This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft File: g60oliGDPa6G_dpi5LmwningeKA.mft (raw, json) Hash identifier: 08tUzSBxSby9UgHhOwhthkJ1Nf3friQDxSyNY4U7Tfo= Subject key identifier: 03:95:0D:9B:08:7A:3A:ED:73:A2:9D:7B:51:FF:77:79:AE:CA:86:46 Authority key identifier: 83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0 Certificate issuer: /CN=83ad289621833dae86fdda62e4b9b09e29e078a0 Certificate serial: 019AF19B7E3215D9E3DC31584F6A01775151 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft Manifest number: 107A Signing time: Sat 06 Dec 2025 03:01:30 +0000 Manifest this update: Sat 06 Dec 2025 03:01:30 +0000 Manifest next update: Sun 07 Dec 2025 03:01:30 +0000 Files and hashes: 1: WFi05y69wJK8xYZ7djgxRMe4JdI.roa (hash: 38NfaEez2rHkQbLDVIDAczBWslMXi/gwh/We3R8xbaw=) 2: g60oliGDPa6G_dpi5LmwningeKA.crl (hash: AWsR80MOBtH9EmlzViIR+f7AJUMM8fAJfpEKP6By2Gs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:7e:32:15:d9:e3:dc:31:58:4f:6a:01:77:51:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83ad289621833dae86fdda62e4b9b09e29e078a0 Validity Not Before: Dec 6 03:01:30 2025 GMT Not After : Dec 7 03:01:30 2025 GMT Subject: CN=03950d9b087a3aed73a29d7b51ff7779aeca8646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:58:ba:3b:8e:f5:7a:00:85:c9:94:86:b1:36: d6:ec:3a:4f:0f:71:54:6e:f4:6e:9c:27:da:2d:d8: 1d:84:58:87:4d:53:fd:f2:23:61:d6:d3:08:0c:04: 26:8b:24:9a:9e:9a:4e:b9:76:1c:b6:32:e6:d0:84: 87:53:7c:75:76:f9:bc:4c:22:63:3c:c4:b3:f8:35: fa:28:af:1a:f5:50:b3:c2:6a:8a:6a:e5:33:d8:97: 05:0a:56:83:c1:45:41:1c:78:b8:d4:2b:8b:3a:ec: b3:ae:b0:40:ee:f9:39:1b:21:da:09:0f:50:b4:4b: c7:35:95:a7:61:52:55:66:34:0b:58:7b:46:a3:8b: 2b:0c:b8:6e:d8:85:36:50:15:a5:b4:35:a6:00:b6: 4a:ad:e1:c3:af:73:f1:f1:a8:ff:a9:d4:21:27:c2: 76:5b:8f:1b:ae:f6:cc:78:92:e9:12:81:2c:49:af: 6f:6b:96:6f:3e:d2:9b:aa:44:30:7f:2e:57:14:f4: 5a:8b:0c:a8:20:6d:bb:d7:5d:3d:0f:7d:48:a9:61: e3:a7:79:a9:47:c0:d9:c5:13:62:e0:0b:4b:2c:d4: 8f:5c:1d:fa:5f:f3:7b:c8:95:c4:0d:3d:96:1a:ee: ee:27:06:c2:1f:3b:a4:24:1c:cc:dc:38:e8:47:76: 0d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:95:0D:9B:08:7A:3A:ED:73:A2:9D:7B:51:FF:77:79:AE:CA:86:46 X509v3 Authority Key Identifier: keyid:83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:57:ce:db:1f:8e:59:90:e8:87:24:8b:97:aa:89:7f:9c:2d: 26:88:cb:18:43:ff:6f:f3:59:4c:1c:0e:f8:c7:87:79:01:01: 