This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft File: AObmXtdPBsIjqaScPqbT7uyyOFA.mft (raw, json) Hash identifier: ZKQN8ifHW+7O8Rfk80LnjwtVYh2Pz2q/5zz10fvKpiU= Subject key identifier: 38:63:E7:52:6A:F5:CF:EC:8D:3C:CE:91:03:48:18:C5:B3:DE:F0:25 Authority key identifier: 00:E6:E6:5E:D7:4F:06:C2:23:A9:A4:9C:3E:A6:D3:EE:EC:B2:38:50 Certificate issuer: /CN=00e6e65ed74f06c223a9a49c3ea6d3eeecb23850 Certificate serial: 019B44A6180B25AE34D471AC7DDF7A920917 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft Manifest number: 171F Signing time: Mon 22 Dec 2025 06:01:34 +0000 Manifest this update: Mon 22 Dec 2025 06:01:34 +0000 Manifest next update: Tue 23 Dec 2025 06:01:34 +0000 Files and hashes: 1: AObmXtdPBsIjqaScPqbT7uyyOFA.crl (hash: UiDkx4iMMcL5cNnSEJxl4ed73KZCGNxQSH0v6jrAhUs=) 2: aayHPIzZH8kuE4buX9L9ekn6vNY.roa (hash: l5K0Mav5diQmhRgoJ50XOjjqH5sf6SBC+nvBy0fzfF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a6:18:0b:25:ae:34:d4:71:ac:7d:df:7a:92:09:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00e6e65ed74f06c223a9a49c3ea6d3eeecb23850 Validity Not Before: Dec 22 06:01:34 2025 GMT Not After : Dec 23 06:01:34 2025 GMT Subject: CN=3863e7526af5cfec8d3cce91034818c5b3def025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:33:25:7a:67:b4:04:7a:32:1c:3e:07:fd:1e: 39:e4:e5:ee:3c:73:df:cd:d1:de:4c:b0:9c:fc:c3: 7b:d8:ea:53:f5:a6:df:a5:4c:89:4b:9f:18:c4:32: 03:8f:bc:72:80:3f:bf:df:95:4a:34:8f:51:8f:49: bb:9e:b6:58:de:1f:10:d2:87:2e:c9:8c:22:b0:39: b3:51:e4:4c:bb:d1:05:8e:ef:c8:68:d5:b2:e0:4f: 89:ec:29:b5:80:67:65:e6:76:fb:7d:4e:43:cd:c0: fc:2b:1c:50:28:44:86:75:92:49:db:1a:b4:86:19: ca:7b:b2:e9:b8:66:9d:02:23:eb:55:fa:1e:1b:c5: ec:e4:b2:12:1f:bf:81:30:87:97:52:2f:a4:f6:ff: aa:74:80:e7:db:02:c7:5e:4d:74:b2:a3:c0:18:91: 0a:83:0b:7f:a3:a6:01:72:eb:8e:01:67:6e:f0:c5: 7b:1c:c9:96:46:21:5c:b9:76:f4:68:b2:2d:20:90: 3f:5f:d2:7a:3b:39:bf:23:e1:7d:71:a0:14:d0:f5: 04:31:4c:44:cd:07:ab:cc:b6:77:cb:50:32:e7:33: d9:ba:99:87:6e:17:73:1b:ce:09:8f:38:48:e8:85: 2c:75:4c:22:c2:98:18:9f:97:98:84:86:58:a3:bb: 3f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:63:E7:52:6A:F5:CF:EC:8D:3C:CE:91:03:48:18:C5:B3:DE:F0:25 X509v3 Authority Key Identifier: keyid:00:E6:E6:5E:D7:4F:06:C2:23:A9:A4:9C:3E:A6:D3:EE:EC:B2:38:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:ef:b7:88:05:91:dc:75:14:01:51:c6:e7:c3:66:ad:2d:d8: 