This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft File: oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft (raw, json) Hash identifier: xp5jn7Zjzxw4vNLmk9dC6a6KoSEm7ZBbq9ThCmnMczE= Subject key identifier: A4:ED:0C:07:A5:57:F7:AC:CC:BE:56:98:38:94:E0:87:FB:36:A0:15 Authority key identifier: A0:10:12:EC:84:55:00:71:8C:AB:76:C9:DD:0A:F0:10:89:0D:E2:6D Certificate issuer: /CN=a01012ec845500718cab76c9dd0af010890de26d Certificate serial: 019B5305B31A62D21937277F0452D91A8B36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft Manifest number: 1135 Signing time: Thu 25 Dec 2025 01:00:40 +0000 Manifest this update: Thu 25 Dec 2025 01:00:40 +0000 Manifest next update: Fri 26 Dec 2025 01:00:40 +0000 Files and hashes: 1: 94JdYbCitrO6Jgv_ISBvhyruOI0.roa (hash: ALw/2LB5laoxpSR4lEunBO8y3yvQ4uuSEUEx3sv689w=) 2: oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl (hash: dX2smQRGqJ4y9eJKTHCYJzVu1NDS5eoMv5njKX86kjk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:05:b3:1a:62:d2:19:37:27:7f:04:52:d9:1a:8b:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a01012ec845500718cab76c9dd0af010890de26d Validity Not Before: Dec 25 01:00:40 2025 GMT Not After : Dec 26 01:00:40 2025 GMT Subject: CN=a4ed0c07a557f7acccbe56983894e087fb36a015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:54:2b:c7:0d:d9:b7:fd:b8:27:87:7d:85:b4: 63:eb:83:08:12:95:d6:e4:0a:61:4c:af:bf:6c:44: 43:aa:2b:ea:5c:71:db:03:d8:14:86:ee:4a:1e:e2: 2b:9e:6a:39:24:3a:5e:85:81:ec:77:e7:95:12:7e: 8a:48:9a:f9:91:a5:78:39:1f:fb:6b:34:14:a3:92: 4d:11:64:67:f8:31:b0:29:b2:cb:27:ff:e5:08:93: ec:72:e2:50:d5:bf:9d:df:78:c9:c5:f9:5a:69:d0: 37:3e:55:6c:25:70:b6:eb:c6:ab:7a:2b:ca:73:20: 0f:4c:38:a9:92:ed:22:02:a6:5b:46:3e:5a:52:2d: 35:b0:19:73:5e:a9:89:36:56:dd:52:e3:5d:93:d3: fb:70:5a:11:92:03:82:a6:e3:95:15:4f:f1:26:87: 96:a9:77:a6:b3:dd:7f:c1:a8:b3:9c:fb:46:43:86: f2:b4:a9:17:15:0f:c2:72:5d:d2:b3:1f:34:4a:69: df:22:3e:f6:d6:2d:e0:7e:33:96:dd:18:0b:ea:53: bb:66:d8:3e:8a:15:1f:cc:c7:e3:9e:54:51:4d:14: b2:68:c4:ea:51:44:15:81:45:48:d0:bc:cb:be:93: 58:55:53:9a:19:f8:90:2f:7a:c9:ec:79:81:05:d2: b6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:ED:0C:07:A5:57:F7:AC:CC:BE:56:98:38:94:E0:87:FB:36:A0:15 X509v3 Authority Key Identifier: keyid:A0:10:12:EC:84:55:00:71:8C:AB:76:C9:DD:0A:F0:10:89:0D:E2:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ba:f8:06:74:81:c7:cf:19:19:52:94:36:99:df:0a:24:e5: 