This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft File: DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft (raw, json) Hash identifier: lpnwDd6GSNfpvYWvcjvL+E0SpvEL7bcSZxVCgp2ogwM= Subject key identifier: F4:E8:9E:FE:64:95:6B:7D:1F:2E:0A:01:71:F7:3C:A0:56:D2:F7:A7 Authority key identifier: 0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4 Certificate issuer: /CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4 Certificate serial: 019B3A8F8AED2C556DA26B58D29E4AB7AA1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft Manifest number: 0E6C Signing time: Sat 20 Dec 2025 07:00:44 +0000 Manifest this update: Sat 20 Dec 2025 07:00:44 +0000 Manifest next update: Sun 21 Dec 2025 07:00:44 +0000 Files and hashes: 1: DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl (hash: CcKiqJ6Q0C+pKUZlcPEnOXOquuMM3P0AvNB/mLGUSfk=) 2: UKqORdLzZXdOrDEcMxzidP1Tf04.roa (hash: 993OGeNZfndwd7HXQtjHB4WsdW/h/7CpCQberKrZGUc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:8a:ed:2c:55:6d:a2:6b:58:d2:9e:4a:b7:aa:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4 Validity Not Before: Dec 20 07:00:44 2025 GMT Not After : Dec 21 07:00:44 2025 GMT Subject: CN=f4e89efe64956b7d1f2e0a0171f73ca056d2f7a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:58:64:c4:5f:10:ff:6e:c4:bc:61:97:4b:c3: 4b:35:04:c7:fb:83:25:cc:e5:3d:5e:af:da:58:1e: a1:b9:2b:0f:cf:53:77:5f:ad:17:e6:3d:a3:a1:df: 4f:67:6a:ac:3c:a8:d9:d0:da:98:48:14:2b:f5:f8: cb:c8:8b:0c:8b:95:f8:5c:a3:4d:a7:6a:d6:5f:fc: 36:d4:fb:c1:3f:12:d8:6e:6c:12:8f:48:6a:59:ee: c8:2a:06:0a:e7:43:6e:97:05:3b:5b:dc:16:3d:16: da:e9:d4:12:09:03:cf:21:f3:09:d2:b9:06:4c:58: 23:c2:bb:59:53:b6:a4:72:d0:5e:16:d7:b5:85:6e: 72:82:dc:c0:0f:de:b4:26:90:fd:f0:a3:f7:3b:e3: 91:9f:be:b8:06:b2:3b:dc:5e:c1:ab:f4:94:21:e0: ae:31:e0:3d:89:bd:75:7d:7d:7a:5b:68:9f:57:43: 33:19:c0:9a:cb:81:25:f8:e5:9e:fd:0b:78:f3:35: ce:d6:5e:e5:53:f3:0c:6f:47:cf:5a:84:10:a6:13: 43:24:b2:5b:6f:a3:7f:dd:28:b7:26:09:7f:c8:ed: 8d:f1:99:fa:12:18:d1:97:6c:c3:ca:c5:d5:3a:63: 74:79:07:9b:7b:7c:32:58:74:83:c5:00:8b:0e:b9: c8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E8:9E:FE:64:95:6B:7D:1F:2E:0A:01:71:F7:3C:A0:56:D2:F7:A7 X509v3 Authority Key Identifier: keyid:0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:b1:3c:a1:d1:50:f9:e4:84:5b:40:73:d5:7b:4d:a2:a7:f6: b2:d5:6e:72:09:ea:c8:67:7f:0f:5a:a2:26:fd:a5:2b:27:02: 