This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft File: Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft (raw, json) Hash identifier: OxxpAD0jP1cREeVEAhlG6WCLjlTRR+v8v7/J0EhK9Rc= Subject key identifier: 75:D2:09:BF:F7:7B:78:F4:B4:58:BF:4D:92:AD:14:15:26:66:0B:60 Authority key identifier: 46:8F:8A:E4:A2:67:C8:12:F2:42:BF:02:C0:64:EB:92:87:C3:51:55 Certificate issuer: /CN=468f8ae4a267c812f242bf02c064eb9287c35155 Certificate serial: 019AF19B104ABC26E21524279772145E2127 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft Manifest number: 0E58 Signing time: Sat 06 Dec 2025 03:01:02 +0000 Manifest this update: Sat 06 Dec 2025 03:01:02 +0000 Manifest next update: Sun 07 Dec 2025 03:01:02 +0000 Files and hashes: 1: Ro-K5KJnyBLyQr8CwGTrkofDUVU.crl (hash: 94nLcogdXa2pxWG29MqN/7GUMLrnSJbWV2Pk6f+D5Ck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft rsync://rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:10:4a:bc:26:e2:15:24:27:97:72:14:5e:21:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=468f8ae4a267c812f242bf02c064eb9287c35155 Validity Not Before: Dec 6 03:01:02 2025 GMT Not After : Dec 7 03:01:02 2025 GMT Subject: CN=75d209bff77b78f4b458bf4d92ad141526660b60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ef:e9:91:32:0d:e0:64:96:a6:8d:3e:14:d8: 4c:b2:32:67:c9:00:cf:16:b8:51:a9:40:eb:2f:b0: f0:0a:e2:73:bc:cb:ab:e8:34:ce:74:a8:d3:5b:9b: 85:1c:74:bc:66:45:b5:74:8b:1c:96:44:1d:86:90: b2:f1:d0:54:10:3a:b4:40:2e:ac:ba:55:59:f2:4e: e4:06:2f:17:83:9e:f4:43:ce:1f:e2:20:24:df:c6: d6:a9:66:3e:5f:06:61:6e:86:bd:44:45:9a:f7:dc: 22:1c:f9:67:0c:73:f3:78:44:26:be:bd:24:99:13: e8:e9:ff:8e:59:50:ed:8f:b1:9d:e7:e0:ca:12:a4: 3e:0f:54:4a:33:17:fc:fc:38:ec:5d:e4:23:21:1e: b0:9d:cb:c9:ea:83:fb:0e:34:14:00:71:00:da:32: 19:ff:bb:29:66:d1:0e:b4:e4:96:1e:fa:8d:dc:e1: 0f:fd:07:82:76:4a:74:fa:53:17:f4:86:97:dc:e4: 90:d0:3c:c4:d9:a6:93:ac:e7:9e:03:46:b7:39:67: 7e:72:f6:3b:ac:ee:7e:60:5f:6f:79:09:eb:69:fd: 18:b0:a7:8b:e6:35:b2:c7:c2:16:22:41:3c:5a:49: d1:bc:90:79:c1:56:18:5a:be:b9:1f:4b:fd:dc:41: a0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D2:09:BF:F7:7B:78:F4:B4:58:BF:4D:92:AD:14:15:26:66:0B:60 X509v3 Authority Key Identifier: keyid:46:8F:8A:E4:A2:67:C8:12:F2:42:BF:02:C0:64:EB:92:87:C3:51:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:ae:69:31:47:b8:b3:67:31:44:e8:d3:b2:ab:52:f8:ac:35: