This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft File: 0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft (raw, json) Hash identifier: 3vpyQFQqbMT3W8LA+A1CGnaQjbr+JdSoeDTbxqWuHMU= Subject key identifier: 6F:EE:7E:44:B7:71:B0:A1:86:79:B9:CE:BE:50:6F:A9:56:EC:63:5B Authority key identifier: D1:BD:64:CC:94:A4:A8:51:8A:71:F9:6E:F8:B7:76:25:AF:A5:27:D1 Certificate issuer: /CN=d1bd64cc94a4a8518a71f96ef8b77625afa527d1 Certificate serial: 019B3D59F56ACB10794B77E5C4BC88EE7B1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft Manifest number: 14AE Signing time: Sat 20 Dec 2025 20:01:04 +0000 Manifest this update: Sat 20 Dec 2025 20:01:04 +0000 Manifest next update: Sun 21 Dec 2025 20:01:04 +0000 Files and hashes: 1: 0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.crl (hash: eAmZ7o99up9eSApIgrbVwdVAQkeFnXyuhozIVT9P0CM=) 2: iWhZAjriW-wjhpW_I7AAFupd8k0.roa (hash: luBfIMH09dvaIbcRpG6juKMigtK01xkZI61aTfT3Bf8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:f5:6a:cb:10:79:4b:77:e5:c4:bc:88:ee:7b:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1bd64cc94a4a8518a71f96ef8b77625afa527d1 Validity Not Before: Dec 20 20:01:04 2025 GMT Not After : Dec 21 20:01:04 2025 GMT Subject: CN=6fee7e44b771b0a18679b9cebe506fa956ec635b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cd:bc:5d:43:03:eb:84:f1:8a:d8:9f:5a:65: 5b:ab:f0:43:a3:ec:c5:ae:88:fa:92:08:b6:b0:97: 2f:e4:83:1c:a9:2c:70:56:3e:6b:dc:89:1d:0a:1e: 23:42:4b:53:a7:1c:71:36:81:de:39:6b:5d:17:3d: f7:72:66:be:85:fa:12:e3:c0:77:be:a6:ba:db:fa: 5b:41:29:97:27:1e:91:8f:7c:12:32:26:17:e5:9e: 77:b8:4a:0f:90:b0:de:e0:1f:e6:65:42:0d:e4:4b: 2a:14:17:61:72:51:c5:7f:c8:23:0d:e0:4f:6f:4a: be:f5:2b:4a:d1:b1:a2:93:18:d4:2e:59:a9:a5:6a: 9d:22:d7:31:e6:d4:95:59:d2:fa:fd:d8:f7:48:ce: c6:b9:c1:91:6b:51:f6:07:d9:db:0a:51:13:86:7f: ef:37:d7:80:cd:09:ac:88:61:de:cc:de:c1:09:33: 3c:8a:38:50:21:bb:f9:70:15:21:16:2d:3a:69:98: e3:a7:33:c6:40:b4:88:ed:eb:47:51:6b:f2:e1:ea: 73:32:5a:20:fb:69:26:8f:9e:39:5d:42:ff:09:fa: 60:84:ea:41:9f:88:c2:88:4a:18:77:40:d7:c6:35: f4:d6:47:83:eb:e9:ba:d5:e3:f2:7d:2b:df:de:0d: c0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:EE:7E:44:B7:71:B0:A1:86:79:B9:CE:BE:50:6F:A9:56:EC:63:5B X509v3 Authority Key Identifier: keyid:D1:BD:64:CC:94:A4:A8:51:8A:71:F9:6E:F8:B7:76:25:AF:A5:27:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:02:e4:9f:ed:58:5f:33:c8:a8:57:9e:c6:9f:40:fc:2e:26: 