This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.mft File: obceuN8XHmQvGyuQQZAB8fxEXk0.mft (raw, json) Hash identifier: 5iZlIodPg4bA9Xa9yNXI93wVEyUOhOWcAr5EPq+kCps= Subject key identifier: 2E:E0:16:D7:FE:15:C1:53:17:6D:79:CA:C6:F8:70:17:9B:A7:94:C2 Authority key identifier: A1:B7:1E:B8:DF:17:1E:64:2F:1B:2B:90:41:90:01:F1:FC:44:5E:4D Certificate issuer: /CN=a1b71eb8df171e642f1b2b90419001f1fc445e4d Certificate serial: 019B4A71245F58AE667C2333B24A2DF695DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obceuN8XHmQvGyuQQZAB8fxEXk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.mft Manifest number: 1055 Signing time: Tue 23 Dec 2025 09:01:27 +0000 Manifest this update: Tue 23 Dec 2025 09:01:27 +0000 Manifest next update: Wed 24 Dec 2025 09:01:27 +0000 Files and hashes: 1: cGMojoHA_ji4dpM9uQ1afR_tOH0.roa (hash: i1gFi8NRL0iquVx1S2o3krHyHH6AFrbXa2Ge0Nqnor8=) 2: obceuN8XHmQvGyuQQZAB8fxEXk0.crl (hash: Nl/nzDz4emTydAwdRJZdz+47xTBaf08rUax8nZ7+C6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.mft rsync://rpki.ripe.net/repository/DEFAULT/obceuN8XHmQvGyuQQZAB8fxEXk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:71:24:5f:58:ae:66:7c:23:33:b2:4a:2d:f6:95:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1b71eb8df171e642f1b2b90419001f1fc445e4d Validity Not Before: Dec 23 09:01:27 2025 GMT Not After : Dec 24 09:01:27 2025 GMT Subject: CN=2ee016d7fe15c153176d79cac6f870179ba794c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3b:30:b6:99:74:26:88:8a:2a:1c:bc:ed:3a: b4:94:36:12:e8:cf:2e:8a:3c:79:94:41:f5:ed:cf: e7:dd:f3:f2:8f:59:04:33:d5:8f:4d:36:53:06:0a: 35:ea:40:d2:46:64:1e:9e:50:e3:a6:c8:a7:0d:05: e9:97:53:42:84:25:8b:1d:b7:2e:7d:69:a9:09:99: e8:e9:c0:2f:89:be:70:36:4b:3e:5a:c7:23:ba:4b: d5:0a:f2:84:4b:f7:73:22:71:76:79:01:9c:b0:0b: 36:28:0d:a3:cf:52:1d:ce:f3:33:d6:df:b6:bd:55: 5f:8f:39:bc:e6:cc:bd:af:d9:b3:6e:c6:ff:48:fc: 35:32:21:05:6c:5f:c1:02:17:88:7e:50:13:bd:51: a2:77:8b:b7:44:c3:d2:5e:58:77:33:13:57:a5:a4: 70:25:40:ae:2a:47:1c:11:55:ad:66:ef:5e:7d:d8: 50:0f:8f:82:e3:8a:16:ad:a3:70:03:33:fc:4f:f8: 35:8a:75:9e:0d:80:80:f8:ef:83:ba:2f:1c:9f:37: b4:6c:3d:93:52:ee:4d:24:e5:c5:67:4d:36:54:95: c3:1c:18:69:ef:1e:c8:64:c7:a2:57:a2:4b:8b:3f: 61:9c:8e:f6:c1:93:5b:76:49:a1:58:12:40:f2:78: 4c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E0:16:D7:FE:15:C1:53:17:6D:79:CA:C6:F8:70:17:9B:A7:94:C2 X509v3 Authority Key Identifier: