This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft File: RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft (raw, json) Hash identifier: 8Jy1RI/Sx1xcvGvb5rRdkYbXSLyP2ZeYQW8tYPOxnQ8= Subject key identifier: 68:12:6C:6E:F7:71:9A:0A:15:6A:9C:39:6B:EA:F4:2C:3D:D9:1F:4B Authority key identifier: 44:ED:8B:89:60:E8:7A:A6:69:35:AD:66:83:BC:15:F1:E4:79:93:B6 Certificate issuer: /CN=44ed8b8960e87aa66935ad6683bc15f1e47993b6 Certificate serial: 019B443754C5C30D1FB4BC4FA66A3ABA9594 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft Manifest number: 0545 Signing time: Mon 22 Dec 2025 04:00:35 +0000 Manifest this update: Mon 22 Dec 2025 04:00:35 +0000 Manifest next update: Tue 23 Dec 2025 04:00:35 +0000 Files and hashes: 1: RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl (hash: RJnJpzY/qtqBMmoX2xyOr/xfUbKa5Ws+SMOCpa7xs5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:37:54:c5:c3:0d:1f:b4:bc:4f:a6:6a:3a:ba:95:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44ed8b8960e87aa66935ad6683bc15f1e47993b6 Validity Not Before: Dec 22 04:00:35 2025 GMT Not After : Dec 23 04:00:35 2025 GMT Subject: CN=68126c6ef7719a0a156a9c396beaf42c3dd91f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a6:20:e6:6c:b2:5d:d0:cd:a1:ce:69:75:e7: 74:99:d9:ff:b2:7b:9f:2b:9a:a0:9c:09:ad:60:40: 75:42:65:2c:d1:87:a7:47:49:a0:15:09:0c:fc:05: 7a:75:cf:fa:22:11:5c:38:c4:ec:60:c6:24:6e:9d: d1:93:d1:24:79:5a:d8:a2:2b:dd:98:9f:c4:10:34: 0f:19:3d:51:06:68:b3:4d:8f:f9:9f:0b:b2:7f:12: da:74:7e:6d:82:df:40:5b:6f:bd:a2:2d:e6:66:31: 2a:47:6e:a1:a6:6e:23:d6:93:cc:4c:f8:88:35:b8: 31:5a:d1:60:5e:04:0d:b8:fd:1a:77:c8:10:4d:90: 32:8e:8f:e4:b7:96:3d:0c:1e:0b:94:a7:7f:0a:ad: 00:d2:ba:ec:ac:17:ee:1c:b2:14:b9:a4:c9:b6:c3: 14:5e:68:52:f9:ff:1d:84:f2:5c:f6:e3:c7:7c:3d: be:11:8b:24:44:12:00:7b:02:fc:91:b2:74:04:d7: 2f:47:0d:38:e8:5b:c8:e0:08:99:d0:0d:e7:6b:56: b4:9d:e2:ff:c8:a8:0a:2f:29:33:38:52:a6:5b:94: c7:75:e1:5f:56:43:ea:8f:c1:73:73:b1:8f:a2:7f: d5:81:f9:c4:e9:90:c5:33:22:8b:5b:df:ee:24:d7: fd:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:12:6C:6E:F7:71:9A:0A:15:6A:9C:39:6B:EA:F4:2C:3D:D9:1F:4B X509v3 Authority Key Identifier: keyid:44:ED:8B:89:60:E8:7A:A6:69:35:AD:66:83:BC:15:F1:E4:79:93:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:4a:8c:42:e2:de:c1:94:80:88:3b:d9:61:13:86:f2:7e:d6: d3:54:44:fa:4c:d0:90:fd:66:c5:60:96:38:7e:bb:4b:df:63: 