This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft File: AObmXtdPBsIjqaScPqbT7uyyOFA.mft (raw, json) Hash identifier: nkaBdqMm78mnYXsyoIedXdtWHLhRuHtI2454oR/pfoE= Subject key identifier: B4:90:DD:F6:41:94:2E:71:2F:52:75:32:7B:E9:E1:55:6E:24:13:EC Authority key identifier: 00:E6:E6:5E:D7:4F:06:C2:23:A9:A4:9C:3E:A6:D3:EE:EC:B2:38:50 Certificate issuer: /CN=00e6e65ed74f06c223a9a49c3ea6d3eeecb23850 Certificate serial: 019B3CEC8CC9493705C27A777556A843F0F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft Manifest number: 171B Signing time: Sat 20 Dec 2025 18:01:33 +0000 Manifest this update: Sat 20 Dec 2025 18:01:33 +0000 Manifest next update: Sun 21 Dec 2025 18:01:33 +0000 Files and hashes: 1: AObmXtdPBsIjqaScPqbT7uyyOFA.crl (hash: sXbJeVR9qAxFu8+rvK3TeIDb5Sz7PkGvq2CGxBoB42c=) 2: aayHPIzZH8kuE4buX9L9ekn6vNY.roa (hash: l5K0Mav5diQmhRgoJ50XOjjqH5sf6SBC+nvBy0fzfF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:8c:c9:49:37:05:c2:7a:77:75:56:a8:43:f0:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00e6e65ed74f06c223a9a49c3ea6d3eeecb23850 Validity Not Before: Dec 20 18:01:33 2025 GMT Not After : Dec 21 18:01:33 2025 GMT Subject: CN=b490ddf641942e712f5275327be9e1556e2413ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a9:a6:49:c4:90:41:92:9f:87:49:68:dd:af: 46:90:89:73:e1:91:28:35:f0:98:73:6e:a2:a8:14: 4f:66:c6:7a:70:01:45:ce:7b:fa:2d:cf:48:ae:a3: c9:f8:c6:ca:04:54:dd:3a:6a:d9:13:5b:b4:af:0a: c3:90:02:4d:e4:59:54:01:2c:23:b5:85:09:58:4e: 73:d9:10:c2:6c:08:3b:4c:06:06:03:51:97:b6:66: 4d:55:15:b9:91:0f:52:c2:c7:f8:5b:c4:50:05:95: 17:bc:74:a4:5d:c0:ae:61:cc:7b:5b:6a:c1:5a:d4: 6b:55:3f:b2:09:ea:a6:d5:13:b8:2c:cd:40:8f:e9: 39:6c:98:8b:32:fa:4b:29:e0:81:b6:2d:3d:dd:b8: 4d:7e:2c:a4:a1:0e:a1:66:32:d6:e6:a0:99:ec:2d: 18:52:64:f5:89:4a:db:6c:ab:ed:c4:73:09:c7:fa: 3a:e1:ec:e5:ee:05:5b:38:5f:29:84:d0:71:4c:29: 08:a6:d5:1b:ed:39:70:35:5f:6e:e5:8c:c4:5d:2b: eb:ca:d0:11:8d:47:b3:1b:d0:4f:1f:87:a5:d2:7d: fe:92:e2:57:f7:47:79:17:3c:48:05:0e:2d:15:4d: 6d:f7:9a:40:44:e0:7a:88:1a:ac:88:44:ae:54:13: 7b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:90:DD:F6:41:94:2E:71:2F:52:75:32:7B:E9:E1:55:6E:24:13:EC X509v3 Authority Key Identifier: keyid:00:E6:E6:5E:D7:4F:06:C2:23:A9:A4:9C:3E:A6:D3:EE:EC:B2:38:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e0:e1:4c:1f:23:f9:63:ef:f1:80:55:d5:3b:9b:08:45:50:e0: 