This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.mft File: obeZgyScHV-GGfE1xtbn43379WI.mft (raw, json) Hash identifier: 4SYkrmYrMkO6dNTGtqn4Idnec0UeSXgjcsYneZDHE+k= Subject key identifier: DC:26:84:3C:4C:9D:B2:5E:66:77:18:E2:C8:2F:F0:F0:1B:62:15:4C Authority key identifier: A1:B7:99:83:24:9C:1D:5F:86:19:F1:35:C6:D6:E7:E3:7D:FB:F5:62 Certificate issuer: /CN=a1b79983249c1d5f8619f135c6d6e7e37dfbf562 Certificate serial: 019B650DE0803F94B8C87CB82AD9E076219A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obeZgyScHV-GGfE1xtbn43379WI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.mft Manifest number: 0FA1 Signing time: Sun 28 Dec 2025 13:02:46 +0000 Manifest this update: Sun 28 Dec 2025 13:02:46 +0000 Manifest next update: Mon 29 Dec 2025 13:02:46 +0000 Files and hashes: 1: obeZgyScHV-GGfE1xtbn43379WI.crl (hash: LJCjZkSLlAMs3rjS2Scr3phdw/qTw6gfHzJVCQXCPN4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.mft rsync://rpki.ripe.net/repository/DEFAULT/obeZgyScHV-GGfE1xtbn43379WI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:0d:e0:80:3f:94:b8:c8:7c:b8:2a:d9:e0:76:21:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1b79983249c1d5f8619f135c6d6e7e37dfbf562 Validity Not Before: Dec 28 13:02:46 2025 GMT Not After : Dec 29 13:02:46 2025 GMT Subject: CN=dc26843c4c9db25e667718e2c82ff0f01b62154c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:75:7d:62:59:df:2a:68:55:ce:f5:2f:ed:f4: eb:42:35:1b:ce:ef:7e:cf:0c:42:95:61:0f:c6:7f: d8:d1:65:71:b7:0c:5e:23:eb:c1:f2:3e:1a:d1:eb: 13:99:cb:dd:f2:32:2f:05:d6:20:fc:99:9e:8b:cb: f4:e4:2d:2b:bc:5d:79:65:b1:ae:f9:e1:6c:40:cb: 00:32:d6:6a:01:0f:b2:e8:62:9e:56:2c:bd:cf:e5: f7:84:e9:1c:1d:19:27:7a:be:6a:81:e7:fc:e6:8e: 4c:72:d5:2f:19:c6:bb:3e:09:3e:84:c3:a2:17:9e: 85:08:ab:5d:ba:73:58:3d:df:30:0e:dc:eb:a7:ec: d4:b9:b8:0b:fd:ba:1f:2c:27:cb:7c:a6:44:56:da: 78:d6:08:31:54:b0:53:29:e3:d7:99:10:32:47:bf: 7d:f5:ac:6f:25:05:a6:6a:f5:f0:62:e7:97:ba:25: d5:c4:d6:00:27:c6:2a:f7:25:b1:35:92:4b:9f:53: 38:49:a2:91:93:af:b1:6c:c3:e1:7c:7b:8d:dd:25: bc:d9:3c:60:43:7b:30:a6:ff:31:10:50:c4:b4:aa: 78:fc:77:91:42:e1:f7:00:8b:4c:34:ed:2e:d1:a9: 02:69:91:21:3a:56:46:9c:53:a9:02:45:14:97:5c: a5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:26:84:3C:4C:9D:B2:5E:66:77:18:E2:C8:2F:F0:F0:1B:62:15:4C X509v3 Authority Key Identifier: keyid:A1:B7:99:83:24:9C:1D:5F:86:19:F1:35:C6:D6:E7:E3:7D:FB:F5:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obeZgyScHV-GGfE1xtbn43379WI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:2c:8a:22:27:1f:7b:d7:e1:6d:ba:79:89:1f:23:69:8e:6e: 