This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft File: g60oliGDPa6G_dpi5LmwningeKA.mft (raw, json) Hash identifier: sevfHcFKwxiTDkxm+qrx55m6a4PpT9x2l20/pytVIb0= Subject key identifier: DC:52:51:C5:66:B0:9A:85:D5:FF:CF:9B:E6:15:13:A5:28:24:E3:90 Authority key identifier: 83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0 Certificate issuer: /CN=83ad289621833dae86fdda62e4b9b09e29e078a0 Certificate serial: 019B2F6733FF69208F0248394C930020E635 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft Manifest number: 109A Signing time: Thu 18 Dec 2025 03:00:51 +0000 Manifest this update: Thu 18 Dec 2025 03:00:51 +0000 Manifest next update: Fri 19 Dec 2025 03:00:51 +0000 Files and hashes: 1: WFi05y69wJK8xYZ7djgxRMe4JdI.roa (hash: 38NfaEez2rHkQbLDVIDAczBWslMXi/gwh/We3R8xbaw=) 2: g60oliGDPa6G_dpi5LmwningeKA.crl (hash: pcrVCAXZl2qfrSAJ4EiPEhATOiSLMp1yp9tLmtJDue4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:33:ff:69:20:8f:02:48:39:4c:93:00:20:e6:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83ad289621833dae86fdda62e4b9b09e29e078a0 Validity Not Before: Dec 18 03:00:51 2025 GMT Not After : Dec 19 03:00:51 2025 GMT Subject: CN=dc5251c566b09a85d5ffcf9be61513a52824e390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4a:af:71:d4:97:88:08:5d:70:e4:d5:5e:f2: 1c:e5:bb:04:54:03:d4:1a:d6:e4:5f:30:12:52:09: fc:db:f3:2e:98:27:0c:24:e2:b4:ba:42:60:12:6a: f1:73:d5:75:0f:95:1a:94:4b:cc:65:0e:fd:92:9d: c1:47:23:d3:61:52:2f:02:80:56:f7:87:c6:25:01: 3f:fe:85:8f:c7:0c:92:13:aa:3e:38:3f:d7:b0:a0: dc:4c:2a:95:e6:58:2c:5e:89:95:be:fa:99:a5:05: ee:83:8b:24:ed:61:a4:2f:96:27:54:f5:c8:15:da: e8:39:ae:dc:cc:a2:a8:be:f8:1c:31:e4:91:e0:f3: fc:58:f1:c3:dc:73:15:d0:b6:57:5e:dc:eb:2f:ae: bd:51:59:9b:aa:29:5b:77:56:8f:4d:b1:0d:14:0d: 45:ff:7f:5e:b0:42:63:74:8c:65:69:29:b7:bd:20: 65:31:45:b9:bf:d2:de:10:32:5d:ff:b1:09:c0:b1: 9a:a3:07:f5:8f:3b:e9:25:55:e7:0a:66:c8:43:dc: c8:45:7c:e8:8e:73:17:2e:a5:ed:26:45:53:f7:bc: 40:87:53:79:91:9b:c4:bb:6d:00:78:70:77:2b:91: 58:80:ab:f0:4b:9f:d7:9e:e0:5a:f4:03:f5:9d:d8: 64:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:52:51:C5:66:B0:9A:85:D5:FF:CF:9B:E6:15:13:A5:28:24:E3:90 X509v3 Authority Key Identifier: keyid:83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:0c:01:01:45:8c:84:41:0f:12:a0:cd:59:22:15:76:e6:b7: 69:ce:f6:4d:1e:5f:43:74:20:04:9e:27:28:2c:b0:a5:cc:fa: 