This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft File: DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft (raw, json) Hash identifier: e6WZAu6iszevVb7Is+S1d+bgQMcJS50kdMLAocZ/z7c= Subject key identifier: 10:96:AC:22:03:C7:7D:77:9C:1C:C5:69:E0:7C:41:8B:3A:42:D5:B4 Authority key identifier: 0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4 Certificate issuer: /CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4 Certificate serial: 019B1F8746F0946DAC10E19CA232C860034C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft Manifest number: 0E5E Signing time: Mon 15 Dec 2025 01:01:57 +0000 Manifest this update: Mon 15 Dec 2025 01:01:57 +0000 Manifest next update: Tue 16 Dec 2025 01:01:57 +0000 Files and hashes: 1: DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl (hash: egsDqaohsOsBDVPtjGJ0bDBhMe7VBgI/vANsbqJuu5s=) 2: UKqORdLzZXdOrDEcMxzidP1Tf04.roa (hash: 993OGeNZfndwd7HXQtjHB4WsdW/h/7CpCQberKrZGUc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:87:46:f0:94:6d:ac:10:e1:9c:a2:32:c8:60:03:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4 Validity Not Before: Dec 15 01:01:57 2025 GMT Not After : Dec 16 01:01:57 2025 GMT Subject: CN=1096ac2203c77d779c1cc569e07c418b3a42d5b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:80:a7:26:2d:f9:b3:83:30:3e:5f:93:8a:ea: 8e:fd:65:ee:36:71:b4:c7:71:84:7c:35:e5:8b:b3: e4:ba:48:58:c5:4e:fa:44:81:bc:1b:cd:98:87:dd: 3b:10:fe:37:23:4a:74:bd:db:62:29:dd:c1:21:7b: 87:7b:17:67:30:25:75:cb:da:64:f8:b8:5f:2b:d7: 45:43:c6:9a:b7:ea:c1:66:48:79:b7:95:5e:dd:72: 6d:f1:fd:73:b2:0b:ad:33:83:55:e6:a8:ed:0e:03: 71:f0:a3:bb:01:ee:26:f7:a9:05:b5:39:ea:f0:01: 72:14:d5:14:ca:a2:e8:9d:bf:d2:20:e9:4e:05:83: 3b:bc:fe:fa:82:1a:e5:da:69:36:a4:81:c3:c5:6b: ed:94:e5:5e:84:aa:63:44:2e:98:96:11:25:ed:e8: 79:95:e9:39:8f:2b:a6:7d:03:e1:19:a4:f8:fc:f9: 40:b2:70:25:73:87:ed:9a:90:d1:15:1f:a0:36:e2: cc:35:ec:a0:70:3e:8c:75:50:40:0b:ae:91:a8:7b: 70:ef:2d:84:80:86:e9:57:af:79:d2:f6:5f:d6:d3: a2:41:25:f8:95:20:8c:bd:90:7d:64:70:9b:87:95: df:97:d4:8a:fc:ac:6a:ad:3e:e8:4c:61:a9:82:da: 04:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:96:AC:22:03:C7:7D:77:9C:1C:C5:69:E0:7C:41:8B:3A:42:D5:B4 X509v3 Authority Key Identifier: keyid:0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:83:b2:e5:09:21:bb:d5:0d:10:70:1b:f0:58:d3:f4:70:59: b5:67:98:fb:06:43:15:10:35:b8:c3:30:60:39:a2:61:08:e8: b9:79:4e:c0:e7:1e:f6:39:85:07:bf:4f:0f:5d:a8:90:c4:e7: 9b:4b:5b:0d:f5:c0:1e:f6:26:3c:1d:43:69:b7:92:cf:70:6b: b0:7e:63:ee:a1:0c:a6:81:17:bd:7c:86:5b:e9:12:ef:d4:ac: 7c:13:a9:a9:ae:cf:8f:29:bc:5a:b6:d6:20:c8:08:16:21:8a: 7c:9e:4d:13:bd:4c:de:25:64:a6:13:25:d2:f7:ba:27:83:c0: 3f:24:d5:c8:86:c0:57:58:15:18:4a:dd:d5:9a:78:70:e4:40: a4:6b:04:c7:19:77:84:96:86:69:a9:7e:3f:f3:11:25:57:a9: 3f:dd:df:9e:e3:6c:fe:96:d2:4e:77:85:dc:03:40:94:48:18: eb:bf:1b:c1:75:85:c1:98:60:d2:44:58:ec:14:66:24:ec:4a: 17:03:64:d0:19:43:02:40:84:1f:92:75:15:3e:c7:87:72:5b: 3d:9f:44:33:0e:c2:22:94:9e:2f:63:76:26:99:04:eb:d0:e8: bc:b5:4f:38:2d:52:14:77:cf:af:ae:6e:04:5b:09:e6:92:2e: ab:ad:24:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfh0bwlG2sEOGcojLIYANMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZmUxMDU4YTMxZTNjMTg5NGJjZjA2NGM3ZTgzNzBiYmE2 Y2Y4ZTQwHhcNMjUxMjE1MDEwMTU3WhcNMjUxMjE2MDEwMTU3WjAzMTEwLwYDVQQD EygxMDk2YWMyMjAzYzc3ZDc3OWMxY2M1NjllMDdjNDE4YjNhNDJkNWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oCnJi35s4MwPl+TiuqO/WXuNnG0 x3GEfDXli7PkukhYxU76RIG8G82Yh907EP43I0p0vdtiKd3BIXuHexdnMCV1y9pk +LhfK9dFQ8aat+rBZkh5t5Ve3XJt8f1zsgutM4NV5qjtDgNx8KO7Ae4m96kFtTnq 8AFyFNUUyqLonb/SIOlOBYM7vP76ghrl2mk2pIHDxWvtlOVehKpjRC6YlhEl7eh5 lek5jyumfQPhGaT4/PlAsnAlc4ftmpDRFR+gNuLMNeygcD6MdVBAC66RqHtw7y2E gIbpV6950vZf1tOiQSX4lSCMvZB9ZHCbh5Xfl9SK/KxqrT7oTGGpgtoEnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBCWrCIDx313nBzFaeB8QYs6QtW0MB8GA1UdIwQY MBaAFAz+EFijHjwYlLzwZMfoNwu6bPjkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFA0UVdLTWVQQmlVdlBCa3gtZzNDN3BzLU9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85MjFkZjEtZmE3ZC00MzA3LWI5YzMt N2NlOGM5NzA0Y2YwLzEvRFA0UVdLTWVQQmlVdlBCa3gtZzNDN3BzLU9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi85MjFkZjEtZmE3ZC00MzA3LWI5YzMtN2NlOGM5NzA0Y2Yw LzEvRFA0UVdLTWVQQmlVdlBCa3gtZzNDN3BzLU9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ4Oy5Qkh u9UNEHAb8FjT9HBZtWeY+wZDFRA1uMMwYDmiYQjouXlOwOce9jmFB79PD12okMTn m0tbDfXAHvYmPB1DabeSz3BrsH5j7qEMpoEXvXyGW+kS79SsfBOpqa7Pjym8WrbW IMgIFiGKfJ5NE71M3iVkphMl0ve6J4PAPyTVyIbAV1gVGErd1Zp4cORApGsExxl3 hJaGaal+P/MRJVepP93fnuNs/pbSTneF3ANAlEgY678bwXWFwZhg0kRY7BRmJOxK FwNk0BlDAkCEH5J1FT7Hh3JbPZ9EMw7CIpSeL2N2JpkE69DovLVPOC1SFHfPr65u BFsJ5pIuq60kmg== -----END CERTIFICATE-----Generated at Mon Dec 15 04:57:53 2025 by rpki-client