This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft File: oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft (raw, json) Hash identifier: Fb0OmUssLqX8MiWry86vWOLHoxhKq1UV+Ze8S3VLbsI= Subject key identifier: 26:18:5A:DD:14:D6:F5:24:5D:57:90:5F:C1:9B:A0:A8:16:2F:FA:15 Authority key identifier: A0:11:A0:2E:92:9C:43:F0:19:9C:83:26:30:2E:24:89:9C:4A:41:51 Certificate issuer: /CN=a011a02e929c43f0199c8326302e24899c4a4151 Certificate serial: 019B59085E50B48E4E2C9365DA698AE33910 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft Manifest number: 1501 Signing time: Fri 26 Dec 2025 05:01:19 +0000 Manifest this update: Fri 26 Dec 2025 05:01:19 +0000 Manifest next update: Sat 27 Dec 2025 05:01:19 +0000 Files and hashes: 1: ZgCbU_j-D8W_yz4NxjG1uIsvyRs.roa (hash: XLCyo6svOneJBnox9Jy1GVfURxAN14ccdkNtugIRAH8=) 2: oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl (hash: naDxZNoiXHLUjHmgl+GKwsoDtNmgnrPy/NzXyU0KWkE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:08:5e:50:b4:8e:4e:2c:93:65:da:69:8a:e3:39:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a011a02e929c43f0199c8326302e24899c4a4151 Validity Not Before: Dec 26 05:01:19 2025 GMT Not After : Dec 27 05:01:19 2025 GMT Subject: CN=26185add14d6f5245d57905fc19ba0a8162ffa15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2d:6a:01:c3:aa:70:68:8c:cd:ca:67:e2:80: 88:39:f5:25:60:34:94:dc:82:63:9a:65:c6:e6:10: cc:7a:fb:17:f3:7f:22:ec:3c:ce:91:67:37:9a:4b: df:b9:e4:d5:27:df:8c:70:ee:d0:af:53:89:7b:9c: 84:69:43:df:0b:a9:d6:dc:d0:f6:20:01:56:2a:0b: 57:20:f5:94:d0:57:0d:32:3d:eb:e6:03:46:56:ae: 61:d9:02:43:eb:f1:fe:5c:a4:7b:1a:77:70:12:41: 8d:2c:c5:9d:b5:4c:66:a7:a6:c0:46:e9:ca:30:2c: 3f:6a:31:89:ac:e7:3f:2b:84:6f:1c:54:db:c5:2f: f5:bd:33:66:f7:4d:f0:08:44:7b:5f:43:a3:4f:56: f0:92:0b:06:cf:88:e9:f8:7d:cd:09:03:0a:3f:f9: 95:d0:db:54:5c:a3:2c:68:d4:3a:fa:17:21:cf:d5: 26:a9:24:d2:10:62:2c:bb:24:c5:e1:86:bc:ab:ba: 6b:91:35:0f:8d:f0:56:37:80:db:6c:34:ad:09:d7: 4a:e6:5f:e1:df:e1:bf:c4:b2:5b:d0:41:d3:b5:db: e5:c8:16:69:ef:e9:4d:4e:7d:96:b5:73:a8:29:10: 3c:2b:b3:74:a3:e4:7a:0b:1f:b5:e6:28:ad:35:62: 18:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:18:5A:DD:14:D6:F5:24:5D:57:90:5F:C1:9B:A0:A8:16:2F:FA:15 X509v3 Authority Key Identifier: keyid:A0:11:A0:2E:92:9C:43:F0:19:9C:83:26:30:2E:24:89:9C:4A:41:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:6f:3d:fc:72:41:b2:31:09:dd:d4:41:9a:81:02:00:ab:dd: