This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft File: OBLJfb0yGVtq-pEUC1UgteDCxb4.mft (raw, json) Hash identifier: WPBpCjpAsPHKaB73b841SlS9b+HdQze6tDnHEjryGqc= Subject key identifier: 38:90:BE:AC:53:C0:92:3E:8B:CA:22:1F:CE:C4:35:0C:4F:C5:9B:E3 Authority key identifier: 38:12:C9:7D:BD:32:19:5B:6A:FA:91:14:0B:55:20:B5:E0:C2:C5:BE Certificate issuer: /CN=3812c97dbd32195b6afa91140b5520b5e0c2c5be Certificate serial: 019B5D53E64499293861A1AF805D9ED59E19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft Manifest number: 14DE Signing time: Sat 27 Dec 2025 01:02:18 +0000 Manifest this update: Sat 27 Dec 2025 01:02:18 +0000 Manifest next update: Sun 28 Dec 2025 01:02:18 +0000 Files and hashes: 1: KgcCICa_-hixWZTTUELiCMTd1qc.roa (hash: aB/2vvsZVUV2pqutYR0WS2bhu7nsx+1f1yx0LZyC04o=) 2: OBLJfb0yGVtq-pEUC1UgteDCxb4.crl (hash: u1+U93bGYsCICD3B9YbHE89ldoCRNe//2XzvjTaXeA4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:53:e6:44:99:29:38:61:a1:af:80:5d:9e:d5:9e:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3812c97dbd32195b6afa91140b5520b5e0c2c5be Validity Not Before: Dec 27 01:02:18 2025 GMT Not After : Dec 28 01:02:18 2025 GMT Subject: CN=3890beac53c0923e8bca221fcec4350c4fc59be3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:36:9a:85:d8:80:bb:a9:39:ad:aa:61:86:6b: 26:41:65:70:5b:48:43:6f:1a:44:aa:a8:74:6c:83: be:f8:95:77:5b:11:3e:9e:0a:49:4d:a5:66:a4:b6: 7b:5a:7c:32:02:36:5f:24:6d:73:e9:07:ea:00:d7: 16:51:83:61:da:84:95:b6:fb:ac:8d:bb:59:e7:b0: e2:89:f1:21:ad:1f:7e:13:00:35:d2:18:e4:b6:61: 35:75:2f:24:c2:80:06:89:79:89:cd:83:e1:ce:d3: 18:01:dc:fd:66:69:84:5d:2a:b3:88:ac:4a:af:61: 3f:2f:51:60:26:32:61:3f:bc:4c:e9:56:5c:81:23: 82:b2:ce:74:06:3b:fc:71:20:86:07:ad:ca:70:74: fc:27:d2:06:e8:44:e8:19:d0:88:41:19:45:8a:74: 7c:fb:ae:9b:a3:b9:05:c6:53:6e:9c:9d:d3:32:44: 2e:d0:64:34:ce:37:fd:9e:a6:b3:89:a1:24:ef:9f: 15:71:13:69:02:13:fd:b3:ab:98:00:41:03:8f:06: 2c:4a:8f:d7:08:75:94:71:cb:98:39:f4:c4:d5:62: 68:f0:7e:3a:9a:de:26:fa:2f:32:af:2a:19:cf:c2: 17:dd:a4:86:83:46:3e:45:3d:7c:8b:3e:c7:4b:f3: 8a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:90:BE:AC:53:C0:92:3E:8B:CA:22:1F:CE:C4:35:0C:4F:C5:9B:E3 X509v3 Authority Key Identifier: keyid:38:12:C9:7D:BD:32:19:5B:6A:FA:91:14:0B:55:20:B5:E0:C2:C5:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:d8:9f:5a:b5:17:c3:42:4b:d7:0b:51:ba:b9:f7:9b:51:1a: 