88:2d:66:2a:27:65:2e:40:91:09:ac:37:de:c7:e9:29:ae:54: cc:2a:8f:f3:07:4c:ba:27:0f:51:aa:2a:f5:9a:ac:46:ce:64: a4:8e:be:42:f2:a5:a3:f4:9e:e3:40:86:6e:16:87:ea:da:95: ec:ca:ad:ae:ed:4a:75:69:aa:2f:e6:c0:1a:d3:52:bc:68:84: 07:70:c6:9f:e7:61:45:e6:66:e7:55:97:54:55:5d:20:38:e1: ba:48:84:85:a1:ae:c1:52:50:81:8e:05:fb:01:57:79:f4:09: 3e:e9:e8:0d:2d:ce:8a:75:0f:f8:aa:f8:2a:6e:8a:8c:4f:4c: 2a:53:96:44:4f:4d:bb:a8:c5:d3:55:1a:55:0c:2d:06:7a:f0: bb:00:9f:72:07:8c:f5:38:39:d7:b0:85:a3:8c:69:9d:c4:25: 55:1f:4b:64:d8:20:cf:4a:f6:e7:fd:bf:c8:13:ee:b1:7c:1c: a6:8e:c2:41:6a:1d:cc:58:85:d1:8f:14:54:81:73:2e:45:34: 7f:5f:67:fc:ff:f4:03:da:42:94:2c:93:46:d7:41:f2:47:77: 3e:8c:e6:72:73:5e:31:fb:4f:6e:7b:34:02:fc:8b:2c:27:23: 68:2f:bd:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEphgLJa401HGsfd96kgkXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwZTZlNjVlZDc0ZjA2YzIyM2E5YTQ5YzNlYTZkM2VlZWNi MjM4NTAwHhcNMjUxMjIyMDYwMTM0WhcNMjUxMjIzMDYwMTM0WjAzMTEwLwYDVQQD EygzODYzZTc1MjZhZjVjZmVjOGQzY2NlOTEwMzQ4MThjNWIzZGVmMDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jMleme0BHoyHD4H/R455OXuPHPf zdHeTLCc/MN72OpT9abfpUyJS58YxDIDj7xygD+/35VKNI9Rj0m7nrZY3h8Q0ocu yYwisDmzUeRMu9EFju/IaNWy4E+J7Cm1gGdl5nb7fU5DzcD8KxxQKESGdZJJ2xq0 hhnKe7LpuGadAiPrVfoeG8Xs5LISH7+BMIeXUi+k9v+qdIDn2wLHXk10sqPAGJEK gwt/o6YBcuuOAWdu8MV7HMmWRiFcuXb0aLItIJA/X9J6Ozm/I+F9caAU0PUEMUxE zQerzLZ3y1Ay5zPZupmHbhdzG84JjzhI6IUsdUwiwpgYn5eYhIZYo7s/MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDhj51Jq9c/sjTzOkQNIGMWz3vAlMB8GA1UdIwQY MBaAFADm5l7XTwbCI6mknD6m0+7ssjhQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU9ibVh0ZFBCc0lqcWFTY1BxYlQ3dXl5T0ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yNGRhNmYtNTA1My00MTRlLTkzNzAt MTZiOWVhZmViNGVhLzEvQU9ibVh0ZFBCc0lqcWFTY1BxYlQ3dXl5T0ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC8yNGRhNmYtNTA1My00MTRlLTkzNzAtMTZiOWVhZmViNGVh LzEvQU9ibVh0ZFBCc0lqcWFTY1BxYlQ3dXl5T0ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0u+3iAWR 3HUUAVHG58NmrS3YiC1mKidlLkCRCaw33sfpKa5UzCqP8wdMuicPUaoq9ZqsRs5k pI6+QvKlo/Se40CGbhaH6tqV7Mqtru1KdWmqL+bAGtNSvGiEB3DGn+dhReZm51WX VFVdIDjhukiEhaGuwVJQgY4F+wFXefQJPunoDS3OinUP+Kr4Km6KjE9MKlOWRE9N u6jF01UaVQwtBnrwuwCfcgeM9Tg517CFo4xpncQlVR9LZNggz0r25/2/yBPusXwc po7CQWodzFiF0Y8UVIFzLkU0f19n/P/0A9pClCyTRtdB8kd3PozmcnNeMftPbns0 AvyLLCcjaC+9xw== -----END CERTIFICATE-----Generated at Mon Dec 22 14:07:35 2025 by rpki-client