This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft File: OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft (raw, json) Hash identifier: 4DrhVG+S5XSAhR18Dnj6R20FidLK+su3pN3NOJkUB+s= Subject key identifier: EA:33:0B:A2:F7:B3:28:D8:E3:20:BB:9A:DD:EB:84:3F:C0:40:72:23 Authority key identifier: 38:12:03:33:7B:0C:D0:6F:CF:C0:45:58:8F:09:7C:BC:24:15:3A:75 Certificate issuer: /CN=381203337b0cd06fcfc045588f097cbc24153a75 Certificate serial: 019B409207682F4BDF3BA1D93D56B3E803D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBIDM3sM0G_PwEVYjwl8vCQVOnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft Manifest number: 048A Signing time: Sun 21 Dec 2025 11:01:10 +0000 Manifest this update: Sun 21 Dec 2025 11:01:10 +0000 Manifest next update: Mon 22 Dec 2025 11:01:10 +0000 Files and hashes: 1: OBIDM3sM0G_PwEVYjwl8vCQVOnU.crl (hash: +R3KVAc+1UTOW7INxZakvYpse7HSAyCbqj0DpyJHykU=) 2: e6qgc4D0LObiBDkG-JYeFJ0X1R8.roa (hash: HGLblEw2HtaEUIxL5jALfeyy40mvJ9+sofWltk0ijmU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft rsync://rpki.ripe.net/repository/DEFAULT/OBIDM3sM0G_PwEVYjwl8vCQVOnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:92:07:68:2f:4b:df:3b:a1:d9:3d:56:b3:e8:03:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=381203337b0cd06fcfc045588f097cbc24153a75 Validity Not Before: Dec 21 11:01:10 2025 GMT Not After : Dec 22 11:01:10 2025 GMT Subject: CN=ea330ba2f7b328d8e320bb9addeb843fc0407223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d4:6b:20:11:00:f8:f4:5e:d1:20:07:32:c6: 2c:d9:0d:48:d9:dc:c3:57:17:ee:50:c5:cd:1b:ff: b0:d3:3d:86:75:b5:7d:e7:7f:ba:f2:92:e7:9c:99: d9:a2:49:bc:89:72:92:be:e0:c0:bf:3e:13:f0:c0: e8:ca:aa:eb:a0:61:b8:70:20:a1:8d:0b:ad:13:84: 52:18:a2:4f:98:61:f2:fd:d4:10:a3:b8:a7:b0:2a: 39:8d:ec:08:e9:25:78:dd:02:8f:f0:26:0a:4b:5a: 66:05:30:0e:1c:1e:6b:08:16:b1:81:ae:c1:45:5d: d8:67:57:a0:28:c3:fe:0b:91:a3:8b:5e:df:3f:01: e8:65:87:cd:15:3b:c2:42:43:8e:be:a1:bc:79:18: d1:9c:60:c2:42:11:ab:d3:29:f8:35:ab:95:b6:bf: 97:71:09:01:83:5c:89:f9:21:23:c6:03:9b:9e:76: 52:98:a5:74:b3:0b:f6:85:fc:29:fe:f5:3c:8c:fd: 2e:c9:82:0d:8e:ba:0d:ee:37:34:ab:78:92:61:8e: 81:35:9b:ba:02:e2:13:81:12:b0:06:59:4c:34:ae: 25:ad:6e:1f:d4:bc:9d:c1:1f:40:f4:25:78:f6:66: 8a:c4:15:67:f5:6b:86:dc:d3:b9:77:15:44:96:ae: 87:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:33:0B:A2:F7:B3:28:D8:E3:20:BB:9A:DD:EB:84:3F:C0:40:72:23 X509v3 Authority Key Identifier: