This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft File: DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft (raw, json) Hash identifier: JkBa4K+DHYy5YxtMcyTmcCKHk+aISkvZ1kyzBzwSAyE= Subject key identifier: 42:1E:36:50:F9:D0:14:06:1F:D1:62:F5:96:D3:18:50:0E:EC:01:92 Authority key identifier: 0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4 Certificate issuer: /CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4 Certificate serial: 019AF12DB8E1D477A7B3DF340FFBE461CFCA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft Manifest number: 0E46 Signing time: Sat 06 Dec 2025 01:01:36 +0000 Manifest this update: Sat 06 Dec 2025 01:01:36 +0000 Manifest next update: Sun 07 Dec 2025 01:01:36 +0000 Files and hashes: 1: DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl (hash: sGcjsq2AHuoKbYKTGmXfTzxOuh4uPsttWfu6OjDi8Fk=) 2: UKqORdLzZXdOrDEcMxzidP1Tf04.roa (hash: 993OGeNZfndwd7HXQtjHB4WsdW/h/7CpCQberKrZGUc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:b8:e1:d4:77:a7:b3:df:34:0f:fb:e4:61:cf:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4 Validity Not Before: Dec 6 01:01:36 2025 GMT Not After : Dec 7 01:01:36 2025 GMT Subject: CN=421e3650f9d014061fd162f596d318500eec0192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:00:a6:16:3f:b1:e5:e5:53:61:f7:c2:d3:34: 5f:67:4b:1f:cc:e1:cc:7d:83:ff:24:31:a3:99:b9: 3f:4b:d8:f0:24:5e:56:b4:68:67:01:40:1d:9e:74: b3:1e:14:d6:d7:1d:ba:26:48:57:64:06:7f:7c:55: 5b:33:35:93:f6:b1:30:34:a4:fb:72:65:9a:f4:62: ff:4c:3c:33:b1:53:bd:22:0f:0e:3c:53:9a:b5:84: 2d:82:6a:3b:b9:aa:2c:f3:48:37:c8:b5:2d:f6:75: 78:c0:f8:ad:d6:9f:28:05:99:5f:f9:3c:07:f1:81: c8:a2:13:25:4b:03:10:d5:af:74:13:97:9b:08:3a: 38:0e:1f:6c:68:a0:ba:99:d7:41:b1:20:80:e3:d6: 55:5e:27:68:92:2e:af:5a:83:b6:7a:79:27:ce:d4: 69:15:10:e7:55:1d:24:2d:8c:c6:a1:00:1c:f2:2b: ec:87:8b:47:7a:9a:2a:fc:a7:6c:3e:d1:cd:13:d8: 29:e5:e2:19:dd:2a:12:a3:a9:1d:e9:bf:8c:61:28: e5:fb:e7:01:cc:27:9f:d4:19:b4:c4:8e:90:0a:36: e4:1f:92:a1:32:e2:88:b9:00:17:c7:b2:95:1c:e7: a6:dc:2c:69:21:54:e4:83:37:ad:04:4d:44:68:5b: 5e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1E:36:50:F9:D0:14:06:1F:D1:62:F5:96:D3:18:50:0E:EC:01:92 X509v3 Authority Key Identifier: keyid:0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:d7:54:c2:90:ff:ed:c3:37:bf:df:be:f6:3e:f0:62:58:2c: 0b:3b:55:64:e4:75:d7:2c:e4:77:c3:a5:93:fd:d5:65:b3:17: 