This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft File: 0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft (raw, json) Hash identifier: Zu+4lMFn7t5QlkicNGA/Iu/7bAup4aimk70PIN+HAsE= Subject key identifier: FF:03:D8:1C:A2:F6:8F:6A:91:7F:8D:F1:22:C4:55:AE:2F:86:55:0D Authority key identifier: D1:BD:64:CC:94:A4:A8:51:8A:71:F9:6E:F8:B7:76:25:AF:A5:27:D1 Certificate issuer: /CN=d1bd64cc94a4a8518a71f96ef8b77625afa527d1 Certificate serial: 019AF2092E6EFB61A5BB8A0B1C1D9CB96D65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft Manifest number: 1487 Signing time: Sat 06 Dec 2025 05:01:19 +0000 Manifest this update: Sat 06 Dec 2025 05:01:19 +0000 Manifest next update: Sun 07 Dec 2025 05:01:19 +0000 Files and hashes: 1: 0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.crl (hash: GAnv7hyUhheRiyvdMJngzeRcyeoJKUeZ9vGONaqBW1U=) 2: iWhZAjriW-wjhpW_I7AAFupd8k0.roa (hash: luBfIMH09dvaIbcRpG6juKMigtK01xkZI61aTfT3Bf8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:2e:6e:fb:61:a5:bb:8a:0b:1c:1d:9c:b9:6d:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1bd64cc94a4a8518a71f96ef8b77625afa527d1 Validity Not Before: Dec 6 05:01:19 2025 GMT Not After : Dec 7 05:01:19 2025 GMT Subject: CN=ff03d81ca2f68f6a917f8df122c455ae2f86550d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:85:70:89:55:69:58:bb:8d:11:aa:08:4e:ee: 30:f8:d4:c5:7c:3d:81:9a:44:ba:48:ca:54:36:81: 44:3d:88:a7:65:54:90:b9:b0:f7:e1:48:bd:71:90: 56:5d:9a:6c:98:d3:b2:79:a2:ad:05:c1:5f:36:5f: 8a:1e:62:3f:62:b1:7d:ce:9d:35:5d:aa:8c:f4:b2: 26:30:a9:7f:a2:e4:b2:65:71:31:92:4f:b6:26:dd: 01:34:da:0a:e5:d9:50:75:cd:42:a0:e4:79:ce:4d: f5:0a:02:46:a1:db:eb:60:fb:9b:fa:f6:49:8b:dc: 00:65:c8:0c:fa:97:f0:16:13:ed:66:00:32:bf:60: d4:8d:13:ee:f8:37:ed:79:92:c1:1a:6a:d9:f0:75: 70:47:e3:0d:01:ee:22:74:98:ed:1a:1b:40:5a:54: c5:df:ca:aa:37:f5:18:a5:b6:65:e9:86:48:43:97: 10:c7:0f:4f:fa:89:c0:0b:36:72:c5:e8:a5:af:3e: f3:11:3a:80:eb:b0:ea:5e:0f:04:5f:75:3b:d6:3e: 75:a2:32:2f:2e:c1:20:4a:40:c4:bc:cd:c5:9c:67: 95:3e:41:a0:fa:1a:57:68:5b:89:d9:89:53:3e:5b: 1d:c3:9a:7b:9b:5d:ea:db:15:96:cc:76:54:79:2b: ae:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:03:D8:1C:A2:F6:8F:6A:91:7F:8D:F1:22:C4:55:AE:2F:86:55:0D X509v3 Authority Key Identifier: keyid:D1:BD:64:CC:94:A4:A8:51:8A:71:F9:6E:F8:B7:76:25:AF:A5:27:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:4d:c3:b3:8b:c5:31:d9:24:53:09:52:f7:83:f6:eb:da:31: