This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft File: RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft (raw, json) Hash identifier: bvQvV2JAZfGb8dgpOcnUKqgqO0iqu8sRJJrKEVixouM= Subject key identifier: 60:E6:7B:EA:30:F6:C8:67:5D:B4:5B:F4:0B:67:E6:35:C4:B1:4A:2B Authority key identifier: 44:ED:8B:89:60:E8:7A:A6:69:35:AD:66:83:BC:15:F1:E4:79:93:B6 Certificate issuer: /CN=44ed8b8960e87aa66935ad6683bc15f1e47993b6 Certificate serial: 019B30E86AD0D4B25B244EDC7485D74FBF3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft Manifest number: 053B Signing time: Thu 18 Dec 2025 10:01:36 +0000 Manifest this update: Thu 18 Dec 2025 10:01:36 +0000 Manifest next update: Fri 19 Dec 2025 10:01:36 +0000 Files and hashes: 1: RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl (hash: PF2uqnwJlI4e3Up8e0z2x9m7BcgaMqUhIjUB8l/KBAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:6a:d0:d4:b2:5b:24:4e:dc:74:85:d7:4f:bf:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44ed8b8960e87aa66935ad6683bc15f1e47993b6 Validity Not Before: Dec 18 10:01:36 2025 GMT Not After : Dec 19 10:01:36 2025 GMT Subject: CN=60e67bea30f6c8675db45bf40b67e635c4b14a2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d1:35:27:ad:57:85:da:f0:69:2b:00:0f:e8: 66:6b:a0:7f:4b:4a:f7:55:46:6a:34:81:27:67:32: 3c:54:97:fa:b2:74:5c:cd:27:aa:38:24:ec:25:ea: ff:f5:2b:e1:ff:90:ea:50:26:5f:36:83:bd:ee:eb: e1:30:9a:a6:7d:32:8c:b7:63:bc:75:a8:48:a6:8c: d4:2b:5d:95:76:03:4c:53:0b:95:84:a5:9a:cb:60: 2e:55:ea:aa:5e:2d:51:f5:3e:31:c3:70:0a:48:7e: bc:70:13:42:16:9a:b9:ff:bb:5f:5f:2a:71:a1:ff: 5a:8f:44:24:0f:7d:1d:3f:e3:49:e4:46:f7:8d:c2: 21:46:1f:71:c9:e7:66:12:a6:9a:9e:a4:7b:e0:d9: 2b:4c:62:06:1a:c5:5e:06:36:43:e6:26:41:67:54: 27:09:67:e8:e3:9b:b3:ee:3e:62:8e:53:b8:af:27: d3:fe:39:b6:2f:c3:c1:91:2d:e2:df:60:7a:db:0d: f6:49:85:a5:9a:7a:01:81:f8:3d:4b:04:12:8a:53: e7:11:8c:2e:6b:5b:fa:8c:67:2e:9a:34:c2:f9:72: 3b:f9:f3:6d:5a:61:20:f0:79:63:42:88:a4:11:35: 94:ff:fd:1b:86:ec:1f:5c:97:d0:57:0d:c4:0d:56: ab:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E6:7B:EA:30:F6:C8:67:5D:B4:5B:F4:0B:67:E6:35:C4:B1:4A:2B X509v3 Authority Key Identifier: keyid:44:ED:8B:89:60:E8:7A:A6:69:35:AD:66:83:BC:15:F1:E4:79:93:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:c3:6e:f7:c7:c4:78:0a:dd:27:35:89:40:40:73:39:a1:fb: e4:f9:4a:32:99:49:33:42:d5:b2:88:42:3e:89:e8:f2:11:4e: 