevl1rIDbK7OqEMxMB8GA1UdIwQY MBaAFKGznYJEedTaexL2XBXlxCcl9SYLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2JPZGdrUjUxTnA3RXZaY0ZlWEVKeVgxSmdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8xNzlmODAtODgzOC00ZDRjLWI4ZDEt MzFhOTY0ZjhhMzdmLzEvb2JPZGdrUjUxTnA3RXZaY0ZlWEVKeVgxSmdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8xNzlmODAtODgzOC00ZDRjLWI4ZDEtMzFhOTY0ZjhhMzdm LzEvb2JPZGdrUjUxTnA3RXZaY0ZlWEVKeVgxSmdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ7fe/eNS sC4z8hAiegNUf33iaWXA1PVTVi5Hjye3L+tRdABFZrHX7gQ4hRw5ElggKYGZMuGV uiD/9LnAyGDNhbAw+ZJ5JK7HTy9oFdMUwekVsESX+5H+XWiJPmLavy4oe91vCQ5d Oai2Q6Va06pHTc+xi1YTnO29He3OCENiQfOMLVoGRrcJbMKNJyUmmOTQFvIDP9FQ gTcfzBLA7qWB5FU1/6u+LsxP8UY+ZTUDnCwXMmzwnMU0ubzvn8E2DWVJjlZnrtF/ 9OA3WLWhZ2smw992XID5P/yglcnfC5uSDpSId5aUHQumNvEbN8E4mtr0buu08R+t z6Qb10wrtGchGQ== -----END CERTIFICATE-----Generated at Wed Dec 24 21:34:38 2025 by rpki-client