This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft File: ObCMosZLpzX0sUUhbdFNmfCCnw8.mft (raw, json) Hash identifier: olOhE0UOWUqpFSUQYQoyuA598FWqOKAIMzDY8dgVeIo= Subject key identifier: D7:C4:97:90:AF:54:08:38:01:00:C7:50:F2:82:D9:09:51:82:1D:2C Authority key identifier: 39:B0:8C:A2:C6:4B:A7:35:F4:B1:45:21:6D:D1:4D:99:F0:82:9F:0F Certificate issuer: /CN=39b08ca2c64ba735f4b145216dd14d99f0829f0f Certificate serial: 019B3E3587608466CFB42846A7B2E8456782 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft Manifest number: D9 Signing time: Sun 21 Dec 2025 00:00:53 +0000 Manifest this update: Sun 21 Dec 2025 00:00:53 +0000 Manifest next update: Mon 22 Dec 2025 00:00:53 +0000 Files and hashes: 1: 1xRN2ISB9yDhR3Q54HcBc-sUzRM.roa (hash: ggo342L8QjroxZeBPHXxlyJmrWPYU4LhAqkE4B3nRK4=) 2: ObCMosZLpzX0sUUhbdFNmfCCnw8.crl (hash: pc5mxvyux6goBqvmhUTuKkEjDKmYhfq4Yvjnvygbxrs=) 3: tnM9DnrSRmOo18qNgvvkTy18Wls.roa (hash: a6GY2FMx4xs8RMENf2iVpRjn282lRrR2VnauLywusWI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:35:87:60:84:66:cf:b4:28:46:a7:b2:e8:45:67:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39b08ca2c64ba735f4b145216dd14d99f0829f0f Validity Not Before: Dec 21 00:00:53 2025 GMT Not After : Dec 22 00:00:53 2025 GMT Subject: CN=d7c49790af5408380100c750f282d90951821d2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:70:63:86:15:9d:a5:f8:81:0e:48:f9:ea:8c: e4:17:f8:98:8a:72:7c:b9:28:ba:2b:ce:e5:9f:83: a2:f2:f6:c3:a9:6c:b4:9e:d0:c4:ea:2b:3c:d8:59: 00:f4:6c:51:eb:4b:25:ca:82:d0:af:f3:b7:f1:88: 42:7c:90:e3:17:e1:5e:02:e1:ac:8d:95:48:e0:f9: 9b:70:a4:00:4d:90:9f:db:87:ad:55:39:fe:73:d7: 4f:f6:d8:f9:23:37:93:be:eb:38:a0:5c:f2:3c:eb: da:33:2e:c5:d5:6a:df:85:8f:be:4b:11:e7:a2:bf: 2a:31:00:50:57:32:78:a9:10:b7:2c:c0:22:33:5a: 1c:0d:4a:cb:55:fc:b7:f7:07:ce:fc:2d:15:e9:99: 1b:52:4c:fa:88:35:13:ee:11:f3:5d:a0:c1:5c:38: 75:51:6a:98:31:6c:01:04:e3:df:e7:1d:af:ed:36: 8a:69:02:62:f0:bc:52:7f:51:61:c6:26:a4:cf:77: d5:ce:55:8f:36:2a:3b:50:ea:7e:7c:83:4c:7f:8a: f7:f4:a1:7c:b8:15:7b:ca:6d:24:8f:60:98:a0:84: 08:c2:de:f2:33:32:3e:74:9b:ee:e1:c2:ec:81:c0: bd:4e:47:49:e9:6b:c1:84:92:7f:7c:ef:ea:b2:00: 78:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C4:97:90:AF:54:08:38:01:00:C7:50:F2:82:D9:09:51:82:1D:2C X509v3 Authority Key Identifier: keyid:39:B0:8C:A2:C6:4B:A7:35:F4:B1:45:21:6D:D1:4D:99:F0:82:9F:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:77:1e:a6:e7:e9:d8:37:2a:0a:69:5e:04:e5:41:60:b9:8f: 