This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft File: Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft (raw, json) Hash identifier: SfisAlOrayDXYtCJFukAYsaklgTZm+/ZGeaLFaRbeck= Subject key identifier: E8:43:E8:4E:F8:B9:58:44:C7:5F:19:4B:A5:0B:AC:26:5B:5F:CA:99 Authority key identifier: 0E:87:E5:D3:3A:9B:28:BE:7F:1A:F8:BC:9C:13:8B:15:80:90:F1:89 Certificate issuer: /CN=0e87e5d33a9b28be7f1af8bc9c138b158090f189 Certificate serial: 019AF2AD75F8DBA9AB551FAD88B1FEE4A920 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft Manifest number: 05CE Signing time: Sat 06 Dec 2025 08:00:45 +0000 Manifest this update: Sat 06 Dec 2025 08:00:45 +0000 Manifest next update: Sun 07 Dec 2025 08:00:45 +0000 Files and hashes: 1: Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl (hash: dN7auOIcIqceX3WdCWaTjpGFEbttO90VRVCd14iMWyE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:75:f8:db:a9:ab:55:1f:ad:88:b1:fe:e4:a9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e87e5d33a9b28be7f1af8bc9c138b158090f189 Validity Not Before: Dec 6 08:00:45 2025 GMT Not After : Dec 7 08:00:45 2025 GMT Subject: CN=e843e84ef8b95844c75f194ba50bac265b5fca99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:07:31:a3:e3:49:f2:1a:25:57:51:af:43:be: 87:80:a3:0f:20:50:5e:71:08:83:70:4a:55:4f:66: e4:72:23:76:67:35:d6:be:f5:55:c4:61:0c:02:1a: 4b:5a:57:27:5c:80:86:80:3b:0d:1f:01:66:e3:6f: e5:53:86:dc:25:79:2d:18:dc:6e:b2:92:2a:89:02: 1e:a5:e6:08:33:b1:aa:ac:36:c3:71:33:f1:97:be: 58:bc:a5:eb:bb:cd:d4:f9:19:bd:37:b0:ea:b3:4d: 66:f6:69:1b:a4:2e:0c:60:dd:d7:ed:02:6a:aa:a5: a1:41:f5:e7:6e:45:4e:c2:c1:32:58:59:f3:bd:4c: 14:94:d7:d1:d9:3a:be:86:ed:63:64:a2:13:d9:f5: 34:64:cd:a2:7f:1c:73:17:94:68:3e:1f:c9:ac:ab: 0e:07:74:fe:fb:bc:60:25:b7:0e:53:07:d3:9b:cd: 46:d2:0a:3e:57:f3:7b:16:b3:d4:c0:5d:28:42:8a: dd:98:f6:f7:a8:16:f0:df:2a:ed:63:df:fc:92:c9: e3:fc:c8:8f:23:c7:42:51:ca:68:cf:e9:13:64:cb: dc:5a:6b:90:9d:d9:f8:2c:4b:4c:b1:98:49:a9:91: 2c:64:d4:7f:e3:e4:5d:f1:8e:d9:3f:00:9f:b8:00: e7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:43:E8:4E:F8:B9:58:44:C7:5F:19:4B:A5:0B:AC:26:5B:5F:CA:99 X509v3 Authority Key Identifier: keyid:0E:87:E5:D3:3A:9B:28:BE:7F:1A:F8:BC:9C:13:8B:15:80:90:F1:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:1a:d1:6e:c6:55:3c:31:01:17:23:4a:c6:2a:91:04:bd:63: 24:22:e3:d6:63:7d:26:ac:87:65:68:61:86:a5:bd:0c:d6:ea: 