38:75:f9:bc:26:5e:c6:d6:72:6c:f4:ad:f1:93:30:0d:df:7d: 23:69:89:84:34:4c:98:fa:72:15:c7:7d:2d:55:08:75:f8:fe: 7d:7d:eb:0b:77:5f:de:50:5e:4f:a6:f1:fd:76:0e:1a:62:df: 77:c1:a7:a6:da:de:c7:97:81:f3:6d:34:fe:7c:ed:1d:b1:05: d6:29:06:be:26:3c:96:e9:25:75:60:85:3c:e5:d9:eb:fd:b0: c8:13:c5:f7:7d:15:48:15:02:6a:2c:07:bf:8c:ae:5a:78:08: b8:7c:88:17:d9:ae:68:30:88:fa:e1:46:1b:c9:5f:d0:e9:df: 21:16:7a:bf:0c:5a:d6:93:63:c8:1d:c4:a9:44:5e:5a:f6:45: 97:9d:21:03:87:54:e2:34:b9:ad:1b:59:bf:c9:74:50:32:fd: a4:19:65:54:21:2d:a4:76:ff:35:be:8b:1e:1c:5f:40:15:d7: 47:ea:14:39:69:c5:b6:dc:67:f5:fe:c1:2f:08:a1:a4:f2:64: 1b:99:5a:50:07:3d:c0:a1:e9:9d:40:83:4c:bb:48:47:8f:e2: 61:4f:9a:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEN1TFww0ftLxPpmo6upWUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZWQ4Yjg5NjBlODdhYTY2OTM1YWQ2NjgzYmMxNWYxZTQ3 OTkzYjYwHhcNMjUxMjIyMDQwMDM1WhcNMjUxMjIzMDQwMDM1WjAzMTEwLwYDVQQD Eyg2ODEyNmM2ZWY3NzE5YTBhMTU2YTljMzk2YmVhZjQyYzNkZDkxZjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqYg5myyXdDNoc5pded0mdn/snuf K5qgnAmtYEB1QmUs0YenR0mgFQkM/AV6dc/6IhFcOMTsYMYkbp3Rk9EkeVrYoivd mJ/EEDQPGT1RBmizTY/5nwuyfxLadH5tgt9AW2+9oi3mZjEqR26hpm4j1pPMTPiI NbgxWtFgXgQNuP0ad8gQTZAyjo/kt5Y9DB4LlKd/Cq0A0rrsrBfuHLIUuaTJtsMU XmhS+f8dhPJc9uPHfD2+EYskRBIAewL8kbJ0BNcvRw046FvI4AiZ0A3na1a0neL/ yKgKLykzOFKmW5THdeFfVkPqj8Fzc7GPon/VgfnE6ZDFMyKLW9/uJNf9gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGgSbG73cZoKFWqcOWvq9Cw92R9LMB8GA1UdIwQY MBaAFETti4lg6HqmaTWtZoO8FfHkeZO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk8yTGlXRG9lcVpwTmExbWc3d1Y4ZVI1azdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi84ZjlkYjUtZTlhZC00NjRmLWFiYTkt YmQxYmE0YzE5Zjc2LzEvUk8yTGlXRG9lcVpwTmExbWc3d1Y4ZVI1azdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi84ZjlkYjUtZTlhZC00NjRmLWFiYTktYmQxYmE0YzE5Zjc2 LzEvUk8yTGlXRG9lcVpwTmExbWc3d1Y4ZVI1azdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAukqMQuLe wZSAiDvZYROG8n7W01RE+kzQkP1mxWCWOH67S99jOHX5vCZextZybPSt8ZMwDd99 I2mJhDRMmPpyFcd9LVUIdfj+fX3rC3df3lBeT6bx/XYOGmLfd8Gnptrex5eB8200 /nztHbEF1ikGviY8lukldWCFPOXZ6/2wyBPF930VSBUCaiwHv4yuWngIuHyIF9mu aDCI+uFGG8lf0OnfIRZ6vwxa1pNjyB3EqUReWvZFl50hA4dU4jS5rRtZv8l0UDL9 pBllVCEtpHb/Nb6LHhxfQBXXR+oUOWnFttxn9f7BLwihpPJkG5laUAc9wKHpnUCD TLtIR4/iYU+a1Q== -----END CERTIFICATE-----Generated at Mon Dec 22 10:36:12 2025 by rpki-client