keyid:38:12:03:33:7B:0C:D0:6F:CF:C0:45:58:8F:09:7C:BC:24:15:3A:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBIDM3sM0G_PwEVYjwl8vCQVOnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:9b:35:c9:27:3c:24:06:60:15:76:e9:90:7f:70:8a:43:aa: 15:4e:29:bc:5e:65:5f:c4:5b:99:5e:9f:0b:ce:89:19:13:37: a4:82:f0:fd:58:59:1b:89:86:36:ba:a3:e9:7f:f8:b9:3a:7b: 28:5b:9c:79:38:62:f6:30:06:d7:f5:59:96:c2:4b:11:80:ae: 63:c4:e5:4c:d3:da:cb:ac:4e:31:33:10:4a:77:6a:fd:54:7e: ed:cb:a6:59:3c:71:f9:c1:e0:bd:a4:c3:1a:b9:4d:84:42:f5: b7:a3:6e:ae:42:39:b3:3f:ee:8f:b9:b8:2f:27:66:9e:21:e5: 8b:de:e2:69:f3:f6:38:21:0d:61:d7:c5:3b:93:88:7f:d6:85: fb:b9:9b:bc:85:ef:29:ce:a8:39:03:61:3e:7f:c6:32:99:53: 28:39:89:ca:27:33:ae:3a:c1:74:78:64:d2:37:0e:e0:ab:44: 6c:b5:9a:bf:7e:c1:ce:c3:17:04:12:e0:53:20:b9:ad:04:6e: 36:b3:da:fd:d5:de:0d:68:89:cb:33:e3:d5:6d:57:77:94:3c: 07:f8:9d:88:cc:30:e5:55:30:c8:7e:1f:34:0f:91:96:64:a5: 56:65:b6:1c:c0:8c:a4:4e:72:27:d0:ba:c5:ff:c0:e2:62:e6: 3f:2c:9b:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkgdoL0vfO6HZPVaz6APXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MTIwMzMzN2IwY2QwNmZjZmMwNDU1ODhmMDk3Y2JjMjQx NTNhNzUwHhcNMjUxMjIxMTEwMTEwWhcNMjUxMjIyMTEwMTEwWjAzMTEwLwYDVQQD EyhlYTMzMGJhMmY3YjMyOGQ4ZTMyMGJiOWFkZGViODQzZmMwNDA3MjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9RrIBEA+PRe0SAHMsYs2Q1I2dzD VxfuUMXNG/+w0z2GdbV953+68pLnnJnZokm8iXKSvuDAvz4T8MDoyqrroGG4cCCh jQutE4RSGKJPmGHy/dQQo7insCo5jewI6SV43QKP8CYKS1pmBTAOHB5rCBaxga7B RV3YZ1egKMP+C5Gji17fPwHoZYfNFTvCQkOOvqG8eRjRnGDCQhGr0yn4NauVtr+X cQkBg1yJ+SEjxgObnnZSmKV0swv2hfwp/vU8jP0uyYINjroN7jc0q3iSYY6BNZu6 AuITgRKwBllMNK4lrW4f1LydwR9A9CV49maKxBVn9WuG3NO5dxVElq6H2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOozC6L3syjY4yC7mt3rhD/AQHIjMB8GA1UdIwQY MBaAFDgSAzN7DNBvz8BFWI8JfLwkFTp1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0JJRE0zc00wR19Qd0VWWWp3bDh2Q1FWT25VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi80Y2Y1YWQtYTZjYS00NGZmLTlkMTgt YzVjNjRiMTM0MjFkLzEvT0JJRE0zc00wR19Qd0VWWWp3bDh2Q1FWT25VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi80Y2Y1YWQtYTZjYS00NGZmLTlkMTgtYzVjNjRiMTM0MjFk LzEvT0JJRE0zc00wR19Qd0VWWWp3bDh2Q1FWT25VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW5s1ySc8 JAZgFXbpkH9wikOqFU4pvF5lX8RbmV6fC86JGRM3pILw/VhZG4mGNrqj6X/4uTp7 KFuceThi9jAG1/VZlsJLEYCuY8TlTNPay6xOMTMQSndq/VR+7cumWTxx+cHgvaTD GrlNhEL1t6NurkI5sz/uj7m4LydmniHli97iafP2OCENYdfFO5OIf9aF+7mbvIXv Kc6oOQNhPn/GMplTKDmJyiczrjrBdHhk0jcO4KtEbLWav37BzsMXBBLgUyC5rQRu NrPa/dXeDWiJyzPj1W1Xd5Q8B/idiMww5VUwyH4fNA+RlmSlVmW2HMCMpE5yJ9C6 xf/A4mLmPyybAQ== -----END CERTIFICATE-----Generated at Sun Dec 21 15:59:46 2025 by rpki-client