a6:47:01:72:5a:d8:af:cf:b4:83:71:95:aa:fb:c6:b5:8e:d6: f0:29:cf:06:96:44:cb:b1:7e:30:f0:10:c7:60:22:9a:6b:84: 74:36:5f:2a:c9:c8:e7:ee:bb:67:78:31:32:8a:95:94:38:44: f9:d0:ae:82:ea:14:d3:e5:c0:1a:00:98:54:c7:4b:02:fe:cb: 62:5b:d5:b9:f7:63:b5:49:8f:0f:2a:22:6c:60:15:00:f7:ff: 43:18:cb:aa:6a:c6:44:09:76:a2:86:dd:46:68:53:19:c6:cb: 0a:e6:f1:84:85:21:09:da:b1:b2:c1:a4:bf:3f:4f:27:65:cc: e7:cb:7f:9c:ff:3e:00:2f:16:67:43:f1:7a:75:e3:20:a5:c2: 03:2a:0c:35:b1:6a:39:43:c5:79:8d:98:ad:bf:31:43:6f:39: c6:cd:bb:15:3e:e6:7a:08:02:6a:61:5a:98:bb:43:6d:a1:66: fc:75:05:39:7e:d6:9e:46:94:c5:d1:29:a0:5b:64:f2:a3:ff: 04:c2:7a:62:76:74:7f:c6:22:eb:d6:fc:80:4a:ec:79:22:6b: 7c:5b:34:54:fa:a8:4b:9a:37:2e:1b:d8:26:3c:70:39:28:ed: 0c:1b:ab:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmxBKvCbiFSQnl3IUXiEnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2OGY4YWU0YTI2N2M4MTJmMjQyYmYwMmMwNjRlYjkyODdj MzUxNTUwHhcNMjUxMjA2MDMwMTAyWhcNMjUxMjA3MDMwMTAyWjAzMTEwLwYDVQQD Eyg3NWQyMDliZmY3N2I3OGY0YjQ1OGJmNGQ5MmFkMTQxNTI2NjYwYjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu/pkTIN4GSWpo0+FNhMsjJnyQDP FrhRqUDrL7DwCuJzvMur6DTOdKjTW5uFHHS8ZkW1dIsclkQdhpCy8dBUEDq0QC6s ulVZ8k7kBi8Xg570Q84f4iAk38bWqWY+XwZhboa9REWa99wiHPlnDHPzeEQmvr0k mRPo6f+OWVDtj7Gd5+DKEqQ+D1RKMxf8/DjsXeQjIR6wncvJ6oP7DjQUAHEA2jIZ /7spZtEOtOSWHvqN3OEP/QeCdkp0+lMX9IaX3OSQ0DzE2aaTrOeeA0a3OWd+cvY7 rO5+YF9veQnraf0YsKeL5jWyx8IWIkE8WknRvJB5wVYYWr65H0v93EGgZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHXSCb/3e3j0tFi/TZKtFBUmZgtgMB8GA1UdIwQY MBaAFEaPiuSiZ8gS8kK/AsBk65KHw1FVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm8tSzVLSm55Qkx5UXI4Q3dHVHJrb2ZEVVZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82NDQ3MGItMWE3YS00OTY2LTkzMjUt N2E0MDdkYTY2NmQ0LzEvUm8tSzVLSm55Qkx5UXI4Q3dHVHJrb2ZEVVZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC82NDQ3MGItMWE3YS00OTY2LTkzMjUtN2E0MDdkYTY2NmQ0 LzEvUm8tSzVLSm55Qkx5UXI4Q3dHVHJrb2ZEVVZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ65pMUe4 s2cxROjTsqtS+Kw1pkcBclrYr8+0g3GVqvvGtY7W8CnPBpZEy7F+MPAQx2AimmuE dDZfKsnI5+67Z3gxMoqVlDhE+dCuguoU0+XAGgCYVMdLAv7LYlvVufdjtUmPDyoi bGAVAPf/QxjLqmrGRAl2oobdRmhTGcbLCubxhIUhCdqxssGkvz9PJ2XM58t/nP8+ AC8WZ0PxenXjIKXCAyoMNbFqOUPFeY2Yrb8xQ285xs27FT7meggCamFamLtDbaFm /HUFOX7WnkaUxdEpoFtk8qP/BMJ6YnZ0f8Yi69b8gErseSJrfFs0VPqoS5o3LhvY JjxwOSjtDBurqg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:03 2025 by rpki-client