This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft File: D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft (raw, json) Hash identifier: cRvvZT1cSsLfQvxphFS5UXKzHfi+Y5mlgEwE1vX26S4= Subject key identifier: 9D:08:A1:70:8B:68:F0:0F:B2:DB:47:F2:EC:F6:96:FF:01:C6:B8:10 Authority key identifier: 0F:E1:A7:B6:A6:B8:5B:3C:32:67:C8:03:99:6E:D8:18:A4:A6:64:79 Certificate issuer: /CN=0fe1a7b6a6b85b3c3267c803996ed818a4a66479 Certificate serial: 019B59E3A68F1B172FC41828A8924DFD274A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft Manifest number: 02BF Signing time: Fri 26 Dec 2025 09:00:50 +0000 Manifest this update: Fri 26 Dec 2025 09:00:50 +0000 Manifest next update: Sat 27 Dec 2025 09:00:50 +0000 Files and hashes: 1: D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl (hash: 7O7c65C4UafTjWcrml+FNFdWn1P4G6F3LwzwNOTN8Oo=) 2: jcTO1fBkVXsp4y6wlcBbebFM8iw.roa (hash: NkT9ooqiKYOuDT79Rkr1WXdOvqeB/1D8TcQH5fNDnzE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:a6:8f:1b:17:2f:c4:18:28:a8:92:4d:fd:27:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fe1a7b6a6b85b3c3267c803996ed818a4a66479 Validity Not Before: Dec 26 09:00:50 2025 GMT Not After : Dec 27 09:00:50 2025 GMT Subject: CN=9d08a1708b68f00fb2db47f2ecf696ff01c6b810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2f:1b:da:e2:32:d2:4e:45:0e:87:5c:dc:39: f3:32:ef:1a:7b:77:36:44:23:c5:b4:3e:cb:72:e4: 4f:3b:0a:e6:46:15:c2:7f:5b:3a:93:5b:1e:71:9b: 90:2d:ea:34:11:cd:31:09:e9:74:33:37:b7:e8:87: e5:72:04:88:86:d6:ba:43:61:ae:a9:1a:a8:9b:9f: 0a:3a:dd:3a:b3:53:ed:24:30:16:5f:f8:b3:0a:5b: d3:31:57:56:83:e9:4a:e7:59:89:0e:1b:26:c8:ac: 86:5c:88:f8:94:fe:98:c9:69:f8:a2:81:16:ae:cf: 0d:fb:3b:e0:a5:71:b4:6a:e5:71:ec:c3:84:78:37: 19:23:3f:ea:7e:12:8e:20:a7:dd:11:96:a0:d0:9b: eb:b3:8b:2e:fe:f3:81:88:c4:d5:a9:d0:94:93:a7: 2c:9d:86:30:c8:ea:cb:70:4b:80:3a:ee:ce:2c:d6: c9:b6:98:7b:2f:f9:d3:2a:46:f0:71:e7:78:62:3b: 93:c6:fb:88:5d:46:d4:1e:a3:52:ff:6f:31:f6:39: 92:d6:97:c8:13:03:99:68:17:65:2e:0b:e0:4d:65: b3:35:b0:cc:42:66:67:01:7c:41:a5:97:51:47:78: 62:12:d0:25:c6:dd:65:a2:80:23:da:07:5a:07:d7: 31:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:08:A1:70:8B:68:F0:0F:B2:DB:47:F2:EC:F6:96:FF:01:C6:B8:10 X509v3 Authority Key Identifier: keyid:0F:E1:A7:B6:A6:B8:5B:3C:32:67:C8:03:99:6E:D8:18:A4:A6:64:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:fb:fe:72:ca:f0:f8:ea:54:c1:fb:a6:7c:bc:d4:8a:51:8e: 