39:85:e7:4a:27:95:d9:cc:8d:5a:b8:92:77:5b:63:6e:72:bd: d0:bb:d9:2d:3e:34:71:b8:5b:b1:69:de:85:42:3a:44:44:01: a9:a5:06:45:63:af:50:8d:2c:bc:71:3b:53:57:28:03:3c:2e: d1:39:52:95:c0:c8:f7:62:f4:6f:d6:e0:b8:b9:e8:dc:c6:26: 2b:03:f1:be:05:c2:06:f6:72:74:27:81:8f:f6:65:ee:17:d7: 25:18:de:c6:50:bb:0d:ba:fd:02:81:69:68:39:b7:5a:62:b9: 05:2b:cf:00:25:39:67:63:48:86:2e:bf:5a:4f:ba:f3:58:d0: d4:74:45:be:be:69:77:d7:ad:a8:96:e8:d4:8c:b7:6e:81:38: e7:3d:2e:ae:02:c8:4f:05:63:24:99:28:74:96:9e:75:fc:a4: c2:96:85:70:8d:d6:a3:82:70:c3:6f:fe:16:2b:c2:54:5d:fe: 14:11:c1:7e:68:37:f2:b3:95:1d:eb:e7:30:5f:a0:cb:b9:7c: 1c:eb:f0:29:fc:91:7d:73:ff:d0:6d:14:f8:d1:50:be:74:46: fc:f6:ef:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6GrQ1LJbJE7cdIXXT786MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZWQ4Yjg5NjBlODdhYTY2OTM1YWQ2NjgzYmMxNWYxZTQ3 OTkzYjYwHhcNMjUxMjE4MTAwMTM2WhcNMjUxMjE5MTAwMTM2WjAzMTEwLwYDVQQD Eyg2MGU2N2JlYTMwZjZjODY3NWRiNDViZjQwYjY3ZTYzNWM0YjE0YTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdE1J61XhdrwaSsAD+hma6B/S0r3 VUZqNIEnZzI8VJf6snRczSeqOCTsJer/9Svh/5DqUCZfNoO97uvhMJqmfTKMt2O8 dahIpozUK12VdgNMUwuVhKWay2AuVeqqXi1R9T4xw3AKSH68cBNCFpq5/7tfXypx of9aj0QkD30dP+NJ5Eb3jcIhRh9xyedmEqaanqR74NkrTGIGGsVeBjZD5iZBZ1Qn CWfo45uz7j5ijlO4ryfT/jm2L8PBkS3i32B62w32SYWlmnoBgfg9SwQSilPnEYwu a1v6jGcumjTC+XI7+fNtWmEg8HljQoikETWU//0bhuwfXJfQVw3EDVar8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGDme+ow9shnXbRb9Atn5jXEsUorMB8GA1UdIwQY MBaAFETti4lg6HqmaTWtZoO8FfHkeZO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk8yTGlXRG9lcVpwTmExbWc3d1Y4ZVI1azdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi84ZjlkYjUtZTlhZC00NjRmLWFiYTkt YmQxYmE0YzE5Zjc2LzEvUk8yTGlXRG9lcVpwTmExbWc3d1Y4ZVI1azdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi84ZjlkYjUtZTlhZC00NjRmLWFiYTktYmQxYmE0YzE5Zjc2 LzEvUk8yTGlXRG9lcVpwTmExbWc3d1Y4ZVI1azdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgsNu98fE eArdJzWJQEBzOaH75PlKMplJM0LVsohCPono8hFOOYXnSieV2cyNWriSd1tjbnK9 0LvZLT40cbhbsWnehUI6REQBqaUGRWOvUI0svHE7U1coAzwu0TlSlcDI92L0b9bg uLno3MYmKwPxvgXCBvZydCeBj/Zl7hfXJRjexlC7Dbr9AoFpaDm3WmK5BSvPACU5 Z2NIhi6/Wk+681jQ1HRFvr5pd9etqJbo1Iy3boE45z0urgLITwVjJJkodJaedfyk wpaFcI3Wo4Jww2/+FivCVF3+FBHBfmg38rOVHevnMF+gy7l8HOvwKfyRfXP/0G0U +NFQvnRG/PbvVg== -----END CERTIFICATE-----Generated at Thu Dec 18 15:46:44 2025 by rpki-client