89:d7:7a:6b:80:52:fc:c7:bc:a0:8b:97:89:3e:9f:0e:d6:f8: 21:0f:ca:c2:3f:34:33:a0:41:9e:ac:2c:20:ac:6f:b4:78:44: 98:ac:9d:d6:a5:fa:e3:48:e1:18:3d:1a:24:90:0a:db:d9:89: 69:78:fb:22:8b:a2:c6:0d:f2:5d:1f:ed:06:28:1a:8e:bc:77: de:9c:39:6e:62:b9:9c:6a:e2:6f:8c:06:0b:3b:aa:89:0b:53: ae:44:fe:68:74:0f:23:40:5a:14:09:26:1f:72:b2:04:9c:99: d0:ab:07:f7:24:ba:cc:9a:35:db:4b:77:4c:6d:49:af:0e:e3: 0b:d5:22:d9:6b:2d:6e:a3:f8:40:04:11:0b:61:4a:0a:82:37: e2:1a:0b:40:aa:87:f8:7f:8c:96:54:18:03:84:38:a7:ae:8f: cf:3c:ed:37:58:5e:a2:42:b9:c8:88:96:22:8d:21:48:84:06: d4:96:d8:bc:8d:06:af:ec:0f:ad:f8:23:f0:d9:ad:3a:77:4f: 91:c1:ba:31:b6:d7:28:12:c4:6a:b0:17:9b:d3:e3:45:c8:06: 09:7b:61:6d:32:6c:38:24:3e:83:30:15:26:12:1a:e9:35:ae: 94:e0:48:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlDeCAP5S4yHy4KtngdiGaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExYjc5OTgzMjQ5YzFkNWY4NjE5ZjEzNWM2ZDZlN2UzN2Rm YmY1NjIwHhcNMjUxMjI4MTMwMjQ2WhcNMjUxMjI5MTMwMjQ2WjAzMTEwLwYDVQQD EyhkYzI2ODQzYzRjOWRiMjVlNjY3NzE4ZTJjODJmZjBmMDFiNjIxNTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXV9YlnfKmhVzvUv7fTrQjUbzu9+ zwxClWEPxn/Y0WVxtwxeI+vB8j4a0esTmcvd8jIvBdYg/Jmei8v05C0rvF15ZbGu +eFsQMsAMtZqAQ+y6GKeViy9z+X3hOkcHRkner5qgef85o5MctUvGca7Pgk+hMOi F56FCKtdunNYPd8wDtzrp+zUubgL/bofLCfLfKZEVtp41ggxVLBTKePXmRAyR799 9axvJQWmavXwYueXuiXVxNYAJ8Yq9yWxNZJLn1M4SaKRk6+xbMPhfHuN3SW82Txg Q3swpv8xEFDEtKp4/HeRQuH3AItMNO0u0akCaZEhOlZGnFOpAkUUl1ylsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNwmhDxMnbJeZncY4sgv8PAbYhVMMB8GA1UdIwQY MBaAFKG3mYMknB1fhhnxNcbW5+N9+/ViMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2JlWmd5U2NIVi1HR2ZFMXh0Ym40MzM3OVdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xMjJkODktOGU0My00MGMzLTljZWYt YjMzOTE2YjlmODM5LzEvb2JlWmd5U2NIVi1HR2ZFMXh0Ym40MzM3OVdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xMjJkODktOGU0My00MGMzLTljZWYtYjMzOTE2YjlmODM5 LzEvb2JlWmd5U2NIVi1HR2ZFMXh0Ym40MzM3OVdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJSyKIicf e9fhbbp5iR8jaY5uidd6a4BS/Me8oIuXiT6fDtb4IQ/Kwj80M6BBnqwsIKxvtHhE mKyd1qX640jhGD0aJJAK29mJaXj7Iouixg3yXR/tBigajrx33pw5bmK5nGrib4wG CzuqiQtTrkT+aHQPI0BaFAkmH3KyBJyZ0KsH9yS6zJo120t3TG1Jrw7jC9Ui2Wst bqP4QAQRC2FKCoI34hoLQKqH+H+MllQYA4Q4p66PzzztN1heokK5yIiWIo0hSIQG 1JbYvI0Gr+wPrfgj8NmtOndPkcG6MbbXKBLEarAXm9PjRcgGCXthbTJsOCQ+gzAV JhIa6TWulOBI5Q== -----END CERTIFICATE-----Generated at Sun Dec 28 20:13:32 2025 by rpki-client