1c:eb:9f:1e:44:0b:0c:31:fe:0d:c7:7e:49:10:c6:64:df:83: 63:91:89:64:a5:37:30:df:6e:4b:9e:2d:99:f2:a2:0b:26:34: da:8c:c3:e5:82:4f:e9:ee:70:1f:c8:50:9a:dd:e1:73:21:f8: 7d:a0:d2:91:e9:af:0a:67:53:75:fd:ea:5d:2e:74:7c:8d:47: d8:8a:2b:0e:28:ce:cc:63:a1:f5:57:fa:6a:c7:5a:4c:b8:30: aa:0f:00:fa:a1:3e:d5:98:e1:aa:94:dc:36:f9:06:b1:2a:82: 88:ae:94:36:5d:18:17:d5:9b:91:88:31:b8:b2:3c:c1:3a:22: de:b8:ce:62:46:c6:5c:cf:d6:81:2c:36:8d:26:1d:60:b2:78: b6:e4:a9:06:e3:0b:95:32:ac:29:fe:98:9c:50:20:f0:6f:81: ca:1e:01:d8:83:d9:b8:3f:ce:c0:c7:01:63:1f:af:22:ed:58: c1:68:4b:04:82:a2:07:29:78:e8:d5:87:fe:62:80:52:43:4f: f0:36:60:7f:20:ea:9a:11:a1:d1:4b:40:95:65:5b:a1:3e:18: e9:97:30:f1:d0:66:95:4f:1c:cb:5b:0d:8b:dc:ec:77:13:39: 5d:7c:d5:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87IzJSTcFwnp3dVaoQ/D5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwZTZlNjVlZDc0ZjA2YzIyM2E5YTQ5YzNlYTZkM2VlZWNi MjM4NTAwHhcNMjUxMjIwMTgwMTMzWhcNMjUxMjIxMTgwMTMzWjAzMTEwLwYDVQQD EyhiNDkwZGRmNjQxOTQyZTcxMmY1Mjc1MzI3YmU5ZTE1NTZlMjQxM2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKmmScSQQZKfh0lo3a9GkIlz4ZEo NfCYc26iqBRPZsZ6cAFFznv6Lc9IrqPJ+MbKBFTdOmrZE1u0rwrDkAJN5FlUASwj tYUJWE5z2RDCbAg7TAYGA1GXtmZNVRW5kQ9Swsf4W8RQBZUXvHSkXcCuYcx7W2rB WtRrVT+yCeqm1RO4LM1Aj+k5bJiLMvpLKeCBti093bhNfiykoQ6hZjLW5qCZ7C0Y UmT1iUrbbKvtxHMJx/o64ezl7gVbOF8phNBxTCkIptUb7TlwNV9u5YzEXSvrytAR jUezG9BPH4el0n3+kuJX90d5FzxIBQ4tFU1t95pAROB6iBqsiESuVBN7vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLSQ3fZBlC5xL1J1Mnvp4VVuJBPsMB8GA1UdIwQY MBaAFADm5l7XTwbCI6mknD6m0+7ssjhQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU9ibVh0ZFBCc0lqcWFTY1BxYlQ3dXl5T0ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yNGRhNmYtNTA1My00MTRlLTkzNzAt MTZiOWVhZmViNGVhLzEvQU9ibVh0ZFBCc0lqcWFTY1BxYlQ3dXl5T0ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC8yNGRhNmYtNTA1My00MTRlLTkzNzAtMTZiOWVhZmViNGVh LzEvQU9ibVh0ZFBCc0lqcWFTY1BxYlQ3dXl5T0ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4OFMHyP5 Y+/xgFXVO5sIRVDgHOufHkQLDDH+Dcd+SRDGZN+DY5GJZKU3MN9uS54tmfKiCyY0 2ozD5YJP6e5wH8hQmt3hcyH4faDSkemvCmdTdf3qXS50fI1H2IorDijOzGOh9Vf6 asdaTLgwqg8A+qE+1ZjhqpTcNvkGsSqCiK6UNl0YF9WbkYgxuLI8wToi3rjOYkbG XM/WgSw2jSYdYLJ4tuSpBuMLlTKsKf6YnFAg8G+Byh4B2IPZuD/OwMcBYx+vIu1Y wWhLBIKiByl46NWH/mKAUkNP8DZgfyDqmhGh0UtAlWVboT4Y6Zcw8dBmlU8cy1sN i9zsdxM5XXzVRQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:54:06 2025 by rpki-client