This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft File: fobc3nEdVFNTl0szlVEI2d9Atuk.mft (raw, json) Hash identifier: PDdjph6qAvpB6W9TWqh+6jYTUqlXuH5ErNIas4R6p8k= Subject key identifier: 18:2A:97:35:E0:11:47:D4:6C:9F:28:1F:D8:62:20:61:5C:37:B9:96 Authority key identifier: 7E:86:DC:DE:71:1D:54:53:53:97:4B:33:95:51:08:D9:DF:40:B6:E9 Certificate issuer: /CN=7e86dcde711d545353974b33955108d9df40b6e9 Certificate serial: 019AF27695D066E88D2E40000C2F799B7FBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft Manifest number: 0FA9 Signing time: Sat 06 Dec 2025 07:00:49 +0000 Manifest this update: Sat 06 Dec 2025 07:00:49 +0000 Manifest next update: Sun 07 Dec 2025 07:00:49 +0000 Files and hashes: 1: JQpnjsOMpFiQQJOrjnkEWtt3EFI.roa (hash: 4t67VWbmiq9bprri9rSmGg0uFh9lfRFrW2ITm8UtRrg=) 2: fobc3nEdVFNTl0szlVEI2d9Atuk.crl (hash: DRDasoJV/pPC+rqKudug4Men/Rfglpyu8i0BYxb+tU8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.crl rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:95:d0:66:e8:8d:2e:40:00:0c:2f:79:9b:7f:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e86dcde711d545353974b33955108d9df40b6e9 Validity Not Before: Dec 6 07:00:49 2025 GMT Not After : Dec 7 07:00:49 2025 GMT Subject: CN=182a9735e01147d46c9f281fd86220615c37b996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:dd:7b:dd:8b:19:09:f2:8f:b4:8f:8d:a7:de: b6:34:03:54:3f:e5:0e:b2:da:de:56:9a:1e:1b:a3: b4:1c:59:8e:6c:cb:2d:53:f9:ed:ad:89:37:8c:1d: 34:8b:30:15:05:43:e4:58:b7:2c:20:a9:33:0a:9a: 89:0f:82:35:75:6f:75:f9:7b:1a:7c:da:27:1f:7b: 20:93:a5:8b:87:da:61:b8:aa:da:a7:51:42:df:01: a5:f6:70:e5:89:de:15:36:7d:80:a1:fb:5d:f9:a7: fb:70:b7:3f:fc:83:da:12:53:87:2c:ec:a8:aa:0b: 89:85:d0:bf:5c:b8:82:8b:48:2f:b9:c3:bd:e3:75: 29:6e:31:b8:b3:46:d1:44:fb:a7:2a:d6:1b:b5:82: 18:a8:e9:0f:42:88:11:11:7f:f1:2a:4a:b2:49:83: fe:d7:18:d1:7e:4e:93:19:b4:2a:07:55:ae:04:d3: 41:26:63:f8:d2:52:41:9d:7e:79:d5:c3:b9:1c:ae: 97:85:f9:54:4a:76:ff:e1:62:60:6b:8d:77:d8:64: 1c:8a:a8:c0:9c:6b:b4:9c:66:a2:68:3d:10:5f:4e: 79:1f:2c:58:d7:b6:42:61:46:44:f7:d1:1c:c7:b2: b0:1f:eb:4c:95:79:a7:3e:8b:d4:5b:ca:8a:72:17: 17:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:2A:97:35:E0:11:47:D4:6C:9F:28:1F:D8:62:20:61:5C:37:B9:96 X509v3 Authority Key Identifier: keyid:7E:86:DC:DE:71:1D:54:53:53:97:4B:33:95:51:08:D9:DF:40:B6:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:94:4a:94:73:cb:d8:22:9a:7a:82:0a:c3:4c:2a:80:b9:15: 