This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft File: D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft (raw, json) Hash identifier: OuiQ+Wmdn3dcbEfJIvVCh9w6jw7BsTufVsDqP5JG3Tk= Subject key identifier: 19:2E:37:79:90:11:AA:03:CE:A7:C3:DC:C2:87:41:B2:91:F1:DF:D7 Authority key identifier: 0F:E1:A7:B6:A6:B8:5B:3C:32:67:C8:03:99:6E:D8:18:A4:A6:64:79 Certificate issuer: /CN=0fe1a7b6a6b85b3c3267c803996ed818a4a66479 Certificate serial: 019AF389FF0FBA68F6DB53788CB98CB29251 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft Manifest number: 028A Signing time: Sat 06 Dec 2025 12:01:38 +0000 Manifest this update: Sat 06 Dec 2025 12:01:38 +0000 Manifest next update: Sun 07 Dec 2025 12:01:38 +0000 Files and hashes: 1: D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl (hash: mrgGZh/IVOpJnY/toRQVLLGJSakyEePkW6oaqaiY7DU=) 2: jcTO1fBkVXsp4y6wlcBbebFM8iw.roa (hash: NkT9ooqiKYOuDT79Rkr1WXdOvqeB/1D8TcQH5fNDnzE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:ff:0f:ba:68:f6:db:53:78:8c:b9:8c:b2:92:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fe1a7b6a6b85b3c3267c803996ed818a4a66479 Validity Not Before: Dec 6 12:01:38 2025 GMT Not After : Dec 7 12:01:38 2025 GMT Subject: CN=192e37799011aa03cea7c3dcc28741b291f1dfd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:50:b7:b4:73:92:f4:1a:26:84:7a:d6:a3:64: 24:c4:15:22:9f:b2:4f:7d:ff:b7:07:5f:62:00:df: bf:67:50:32:16:d7:bf:7b:5d:87:a5:db:e0:ff:9b: 0e:21:8a:fb:53:d7:45:39:dd:1a:44:66:c5:2a:15: c5:4e:82:c7:17:44:e5:7e:78:8b:85:95:1d:7b:b5: ff:83:4f:9a:2f:f4:0f:72:d7:97:cc:02:16:d5:a0: 9f:ca:45:c5:54:eb:ef:cb:c9:63:6a:e4:b7:6d:17: fe:98:e1:6e:1c:ab:5d:ef:88:4e:d2:8d:4e:05:3a: b3:de:99:85:1a:5c:0d:ac:2a:aa:82:c0:34:06:fc: 2c:48:83:02:fb:45:73:4b:50:30:d2:49:07:b7:64: c9:1e:5f:80:57:6c:a4:4c:fe:ee:4f:8e:a8:13:45: d5:f2:f6:b4:6a:9b:1e:07:83:62:92:68:e7:52:de: 7d:e1:00:b7:00:49:e9:d9:fa:7d:25:00:7a:c6:21: 44:c0:65:fc:25:d9:89:ed:81:6c:a7:da:2a:0c:51: b5:c4:89:f4:16:cd:0d:62:98:7c:73:a8:eb:63:a0: 72:0f:eb:31:6f:88:30:33:46:8e:f2:9e:8b:0f:82: 20:5e:f3:34:b5:e0:14:77:c9:69:c8:c0:ad:82:8d: 1a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:2E:37:79:90:11:AA:03:CE:A7:C3:DC:C2:87:41:B2:91:F1:DF:D7 X509v3 Authority Key Identifier: keyid:0F:E1:A7:B6:A6:B8:5B:3C:32:67:C8:03:99:6E:D8:18:A4:A6:64:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:e9:4e:a7:7b:e3:ca:22:39:1b:a9:0c:a6:dd:ba:1a:b4:73: 