This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft File: Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft (raw, json) Hash identifier: KD8M9Au2yxyncG4mhHGzNIyY72boBGEjCg+fwf7KU8M= Subject key identifier: 0A:B2:F8:13:43:3C:88:24:94:86:4A:3F:08:95:62:C3:9D:73:16:E1 Authority key identifier: 46:8F:8A:E4:A2:67:C8:12:F2:42:BF:02:C0:64:EB:92:87:C3:51:55 Certificate issuer: /CN=468f8ae4a267c812f242bf02c064eb9287c35155 Certificate serial: 019B4E4D07EBC98B918072B5111F6CB569D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft Manifest number: 0E88 Signing time: Wed 24 Dec 2025 03:00:29 +0000 Manifest this update: Wed 24 Dec 2025 03:00:29 +0000 Manifest next update: Thu 25 Dec 2025 03:00:29 +0000 Files and hashes: 1: Ro-K5KJnyBLyQr8CwGTrkofDUVU.crl (hash: mhkGnrqFr/xLqjE5D77OF+xDcsxtU8uE6i4n1YMEFlI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft rsync://rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4d:07:eb:c9:8b:91:80:72:b5:11:1f:6c:b5:69:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=468f8ae4a267c812f242bf02c064eb9287c35155 Validity Not Before: Dec 24 03:00:29 2025 GMT Not After : Dec 25 03:00:29 2025 GMT Subject: CN=0ab2f813433c882494864a3f089562c39d7316e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:13:93:8f:35:8e:be:66:29:2e:e2:ae:4c:27: 10:2a:3c:51:7f:94:28:f4:eb:95:3d:7a:7e:6d:a0: b7:13:d4:c7:7c:21:48:50:62:0c:59:98:01:84:60: f6:04:a5:37:33:65:f0:86:ec:f8:55:e4:88:97:2e: f0:36:00:1e:71:46:d6:a4:d9:39:ea:b1:bd:d1:5c: b6:d7:7b:ef:a7:a6:55:2d:86:e7:7c:7e:4f:06:6d: fc:b1:88:5f:c4:8a:cf:6d:a7:5c:7a:05:15:c9:1d: 01:90:e0:3a:b1:61:dd:07:55:10:d7:4a:bb:b9:39: a8:03:38:5d:c4:31:78:34:51:d0:cd:8e:9e:8f:15: 11:04:a9:2e:ae:99:e0:56:7e:f9:f1:59:0e:8d:dd: e0:27:cc:fa:5b:0c:54:bc:f4:04:0c:f0:46:1d:48: 5a:f3:27:6e:29:07:50:b6:63:35:12:b0:b6:d4:54: 6b:91:3b:73:3a:cc:55:d2:4e:1f:63:df:82:ea:32: eb:bb:7d:37:3a:5b:df:9b:15:d9:4b:b2:10:6d:c8: ec:64:e8:4c:4d:62:03:0e:51:04:25:6f:c4:ba:94: 10:15:de:46:99:97:7d:ae:ea:29:d7:94:5d:e6:8e: 8b:06:75:00:4b:f8:4e:10:e9:61:7c:c5:00:23:1c: e5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B2:F8:13:43:3C:88:24:94:86:4A:3F:08:95:62:C3:9D:73:16:E1 X509v3 Authority Key Identifier: keyid:46:8F:8A:E4:A2:67:C8:12:F2:42:BF:02:C0:64:EB:92:87:C3:51:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:a3:d2:2c:12:d0:01:a5:98:24:0f:d3:87:bf:ea:e9:fb:ec: f4:f4:af:27:5a:3c:f6:eb:22:65:26:2a:a4:ba:a4:22:5a:56: 41:68:15:d1:bb:f9:9a:d8:b5:51:83:7b:d8:29:8d:eb:e4:cf: 49:63:ee:0f:2a:c2:86:cd:87:a5:fc:df:d7:06:36:84:eb:49: fd:ab:15:17:9d:59:79:09:f8:ce:af:40:04:e0:95:2c:07:52: 2f:48:d4:d8:ae:da:b5:1c:b4:5c:29:6f:ec:64:9b:a1:f6:ff: d6:a2:d3:a5:10:a7:bd:b7:a9:aa:0b:f8:dc:79:3d:20:56:56: 32:67:a7:9b:51:fe:7f:28:9b:03:bb:32:aa:e7:0d:5d:ce:dd: ff:c5:bb:55:c7:db:d3:67:48:77:39:ea:8f:6e:e8:ac:10:f5: a7:02:17:ed:69:76:7e:92:00:03:b5:03:49:1f:23:2d:20:1c: 44:1b:d5:c1:25:c3:b0:30:65:10:48:bb:03:1c:40:cf:5e:da: d2:04:78:26:20:d1:d6:56:32:c2:a8:52:0d:16:43:a4:7a:eb: 70:70:c0:b9:14:95:44:95:30:f2:5c:48:9f:11:a9:6b:f2:53: a9:61:32:b3:88:62:0a:aa:f2:c6:9a:c8:da:f5:bf:a6:03:34: eb:41:f8:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTQfryYuRgHK1ER9stWnWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2OGY4YWU0YTI2N2M4MTJmMjQyYmYwMmMwNjRlYjkyODdj MzUxNTUwHhcNMjUxMjI0MDMwMDI5WhcNMjUxMjI1MDMwMDI5WjAzMTEwLwYDVQQD EygwYWIyZjgxMzQzM2M4ODI0OTQ4NjRhM2YwODk1NjJjMzlkNzMxNmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBOTjzWOvmYpLuKuTCcQKjxRf5Qo 9OuVPXp+baC3E9THfCFIUGIMWZgBhGD2BKU3M2Xwhuz4VeSIly7wNgAecUbWpNk5 6rG90Vy213vvp6ZVLYbnfH5PBm38sYhfxIrPbadcegUVyR0BkOA6sWHdB1UQ10q7 uTmoAzhdxDF4NFHQzY6ejxURBKkurpngVn758VkOjd3gJ8z6WwxUvPQEDPBGHUha 8yduKQdQtmM1ErC21FRrkTtzOsxV0k4fY9+C6jLru303OlvfmxXZS7IQbcjsZOhM TWIDDlEEJW/EupQQFd5GmZd9ruop15Rd5o6LBnUAS/hOEOlhfMUAIxzlpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAqy+BNDPIgklIZKPwiVYsOdcxbhMB8GA1UdIwQY MBaAFEaPiuSiZ8gS8kK/AsBk65KHw1FVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm8tSzVLSm55Qkx5UXI4Q3dHVHJrb2ZEVVZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82NDQ3MGItMWE3YS00OTY2LTkzMjUt N2E0MDdkYTY2NmQ0LzEvUm8tSzVLSm55Qkx5UXI4Q3dHVHJrb2ZEVVZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC82NDQ3MGItMWE3YS00OTY2LTkzMjUtN2E0MDdkYTY2NmQ0 LzEvUm8tSzVLSm55Qkx5UXI4Q3dHVHJrb2ZEVVZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhqPSLBLQ AaWYJA/Th7/q6fvs9PSvJ1o89usiZSYqpLqkIlpWQWgV0bv5mti1UYN72CmN6+TP SWPuDyrChs2Hpfzf1wY2hOtJ/asVF51ZeQn4zq9ABOCVLAdSL0jU2K7atRy0XClv 7GSbofb/1qLTpRCnvbepqgv43Hk9IFZWMmenm1H+fyibA7syqucNXc7d/8W7Vcfb 02dIdznqj27orBD1pwIX7Wl2fpIAA7UDSR8jLSAcRBvVwSXDsDBlEEi7AxxAz17a 0gR4JiDR1lYywqhSDRZDpHrrcHDAuRSVRJUw8lxInxGpa/JTqWEys4hiCqryxprI 2vW/pgM060H4wQ== -----END CERTIFICATE-----Generated at Wed Dec 24 10:37:44 2025 by rpki-client