keyid:A1:B7:1E:B8:DF:17:1E:64:2F:1B:2B:90:41:90:01:F1:FC:44:5E:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obceuN8XHmQvGyuQQZAB8fxEXk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:f0:f3:95:b1:cd:16:dd:09:1e:b6:2d:e4:d0:1d:3f:ac:36: 5b:a7:4d:0a:8e:bf:d6:22:1f:42:10:93:e4:b7:8a:a4:e0:34: 5b:00:ee:8d:da:bb:1e:19:ff:2e:71:82:52:b1:8a:a8:c2:06: 64:1d:ed:60:e4:0f:79:6e:04:53:ac:7d:76:9c:3f:cb:14:bf: 52:2c:bb:14:db:19:58:dc:26:ed:7f:84:13:c1:46:8f:40:6d: 9d:76:42:5c:e0:8d:7e:67:80:c1:ab:22:47:a9:6d:2e:3e:0b: 52:1e:16:8e:1f:36:70:f0:6a:05:51:19:8a:88:d1:5a:d9:1f: de:0f:d2:e0:67:66:46:fe:e5:4e:6a:dd:17:ef:5b:e3:5d:fa: 7b:e5:6a:a8:a1:3e:8d:09:14:7b:f1:76:3a:64:64:34:dd:79: a8:eb:ea:cf:9c:d0:a0:1b:e2:29:96:36:1c:08:5a:26:5f:3f: 03:df:af:e9:8f:5a:e1:bc:d7:8e:d9:22:20:32:ab:54:17:68: e3:02:73:19:5f:b8:af:b6:cb:23:29:4d:b5:16:dc:05:62:1d: 03:c6:0e:a2:00:b4:47:a8:de:3a:88:f3:7f:9a:8e:d6:d9:3e: 3b:33:cf:d2:b8:72:a4:9b:b7:5f:83:42:bb:53:44:fc:4f:e9: 17:5a:a3:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcSRfWK5mfCMzskot9pXaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExYjcxZWI4ZGYxNzFlNjQyZjFiMmI5MDQxOTAwMWYxZmM0 NDVlNGQwHhcNMjUxMjIzMDkwMTI3WhcNMjUxMjI0MDkwMTI3WjAzMTEwLwYDVQQD EygyZWUwMTZkN2ZlMTVjMTUzMTc2ZDc5Y2FjNmY4NzAxNzliYTc5NGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDswtpl0JoiKKhy87Tq0lDYS6M8u ijx5lEH17c/n3fPyj1kEM9WPTTZTBgo16kDSRmQenlDjpsinDQXpl1NChCWLHbcu fWmpCZno6cAvib5wNks+WscjukvVCvKES/dzInF2eQGcsAs2KA2jz1IdzvMz1t+2 vVVfjzm85sy9r9mzbsb/SPw1MiEFbF/BAheIflATvVGid4u3RMPSXlh3MxNXpaRw JUCuKkccEVWtZu9efdhQD4+C44oWraNwAzP8T/g1inWeDYCA+O+Dui8cnze0bD2T Uu5NJOXFZ002VJXDHBhp7x7IZMeiV6JLiz9hnI72wZNbdkmhWBJA8nhMXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7gFtf+FcFTF215ysb4cBebp5TCMB8GA1UdIwQY MBaAFKG3HrjfFx5kLxsrkEGQAfH8RF5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2JjZXVOOFhIbVF2R3l1UVFaQUI4ZnhFWGswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9mMDg4YmQtNTAyOS00OTAzLTk2MTYt MDY3MmVhMDQ0MGJiLzEvb2JjZXVOOFhIbVF2R3l1UVFaQUI4ZnhFWGswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9mMDg4YmQtNTAyOS00OTAzLTk2MTYtMDY3MmVhMDQ0MGJi LzEvb2JjZXVOOFhIbVF2R3l1UVFaQUI4ZnhFWGswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk/DzlbHN Ft0JHrYt5NAdP6w2W6dNCo6/1iIfQhCT5LeKpOA0WwDujdq7Hhn/LnGCUrGKqMIG ZB3tYOQPeW4EU6x9dpw/yxS/Uiy7FNsZWNwm7X+EE8FGj0BtnXZCXOCNfmeAwasi R6ltLj4LUh4Wjh82cPBqBVEZiojRWtkf3g/S4GdmRv7lTmrdF+9b4136e+VqqKE+ jQkUe/F2OmRkNN15qOvqz5zQoBviKZY2HAhaJl8/A9+v6Y9a4bzXjtkiIDKrVBdo 4wJzGV+4r7bLIylNtRbcBWIdA8YOogC0R6jeOojzf5qO1tk+OzPP0rhypJu3X4NC u1NE/E/pF1qjfw== -----END CERTIFICATE-----Generated at Tue Dec 23 10:51:09 2025 by rpki-client