3f:58:aa:80:3a:77:d2:d5:28:ed:e2:12:43:c1:29:c2:e6:6b: a3:b8:18:b2:17:83:ba:c2:cc:7e:43:48:b4:8a:8d:af:7c:6a: 09:a1:92:48:de:3c:c9:52:ef:ae:af:b7:30:25:6b:9b:69:41: 85:34:4c:b7:ec:e0:24:f5:dd:87:75:18:3c:3f:d4:79:dc:b7: 35:45:36:bd:46:8d:65:36:a6:0a:86:e8:08:64:b7:7f:27:ad: c1:cd:c0:48:a2:0e:d5:07:50:9e:2a:54:cd:d0:6f:ed:4c:d2: 51:5e:f0:5a:65:29:e9:c1:1a:59:ae:d6:8a:cf:4d:16:11:5c: 61:aa:68:38:f7:f9:34:92:21:08:d8:c4:c1:b0:af:49:71:6e: 05:3c:fb:6b:b5:58:88:dc:d7:0c:7a:3a:96:43:58:06:c0:46: 4b:8f:61:16:24:75:46:b6:b4:d7:11:df:4f:73:c7:34:b9:ab: 4b:97:89:71:2e:d4:f6:33:60:7c:d7:2b:3d:ae:c0:78:36:56: dc:0c:c9:4b:20:20:a1:4e:e3:a4:56:de:33:dd:a3:be:f7:a2: 98:12:5e:3c:03:95:c4:c0:5a:21:5a:a1:51:f8:f0:70:5a:c6: 9e:26:b1:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+NYdghGbPtChGp7LoRWeCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5YjA4Y2EyYzY0YmE3MzVmNGIxNDUyMTZkZDE0ZDk5ZjA4 MjlmMGYwHhcNMjUxMjIxMDAwMDUzWhcNMjUxMjIyMDAwMDUzWjAzMTEwLwYDVQQD EyhkN2M0OTc5MGFmNTQwODM4MDEwMGM3NTBmMjgyZDkwOTUxODIxZDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXBjhhWdpfiBDkj56ozkF/iYinJ8 uSi6K87ln4Oi8vbDqWy0ntDE6is82FkA9GxR60slyoLQr/O38YhCfJDjF+FeAuGs jZVI4PmbcKQATZCf24etVTn+c9dP9tj5IzeTvus4oFzyPOvaMy7F1WrfhY++SxHn or8qMQBQVzJ4qRC3LMAiM1ocDUrLVfy39wfO/C0V6ZkbUkz6iDUT7hHzXaDBXDh1 UWqYMWwBBOPf5x2v7TaKaQJi8LxSf1Fhxiakz3fVzlWPNio7UOp+fINMf4r39KF8 uBV7ym0kj2CYoIQIwt7yMzI+dJvu4cLsgcC9TkdJ6WvBhJJ/fO/qsgB4VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNfEl5CvVAg4AQDHUPKC2QlRgh0sMB8GA1UdIwQY MBaAFDmwjKLGS6c19LFFIW3RTZnwgp8PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2JDTW9zWkxwelgwc1VVaGJkRk5tZkNDbnc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hYzAwYjctZGE0Mi00NDY0LWJiYzUt MzQxNjA0NGUzNThlLzEvT2JDTW9zWkxwelgwc1VVaGJkRk5tZkNDbnc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9hYzAwYjctZGE0Mi00NDY0LWJiYzUtMzQxNjA0NGUzNThl LzEvT2JDTW9zWkxwelgwc1VVaGJkRk5tZkNDbnc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj3cepufp 2DcqCmleBOVBYLmPP1iqgDp30tUo7eISQ8EpwuZro7gYsheDusLMfkNItIqNr3xq CaGSSN48yVLvrq+3MCVrm2lBhTRMt+zgJPXdh3UYPD/Uedy3NUU2vUaNZTamCobo CGS3fyetwc3ASKIO1QdQnipUzdBv7UzSUV7wWmUp6cEaWa7Wis9NFhFcYapoOPf5 NJIhCNjEwbCvSXFuBTz7a7VYiNzXDHo6lkNYBsBGS49hFiR1Rra01xHfT3PHNLmr S5eJcS7U9jNgfNcrPa7AeDZW3AzJSyAgoU7jpFbeM92jvveimBJePAOVxMBaIVqh UfjwcFrGniaxEw== -----END CERTIFICATE-----Generated at Sun Dec 21 10:35:00 2025 by rpki-client