This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft File: OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft (raw, json) Hash identifier: hV2IUGAAKpDlDrs1UC3nQ6unISfRPHsBnqaaTsXdSrk= Subject key identifier: 15:84:28:48:7A:CD:FC:06:B5:4D:2E:65:0A:20:83:AD:36:B9:83:4C Authority key identifier: 38:12:03:33:7B:0C:D0:6F:CF:C0:45:58:8F:09:7C:BC:24:15:3A:75 Certificate issuer: /CN=381203337b0cd06fcfc045588f097cbc24153a75 Certificate serial: 019B53E16F85296C67CB8041916535CA939F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBIDM3sM0G_PwEVYjwl8vCQVOnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft Manifest number: 0494 Signing time: Thu 25 Dec 2025 05:00:41 +0000 Manifest this update: Thu 25 Dec 2025 05:00:41 +0000 Manifest next update: Fri 26 Dec 2025 05:00:41 +0000 Files and hashes: 1: OBIDM3sM0G_PwEVYjwl8vCQVOnU.crl (hash: LYxejVhk6lwdunERDdGtL0uppBavMmbe837ofjnXwsQ=) 2: e6qgc4D0LObiBDkG-JYeFJ0X1R8.roa (hash: HGLblEw2HtaEUIxL5jALfeyy40mvJ9+sofWltk0ijmU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft rsync://rpki.ripe.net/repository/DEFAULT/OBIDM3sM0G_PwEVYjwl8vCQVOnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:e1:6f:85:29:6c:67:cb:80:41:91:65:35:ca:93:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=381203337b0cd06fcfc045588f097cbc24153a75 Validity Not Before: Dec 25 05:00:41 2025 GMT Not After : Dec 26 05:00:41 2025 GMT Subject: CN=158428487acdfc06b54d2e650a2083ad36b9834c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:20:08:89:4a:00:03:c2:1d:c0:be:96:19:79: e0:e8:60:fe:c6:1f:af:a3:ae:3d:68:55:2e:20:3c: 2b:49:47:1b:81:06:8a:04:ab:19:68:23:00:1a:6f: 79:94:bc:a3:dc:a6:c7:f1:8c:30:16:8d:97:41:0a: 23:66:ab:0d:26:6b:c7:54:c4:02:56:15:20:97:31: 8c:7a:7b:67:c6:9f:36:8e:a0:ab:b8:0b:ba:74:9a: 81:97:94:94:ec:15:fa:08:09:26:23:50:82:80:65: 62:8b:8b:d8:16:07:6e:73:d8:51:0d:bd:fe:1e:89: fc:dd:3a:81:6c:4d:71:72:b6:36:e1:52:7b:7e:6a: 3b:a5:db:ec:65:4f:b2:ff:c0:4e:68:7b:32:34:ce: 08:72:bc:22:bc:7e:c5:c0:1b:9e:66:93:a6:03:a9: 8f:82:4b:f1:0d:4a:23:65:d4:26:c4:e0:63:68:f0: 75:c1:91:4f:9d:ad:c5:c0:91:15:c9:c7:3e:9b:d5: 5c:10:76:71:c9:b0:96:1b:b7:da:41:ea:bd:5d:87: bb:17:da:50:02:bd:d9:71:24:19:c0:ae:be:24:37: bc:f4:d4:51:ff:87:9d:d7:d7:bd:37:2f:eb:01:f5: c9:d9:96:92:ba:02:48:01:5d:62:f2:07:bc:e5:f4: 76:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:84:28:48:7A:CD:FC:06:B5:4D:2E:65:0A:20:83:AD:36:B9:83:4C X509v3 Authority Key Identifier: keyid:38:12:03:33:7B:0C:D0:6F:CF:C0:45:58:8F:09:7C:BC:24:15:3A:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBIDM3sM0G_PwEVYjwl8vCQVOnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:8e:e0:d3:8e:84:82:be:b3:05:dc:35:8c:a0:3c:c3:ef:cb: d1:04:ec:97:c7:6f:1b:e0:ed:c2:e5:90:32:40:a1:d6:a3:d6: bf:fd:bd:2e:52:b5:50:89:b1:39:63:32:eb:ac:ef:66:54:07: 35:5a:23:bb:9b:a7:58:1e:22:cd:ed:ab:8c:38:fa:7a:a7:b8: c6:6b:34:ad:9f:8e:c1:59:64:77:df:21:b9:40:28:a0:b1:b7: c8:9a:7a:45:09:e9:4e:6f:ea:48:11:64:3d:e0:c4:43:18:81: 64:07:63:d0:52:6b:24:2f:d5:e1:f3:5f:00:24:10:91:c6:b2: 36:b3:22:1a:43:fa:5a:e1:3e:6c:e6:76:34:69:2d:8a:c5:0b: 96:ce:a8:c9:c1:a3:b1:63:57:e0:cc:b3:fa:e5:28:21:6f:fa: 2f:55:be:63:eb:64:4f:5c:ad:fd:f4:55:1f:3c:82:07:9d:57: 59:f6:9b:10:5a:20:b4:63:b9:77:7d:f7:7a:fc:8d:d0:32:31: c6:6d:ee:ce:47:90:98:ed:67:6f:91:6f:29:5d:f3:54:3e:6e: fd:85:ce:d4:59:25:cf:21:b5:27:f4:bd:36:ff:a0:59:e4:27: 6b:b1:e4:3b:7c:cd:bd:64:19:59:d7:31:bf:7a:ae:11:d7:38: 6a:7b:a7:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtT4W+FKWxny4BBkWU1ypOfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MTIwMzMzN2IwY2QwNmZjZmMwNDU1ODhmMDk3Y2JjMjQx NTNhNzUwHhcNMjUxMjI1MDUwMDQxWhcNMjUxMjI2MDUwMDQxWjAzMTEwLwYDVQQD EygxNTg0Mjg0ODdhY2RmYzA2YjU0ZDJlNjUwYTIwODNhZDM2Yjk4MzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyAIiUoAA8IdwL6WGXng6GD+xh+v o649aFUuIDwrSUcbgQaKBKsZaCMAGm95lLyj3KbH8YwwFo2XQQojZqsNJmvHVMQC VhUglzGMentnxp82jqCruAu6dJqBl5SU7BX6CAkmI1CCgGVii4vYFgduc9hRDb3+ Hon83TqBbE1xcrY24VJ7fmo7pdvsZU+y/8BOaHsyNM4IcrwivH7FwBueZpOmA6mP gkvxDUojZdQmxOBjaPB1wZFPna3FwJEVycc+m9VcEHZxybCWG7faQeq9XYe7F9pQ Ar3ZcSQZwK6+JDe89NRR/4ed19e9Ny/rAfXJ2ZaSugJIAV1i8ge85fR2JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBWEKEh6zfwGtU0uZQogg602uYNMMB8GA1UdIwQY MBaAFDgSAzN7DNBvz8BFWI8JfLwkFTp1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0JJRE0zc00wR19Qd0VWWWp3bDh2Q1FWT25VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi80Y2Y1YWQtYTZjYS00NGZmLTlkMTgt YzVjNjRiMTM0MjFkLzEvT0JJRE0zc00wR19Qd0VWWWp3bDh2Q1FWT25VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi80Y2Y1YWQtYTZjYS00NGZmLTlkMTgtYzVjNjRiMTM0MjFk LzEvT0JJRE0zc00wR19Qd0VWWWp3bDh2Q1FWT25VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcY7g046E gr6zBdw1jKA8w+/L0QTsl8dvG+DtwuWQMkCh1qPWv/29LlK1UImxOWMy66zvZlQH NVoju5unWB4ize2rjDj6eqe4xms0rZ+OwVlkd98huUAooLG3yJp6RQnpTm/qSBFk PeDEQxiBZAdj0FJrJC/V4fNfACQQkcayNrMiGkP6WuE+bOZ2NGktisULls6oycGj sWNX4Myz+uUoIW/6L1W+Y+tkT1yt/fRVHzyCB51XWfabEFogtGO5d333evyN0DIx xm3uzkeQmO1nb5FvKV3zVD5u/YXO1FklzyG1J/S9Nv+gWeQna7HkO3zNvWQZWdcx v3quEdc4anunbA== -----END CERTIFICATE-----Generated at Thu Dec 25 07:12:56 2025 by rpki-client