83:38:61:9b:62:20:45:44:e4:b6:9a:96:0a:d8:7c:cf:99:17: 4c:bc:a7:89:e8:8b:76:15:52:cc:b2:80:e9:e1:2b:76:17:39: 01:c9:29:3e:c3:b3:0b:0c:99:eb:35:30:53:73:bd:9e:29:9d: 81:39:5a:37:80:2e:46:9a:40:13:fa:5f:03:c3:34:be:fc:d3: b2:dc:62:2a:f6:4e:c4:ad:a5:15:f9:ac:5c:ac:75:b3:b9:36: c5:c1:fb:45:e8:0f:71:6e:4b:87:13:db:32:72:72:22:27:be: 58:cd:c0:6b:8a:9c:94:c6:9a:19:4b:6e:af:a3:fc:58:1f:b6: c4:70:86:da:04:fb:d4:59:f4:44:d2:17:af:0d:f2:59:74:1e: 34:e0:fe:6d:24:eb:8c:15:a5:01:a0:56:b1:56:5c:41:c2:46: 5c:e9:10:07:fc:6a:e9:a0:57:47:34:fc:28:26:db:57:6e:9a: 13:78:96:89:c6:71:15:1b:02:5a:6f:6d:11:af:cf:77:6c:7b: 14:20:83:e7:e4:d4:c5:54:fa:13:18:ce:ec:b5:33:00:19:32: 1d:0b:64:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j4rtLFVtomtY0p5Kt6ocMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZmUxMDU4YTMxZTNjMTg5NGJjZjA2NGM3ZTgzNzBiYmE2 Y2Y4ZTQwHhcNMjUxMjIwMDcwMDQ0WhcNMjUxMjIxMDcwMDQ0WjAzMTEwLwYDVQQD EyhmNGU4OWVmZTY0OTU2YjdkMWYyZTBhMDE3MWY3M2NhMDU2ZDJmN2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVhkxF8Q/27EvGGXS8NLNQTH+4Ml zOU9Xq/aWB6huSsPz1N3X60X5j2jod9PZ2qsPKjZ0NqYSBQr9fjLyIsMi5X4XKNN p2rWX/w21PvBPxLYbmwSj0hqWe7IKgYK50NulwU7W9wWPRba6dQSCQPPIfMJ0rkG TFgjwrtZU7akctBeFte1hW5ygtzAD960JpD98KP3O+ORn764BrI73F7Bq/SUIeCu MeA9ib11fX16W2ifV0MzGcCay4El+OWe/Qt48zXO1l7lU/MMb0fPWoQQphNDJLJb b6N/3Si3Jgl/yO2N8Zn6EhjRl2zDysXVOmN0eQebe3wyWHSDxQCLDrnIYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPTonv5klWt9Hy4KAXH3PKBW0venMB8GA1UdIwQY MBaAFAz+EFijHjwYlLzwZMfoNwu6bPjkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFA0UVdLTWVQQmlVdlBCa3gtZzNDN3BzLU9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85MjFkZjEtZmE3ZC00MzA3LWI5YzMt N2NlOGM5NzA0Y2YwLzEvRFA0UVdLTWVQQmlVdlBCa3gtZzNDN3BzLU9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi85MjFkZjEtZmE3ZC00MzA3LWI5YzMtN2NlOGM5NzA0Y2Yw LzEvRFA0UVdLTWVQQmlVdlBCa3gtZzNDN3BzLU9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW7E8odFQ +eSEW0Bz1XtNoqf2stVucgnqyGd/D1qiJv2lKycCgzhhm2IgRUTktpqWCth8z5kX TLynieiLdhVSzLKA6eErdhc5AckpPsOzCwyZ6zUwU3O9nimdgTlaN4AuRppAE/pf A8M0vvzTstxiKvZOxK2lFfmsXKx1s7k2xcH7RegPcW5LhxPbMnJyIie+WM3Aa4qc lMaaGUtur6P8WB+2xHCG2gT71Fn0RNIXrw3yWXQeNOD+bSTrjBWlAaBWsVZcQcJG XOkQB/xq6aBXRzT8KCbbV26aE3iWicZxFRsCWm9tEa/Pd2x7FCCD5+TUxVT6ExjO 7LUzABkyHQtkgw== -----END CERTIFICATE-----Generated at Sat Dec 20 16:44:38 2025 by rpki-client