This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/dnmIT2MwtlBg7cQcysDlRtOApQQ.mft File: dnmIT2MwtlBg7cQcysDlRtOApQQ.mft (raw, json) Hash identifier: 2d0FWlNjuWpmj+pcD9IJQmTPHIAdayurglPglDF9Kz4= Subject key identifier: 6B:8E:8E:4A:B2:D2:74:9C:E5:40:BD:90:28:5C:41:3F:B6:B2:98:30 Authority key identifier: 76:79:88:4F:63:30:B6:50:60:ED:C4:1C:CA:C0:E5:46:D3:80:A5:04 Certificate issuer: /CN=7679884f6330b65060edc41ccac0e546d380a504 Certificate serial: 019AF1D1CFFD65CBC21B13363CC034154B70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnmIT2MwtlBg7cQcysDlRtOApQQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/dnmIT2MwtlBg7cQcysDlRtOApQQ.mft Manifest number: 0114 Signing time: Sat 06 Dec 2025 04:00:50 +0000 Manifest this update: Sat 06 Dec 2025 04:00:50 +0000 Manifest next update: Sun 07 Dec 2025 04:00:50 +0000 Files and hashes: 1: dnmIT2MwtlBg7cQcysDlRtOApQQ.crl (hash: nq9kpav7K67R++hLKJX92OJQa2n+Yqg3PCar2z6ztrQ=) 2: pqKjRcHlDiTELm_P0k88IdYl64A.roa (hash: uOigO0BbOXYSDcxSVpkhh97Q9VqPSwLH4vkq9m1CYjE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/dnmIT2MwtlBg7cQcysDlRtOApQQ.crl rsync://rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/dnmIT2MwtlBg7cQcysDlRtOApQQ.mft rsync://rpki.ripe.net/repository/DEFAULT/dnmIT2MwtlBg7cQcysDlRtOApQQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:cf:fd:65:cb:c2:1b:13:36:3c:c0:34:15:4b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7679884f6330b65060edc41ccac0e546d380a504 Validity Not Before: Dec 6 04:00:50 2025 GMT Not After : Dec 7 04:00:50 2025 GMT Subject: CN=6b8e8e4ab2d2749ce540bd90285c413fb6b29830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ab:80:54:ca:fc:53:11:83:3c:9d:95:bf:6b: ab:51:b5:ea:90:9b:c6:b0:e0:cd:7e:a8:e8:cc:5c: 3d:42:16:24:70:fa:83:fb:3b:bd:7d:82:d5:0a:28: 3c:08:56:d4:99:55:be:d2:be:3d:c5:10:e2:2e:47: 72:ab:5e:5f:e8:be:3f:47:70:43:58:62:70:21:b4: 5f:80:04:bd:25:9a:5b:4a:d0:85:dc:5a:bc:0b:45: f2:5a:7a:6d:9d:03:fb:f0:31:90:42:b2:a7:8a:b9: b0:82:14:2f:82:5e:53:7c:70:1b:25:a5:9d:fc:fb: 75:0d:47:32:23:e3:92:ed:a5:2c:c0:69:49:10:a1: d8:33:3f:2b:81:73:ec:97:08:b4:c3:10:40:17:04: 0c:75:67:1e:68:98:7b:b5:97:48:96:40:64:71:30: 19:f7:77:02:1c:4f:ef:49:d9:5f:7a:53:b9:91:44: 4a:52:4b:7d:10:0c:0b:d2:05:f8:9b:75:cc:42:fc: 38:68:fe:29:12:a9:01:60:b3:75:69:c3:ae:8e:5e: 91:1a:e0:0c:44:db:0b:75:5d:29:13:6c:3b:21:b0: 0d:19:b6:4c:c9:6c:ff:c8:2d:fb:f7:4c:a9:b8:32: 26:8d:8c:66:38:eb:a1:80:f6:24:50:22:dd:be:d6: 0c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:8E:8E:4A:B2:D2:74:9C:E5:40:BD:90:28:5C:41:3F:B6:B2:98:30 X509v3 Authority Key Identifier: keyid:76:79:88:4F:63:30:B6:50:60:ED:C4:1C:CA:C0:E5:46:D3:80:A5:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnmIT2MwtlBg7cQcysDlRtOApQQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/dnmIT2MwtlBg7cQcysDlRtOApQQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/dnmIT2MwtlBg7cQcysDlRtOApQQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:cd:be:4c:34:8e:24:7b:a0:29:ce:79:d6:4a:96:0d:9e:ec: eb:9e:a9:c4:e3:92:2d:bd:df:84:33:79:b6:a3:c7:6f:a7:04: 8d:33:b9:ce:38:2f:5a:e9:f3:0d:9b:9d:c6:4c:1c:0d:bc:1a: 15:22:fd:c0:9b:41:05:4b:79:cb:c8:db:29:e2:08:7a:8c:3a: 3f:5c:1c:47:f1:cd:75:d9:53:de:48:ef:31:35:9e:11:bc:03: 18:66:38:c5:39:90:05:c0:ce:5b:35:4e:4d:2a:89:02:b5:20: f4:1e:2c:c2:47:43:a2:bf:da:95:a0:8b:b3:a8:40:18:09:50: c5:bb:f2:5b:07:23:9f:37:8b:b8:fe:f1:ba:1e:0f:d3:11:67: b4:3c:5f:6a:17:08:a0:ee:c8:3d:fc:51:70:46:dd:fe:69:92: 07:80:e0:e3:17:8a:9b:00:13:ab:93:c6:81:af:2c:67:45:53: fb:aa:d7:1c:d6:32:0a:a4:1f:2a:cb:98:f9:e0:96:2b:dd:9c: d5:8c:de:2d:b7:ae:ce:b2:63:60:a6:de:76:99:ed:65:d7:aa: df:72:4a:d6:00:c7:69:9b:4d:ec:1d:2c:ae:d2:9f:9f:c9:06: fd:19:91:d7:da:77:e0:39:bd:51:a5:89:ab:c8:89:42:51:b7: 17:95:47:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0c/9ZcvCGxM2PMA0FUtwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2Nzk4ODRmNjMzMGI2NTA2MGVkYzQxY2NhYzBlNTQ2ZDM4 MGE1MDQwHhcNMjUxMjA2MDQwMDUwWhcNMjUxMjA3MDQwMDUwWjAzMTEwLwYDVQQD Eyg2YjhlOGU0YWIyZDI3NDljZTU0MGJkOTAyODVjNDEzZmI2YjI5ODMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6uAVMr8UxGDPJ2Vv2urUbXqkJvG sODNfqjozFw9QhYkcPqD+zu9fYLVCig8CFbUmVW+0r49xRDiLkdyq15f6L4/R3BD WGJwIbRfgAS9JZpbStCF3Fq8C0XyWnptnQP78DGQQrKnirmwghQvgl5TfHAbJaWd /Pt1DUcyI+OS7aUswGlJEKHYMz8rgXPslwi0wxBAFwQMdWceaJh7tZdIlkBkcTAZ 93cCHE/vSdlfelO5kURKUkt9EAwL0gX4m3XMQvw4aP4pEqkBYLN1acOujl6RGuAM RNsLdV0pE2w7IbANGbZMyWz/yC3790ypuDImjYxmOOuhgPYkUCLdvtYMYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGuOjkqy0nSc5UC9kChcQT+2spgwMB8GA1UdIwQY MBaAFHZ5iE9jMLZQYO3EHMrA5UbTgKUEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG5tSVQyTXd0bEJnN2NRY3lzRGxSdE9BcFFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8yOTk5NTktMTJmNC00ZmU3LTlmMzAt OTllNzZjMjczOWZiLzEvZG5tSVQyTXd0bEJnN2NRY3lzRGxSdE9BcFFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8yOTk5NTktMTJmNC00ZmU3LTlmMzAtOTllNzZjMjczOWZi LzEvZG5tSVQyTXd0bEJnN2NRY3lzRGxSdE9BcFFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAac2+TDSO JHugKc551kqWDZ7s656pxOOSLb3fhDN5tqPHb6cEjTO5zjgvWunzDZudxkwcDbwa FSL9wJtBBUt5y8jbKeIIeow6P1wcR/HNddlT3kjvMTWeEbwDGGY4xTmQBcDOWzVO TSqJArUg9B4swkdDor/alaCLs6hAGAlQxbvyWwcjnzeLuP7xuh4P0xFntDxfahcI oO7IPfxRcEbd/mmSB4Dg4xeKmwATq5PGga8sZ0VT+6rXHNYyCqQfKsuY+eCWK92c 1YzeLbeuzrJjYKbedpntZdeq33JK1gDHaZtN7B0srtKfn8kG/RmR19p34Dm9UaWJ q8iJQlG3F5VHzQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:00 2025 by rpki-client