This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft File: D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft (raw, json) Hash identifier: Zaz8O7npLyev3BDxHESoA0yY6rjghbfPbmi0V0m0dkU= Subject key identifier: B0:FE:FA:BA:58:A5:F2:B2:EC:6D:76:D9:25:99:CF:D8:73:37:35:11 Authority key identifier: 0F:E1:A7:B6:A6:B8:5B:3C:32:67:C8:03:99:6E:D8:18:A4:A6:64:79 Certificate issuer: /CN=0fe1a7b6a6b85b3c3267c803996ed818a4a66479 Certificate serial: 019B6D3370126A79C3E1E4A6651A6FAAEA17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft Manifest number: 02C9 Signing time: Tue 30 Dec 2025 03:00:45 +0000 Manifest this update: Tue 30 Dec 2025 03:00:45 +0000 Manifest next update: Wed 31 Dec 2025 03:00:45 +0000 Files and hashes: 1: D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl (hash: 3UmYg0EoGDyqHIo6QiZTqyK3bzstE8cTw2qZQwaqrgQ=) 2: jcTO1fBkVXsp4y6wlcBbebFM8iw.roa (hash: NkT9ooqiKYOuDT79Rkr1WXdOvqeB/1D8TcQH5fNDnzE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:33:70:12:6a:79:c3:e1:e4:a6:65:1a:6f:aa:ea:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fe1a7b6a6b85b3c3267c803996ed818a4a66479 Validity Not Before: Dec 30 03:00:45 2025 GMT Not After : Dec 31 03:00:45 2025 GMT Subject: CN=b0fefaba58a5f2b2ec6d76d92599cfd873373511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:31:9e:cd:f3:77:0b:ad:96:97:a3:50:57:7e: 3c:b9:ed:c3:de:e4:bc:fb:86:7c:c7:2a:0a:22:a3: 22:32:86:71:f3:57:cd:03:e5:35:6c:e2:49:d3:ba: 9b:07:35:98:3c:f9:41:27:91:e0:e6:21:c9:c6:de: e5:ed:16:7a:4e:78:26:54:ff:0d:2d:dd:82:c2:58: 55:c8:af:9c:b9:59:63:d6:46:89:21:18:dc:06:f5: 4f:9b:81:db:c0:31:46:c1:56:40:2a:53:5b:03:cb: f8:c5:cc:92:78:dc:30:f5:ad:5b:01:70:9a:22:d5: 33:6f:e1:65:db:bf:9d:3f:30:a5:a3:b2:38:e7:6d: 14:f5:07:2b:ef:e9:c5:29:14:80:cc:dc:00:f5:5d: a9:e7:40:ae:86:b3:3d:fe:dd:0c:7f:4f:aa:ab:d6: 0a:56:bb:12:08:5f:76:4d:1e:a1:e8:64:96:40:28: fa:19:1c:fd:c3:60:e4:d1:0f:1d:1b:c6:a9:d4:36: c1:11:d5:fe:1b:16:b1:da:17:29:c1:84:77:f8:65: f0:6f:d3:b5:9b:ef:6f:3f:ad:ae:8b:8c:22:63:a0: 07:d9:99:f7:c8:95:63:0b:ae:ae:ad:cf:14:35:e7: 5e:57:04:ed:80:14:b1:67:02:11:99:ca:dd:3e:fe: d5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:FE:FA:BA:58:A5:F2:B2:EC:6D:76:D9:25:99:CF:D8:73:37:35:11 X509v3 Authority Key Identifier: keyid:0F:E1:A7:B6:A6:B8:5B:3C:32:67:C8:03:99:6E:D8:18:A4:A6:64:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:9a:3c:6f:af:57:20:62:75:f7:3c:9b:5e:46:7d:e5:b6:77: 