40:12:82:51:21:f8:87:65:62:e3:db:31:6a:6a:63:2f:ae:af: f6:f1:56:7e:ca:d2:f5:ae:85:4c:3b:a6:c2:38:58:a4:c7:f7: a4:ba:5d:d5:cb:f6:01:a2:91:d4:34:90:0d:cb:8b:58:dc:c1: cd:3f:a2:62:f7:29:d9:f3:20:89:c4:b0:50:0e:65:27:69:15: 7c:e3:b4:80:a6:02:e4:0b:c3:70:90:97:eb:25:6a:34:d9:1e: f8:75:7f:f9:42:bf:0d:5f:ce:a8:d5:94:8d:d5:64:84:c0:d4: 34:27:14:0c:05:f6:a2:d8:f0:ee:94:5e:22:32:a4:68:bd:88: 1b:df:a6:be:2b:a7:d4:b5:8b:0d:28:88:40:b2:df:30:9b:79: 66:dd:eb:b4:66:bb:a9:e6:87:dd:ed:76:3e:09:17:e4:ae:6e: 4f:f7:a1:d3:9c:fa:8b:47:e4:5e:89:0b:7d:2c:89:1e:13:21: 71:0c:a3:ef:b2:81:f5:5f:c7:ee:9f:43:bf:8b:00:b1:25:9e: 6d:fd:54:7b:0c:77:95:c4:e2:13:c1:60:3e:8b:6d:8d:68:db: 18:bc:b8:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm34yFdnj3DFYT2oBd1FRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzYWQyODk2MjE4MzNkYWU4NmZkZGE2MmU0YjliMDllMjll MDc4YTAwHhcNMjUxMjA2MDMwMTMwWhcNMjUxMjA3MDMwMTMwWjAzMTEwLwYDVQQD EygwMzk1MGQ5YjA4N2EzYWVkNzNhMjlkN2I1MWZmNzc3OWFlY2E4NjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwli6O471egCFyZSGsTbW7DpPD3FU bvRunCfaLdgdhFiHTVP98iNh1tMIDAQmiySanppOuXYctjLm0ISHU3x1dvm8TCJj PMSz+DX6KK8a9VCzwmqKauUz2JcFClaDwUVBHHi41CuLOuyzrrBA7vk5GyHaCQ9Q tEvHNZWnYVJVZjQLWHtGo4srDLhu2IU2UBWltDWmALZKreHDr3Px8aj/qdQhJ8J2 W48brvbMeJLpEoEsSa9va5ZvPtKbqkQwfy5XFPRaiwyoIG271109D31IqWHjp3mp R8DZxRNi4AtLLNSPXB36X/N7yJXEDT2WGu7uJwbCHzukJBzM3DjoR3YNHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAOVDZsIejrtc6Kde1H/d3muyoZGMB8GA1UdIwQY MBaAFIOtKJYhgz2uhv3aYuS5sJ4p4HigMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzYwb2xpR0RQYTZHX2RwaTVMbXduaW5nZUtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9lMTg3MGYtOWNiNi00MzM5LWFhMzgt MGFmNDIzMWRhNzlhLzEvZzYwb2xpR0RQYTZHX2RwaTVMbXduaW5nZUtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9lMTg3MGYtOWNiNi00MzM5LWFhMzgtMGFmNDIzMWRhNzlh LzEvZzYwb2xpR0RQYTZHX2RwaTVMbXduaW5nZUtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXFfO2x+O WZDohySLl6qJf5wtJojLGEP/b/NZTBwO+MeHeQEBQBKCUSH4h2Vi49sxampjL66v 9vFWfsrS9a6FTDumwjhYpMf3pLpd1cv2AaKR1DSQDcuLWNzBzT+iYvcp2fMgicSw UA5lJ2kVfOO0gKYC5AvDcJCX6yVqNNke+HV/+UK/DV/OqNWUjdVkhMDUNCcUDAX2 otjw7pReIjKkaL2IG9+mviun1LWLDSiIQLLfMJt5Zt3rtGa7qeaH3e12PgkX5K5u T/eh05z6i0fkXokLfSyJHhMhcQyj77KB9V/H7p9Dv4sAsSWebf1Uewx3lcTiE8Fg PottjWjbGLy4Qw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:45:54 2025 by rpki-client