35:c7:b9:27:3c:c8:f5:d5:17:8d:23:4d:b2:59:66:ef:da:6f: d3:d5:fa:0e:ba:ac:8b:27:5f:56:e0:a2:bc:c9:53:89:9e:c8: 60:23:93:65:5b:83:25:d4:68:00:6e:0d:88:41:63:d6:02:2f: 92:61:fc:a2:ab:fd:98:0f:d8:23:90:61:a1:d4:ed:99:7f:27: 0f:61:af:a5:cd:d3:b9:fc:50:06:0c:5c:f5:d1:9b:6f:3e:ac: ae:a7:dd:e5:dd:8f:e7:0c:04:df:5e:76:10:ee:c3:3e:c0:d9: 94:76:71:dd:36:0f:35:26:f9:3f:fe:39:8a:ba:b7:76:0c:0e: 09:10:e5:0e:f9:f9:c8:bd:e3:fa:3c:24:e8:cb:53:a7:74:84: f5:03:f4:cb:f6:7b:6d:4c:98:9a:4a:2a:4a:3e:b5:9f:11:4e: 1c:f2:2c:2e:52:22:ac:1c:13:d6:c1:bf:fa:6b:d7:7c:d5:b6: c9:34:b4:59:f5:c3:93:4f:62:a9:a2:6c:06:8a:e6:e7:ed:d6: c9:84:de:ab:a4:dd:2b:fa:a6:8e:88:80:d5:13:32:9e:ad:a3: 4f:1e:30:b0:32:c2:1c:6d:e8:b6:b3:8d:00:60:ce:06:fa:d6: ae:c6:18:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzif8Pumj221N4jLmMspJRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZTFhN2I2YTZiODViM2MzMjY3YzgwMzk5NmVkODE4YTRh NjY0NzkwHhcNMjUxMjA2MTIwMTM4WhcNMjUxMjA3MTIwMTM4WjAzMTEwLwYDVQQD EygxOTJlMzc3OTkwMTFhYTAzY2VhN2MzZGNjMjg3NDFiMjkxZjFkZmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVC3tHOS9BomhHrWo2QkxBUin7JP ff+3B19iAN+/Z1AyFte/e12Hpdvg/5sOIYr7U9dFOd0aRGbFKhXFToLHF0TlfniL hZUde7X/g0+aL/QPcteXzAIW1aCfykXFVOvvy8ljauS3bRf+mOFuHKtd74hO0o1O BTqz3pmFGlwNrCqqgsA0BvwsSIMC+0VzS1Aw0kkHt2TJHl+AV2ykTP7uT46oE0XV 8va0apseB4NikmjnUt594QC3AEnp2fp9JQB6xiFEwGX8JdmJ7YFsp9oqDFG1xIn0 Fs0NYph8c6jrY6ByD+sxb4gwM0aO8p6LD4IgXvM0teAUd8lpyMCtgo0a1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBkuN3mQEaoDzqfD3MKHQbKR8d/XMB8GA1UdIwQY MBaAFA/hp7amuFs8MmfIA5lu2BikpmR5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRC1HbnRxYTRXend5WjhnRG1XN1lHS1NtWkhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wODQxYjUtMTk1NS00ZjAwLThiZjEt Mjg5Zjk1ODkzZTg0LzEvRC1HbnRxYTRXend5WjhnRG1XN1lHS1NtWkhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8wODQxYjUtMTk1NS00ZjAwLThiZjEtMjg5Zjk1ODkzZTg0 LzEvRC1HbnRxYTRXend5WjhnRG1XN1lHS1NtWkhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXulOp3vj yiI5G6kMpt26GrRzNce5JzzI9dUXjSNNsllm79pv09X6DrqsiydfVuCivMlTiZ7I YCOTZVuDJdRoAG4NiEFj1gIvkmH8oqv9mA/YI5BhodTtmX8nD2Gvpc3TufxQBgxc 9dGbbz6srqfd5d2P5wwE3152EO7DPsDZlHZx3TYPNSb5P/45irq3dgwOCRDlDvn5 yL3j+jwk6MtTp3SE9QP0y/Z7bUyYmkoqSj61nxFOHPIsLlIirBwT1sG/+mvXfNW2 yTS0WfXDk09iqaJsBorm5+3WyYTeq6TdK/qmjoiA1RMynq2jTx4wsDLCHG3otrON AGDOBvrWrsYY2w== -----END CERTIFICATE-----Generated at Sat Dec 6 22:20:14 2025 by rpki-client