90:92:4e:c3:a3:31:61:80:73:31:d2:ec:0f:22:1c:07:51:4c: 21:04:d7:fb:96:53:4e:9e:88:f6:46:cc:22:be:50:55:9c:92: b3:ee:22:47:5a:13:1d:90:fa:16:c4:73:c5:59:ca:a7:b1:c0: 7d:97:34:ba:46:ad:7c:ef:8f:01:c5:1a:7a:22:4a:32:ff:14: 8a:0e:22:b9:4a:a5:c2:11:60:b0:49:e2:5a:62:04:53:50:64: 01:9f:65:85:1d:c2:e9:cb:5e:14:a5:79:cc:01:20:22:9b:2b: 06:f9:9b:88:c2:72:da:e4:a1:b1:7a:eb:64:94:26:ae:e4:97: 02:37:48:a5:5a:fc:0c:ef:e2:c5:c1:49:e8:c5:42:9f:3e:95: 71:2e:f5:49:b5:28:9a:b5:b4:e2:d5:74:de:41:f0:b6:fb:e9: 85:a5:f7:93:b2:a1:e2:9b:10:36:65:8e:6c:a4:ad:40:3a:f2: 6f:5d:1f:c7:ce:7e:25:39:db:59:d0:55:a5:5e:0f:88:9f:fc: 47:ec:82:e3:a0:a9:79:49:98:28:61:cd:e7:ff:4f:85:4c:5b: d7:bd:b4:ad:5f:92:92:70:ae:34:c7:57:e5:a0:80:c9:70:f0: 41:98:af:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttM3ASannD4eSmZRpvquoXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZTFhN2I2YTZiODViM2MzMjY3YzgwMzk5NmVkODE4YTRh NjY0NzkwHhcNMjUxMjMwMDMwMDQ1WhcNMjUxMjMxMDMwMDQ1WjAzMTEwLwYDVQQD EyhiMGZlZmFiYTU4YTVmMmIyZWM2ZDc2ZDkyNTk5Y2ZkODczMzczNTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zGezfN3C62Wl6NQV348ue3D3uS8 +4Z8xyoKIqMiMoZx81fNA+U1bOJJ07qbBzWYPPlBJ5Hg5iHJxt7l7RZ6TngmVP8N Ld2CwlhVyK+cuVlj1kaJIRjcBvVPm4HbwDFGwVZAKlNbA8v4xcySeNww9a1bAXCa ItUzb+Fl27+dPzClo7I4520U9Qcr7+nFKRSAzNwA9V2p50CuhrM9/t0Mf0+qq9YK VrsSCF92TR6h6GSWQCj6GRz9w2Dk0Q8dG8ap1DbBEdX+Gxax2hcpwYR3+GXwb9O1 m+9vP62ui4wiY6AH2Zn3yJVjC66urc8UNedeVwTtgBSxZwIRmcrdPv7VjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLD++rpYpfKy7G122SWZz9hzNzURMB8GA1UdIwQY MBaAFA/hp7amuFs8MmfIA5lu2BikpmR5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRC1HbnRxYTRXend5WjhnRG1XN1lHS1NtWkhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wODQxYjUtMTk1NS00ZjAwLThiZjEt Mjg5Zjk1ODkzZTg0LzEvRC1HbnRxYTRXend5WjhnRG1XN1lHS1NtWkhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8wODQxYjUtMTk1NS00ZjAwLThiZjEtMjg5Zjk1ODkzZTg0 LzEvRC1HbnRxYTRXend5WjhnRG1XN1lHS1NtWkhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjZo8b69X IGJ19zybXkZ95bZ3kJJOw6MxYYBzMdLsDyIcB1FMIQTX+5ZTTp6I9kbMIr5QVZyS s+4iR1oTHZD6FsRzxVnKp7HAfZc0ukatfO+PAcUaeiJKMv8Uig4iuUqlwhFgsEni WmIEU1BkAZ9lhR3C6cteFKV5zAEgIpsrBvmbiMJy2uShsXrrZJQmruSXAjdIpVr8 DO/ixcFJ6MVCnz6VcS71SbUomrW04tV03kHwtvvphaX3k7Kh4psQNmWObKStQDry b10fx85+JTnbWdBVpV4PiJ/8R+yC46CpeUmYKGHN5/9PhUxb1720rV+SknCuNMdX 5aCAyXDwQZivQA== -----END CERTIFICATE-----Generated at Tue Dec 30 08:51:58 2025 by rpki-client