This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft File: oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft (raw, json) Hash identifier: A7IDwAb0eKh7QR3cbBtulF7q2MBlDqbgCV1wXUE+lCU= Subject key identifier: 63:04:B7:52:1F:B0:65:21:2F:8A:83:AA:CF:F7:D6:8F:96:63:58:F8 Authority key identifier: A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA Certificate issuer: /CN=a018d68115dc4b730f157906b04426e599b3a8ca Certificate serial: 019B612FD7D952365AECB49A656021EF5BE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft Manifest number: 0D64 Signing time: Sat 27 Dec 2025 19:01:23 +0000 Manifest this update: Sat 27 Dec 2025 19:01:23 +0000 Manifest next update: Sun 28 Dec 2025 19:01:23 +0000 Files and hashes: 1: OwUS3NXybv4j2e2fp7XuRCsj9G8.roa (hash: 1wSHkE+/1+8ByWbwo11cGeXiOHBKl5OZ9BEstqVoHFw=) 2: oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl (hash: kxX4vp0V77Y455Nrl0RrifN8KMQp12HOE7qxeNaefO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 15:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:2f:d7:d9:52:36:5a:ec:b4:9a:65:60:21:ef:5b:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a018d68115dc4b730f157906b04426e599b3a8ca Validity Not Before: Dec 27 19:01:23 2025 GMT Not After : Dec 28 19:01:23 2025 GMT Subject: CN=6304b7521fb065212f8a83aacff7d68f966358f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:28:a1:ee:bc:90:2e:dc:d6:7b:57:d6:92:e8: 66:1f:c7:da:90:82:dc:fa:6e:4e:17:ab:0f:c2:59: 92:4e:ea:24:b4:2b:c9:92:8f:23:a1:c3:45:9d:79: 68:e1:21:2d:2f:b4:e3:1d:4a:be:7f:ea:b2:cf:e2: 51:02:ad:e1:a3:00:ba:d8:b7:5c:bf:7b:50:2c:bb: 92:b4:28:3e:cf:7d:76:88:af:28:9c:a2:0d:f0:ab: f9:e1:e5:a6:be:08:4f:89:1b:d3:43:a9:ba:af:c1: af:7c:08:7b:a8:af:88:f7:04:b3:36:c8:69:5b:cd: e8:6f:c3:c6:bf:62:30:6e:66:d5:fb:eb:7a:ac:a7: 1f:97:bb:89:e6:c2:ce:a1:57:40:37:ce:f8:94:57: 85:a5:31:d7:e7:59:6e:97:04:8c:7b:71:80:58:ea: 2a:6b:cf:dc:f3:d5:1e:94:c3:78:ad:d0:de:12:cf: 44:e6:2a:e2:95:e8:2e:5a:f9:41:66:ec:ee:d3:57: 00:f8:0a:0a:86:1e:ac:e8:8b:09:32:2c:c0:a1:2e: 8e:8c:20:b5:e4:a5:5b:9a:f1:b2:ec:4e:33:ad:d2: c5:88:4b:42:e2:06:b6:cc:41:08:5a:a0:00:69:65: b0:1f:b1:e0:cb:f6:57:3c:20:fb:71:15:48:31:c3: 3b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:04:B7:52:1F:B0:65:21:2F:8A:83:AA:CF:F7:D6:8F:96:63:58:F8 X509v3 Authority Key Identifier: keyid:A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:05:b6:e4:99:ce:2b:7b:ca:4f:2c:9f:06:14:37:2e:29:28: 