This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft File: 0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft (raw, json) Hash identifier: R2rc0ZjPLFVqXSGRY8JPd5ZkUjdfQcE2s/R7AsJ8Le0= Subject key identifier: 59:A8:B6:71:FD:86:CE:5A:25:03:E0:66:49:01:14:90:A5:0E:6E:2C Authority key identifier: D1:BD:64:CC:94:A4:A8:51:8A:71:F9:6E:F8:B7:76:25:AF:A5:27:D1 Certificate issuer: /CN=d1bd64cc94a4a8518a71f96ef8b77625afa527d1 Certificate serial: 019B69C42F400F5D4408EBE1E307CF9134C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft Manifest number: 14C5 Signing time: Mon 29 Dec 2025 11:00:23 +0000 Manifest this update: Mon 29 Dec 2025 11:00:23 +0000 Manifest next update: Tue 30 Dec 2025 11:00:23 +0000 Files and hashes: 1: 0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.crl (hash: Zo8FoFIuvNh27s477zZshSlobKh0TODtMk9XPXRoCB8=) 2: iWhZAjriW-wjhpW_I7AAFupd8k0.roa (hash: luBfIMH09dvaIbcRpG6juKMigtK01xkZI61aTfT3Bf8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 10:15:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:c4:2f:40:0f:5d:44:08:eb:e1:e3:07:cf:91:34:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1bd64cc94a4a8518a71f96ef8b77625afa527d1 Validity Not Before: Dec 29 11:00:23 2025 GMT Not After : Dec 30 11:00:23 2025 GMT Subject: CN=59a8b671fd86ce5a2503e06649011490a50e6e2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d3:b1:3d:a6:36:8b:cb:59:db:cf:50:9a:ef: 42:0d:84:b9:63:49:f1:9a:07:2d:26:ca:eb:a3:e8: ce:68:72:a3:88:0e:35:dd:7d:ae:5b:17:d6:1f:8f: 8e:59:0b:f8:5d:c8:7a:ba:ee:78:da:fc:50:71:74: 31:49:f8:58:21:17:86:9d:6a:02:bc:57:00:8b:05: 9c:c8:11:9b:53:ee:73:8c:c3:db:2f:65:90:05:66: a3:10:87:82:98:d9:3f:f6:70:0b:18:57:ec:93:98: 8b:df:24:dd:a4:82:69:4e:22:56:a8:0f:17:05:5f: f8:39:ec:91:46:da:fc:9b:6e:d3:8b:52:fe:ca:0f: 6d:92:0b:50:c2:4e:b2:96:80:aa:87:8d:ab:2f:5f: 6f:09:08:97:7d:a9:03:9a:97:22:e1:0c:5f:46:7f: 1f:52:a1:1c:47:3f:47:84:9e:25:d8:a5:36:0c:47: 36:36:89:16:65:58:5c:06:6e:3b:a8:44:12:e5:0a: f7:c3:0e:cf:a8:be:09:15:b0:5c:83:73:b9:9f:93: 99:c7:61:93:f0:ea:85:06:dd:70:a7:50:be:94:ac: 5a:70:f7:68:af:62:30:35:1a:d5:44:0c:02:74:05: d4:b9:be:c5:1f:c6:d2:eb:db:ee:80:a6:99:09:f0: b8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A8:B6:71:FD:86:CE:5A:25:03:E0:66:49:01:14:90:A5:0E:6E:2C X509v3 Authority Key Identifier: keyid:D1:BD:64:CC:94:A4:A8:51:8A:71:F9:6E:F8:B7:76:25:AF:A5:27:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:cd:ae:cb:7c:7b:11:fb:31:72:71:6e:c7:b5:00:a1:f7:b4: