This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft File: Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft (raw, json) Hash identifier: vfr9e63lhyGmhdphqzwVt22xx88+AYANQSy2MYuKsCc= Subject key identifier: A0:DE:F8:D9:C6:7D:86:EC:44:7C:B3:9C:EF:A0:B4:4E:90:4B:8F:C1 Authority key identifier: 0E:87:E5:D3:3A:9B:28:BE:7F:1A:F8:BC:9C:13:8B:15:80:90:F1:89 Certificate issuer: /CN=0e87e5d33a9b28be7f1af8bc9c138b158090f189 Certificate serial: 019B32685967FF4569BDBA3DAF6A4710F2F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft Manifest number: 05EF Signing time: Thu 18 Dec 2025 17:00:58 +0000 Manifest this update: Thu 18 Dec 2025 17:00:58 +0000 Manifest next update: Fri 19 Dec 2025 17:00:58 +0000 Files and hashes: 1: Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl (hash: T/mRBx17fhpP6+4Qcad22ohUkPnSA7pKSfhnSeb5zQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 17:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:59:67:ff:45:69:bd:ba:3d:af:6a:47:10:f2:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e87e5d33a9b28be7f1af8bc9c138b158090f189 Validity Not Before: Dec 18 17:00:58 2025 GMT Not After : Dec 19 17:00:58 2025 GMT Subject: CN=a0def8d9c67d86ec447cb39cefa0b44e904b8fc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b4:96:0e:32:de:72:c8:09:4e:e3:24:9c:d7: d8:95:1d:5c:66:fe:e7:aa:eb:e9:af:d0:2e:ea:d3: 31:f3:a3:29:bf:cc:d9:cb:6f:e7:98:7a:64:a1:8e: 5a:4f:12:24:9a:2e:f9:dd:fc:b0:0f:58:f7:a9:ec: 3f:ff:3b:59:7f:2e:4f:f3:4b:ed:27:a1:fb:da:de: 62:c8:45:92:4f:b6:76:a0:09:a8:30:81:29:8d:26: 01:1e:f5:36:cf:49:f6:bf:a8:4f:94:ca:f3:6a:0d: b2:4b:19:01:ed:9e:d6:29:f4:7f:75:ed:f6:09:a6: 0d:90:e6:1e:9c:a4:39:83:64:0f:af:6f:4a:6b:3a: 6c:df:f6:09:4f:f6:c4:7f:e4:13:c2:30:17:2c:d3: 3c:30:07:f1:0b:80:44:ac:32:7a:1a:0e:bf:6e:d5: a2:9a:92:68:69:f8:70:20:16:4f:c3:b4:57:5a:db: 0d:a4:ff:8e:ed:b5:3c:db:a5:9f:aa:e0:62:e8:c5: 59:fd:49:15:94:7f:0c:6d:90:a0:50:6e:c0:2f:ed: 1a:03:5e:9a:d7:d5:c0:2c:e2:75:05:7a:a0:66:ac: 9b:4f:f9:83:c4:9c:21:4a:8c:4d:0e:8d:19:31:59: 53:49:d7:67:6c:18:1e:6a:8b:c2:e3:29:df:ca:a4: f3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:DE:F8:D9:C6:7D:86:EC:44:7C:B3:9C:EF:A0:B4:4E:90:4B:8F:C1 X509v3 Authority Key Identifier: keyid:0E:87:E5:D3:3A:9B:28:BE:7F:1A:F8:BC:9C:13:8B:15:80:90:F1:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:35:22:bb:3b:23:c1:2a:34:54:df:28:39:75:8b:9f:b7:1c: f2:e6:de:43:da:99:98:84:5c:8d:db:e8:05:ff:0d:21:b7:c8: f6:ef:b4:f5:35:9d:29:12:76:08:6a:b5:3d:6d:36:91:58:8b: f6:06:1b:40:d0:13:55:e0:38:d0:12:b7:ac:0f:4e:ba:f7:0f: 36:b9:a3:0d:3f:21:6f:36:4a:44:cf:44:b3:a4:e3:18:7e:89: 53:3b:8c:73:57:9a:0c:04:0e:f8:17:0a:77:c2:8f:9d:03:5b: ce:bd:75:7f:bc:73:89:5d:20:96:69:39:19:e3:a7:43:9a:21: e9:ff:43:7e:95:54:6f:0c:83:a1:2e:86:52:54:36:de:dd:bc: c0:77:ab:bb:2e:2b:8d:ae:7d:54:f2:8b:b5:71:1c:dd:bb:22: d7:5b:81:c6:69:27:5d:82:a2:6f:55:58:01:54:52:4c:a7:84: 48:ee:f3:da:b2:7a:f4:a9:0f:46:61:27:5d:5e:5c:1a:9f:06: 17:18:57:c1:9a:52:d6:19:f5:89:da:d0:46:d6:b0:f8:61:a7: ab:00:96:c4:a8:4f:91:9d:dd:14:d5:51:df:ce:25:4e:de:5a: 02:8d:c6:1c:b5:9b:7e:a3:7e:8d:15:45:3f:a5:d3:90:c5:a9: 0e:2d:a5:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaFln/0Vpvbo9r2pHEPLwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlODdlNWQzM2E5YjI4YmU3ZjFhZjhiYzljMTM4YjE1ODA5 MGYxODkwHhcNMjUxMjE4MTcwMDU4WhcNMjUxMjE5MTcwMDU4WjAzMTEwLwYDVQQD EyhhMGRlZjhkOWM2N2Q4NmVjNDQ3Y2IzOWNlZmEwYjQ0ZTkwNGI4ZmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbSWDjLecsgJTuMknNfYlR1cZv7n quvpr9Au6tMx86Mpv8zZy2/nmHpkoY5aTxIkmi753fywD1j3qew//ztZfy5P80vt J6H72t5iyEWST7Z2oAmoMIEpjSYBHvU2z0n2v6hPlMrzag2ySxkB7Z7WKfR/de32 CaYNkOYenKQ5g2QPr29Kazps3/YJT/bEf+QTwjAXLNM8MAfxC4BErDJ6Gg6/btWi mpJoafhwIBZPw7RXWtsNpP+O7bU826WfquBi6MVZ/UkVlH8MbZCgUG7AL+0aA16a 19XALOJ1BXqgZqybT/mDxJwhSoxNDo0ZMVlTSddnbBgeaovC4ynfyqTzDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDe+NnGfYbsRHyznO+gtE6QS4/BMB8GA1UdIwQY MBaAFA6H5dM6myi+fxr4vJwTixWAkPGJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG9mbDB6cWJLTDVfR3ZpOG5CT0xGWUNROFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lMGEyNWMtZDUyNy00Yzc1LWExYmIt M2VmNjQwZjkzN2M0LzEvRG9mbDB6cWJLTDVfR3ZpOG5CT0xGWUNROFlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9lMGEyNWMtZDUyNy00Yzc1LWExYmItM2VmNjQwZjkzN2M0 LzEvRG9mbDB6cWJLTDVfR3ZpOG5CT0xGWUNROFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIDUiuzsj wSo0VN8oOXWLn7cc8ubeQ9qZmIRcjdvoBf8NIbfI9u+09TWdKRJ2CGq1PW02kViL 9gYbQNATVeA40BK3rA9OuvcPNrmjDT8hbzZKRM9Es6TjGH6JUzuMc1eaDAQO+BcK d8KPnQNbzr11f7xziV0glmk5GeOnQ5oh6f9DfpVUbwyDoS6GUlQ23t28wHeruy4r ja59VPKLtXEc3bsi11uBxmknXYKib1VYAVRSTKeESO7z2rJ69KkPRmEnXV5cGp8G FxhXwZpS1hn1idrQRtaw+GGnqwCWxKhPkZ3dFNVR384lTt5aAo3GHLWbfqN+jRVF P6XTkMWpDi2lbA== -----END CERTIFICATE-----Generated at Thu Dec 18 23:44:27 2025 by rpki-client