5e:8b:c6:46:2b:e7:6e:06:36:89:5a:be:a4:cb:71:9d:c2:e0: e2:52:2d:43:8f:3c:0e:76:59:9f:81:52:8a:54:f8:b6:f9:2a: bc:fc:3b:3e:78:72:3f:19:08:37:3f:b1:08:8e:18:fd:88:c7: 11:7b:0c:8e:b3:e2:6e:4c:66:4e:fa:f2:b1:a8:4f:10:aa:8e: 69:e7:8f:8f:df:ef:cc:81:1e:a4:e3:aa:e0:0f:8f:dc:26:00: a0:97:6b:53:09:5d:a2:76:76:75:bd:8d:c2:df:71:86:ed:4d: 5d:54:d8:39:cf:65:77:ba:31:6b:26:61:20:15:ca:99:bd:61: 3c:b4:89:c4:d3:a1:ae:ee:b6:67:e1:73:38:af:93:47:3b:84: 2f:55:fa:7d:68:b5:9b:5f:c8:09:67:0c:02:17:c9:93:71:39: 43:b0:0e:e5:10:3a:d6:86:d9:67:98:c5:bd:01:e2:59:7a:56: bc:a5:d6:2a:f2:22:48:c4:d7:b7:24:9e:2e:84:da:f2:e6:fe: a5:2a:e1:79:ef:e8:4e:e9:e9:97:58:0e:87:ea:95:40:10:f0: 33:1e:ca:55:c2:61:77:4b:34:1a:9f:0d:8c:9b:82:25:de:e9: 1b:25:70:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WfVqyxB5S3flxLyI7nscMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxYmQ2NGNjOTRhNGE4NTE4YTcxZjk2ZWY4Yjc3NjI1YWZh NTI3ZDEwHhcNMjUxMjIwMjAwMTA0WhcNMjUxMjIxMjAwMTA0WjAzMTEwLwYDVQQD Eyg2ZmVlN2U0NGI3NzFiMGExODY3OWI5Y2ViZTUwNmZhOTU2ZWM2MzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmM28XUMD64TxitifWmVbq/BDo+zF roj6kgi2sJcv5IMcqSxwVj5r3IkdCh4jQktTpxxxNoHeOWtdFz33cma+hfoS48B3 vqa62/pbQSmXJx6Rj3wSMiYX5Z53uEoPkLDe4B/mZUIN5EsqFBdhclHFf8gjDeBP b0q+9StK0bGikxjULlmppWqdItcx5tSVWdL6/dj3SM7GucGRa1H2B9nbClEThn/v N9eAzQmsiGHezN7BCTM8ijhQIbv5cBUhFi06aZjjpzPGQLSI7etHUWvy4epzMlog +2kmj545XUL/CfpghOpBn4jCiEoYd0DXxjX01keD6+m61ePyfSvf3g3AlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG/ufkS3cbChhnm5zr5Qb6lW7GNbMB8GA1UdIwQY MBaAFNG9ZMyUpKhRinH5bvi3diWvpSfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGIxa3pKU2txRkdLY2ZsdS1MZDJKYS1sSjlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yZWZhNTAtZjQ4My00YjUzLWIxZTct MDgyNmYzNmZmMjhmLzEvMGIxa3pKU2txRkdLY2ZsdS1MZDJKYS1sSjlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8yZWZhNTAtZjQ4My00YjUzLWIxZTctMDgyNmYzNmZmMjhm LzEvMGIxa3pKU2txRkdLY2ZsdS1MZDJKYS1sSjlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABQLkn+1Y XzPIqFeexp9A/C4mXovGRivnbgY2iVq+pMtxncLg4lItQ488DnZZn4FSilT4tvkq vPw7PnhyPxkINz+xCI4Y/YjHEXsMjrPibkxmTvrysahPEKqOaeePj9/vzIEepOOq 4A+P3CYAoJdrUwldonZ2db2Nwt9xhu1NXVTYOc9ld7oxayZhIBXKmb1hPLSJxNOh ru62Z+FzOK+TRzuEL1X6fWi1m1/ICWcMAhfJk3E5Q7AO5RA61obZZ5jFvQHiWXpW vKXWKvIiSMTXtySeLoTa8ub+pSrhee/oTunpl1gOh+qVQBDwMx7KVcJhd0s0Gp8N jJuCJd7pGyVwCQ== -----END CERTIFICATE-----Generated at Sun Dec 21 03:54:09 2025 by rpki-client