4f:8e:74:d3:a4:33:d3:8b:e6:c7:bc:98:3d:5a:1c:1a:5d:9b: 05:6f:49:7a:c8:ca:c5:45:8f:e6:04:f9:93:73:1f:49:c6:05: 79:60:1d:44:36:b2:01:61:37:24:f5:37:ef:85:6e:23:5c:c4: f1:40:72:0c:a5:f4:a0:d6:db:a0:d9:72:7d:0d:1b:a4:0e:da: ca:43:53:a5:93:fa:ed:ee:f6:ef:d8:a0:f5:0d:c8:a5:b7:2a: ee:e6:e6:3d:0c:8a:0a:fa:36:19:58:c3:c5:e0:01:2b:61:92: 4e:3d:35:f8:f3:00:22:d5:c9:cc:eb:03:e7:d1:de:c9:8b:ac: 57:b2:c4:9d:30:a3:2c:b4:56:2d:f5:09:5e:48:76:6c:7c:21: 58:84:7e:f4:81:19:ed:e0:35:37:bf:57:35:7a:49:5e:f1:77: 04:3c:57:0b:94:63:75:b9:62:be:b8:7a:40:f6:98:ce:10:e0: 69:94:05:63:0a:4c:07:8e:1b:eb:8d:25:b8:1d:28:dd:a7:f2: 78:83:52:31:c4:b3:e7:9a:b7:d3:9f:0d:d4:be:5b:44:0b:3d: 76:89:ba:59:c8:f8:c1:37:f2:56:6c:43:3e:68:1b:79:d8:7d: 1d:21:19:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydpXQZuiNLkAADC95m3+9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlODZkY2RlNzExZDU0NTM1Mzk3NGIzMzk1NTEwOGQ5ZGY0 MGI2ZTkwHhcNMjUxMjA2MDcwMDQ5WhcNMjUxMjA3MDcwMDQ5WjAzMTEwLwYDVQQD EygxODJhOTczNWUwMTE0N2Q0NmM5ZjI4MWZkODYyMjA2MTVjMzdiOTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN173YsZCfKPtI+Np962NANUP+UO streVpoeG6O0HFmObMstU/ntrYk3jB00izAVBUPkWLcsIKkzCpqJD4I1dW91+Xsa fNonH3sgk6WLh9phuKrap1FC3wGl9nDlid4VNn2Aoftd+af7cLc//IPaElOHLOyo qguJhdC/XLiCi0gvucO943UpbjG4s0bRRPunKtYbtYIYqOkPQogREX/xKkqySYP+ 1xjRfk6TGbQqB1WuBNNBJmP40lJBnX551cO5HK6XhflUSnb/4WJga4132GQciqjA nGu0nGaiaD0QX055HyxY17ZCYUZE99Ecx7KwH+tMlXmnPovUW8qKchcXawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBgqlzXgEUfUbJ8oH9hiIGFcN7mWMB8GA1UdIwQY MBaAFH6G3N5xHVRTU5dLM5VRCNnfQLbpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZm9iYzNuRWRWRk5UbDBzemxWRUkyZDlBdHVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny82M2U0MTMtMzVjYS00OWUwLTgyODUt MzVmMWE5MDg4YjQyLzEvZm9iYzNuRWRWRk5UbDBzemxWRUkyZDlBdHVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny82M2U0MTMtMzVjYS00OWUwLTgyODUtMzVmMWE5MDg4YjQy LzEvZm9iYzNuRWRWRk5UbDBzemxWRUkyZDlBdHVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACJRKlHPL 2CKaeoIKw0wqgLkVT45006Qz04vmx7yYPVocGl2bBW9JesjKxUWP5gT5k3MfScYF eWAdRDayAWE3JPU374VuI1zE8UByDKX0oNbboNlyfQ0bpA7aykNTpZP67e7279ig 9Q3Ipbcq7ubmPQyKCvo2GVjDxeABK2GSTj01+PMAItXJzOsD59HeyYusV7LEnTCj LLRWLfUJXkh2bHwhWIR+9IEZ7eA1N79XNXpJXvF3BDxXC5Rjdblivrh6QPaYzhDg aZQFYwpMB44b640luB0o3afyeINSMcSz55q3058N1L5bRAs9dom6Wcj4wTfyVmxD Pmgbedh9HSEZag== -----END CERTIFICATE-----Generated at Sat Dec 6 13:51:30 2025 by rpki-client