89:9b:f6:7b:0e:20:71:1e:b9:07:83:11:f4:99:93:f8:22:ad: be:68:78:5d:02:dc:68:39:fc:2d:43:fe:df:cb:ce:78:56:30: 23:4d:0b:6d:b6:12:e3:58:9a:4b:ab:07:3b:61:5d:37:33:3a: e5:31:19:1e:b6:30:af:b6:4e:f3:18:e9:02:bd:c8:b1:4f:d8: 6d:6d:ca:03:91:e0:86:2f:b8:a2:ac:79:b0:8f:ab:33:2e:c5: 48:17:0a:b4:25:1e:c9:22:95:cc:fd:da:1c:0f:6f:cd:0d:6e: 8f:04:57:97:55:4e:52:81:18:e1:cb:eb:e5:ab:89:7d:a7:f2: 23:be:88:11:6d:11:1b:fa:0e:c9:c1:2b:49:95:43:3f:8d:65: 0e:2c:63:5c:54:03:e0:74:41:cb:e8:3e:4b:5b:a1:1d:3b:4b: 9a:bf:25:78:f2:4b:c9:ca:13:d3:b8:c0:20:93:d3:ff:95:84: a2:bc:6b:1a:74:7a:78:39:7c:83:4f:01:ae:f6:6e:3d:cb:72: c4:a9:06:06:fa:0c:bd:ad:ca:e4:d9:be:a7:e0:11:a6:ab:11: 17:41:3f:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrXX426mrVR+tiLH+5KkgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlODdlNWQzM2E5YjI4YmU3ZjFhZjhiYzljMTM4YjE1ODA5 MGYxODkwHhcNMjUxMjA2MDgwMDQ1WhcNMjUxMjA3MDgwMDQ1WjAzMTEwLwYDVQQD EyhlODQzZTg0ZWY4Yjk1ODQ0Yzc1ZjE5NGJhNTBiYWMyNjViNWZjYTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQcxo+NJ8holV1GvQ76HgKMPIFBe cQiDcEpVT2bkciN2ZzXWvvVVxGEMAhpLWlcnXICGgDsNHwFm42/lU4bcJXktGNxu spIqiQIepeYIM7GqrDbDcTPxl75YvKXru83U+Rm9N7Dqs01m9mkbpC4MYN3X7QJq qqWhQfXnbkVOwsEyWFnzvUwUlNfR2Tq+hu1jZKIT2fU0ZM2ifxxzF5RoPh/JrKsO B3T++7xgJbcOUwfTm81G0go+V/N7FrPUwF0oQordmPb3qBbw3yrtY9/8ksnj/MiP I8dCUcpoz+kTZMvcWmuQndn4LEtMsZhJqZEsZNR/4+Rd8Y7ZPwCfuADnEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOhD6E74uVhEx18ZS6ULrCZbX8qZMB8GA1UdIwQY MBaAFA6H5dM6myi+fxr4vJwTixWAkPGJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG9mbDB6cWJLTDVfR3ZpOG5CT0xGWUNROFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lMGEyNWMtZDUyNy00Yzc1LWExYmIt M2VmNjQwZjkzN2M0LzEvRG9mbDB6cWJLTDVfR3ZpOG5CT0xGWUNROFlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9lMGEyNWMtZDUyNy00Yzc1LWExYmItM2VmNjQwZjkzN2M0 LzEvRG9mbDB6cWJLTDVfR3ZpOG5CT0xGWUNROFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABhrRbsZV PDEBFyNKxiqRBL1jJCLj1mN9JqyHZWhhhqW9DNbqiZv2ew4gcR65B4MR9JmT+CKt vmh4XQLcaDn8LUP+38vOeFYwI00LbbYS41iaS6sHO2FdNzM65TEZHrYwr7ZO8xjp Ar3IsU/YbW3KA5Hghi+4oqx5sI+rMy7FSBcKtCUeySKVzP3aHA9vzQ1ujwRXl1VO UoEY4cvr5auJfafyI76IEW0RG/oOycErSZVDP41lDixjXFQD4HRBy+g+S1uhHTtL mr8lePJLycoT07jAIJPT/5WEorxrGnR6eDl8g08BrvZuPctyxKkGBvoMva3K5Nm+ p+ARpqsRF0E/3Q== -----END CERTIFICATE-----Generated at Sat Dec 6 09:33:34 2025 by rpki-client