68:e5:1b:f0:ab:e4:a5:79:9d:bb:80:b5:fd:b5:d9:47:d2:21: 98:7a:c1:5d:7a:ef:d9:ac:5d:5a:83:1f:e1:f9:3b:74:ab:68: 1d:7b:a1:08:9c:54:54:52:b6:c3:3e:ad:f4:03:d2:ab:82:90: 2c:9e:d4:c0:64:e5:5f:30:01:38:83:27:62:71:0f:1d:d5:95: cb:11:e5:c5:bf:db:bd:0b:a6:d7:c4:31:3a:08:56:03:4a:71: 02:6a:9b:96:ff:7c:93:18:f3:55:dc:b2:c2:50:df:d7:9b:c4: a8:9f:a1:7e:bf:ff:71:19:a8:bb:44:7b:67:cc:a7:22:be:a8: 8f:19:da:3e:2c:e8:44:14:1e:18:34:c3:e9:9c:2a:2f:8a:31: 5b:8a:8b:b0:dd:99:f7:c4:5b:82:4a:a8:9e:8b:94:d6:d9:b8: 6b:c0:15:81:c0:a5:ba:0e:32:45:f3:8f:77:21:dd:95:89:32: fd:20:01:ed:6e:f8:41:b3:07:8b:d4:4c:a2:b8:bc:b5:e8:06: 77:3e:86:63:b8:6f:8d:de:3d:67:dd:75:35:eb:4e:d6:b4:69: 0f:34:4f:5d:6d:cf:ec:e7:8c:bd:d1:3a:4f:54:a4:75:b5:34: c1:3b:a7:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdU+ZEmSk4YaGvgF2e1Z4ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MTJjOTdkYmQzMjE5NWI2YWZhOTExNDBiNTUyMGI1ZTBj MmM1YmUwHhcNMjUxMjI3MDEwMjE4WhcNMjUxMjI4MDEwMjE4WjAzMTEwLwYDVQQD EygzODkwYmVhYzUzYzA5MjNlOGJjYTIyMWZjZWM0MzUwYzRmYzU5YmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDaahdiAu6k5raphhmsmQWVwW0hD bxpEqqh0bIO++JV3WxE+ngpJTaVmpLZ7WnwyAjZfJG1z6QfqANcWUYNh2oSVtvus jbtZ57DiifEhrR9+EwA10hjktmE1dS8kwoAGiXmJzYPhztMYAdz9ZmmEXSqziKxK r2E/L1FgJjJhP7xM6VZcgSOCss50Bjv8cSCGB63KcHT8J9IG6EToGdCIQRlFinR8 +66bo7kFxlNunJ3TMkQu0GQ0zjf9nqaziaEk758VcRNpAhP9s6uYAEEDjwYsSo/X CHWUccuYOfTE1WJo8H46mt4m+i8yryoZz8IX3aSGg0Y+RT18iz7HS/OKxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDiQvqxTwJI+i8oiH87ENQxPxZvjMB8GA1UdIwQY MBaAFDgSyX29MhlbavqRFAtVILXgwsW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0JMSmZiMHlHVnRxLXBFVUMxVWd0ZURDeGI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jYjUzZmMtNzA5Ni00NTk0LTkxYjEt ZDkyNzg1YTYxMjE5LzEvT0JMSmZiMHlHVnRxLXBFVUMxVWd0ZURDeGI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9jYjUzZmMtNzA5Ni00NTk0LTkxYjEtZDkyNzg1YTYxMjE5 LzEvT0JMSmZiMHlHVnRxLXBFVUMxVWd0ZURDeGI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqdifWrUX w0JL1wtRurn3m1EaaOUb8KvkpXmdu4C1/bXZR9IhmHrBXXrv2axdWoMf4fk7dKto HXuhCJxUVFK2wz6t9APSq4KQLJ7UwGTlXzABOIMnYnEPHdWVyxHlxb/bvQum18Qx OghWA0pxAmqblv98kxjzVdyywlDf15vEqJ+hfr//cRmou0R7Z8ynIr6ojxnaPizo RBQeGDTD6ZwqL4oxW4qLsN2Z98RbgkqonouU1tm4a8AVgcClug4yRfOPdyHdlYky /SAB7W74QbMHi9RMori8tegGdz6GY7hvjd49Z911NetO1rRpDzRPXW3P7OeMvdE6 T1SkdbU0wTunuQ== -----END CERTIFICATE-----Generated at Sat Dec 27 02:19:19 2025 by rpki-client