This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft File: g60oliGDPa6G_dpi5LmwningeKA.mft (raw, json) Hash identifier: 6EkLajAd6u8QD4WFbvATE2cjCHOXvLKbGGfY0mU6NNc= Subject key identifier: 3F:AD:6E:20:25:77:7E:83:5E:9C:4F:0A:0F:A2:A6:87:DA:98:A9:8D Authority key identifier: 83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0 Certificate issuer: /CN=83ad289621833dae86fdda62e4b9b09e29e078a0 Certificate serial: 019B5BD21CCFD3D361A4029D201A1CF70C01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft Manifest number: 10B1 Signing time: Fri 26 Dec 2025 18:00:55 +0000 Manifest this update: Fri 26 Dec 2025 18:00:55 +0000 Manifest next update: Sat 27 Dec 2025 18:00:55 +0000 Files and hashes: 1: WFi05y69wJK8xYZ7djgxRMe4JdI.roa (hash: 38NfaEez2rHkQbLDVIDAczBWslMXi/gwh/We3R8xbaw=) 2: g60oliGDPa6G_dpi5LmwningeKA.crl (hash: TTOac9GesOE1F2xbx3aK1k6FHPJBsxE8bXstD4EBNqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:d2:1c:cf:d3:d3:61:a4:02:9d:20:1a:1c:f7:0c:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83ad289621833dae86fdda62e4b9b09e29e078a0 Validity Not Before: Dec 26 18:00:55 2025 GMT Not After : Dec 27 18:00:55 2025 GMT Subject: CN=3fad6e2025777e835e9c4f0a0fa2a687da98a98d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fd:e5:d4:fc:95:f5:03:24:dd:76:62:35:da: 32:fa:2e:be:19:1e:96:d4:90:37:0d:d3:a1:ec:10: 7f:d6:77:20:75:97:db:3c:b6:bc:fb:91:9a:b6:d2: fd:c8:17:43:49:5b:12:fd:a3:27:ec:44:78:f5:e9: 3d:e7:6c:70:22:b4:45:02:15:81:e3:ec:f5:44:ec: fb:c6:21:92:d6:b2:a5:69:ce:79:b5:17:69:45:fe: 65:09:f2:b0:5c:90:b4:bc:0c:8f:c0:79:5d:64:c6: 1f:7d:a4:e5:26:21:fd:bb:0f:0b:d2:1b:41:49:b2: 1e:f6:98:33:1d:95:b4:6e:2e:e9:06:f3:30:51:59: a8:a4:92:37:39:dd:9a:21:ab:26:66:17:bd:60:37: 81:16:cf:ce:31:6c:eb:d2:50:b4:92:7d:12:2d:3b: fd:b5:79:fd:7e:0b:b3:c2:51:67:af:f7:14:c7:1c: 53:ea:ce:4a:bd:8c:2a:ff:62:1e:fa:32:42:d8:b5: ae:75:18:a2:2f:9e:a5:a2:98:f5:72:ca:d5:32:83: 56:d7:f0:38:7e:51:cb:c5:fa:ae:ef:8f:56:5a:51: ce:ad:2e:24:45:d2:98:52:7b:cc:60:96:7c:ba:5d: 3c:d7:47:e5:0c:5f:c3:14:70:0c:b5:38:6c:31:49: b3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:AD:6E:20:25:77:7E:83:5E:9C:4F:0A:0F:A2:A6:87:DA:98:A9:8D X509v3 Authority Key Identifier: keyid:83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:8c:d2:67:fd:0c:d1:34:59:66:5e:6f:93:d2:60:a3:7a:14: 81:3d:8b:94:9b:97:2f:46:f8:a3:9b:9b:f1:2f:85:32:54:0d: 