b1:c9:4f:e3:d7:33:dd:6c:20:0b:2a:75:0a:d2:9d:d4:38:23: 68:ac:fe:38:5e:ea:9b:63:3b:84:64:2a:7f:51:bf:ea:09:57: 9d:f2:4a:6a:91:37:fd:46:7d:c7:d9:9a:3e:87:7a:33:18:99: 86:ef:e1:65:f9:a8:5b:3e:d7:d8:9f:16:60:60:d5:2f:4e:d9: 94:70:db:10:89:ff:0b:e6:84:3e:6c:68:62:23:96:5b:56:b8: e7:74:40:7c:d8:01:01:f1:fd:17:6e:b5:eb:82:19:85:19:9f: 24:ce:91:77:79:88:a0:03:ba:ac:a5:b4:0c:7a:14:ec:73:a5: 5a:e3:b5:f0:0d:84:ad:7b:c3:c1:de:48:b9:6a:f9:d0:7f:d2: 4f:f9:0f:35:e5:a4:6a:8e:18:8b:5b:7e:6c:06:64:3d:69:48: e2:9c:3f:56:56:a0:08:f7:c4:66:f6:6c:3d:1e:9e:72:45:ff: 69:56:45:51:0d:4f:ba:4c:78:61:51:02:ea:6a:d3:8b:ad:9e: c2:50:3b:fb:ef:7c:1a:03:f7:69:37:57:a8:12:03:19:6e:65: 6e:91:50:0f:23:9b:19:a0:2f:41:7d:bc:12:63:79:35:35:71: 3d:86:93:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpxC9AD11ECOvh4wfPkTTAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxYmQ2NGNjOTRhNGE4NTE4YTcxZjk2ZWY4Yjc3NjI1YWZh NTI3ZDEwHhcNMjUxMjI5MTEwMDIzWhcNMjUxMjMwMTEwMDIzWjAzMTEwLwYDVQQD Eyg1OWE4YjY3MWZkODZjZTVhMjUwM2UwNjY0OTAxMTQ5MGE1MGU2ZTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dOxPaY2i8tZ289Qmu9CDYS5Y0nx mgctJsrro+jOaHKjiA413X2uWxfWH4+OWQv4Xch6uu542vxQcXQxSfhYIReGnWoC vFcAiwWcyBGbU+5zjMPbL2WQBWajEIeCmNk/9nALGFfsk5iL3yTdpIJpTiJWqA8X BV/4OeyRRtr8m27Ti1L+yg9tkgtQwk6yloCqh42rL19vCQiXfakDmpci4QxfRn8f UqEcRz9HhJ4l2KU2DEc2NokWZVhcBm47qEQS5Qr3ww7PqL4JFbBcg3O5n5OZx2GT 8OqFBt1wp1C+lKxacPdor2IwNRrVRAwCdAXUub7FH8bS69vugKaZCfC4IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFmotnH9hs5aJQPgZkkBFJClDm4sMB8GA1UdIwQY MBaAFNG9ZMyUpKhRinH5bvi3diWvpSfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGIxa3pKU2txRkdLY2ZsdS1MZDJKYS1sSjlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yZWZhNTAtZjQ4My00YjUzLWIxZTct MDgyNmYzNmZmMjhmLzEvMGIxa3pKU2txRkdLY2ZsdS1MZDJKYS1sSjlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8yZWZhNTAtZjQ4My00YjUzLWIxZTctMDgyNmYzNmZmMjhm LzEvMGIxa3pKU2txRkdLY2ZsdS1MZDJKYS1sSjlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh82uy3x7 EfsxcnFux7UAofe0sclP49cz3WwgCyp1CtKd1DgjaKz+OF7qm2M7hGQqf1G/6glX nfJKapE3/UZ9x9maPod6MxiZhu/hZfmoWz7X2J8WYGDVL07ZlHDbEIn/C+aEPmxo YiOWW1a453RAfNgBAfH9F26164IZhRmfJM6Rd3mIoAO6rKW0DHoU7HOlWuO18A2E rXvDwd5IuWr50H/ST/kPNeWkao4Yi1t+bAZkPWlI4pw/VlagCPfEZvZsPR6eckX/ aVZFUQ1Pukx4YVEC6mrTi62ewlA7++98GgP3aTdXqBIDGW5lbpFQDyObGaAvQX28 EmN5NTVxPYaTVw== -----END CERTIFICATE-----Generated at Mon Dec 29 13:23:44 2025 by rpki-client