c6:b3:74:57:c2:be:ef:fe:5c:3f:d6:ad:eb:68:47:c7:08:c5: 5b:1f:78:06:69:0f:d3:4c:d4:96:e6:f1:f1:d4:3a:c6:ef:b5: 31:31:1b:23:d5:b0:a8:42:c7:80:97:53:6e:41:25:52:94:b2: d5:43:6d:a4:0b:2a:6d:09:b6:6d:ba:be:ba:77:36:6d:25:50: 06:92:a2:ac:63:47:6b:72:af:5f:f0:d2:8c:b6:b4:6f:e1:4a: b3:97:25:13:01:63:7f:65:79:6b:24:99:be:80:21:ec:df:17: 93:eb:5e:a3:59:50:8e:f9:61:c6:cb:0b:5a:96:96:b7:66:cd: e9:15:04:ca:33:e6:b0:ad:5a:30:c3:01:21:2e:ee:03:b5:88: d8:7f:09:2a:44:5a:33:a5:51:58:ea:e1:b4:6a:04:a4:aa:ca: ef:7f:de:9d:74:55:dc:ea:5f:63:d5:19:d7:df:65:e1:05:c4: 10:7a:d8:3b:98:cc:90:6b:26:ec:ef:99:39:f7:b8:df:6a:dd: 80:07:a1:b1:96:77:fe:75:15:35:b3:8e:42:2f:25:2f:e6:79: 11:c5:2c:95:39:f2:f3:22:06:18:f0:a8:65:0b:5d:69:26:ba: e8:21:4e:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCS5u+2Glu4oLHB2cuW1lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxYmQ2NGNjOTRhNGE4NTE4YTcxZjk2ZWY4Yjc3NjI1YWZh NTI3ZDEwHhcNMjUxMjA2MDUwMTE5WhcNMjUxMjA3MDUwMTE5WjAzMTEwLwYDVQQD EyhmZjAzZDgxY2EyZjY4ZjZhOTE3ZjhkZjEyMmM0NTVhZTJmODY1NTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYVwiVVpWLuNEaoITu4w+NTFfD2B mkS6SMpUNoFEPYinZVSQubD34Ui9cZBWXZpsmNOyeaKtBcFfNl+KHmI/YrF9zp01 XaqM9LImMKl/ouSyZXExkk+2Jt0BNNoK5dlQdc1CoOR5zk31CgJGodvrYPub+vZJ i9wAZcgM+pfwFhPtZgAyv2DUjRPu+DfteZLBGmrZ8HVwR+MNAe4idJjtGhtAWlTF 38qqN/UYpbZl6YZIQ5cQxw9P+onACzZyxeilrz7zETqA67DqXg8EX3U71j51ojIv LsEgSkDEvM3FnGeVPkGg+hpXaFuJ2YlTPlsdw5p7m13q2xWWzHZUeSuuUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP8D2Byi9o9qkX+N8SLEVa4vhlUNMB8GA1UdIwQY MBaAFNG9ZMyUpKhRinH5bvi3diWvpSfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGIxa3pKU2txRkdLY2ZsdS1MZDJKYS1sSjlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yZWZhNTAtZjQ4My00YjUzLWIxZTct MDgyNmYzNmZmMjhmLzEvMGIxa3pKU2txRkdLY2ZsdS1MZDJKYS1sSjlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8yZWZhNTAtZjQ4My00YjUzLWIxZTctMDgyNmYzNmZmMjhm LzEvMGIxa3pKU2txRkdLY2ZsdS1MZDJKYS1sSjlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARE3Ds4vF MdkkUwlS94P269oxxrN0V8K+7/5cP9at62hHxwjFWx94BmkP00zUlubx8dQ6xu+1 MTEbI9WwqELHgJdTbkElUpSy1UNtpAsqbQm2bbq+unc2bSVQBpKirGNHa3KvX/DS jLa0b+FKs5clEwFjf2V5aySZvoAh7N8Xk+teo1lQjvlhxssLWpaWt2bN6RUEyjPm sK1aMMMBIS7uA7WI2H8JKkRaM6VRWOrhtGoEpKrK73/enXRV3OpfY9UZ199l4QXE EHrYO5jMkGsm7O+ZOfe432rdgAehsZZ3/nUVNbOOQi8lL+Z5EcUslTny8yIGGPCo ZQtdaSa66CFOcg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:48:51 2025 by rpki-client