40:e9:b2:55:4d:b3:18:42:cc:26:45:21:d1:8a:c9:49:5e:79: 32:91:4b:6f:f0:34:32:e7:03:65:09:56:e8:83:8c:d1:f0:67: 34:fd:5f:4c:ac:63:45:6c:34:d3:c7:46:36:b3:23:94:c3:72: dc:5b:f8:19:80:39:2f:9b:15:cd:24:32:c3:e1:ba:54:b2:70: 90:c6:9a:fd:f1:d2:01:ab:bf:d3:61:0b:fa:5f:22:9f:2b:63: 04:b6:27:6b:09:f1:06:cc:a8:17:ec:5a:c7:e7:ec:2e:03:81: ca:99:3e:05:34:30:02:4c:95:ea:3c:0d:c9:67:1a:31:2e:49: f4:0e:9b:ce:5f:d0:f2:aa:51:ea:45:98:7f:63:d8:84:0a:03: 0b:2e:4c:0f:68:25:27:72:f9:1f:47:f0:7b:53:37:b4:17:21: c1:da:d8:d3:da:61:ea:a4:32:c4:36:84:59:b2:13:f0:07:4c: e6:75:b6:bf:d9:2d:eb:8e:19:36:f6:c9:f8:29:64:54:9a:ff: 6b:54:d1:09:b1:ea:e4:b7:0d:cb:4d:f2:98:ae:9f:03:69:be: df:59:bf:36:99:13:29:3e:99:56:99:99:fa:31:7c:13:c8:64: 59:2d:d5:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTBbMaYtIZNyd/BFLZGos2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwMTAxMmVjODQ1NTAwNzE4Y2FiNzZjOWRkMGFmMDEwODkw ZGUyNmQwHhcNMjUxMjI1MDEwMDQwWhcNMjUxMjI2MDEwMDQwWjAzMTEwLwYDVQQD EyhhNGVkMGMwN2E1NTdmN2FjY2NiZTU2OTgzODk0ZTA4N2ZiMzZhMDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslQrxw3Zt/24J4d9hbRj64MIEpXW 5AphTK+/bERDqivqXHHbA9gUhu5KHuIrnmo5JDpehYHsd+eVEn6KSJr5kaV4OR/7 azQUo5JNEWRn+DGwKbLLJ//lCJPscuJQ1b+d33jJxflaadA3PlVsJXC268areivK cyAPTDipku0iAqZbRj5aUi01sBlzXqmJNlbdUuNdk9P7cFoRkgOCpuOVFU/xJoeW qXems91/waiznPtGQ4bytKkXFQ/Ccl3Ssx80SmnfIj721i3gfjOW3RgL6lO7Ztg+ ihUfzMfjnlRRTRSyaMTqUUQVgUVI0LzLvpNYVVOaGfiQL3rJ7HmBBdK2vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKTtDAelV/eszL5WmDiU4If7NqAVMB8GA1UdIwQY MBaAFKAQEuyEVQBxjKt2yd0K8BCJDeJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0JBUzdJUlZBSEdNcTNiSjNRcndFSWtONG0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS83YjMwOGMtNzBjZC00ZjI0LWI2MTAt N2FiYTU2OTY1OGQ1LzEvb0JBUzdJUlZBSEdNcTNiSjNRcndFSWtONG0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS83YjMwOGMtNzBjZC00ZjI0LWI2MTAtN2FiYTU2OTY1OGQ1 LzEvb0JBUzdJUlZBSEdNcTNiSjNRcndFSWtONG0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX7r4BnSB x88ZGVKUNpnfCiTlQOmyVU2zGELMJkUh0YrJSV55MpFLb/A0MucDZQlW6IOM0fBn NP1fTKxjRWw008dGNrMjlMNy3Fv4GYA5L5sVzSQyw+G6VLJwkMaa/fHSAau/02EL +l8inytjBLYnawnxBsyoF+xax+fsLgOBypk+BTQwAkyV6jwNyWcaMS5J9A6bzl/Q 8qpR6kWYf2PYhAoDCy5MD2glJ3L5H0fwe1M3tBchwdrY09ph6qQyxDaEWbIT8AdM 5nW2v9kt644ZNvbJ+ClkVJr/a1TRCbHq5LcNy03ymK6fA2m+31m/NpkTKT6ZVpmZ +jF8E8hkWS3V6A== -----END CERTIFICATE-----Generated at Thu Dec 25 06:23:25 2025 by rpki-client