67:b0:f2:fb:0e:3b:0a:3b:f3:f2:15:f4:a1:14:58:51:3a:ba: f7:cf:e0:8e:b6:03:24:2d:54:43:c6:fe:3b:a8:41:6c:17:41: 02:8d:7b:97:09:7b:43:61:88:0e:41:ec:9a:bc:4f:cf:58:e3: 45:0b:60:79:8e:ab:c0:79:2b:4f:50:93:43:36:ba:60:d8:b6: 9f:03:c6:72:d0:7b:20:4f:cf:88:5f:b3:3d:5c:97:ca:1f:67: 6d:77:00:85:29:38:73:1e:ae:34:4a:db:6f:4c:dd:2c:ea:0f: cd:c7:56:07:13:3d:ad:78:38:9b:ec:af:8e:ca:b5:3d:65:e4: 14:e6:4b:7c:77:3a:72:4b:5c:ee:11:cf:ef:8b:9c:3a:aa:1b: 74:b7:d5:8f:ae:46:3e:38:1d:bf:5f:e6:02:d0:a4:31:2f:b2: 9c:28:13:05:ad:9b:58:e5:4d:c6:16:15:d0:1f:77:93:82:82: fa:93:4b:00:b6:c3:df:8b:d9:b3:a2:dd:8c:72:31:78:6e:86: a0:4b:27:d1:f5:43:d6:0f:a3:fa:b7:8f:74:e0:46:a1:f2:10: a4:18:55:9b:0c:da:34:31:99:a2:f0:62:5a:f6:22:9b:3c:12: 50:82:61:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ46aPGxcvxBgoqJJN/SdKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZTFhN2I2YTZiODViM2MzMjY3YzgwMzk5NmVkODE4YTRh NjY0NzkwHhcNMjUxMjI2MDkwMDUwWhcNMjUxMjI3MDkwMDUwWjAzMTEwLwYDVQQD Eyg5ZDA4YTE3MDhiNjhmMDBmYjJkYjQ3ZjJlY2Y2OTZmZjAxYzZiODEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4S8b2uIy0k5FDodc3DnzMu8ae3c2 RCPFtD7LcuRPOwrmRhXCf1s6k1secZuQLeo0Ec0xCel0Mze36IflcgSIhta6Q2Gu qRqom58KOt06s1PtJDAWX/izClvTMVdWg+lK51mJDhsmyKyGXIj4lP6YyWn4ooEW rs8N+zvgpXG0auVx7MOEeDcZIz/qfhKOIKfdEZag0Jvrs4su/vOBiMTVqdCUk6cs nYYwyOrLcEuAOu7OLNbJtph7L/nTKkbwced4YjuTxvuIXUbUHqNS/28x9jmS1pfI EwOZaBdlLgvgTWWzNbDMQmZnAXxBpZdRR3hiEtAlxt1looAj2gdaB9cxnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ0IoXCLaPAPsttH8uz2lv8BxrgQMB8GA1UdIwQY MBaAFA/hp7amuFs8MmfIA5lu2BikpmR5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRC1HbnRxYTRXend5WjhnRG1XN1lHS1NtWkhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wODQxYjUtMTk1NS00ZjAwLThiZjEt Mjg5Zjk1ODkzZTg0LzEvRC1HbnRxYTRXend5WjhnRG1XN1lHS1NtWkhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8wODQxYjUtMTk1NS00ZjAwLThiZjEtMjg5Zjk1ODkzZTg0 LzEvRC1HbnRxYTRXend5WjhnRG1XN1lHS1NtWkhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtvv+csrw +OpUwfumfLzUilGOZ7Dy+w47Cjvz8hX0oRRYUTq698/gjrYDJC1UQ8b+O6hBbBdB Ao17lwl7Q2GIDkHsmrxPz1jjRQtgeY6rwHkrT1CTQza6YNi2nwPGctB7IE/PiF+z PVyXyh9nbXcAhSk4cx6uNErbb0zdLOoPzcdWBxM9rXg4m+yvjsq1PWXkFOZLfHc6 cktc7hHP74ucOqobdLfVj65GPjgdv1/mAtCkMS+ynCgTBa2bWOVNxhYV0B93k4KC +pNLALbD34vZs6LdjHIxeG6GoEsn0fVD1g+j+rePdOBGofIQpBhVmwzaNDGZovBi WvYimzwSUIJhYg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:54 2025 by rpki-client