d2:f0:5f:7c:8c:a5:ca:79:9d:3e:e1:45:fb:47:af:e2:9b:77: b3:d9:07:bc:09:a6:a5:c5:2e:b6:5a:31:b0:8b:52:11:6a:a0: 4e:01:55:00:0d:53:e9:82:13:79:59:b6:e8:78:55:5c:7f:24: a6:0a:5a:75:4f:24:28:5b:16:2a:f2:da:77:ae:92:fe:9f:e8: 22:6d:51:8e:fb:57:d0:2d:5a:d5:47:c5:05:ad:83:dc:76:cd: 3c:1d:87:68:be:d5:17:0d:47:79:a3:d4:c4:e5:10:59:b5:f1: 28:6e:2b:c8:2c:06:89:79:af:01:cb:29:76:74:46:f7:72:73: 70:fb:b3:53:c6:77:7f:32:55:31:10:e3:d0:0c:43:ae:99:c3: d5:31:30:ba:bb:1a:74:49:52:99:ca:f9:17:30:ad:d5:fc:28: 9d:a4:d2:58:1f:3b:b1:94:c4:ca:c9:bf:eb:41:12:24:3c:cf: bc:ff:d3:45:ea:2f:84:91:e3:49:7f:53:af:eb:21:d8:bb:7e: 9c:ce:bd:a9:09:95:4f:8f:05:1b:db:e8:af:e9:76:d3:1c:ca: 64:f2:a8:1d:96:97:93:2b:9c:b4:8e:14:7d:47:cd:8e:06:d0: 5e:d8:88:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZCF5QtI5OLJNl2mmK4zkQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwMTFhMDJlOTI5YzQzZjAxOTljODMyNjMwMmUyNDg5OWM0 YTQxNTEwHhcNMjUxMjI2MDUwMTE5WhcNMjUxMjI3MDUwMTE5WjAzMTEwLwYDVQQD EygyNjE4NWFkZDE0ZDZmNTI0NWQ1NzkwNWZjMTliYTBhODE2MmZmYTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAky1qAcOqcGiMzcpn4oCIOfUlYDSU 3IJjmmXG5hDMevsX838i7DzOkWc3mkvfueTVJ9+McO7Qr1OJe5yEaUPfC6nW3ND2 IAFWKgtXIPWU0FcNMj3r5gNGVq5h2QJD6/H+XKR7GndwEkGNLMWdtUxmp6bARunK MCw/ajGJrOc/K4RvHFTbxS/1vTNm903wCER7X0OjT1bwkgsGz4jp+H3NCQMKP/mV 0NtUXKMsaNQ6+hchz9UmqSTSEGIsuyTF4Ya8q7prkTUPjfBWN4DbbDStCddK5l/h 3+G/xLJb0EHTtdvlyBZp7+lNTn2WtXOoKRA8K7N0o+R6Cx+15iitNWIYlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCYYWt0U1vUkXVeQX8GboKgWL/oVMB8GA1UdIwQY MBaAFKARoC6SnEPwGZyDJjAuJImcSkFRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0JHZ0xwS2NRX0FabklNbU1DNGtpWnhLUVZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mOTdkN2UtODA3OC00Y2VlLWFmNzYt OWY2ZDBiZmQyMDU4LzEvb0JHZ0xwS2NRX0FabklNbU1DNGtpWnhLUVZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9mOTdkN2UtODA3OC00Y2VlLWFmNzYtOWY2ZDBiZmQyMDU4 LzEvb0JHZ0xwS2NRX0FabklNbU1DNGtpWnhLUVZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEG89/HJB sjEJ3dRBmoECAKvd0vBffIylynmdPuFF+0ev4pt3s9kHvAmmpcUutloxsItSEWqg TgFVAA1T6YITeVm26HhVXH8kpgpadU8kKFsWKvLad66S/p/oIm1RjvtX0C1a1UfF Ba2D3HbNPB2HaL7VFw1HeaPUxOUQWbXxKG4ryCwGiXmvAcspdnRG93JzcPuzU8Z3 fzJVMRDj0AxDrpnD1TEwursadElSmcr5FzCt1fwonaTSWB87sZTEysm/60ESJDzP vP/TReovhJHjSX9Tr+sh2Lt+nM69qQmVT48FG9vor+l20xzKZPKoHZaXkyuctI4U fUfNjgbQXtiIVA== -----END CERTIFICATE-----Generated at Fri Dec 26 09:36:00 2025 by rpki-client