3a:1a:29:30:c6:35:4c:1c:fb:07:3f:bc:ab:a2:06:78:2c:a4: 69:00:ad:46:cd:f6:77:78:f7:27:bd:da:b2:ea:1c:76:85:5b: dc:d8:bc:14:b0:5a:14:c9:7c:41:54:97:e0:9d:1f:a2:05:04: 40:76:08:c1:26:92:d6:f3:34:a9:8b:5c:f0:b4:cf:ba:2d:37: c9:16:54:14:34:2c:1b:34:a8:f7:07:90:4e:18:65:91:5f:f2: 69:a4:62:f7:69:4d:e0:c2:e5:93:0c:2d:25:b7:11:77:34:c0: 09:63:ff:ec:08:7f:ce:1d:af:97:81:49:d1:cf:70:2a:e4:89: 63:50:b6:d1:69:c4:ba:e0:36:5d:c5:a1:12:d4:33:87:ab:9e: 3a:da:be:6c:ea:63:52:78:ef:1e:5c:cc:88:bd:73:f0:92:cc: 87:27:68:36:63:25:c3:1a:9f:73:8f:ef:55:93:dd:6c:0e:0e: 93:b1:f3:25:90:5b:3e:0a:05:92:a6:93:aa:15:13:de:61:35: 92:6e:40:72:c7:af:9d:13:7f:48:9e:41:b2:32:b3:df:45:74: 25:37:d5:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZzP/aSCPAkg5TJMAIOY1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzYWQyODk2MjE4MzNkYWU4NmZkZGE2MmU0YjliMDllMjll MDc4YTAwHhcNMjUxMjE4MDMwMDUxWhcNMjUxMjE5MDMwMDUxWjAzMTEwLwYDVQQD EyhkYzUyNTFjNTY2YjA5YTg1ZDVmZmNmOWJlNjE1MTNhNTI4MjRlMzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0qvcdSXiAhdcOTVXvIc5bsEVAPU GtbkXzASUgn82/MumCcMJOK0ukJgEmrxc9V1D5UalEvMZQ79kp3BRyPTYVIvAoBW 94fGJQE//oWPxwySE6o+OD/XsKDcTCqV5lgsXomVvvqZpQXug4sk7WGkL5YnVPXI FdroOa7czKKovvgcMeSR4PP8WPHD3HMV0LZXXtzrL669UVmbqilbd1aPTbENFA1F /39esEJjdIxlaSm3vSBlMUW5v9LeEDJd/7EJwLGaowf1jzvpJVXnCmbIQ9zIRXzo jnMXLqXtJkVT97xAh1N5kZvEu20AeHB3K5FYgKvwS5/XnuBa9AP1ndhkcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNxSUcVmsJqF1f/Pm+YVE6UoJOOQMB8GA1UdIwQY MBaAFIOtKJYhgz2uhv3aYuS5sJ4p4HigMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzYwb2xpR0RQYTZHX2RwaTVMbXduaW5nZUtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9lMTg3MGYtOWNiNi00MzM5LWFhMzgt MGFmNDIzMWRhNzlhLzEvZzYwb2xpR0RQYTZHX2RwaTVMbXduaW5nZUtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9lMTg3MGYtOWNiNi00MzM5LWFhMzgtMGFmNDIzMWRhNzlh LzEvZzYwb2xpR0RQYTZHX2RwaTVMbXduaW5nZUtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAowwBAUWM hEEPEqDNWSIVdua3ac72TR5fQ3QgBJ4nKCywpcz6OhopMMY1TBz7Bz+8q6IGeCyk aQCtRs32d3j3J73asuocdoVb3Ni8FLBaFMl8QVSX4J0fogUEQHYIwSaS1vM0qYtc 8LTPui03yRZUFDQsGzSo9weQThhlkV/yaaRi92lN4MLlkwwtJbcRdzTACWP/7Ah/ zh2vl4FJ0c9wKuSJY1C20WnEuuA2XcWhEtQzh6ueOtq+bOpjUnjvHlzMiL1z8JLM hydoNmMlwxqfc4/vVZPdbA4Ok7HzJZBbPgoFkqaTqhUT3mE1km5AcsevnRN/SJ5B sjKz30V0JTfVCQ== -----END CERTIFICATE-----Generated at Thu Dec 18 11:53:56 2025 by rpki-client