38:04:ee:a5:fc:ac:3a:99:dd:f8:45:57:83:42:91:a2:d6:6d: 59:ce:3a:46:a6:c1:61:6f:07:1d:a4:7b:bf:bb:b1:16:96:b7: 92:1e:8d:dd:26:08:ae:55:2e:33:bd:a1:97:7f:e1:07:55:b9: 50:e3:8b:3b:e0:bd:6b:a8:75:00:b6:0b:9a:d3:b7:1b:bc:a0: 10:1d:68:37:82:e0:1d:d8:05:e1:a1:b3:85:b7:77:1b:03:cb: 90:63:fd:94:72:d8:77:96:11:4e:00:7b:ad:ce:a5:1b:1a:ca: fa:5f:ed:03:06:36:6d:81:7c:28:4f:e1:85:4e:16:2f:46:ab: 87:46:1f:2d:0b:00:55:b0:34:03:59:5b:d2:8b:a2:b4:67:8f: e1:e6:26:de:59:0e:6b:9f:40:ab:a9:d7:cf:c6:0d:4b:d2:7e: 5b:f1:c0:46:2f:34:b4:4c:98:88:40:20:81:0b:17:76:6f:89: df:8a:9f:85:d7:3c:8b:1d:a0:09:38:85:ab:b4:02:7f:a5:02: 5e:65:41:95:35:15:16:32:ef:63:53:39:22:58:1a:6a:cb:c0: 46:eb:32:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtb0hzP09NhpAKdIBoc9wwBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzYWQyODk2MjE4MzNkYWU4NmZkZGE2MmU0YjliMDllMjll MDc4YTAwHhcNMjUxMjI2MTgwMDU1WhcNMjUxMjI3MTgwMDU1WjAzMTEwLwYDVQQD EygzZmFkNmUyMDI1Nzc3ZTgzNWU5YzRmMGEwZmEyYTY4N2RhOThhOThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuv3l1PyV9QMk3XZiNdoy+i6+GR6W 1JA3DdOh7BB/1ncgdZfbPLa8+5GattL9yBdDSVsS/aMn7ER49ek952xwIrRFAhWB 4+z1ROz7xiGS1rKlac55tRdpRf5lCfKwXJC0vAyPwHldZMYffaTlJiH9uw8L0htB SbIe9pgzHZW0bi7pBvMwUVmopJI3Od2aIasmZhe9YDeBFs/OMWzr0lC0kn0SLTv9 tXn9fguzwlFnr/cUxxxT6s5KvYwq/2Ie+jJC2LWudRiiL56lopj1csrVMoNW1/A4 flHLxfqu749WWlHOrS4kRdKYUnvMYJZ8ul0810flDF/DFHAMtThsMUmzbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD+tbiAld36DXpxPCg+ipofamKmNMB8GA1UdIwQY MBaAFIOtKJYhgz2uhv3aYuS5sJ4p4HigMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzYwb2xpR0RQYTZHX2RwaTVMbXduaW5nZUtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9lMTg3MGYtOWNiNi00MzM5LWFhMzgt MGFmNDIzMWRhNzlhLzEvZzYwb2xpR0RQYTZHX2RwaTVMbXduaW5nZUtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9lMTg3MGYtOWNiNi00MzM5LWFhMzgtMGFmNDIzMWRhNzlh LzEvZzYwb2xpR0RQYTZHX2RwaTVMbXduaW5nZUtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmozSZ/0M 0TRZZl5vk9Jgo3oUgT2LlJuXL0b4o5ub8S+FMlQNOATupfysOpnd+EVXg0KRotZt Wc46RqbBYW8HHaR7v7uxFpa3kh6N3SYIrlUuM72hl3/hB1W5UOOLO+C9a6h1ALYL mtO3G7ygEB1oN4LgHdgF4aGzhbd3GwPLkGP9lHLYd5YRTgB7rc6lGxrK+l/tAwY2 bYF8KE/hhU4WL0arh0YfLQsAVbA0A1lb0ouitGeP4eYm3lkOa59Aq6nXz8YNS9J+ W/HARi80tEyYiEAggQsXdm+J34qfhdc8ix2gCTiFq7QCf6UCXmVBlTUVFjLvY1M5 IlgaasvARusysQ== -----END CERTIFICATE-----Generated at Fri Dec 26 21:08:58 2025 by rpki-client