2e:89:6c:c8:11:30:d6:68:38:d0:7a:31:eb:61:17:f3:a4:f1: 37:44:4c:50:6a:44:7b:d5:24:a3:7f:9e:e5:e4:f8:8e:6d:64: e5:4f:64:68:34:41:0b:1c:9f:00:51:a6:12:33:e7:59:35:4e: 73:d0:06:fb:2c:a8:ff:8a:82:cd:79:b0:fa:99:c3:35:26:11: 69:41:a3:7c:da:81:06:7e:7c:1c:d9:fd:37:36:33:5f:9c:79: a5:8b:fc:47:b0:ec:f4:b5:19:25:3a:5e:59:4d:50:6b:d5:ad: 0f:73:a7:27:c9:cd:70:c1:00:6d:dd:75:7d:94:bc:35:4b:7b: 0e:8a:cc:5a:79:bb:c1:41:f4:ef:98:32:e4:14:e5:14:67:03: a6:0b:9e:52:a9:15:38:d2:43:d8:8e:66:5b:38:78:ff:d3:03: c5:24:bc:42:3c:11:85:44:2d:23:86:0a:4c:83:aa:be:db:41: ad:1b:b4:63:80:4e:36:0f:d4:18:e1:df:06:79:86:45:4f:82: dd:bf:f6:23:2f:01:87:56:35:19:3a:ea:26:f3:43:bc:96:28: c9:b9:8b:02:86:86:fc:8f:37:04:c1:a1:f3:1e:76:51:83:1d: 9f:c3:64:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZthL9fZUjZa7LSaZWAh71viMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwMThkNjgxMTVkYzRiNzMwZjE1NzkwNmIwNDQyNmU1OTli M2E4Y2EwHhcNMjUxMjI3MTkwMTIzWhcNMjUxMjI4MTkwMTIzWjAzMTEwLwYDVQQD Eyg2MzA0Yjc1MjFmYjA2NTIxMmY4YTgzYWFjZmY3ZDY4Zjk2NjM1OGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCih7ryQLtzWe1fWkuhmH8fakILc +m5OF6sPwlmSTuoktCvJko8jocNFnXlo4SEtL7TjHUq+f+qyz+JRAq3howC62Ldc v3tQLLuStCg+z312iK8onKIN8Kv54eWmvghPiRvTQ6m6r8GvfAh7qK+I9wSzNshp W83ob8PGv2IwbmbV++t6rKcfl7uJ5sLOoVdAN874lFeFpTHX51lulwSMe3GAWOoq a8/c89UelMN4rdDeEs9E5irileguWvlBZuzu01cA+AoKhh6s6IsJMizAoS6OjCC1 5KVbmvGy7E4zrdLFiEtC4ga2zEEIWqAAaWWwH7Hgy/ZXPCD7cRVIMcM7XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGMEt1IfsGUhL4qDqs/31o+WY1j4MB8GA1UdIwQY MBaAFKAY1oEV3EtzDxV5BrBEJuWZs6jKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0JqV2dSWGNTM01QRlhrR3NFUW01Wm16cU1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC80NjQ2NjAtN2E2ZS00OWE3LTkwM2Qt NWNiYzYzNmJkN2U3LzEvb0JqV2dSWGNTM01QRlhrR3NFUW01Wm16cU1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC80NjQ2NjAtN2E2ZS00OWE3LTkwM2QtNWNiYzYzNmJkN2U3 LzEvb0JqV2dSWGNTM01QRlhrR3NFUW01Wm16cU1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlQW25JnO K3vKTyyfBhQ3LikoLolsyBEw1mg40Hox62EX86TxN0RMUGpEe9Uko3+e5eT4jm1k 5U9kaDRBCxyfAFGmEjPnWTVOc9AG+yyo/4qCzXmw+pnDNSYRaUGjfNqBBn58HNn9 NzYzX5x5pYv8R7Ds9LUZJTpeWU1Qa9WtD3OnJ8nNcMEAbd11fZS8NUt7DorMWnm7 wUH075gy5BTlFGcDpgueUqkVONJD2I5mWzh4/9MDxSS8QjwRhUQtI4YKTIOqvttB rRu0Y4BONg/UGOHfBnmGRU+C3b/2Iy8Bh1Y1GTrqJvNDvJYoybmLAoaG/I83BMGh 8x52UYMdn8NkYw== -----END CERTIFICATE-----Generated at Sat Dec 27 21:02:36 2025 by rpki-client