This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft File: oBocfbuaFXGlv0kkqz_FBJMUX08.mft (raw, json) Hash identifier: RsidNyKwPwVHAo+UstTnDEoybsx238ax/VcKFaj9hWQ= Subject key identifier: E8:D8:D2:61:B6:62:9C:3C:9E:A1:7B:0F:40:45:8A:9A:10:44:BD:DF Authority key identifier: A0:1A:1C:7D:BB:9A:15:71:A5:BF:49:24:AB:3F:C5:04:93:14:5F:4F Certificate issuer: /CN=a01a1c7dbb9a1571a5bf4924ab3fc50493145f4f Certificate serial: 019B2C9CF3FD73D39D8CF3FB2D2F28FAB747 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft Manifest number: 0879 Signing time: Wed 17 Dec 2025 14:00:42 +0000 Manifest this update: Wed 17 Dec 2025 14:00:42 +0000 Manifest next update: Thu 18 Dec 2025 14:00:42 +0000 Files and hashes: 1: oBocfbuaFXGlv0kkqz_FBJMUX08.crl (hash: hqBZk2RKZWtvbRqm8mWCkaF5DqMvSwv5yTzqvgj5Z+8=) 2: tpA0Rm1FAiRRJ_o4IXCI2w9XuPk.roa (hash: zwhvufu3pCnK7pPMp4eZFrdISltUdwm1mGEs0/GHH0M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:9c:f3:fd:73:d3:9d:8c:f3:fb:2d:2f:28:fa:b7:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a01a1c7dbb9a1571a5bf4924ab3fc50493145f4f Validity Not Before: Dec 17 14:00:42 2025 GMT Not After : Dec 18 14:00:42 2025 GMT Subject: CN=e8d8d261b6629c3c9ea17b0f40458a9a1044bddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5f:b8:e8:e5:9c:1b:c7:02:28:ff:34:e7:b0: ce:89:26:ce:68:82:9b:82:fa:77:3e:bf:2b:40:77: e0:f0:c2:ae:40:f1:ba:23:f8:0d:7e:6d:d1:ca:3c: b0:1a:de:0b:7a:7b:3a:78:dd:f1:63:f6:c2:5b:17: ea:bb:88:68:8e:16:86:ca:e0:81:0f:ec:1a:72:8a: d2:76:96:06:92:c6:c0:20:cf:16:c7:8f:50:bb:15: 3e:be:43:eb:60:7a:37:68:70:65:50:5c:c8:fb:bb: 5e:d9:bb:c9:ff:80:e4:a9:41:81:7d:eb:19:4f:f9: f8:5d:de:16:c2:0e:c5:20:d3:9d:f5:3f:e8:c6:cc: e3:b2:07:1b:64:ab:52:56:d7:dd:4a:1b:bf:fa:41: 0b:1a:5a:d5:69:a4:8c:54:5d:97:e5:0e:e7:36:23: 0d:56:93:a2:08:b9:54:08:18:10:bc:ee:51:39:69: c0:77:44:b0:79:bc:da:b1:ef:46:77:83:59:7c:58: ce:1c:af:28:f9:5d:df:ba:8d:0e:7a:3b:f4:60:57: eb:f3:49:fc:b9:a3:b9:57:ce:58:7a:9e:2d:1b:1c: 3a:2a:7c:16:fa:ff:61:fd:40:60:8c:a9:74:6d:7e: 27:56:dd:12:cf:49:30:97:3a:3e:e2:50:fe:0b:c8: 65:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D8:D2:61:B6:62:9C:3C:9E:A1:7B:0F:40:45:8A:9A:10:44:BD:DF X509v3 Authority Key Identifier: keyid:A0:1A:1C:7D:BB:9A:15:71:A5:BF:49:24:AB:3F:C5:04:93:14:5F:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:bd:db:96:03:38:af:40:ab:30:93:ea:9c:1b:29:3e:0e:21: 