0b:7e:d9:61:4c:fe:9d:c5:4d:b1:7a:63:b1:76:82:77:ee:3a: a4:c0:ff:9b:0d:14:5c:cf:85:8b:e5:d3:d4:51:b9:1b:6d:e6: c7:03:40:a9:fb:96:13:4e:d9:d4:05:7c:16:16:f4:bd:cb:ae: 07:c3:f2:bb:27:05:c9:90:2c:05:79:17:44:2f:87:6b:89:d4: f5:8a:63:d8:94:06:13:cd:46:34:eb:e4:a9:9d:da:e2:e3:f3: a5:cf:3a:4b:fd:52:dd:55:50:4c:2e:c6:44:15:8b:9a:79:41: 77:b8:e2:3f:99:a1:cd:54:e4:42:98:34:82:50:03:69:00:fe: d7:7e:cd:76:05:af:99:42:82:5c:21:52:19:97:bd:4c:79:09: 0b:c6:7a:20:24:74:94:e4:a2:12:f9:e4:26:13:04:ae:51:40: 87:a6:e1:bb:88:67:a0:07:6b:c3:07:4f:6b:12:2e:92:3e:00: d0:0d:bc:82:49:a5:14:65:12:d5:84:70:0c:9d:18:d1:eb:24: da:6e:8e:43:6e:60:7c:cf:6e:6a:13:40:7b:93:14:84:9d:47: 5d:51:c4:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLbjh1Hens980D/vkYc/KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZmUxMDU4YTMxZTNjMTg5NGJjZjA2NGM3ZTgzNzBiYmE2 Y2Y4ZTQwHhcNMjUxMjA2MDEwMTM2WhcNMjUxMjA3MDEwMTM2WjAzMTEwLwYDVQQD Eyg0MjFlMzY1MGY5ZDAxNDA2MWZkMTYyZjU5NmQzMTg1MDBlZWMwMTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gCmFj+x5eVTYffC0zRfZ0sfzOHM fYP/JDGjmbk/S9jwJF5WtGhnAUAdnnSzHhTW1x26JkhXZAZ/fFVbMzWT9rEwNKT7 cmWa9GL/TDwzsVO9Ig8OPFOatYQtgmo7uaos80g3yLUt9nV4wPit1p8oBZlf+TwH 8YHIohMlSwMQ1a90E5ebCDo4Dh9saKC6mddBsSCA49ZVXidoki6vWoO2enknztRp FRDnVR0kLYzGoQAc8ivsh4tHepoq/KdsPtHNE9gp5eIZ3SoSo6kd6b+MYSjl++cB zCef1Bm0xI6QCjbkH5KhMuKIuQAXx7KVHOem3CxpIVTkgzetBE1EaFte/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIeNlD50BQGH9Fi9ZbTGFAO7AGSMB8GA1UdIwQY MBaAFAz+EFijHjwYlLzwZMfoNwu6bPjkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFA0UVdLTWVQQmlVdlBCa3gtZzNDN3BzLU9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85MjFkZjEtZmE3ZC00MzA3LWI5YzMt N2NlOGM5NzA0Y2YwLzEvRFA0UVdLTWVQQmlVdlBCa3gtZzNDN3BzLU9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi85MjFkZjEtZmE3ZC00MzA3LWI5YzMtN2NlOGM5NzA0Y2Yw LzEvRFA0UVdLTWVQQmlVdlBCa3gtZzNDN3BzLU9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARNdUwpD/ 7cM3v9++9j7wYlgsCztVZOR11yzkd8Olk/3VZbMXC37ZYUz+ncVNsXpjsXaCd+46 pMD/mw0UXM+Fi+XT1FG5G23mxwNAqfuWE07Z1AV8Fhb0vcuuB8PyuycFyZAsBXkX RC+Ha4nU9Ypj2JQGE81GNOvkqZ3a4uPzpc86S/1S3VVQTC7GRBWLmnlBd7jiP5mh zVTkQpg0glADaQD+137NdgWvmUKCXCFSGZe9THkJC8Z6ICR0lOSiEvnkJhMErlFA h6bhu4hnoAdrwwdPaxIukj4A0A28gkmlFGUS1YRwDJ0Y0esk2m6OQ25gfM9uahNA e5MUhJ1HXVHEhw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:22 2025 by rpki-client