0a:e9:9f:c7:de:d2:97:a6:e5:b6:43:fc:59:90:a2:d3:eb:53: 76:18:06:1d:72:22:7c:a2:05:ca:5e:bf:bc:a8:df:aa:0f:0c: 60:94:51:77:a0:59:9f:98:10:bc:ba:b7:f7:5d:6b:87:28:96: 63:18:34:93:64:4c:29:c5:86:54:ab:24:55:74:b8:19:4f:8d: 62:04:0e:fd:fa:8f:ff:1e:65:de:eb:88:f8:bf:25:0d:66:60: e6:9c:93:9d:fc:ca:f2:a8:48:23:7a:85:bb:6e:bb:84:35:35: f8:4b:ac:42:1e:b3:6d:07:64:5a:36:4e:5b:08:f3:fa:e1:ad: b5:24:70:78:b4:85:76:c7:0e:13:5f:a2:e1:7f:6f:03:4c:d8: 25:e3:ce:71:d4:64:21:db:60:42:b0:ff:bc:87:69:98:3a:9b: 3c:86:77:96:e1:56:2b:99:f9:ff:71:bf:5e:cb:a9:e3:ce:81: 19:2d:44:04:82:78:56:db:ac:37:6b:91:ce:f2:2b:e1:ee:a6: 35:b4:f7:bf:bb:41:6d:3f:f8:67:13:62:10:86:74:50:a8:79: 35:41:89:95:78:56:1c:77:da:03:01:d1:ba:e5:67:50:fb:ba: 78:c7:eb:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssnPP9c9OdjPP7LS8o+rdHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwMWExYzdkYmI5YTE1NzFhNWJmNDkyNGFiM2ZjNTA0OTMx NDVmNGYwHhcNMjUxMjE3MTQwMDQyWhcNMjUxMjE4MTQwMDQyWjAzMTEwLwYDVQQD EyhlOGQ4ZDI2MWI2NjI5YzNjOWVhMTdiMGY0MDQ1OGE5YTEwNDRiZGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjF+46OWcG8cCKP8057DOiSbOaIKb gvp3Pr8rQHfg8MKuQPG6I/gNfm3RyjywGt4Lens6eN3xY/bCWxfqu4hojhaGyuCB D+wacorSdpYGksbAIM8Wx49QuxU+vkPrYHo3aHBlUFzI+7te2bvJ/4DkqUGBfesZ T/n4Xd4Wwg7FINOd9T/oxszjsgcbZKtSVtfdShu/+kELGlrVaaSMVF2X5Q7nNiMN VpOiCLlUCBgQvO5ROWnAd0Swebzase9Gd4NZfFjOHK8o+V3fuo0Oejv0YFfr80n8 uaO5V85Yep4tGxw6KnwW+v9h/UBgjKl0bX4nVt0Sz0kwlzo+4lD+C8hlfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOjY0mG2Ypw8nqF7D0BFipoQRL3fMB8GA1UdIwQY MBaAFKAaHH27mhVxpb9JJKs/xQSTFF9PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0JvY2ZidWFGWEdsdjBra3F6X0ZCSk1VWDA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9lODk2YjgtMGVhMC00YmJjLThjMzUt MjI2MmM1YmQ3YTJjLzEvb0JvY2ZidWFGWEdsdjBra3F6X0ZCSk1VWDA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9lODk2YjgtMGVhMC00YmJjLThjMzUtMjI2MmM1YmQ3YTJj LzEvb0JvY2ZidWFGWEdsdjBra3F6X0ZCSk1VWDA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACL3blgM4 r0CrMJPqnBspPg4hCumfx97Sl6bltkP8WZCi0+tTdhgGHXIifKIFyl6/vKjfqg8M YJRRd6BZn5gQvLq3911rhyiWYxg0k2RMKcWGVKskVXS4GU+NYgQO/fqP/x5l3uuI +L8lDWZg5pyTnfzK8qhII3qFu267hDU1+EusQh6zbQdkWjZOWwjz+uGttSRweLSF dscOE1+i4X9vA0zYJePOcdRkIdtgQrD/vIdpmDqbPIZ3luFWK5n5/3G/Xsup486B GS1EBIJ4VtusN2uRzvIr4e6mNbT3v7tBbT/4ZxNiEIZ0UKh5NUGJlXhWHHfaAwHR uuVnUPu6eMfrPQ== -----END CERTIFICATE-----Generated at Wed Dec 17 19:54:40 2025 by rpki-client