This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft File: DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft (raw, json) Hash identifier: rvXCISkPIlGpkMkuURbaJSeC1YIqhY2TCphd6VN4QLA= Subject key identifier: D4:56:56:4E:6A:A0:AF:30:71:2C:A5:78:8E:5F:F9:12:3F:E2:49:1A Authority key identifier: 0C:CC:36:02:8D:00:58:10:CA:BA:24:61:4B:D6:07:31:DD:49:50:33 Certificate issuer: /CN=0ccc36028d005810caba24614bd60731dd495033 Certificate serial: 019AF2773996EBDC7F1F59891AADB5B684D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft Manifest number: 02D3 Signing time: Sat 06 Dec 2025 07:01:30 +0000 Manifest this update: Sat 06 Dec 2025 07:01:30 +0000 Manifest next update: Sun 07 Dec 2025 07:01:30 +0000 Files and hashes: 1: DMw2Ao0AWBDKuiRhS9YHMd1JUDM.crl (hash: SLq6YGPR/g+k3sMW8RemL/0oHZKOhuw6jbvybRCXjC4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft rsync://rpki.ripe.net/repository/DEFAULT/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:39:96:eb:dc:7f:1f:59:89:1a:ad:b5:b6:84:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ccc36028d005810caba24614bd60731dd495033 Validity Not Before: Dec 6 07:01:30 2025 GMT Not After : Dec 7 07:01:30 2025 GMT Subject: CN=d456564e6aa0af30712ca5788e5ff9123fe2491a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:1b:76:d4:bf:32:f7:19:75:a7:87:d6:87:da: 6c:ec:fe:d9:28:37:b0:af:33:fc:76:93:aa:1c:20: 9e:fb:49:56:2d:e7:06:78:b5:bf:36:f9:fc:9c:fe: 51:11:2f:62:aa:9d:3b:81:ec:08:24:fa:60:3e:78: 8e:a1:ef:70:82:81:90:ce:db:56:95:e3:01:e0:b6: 7e:2c:46:2d:58:93:68:eb:0a:2d:aa:b2:55:66:ae: 33:ae:f8:c2:45:bf:59:04:61:01:1d:f1:0d:d2:3d: c2:e5:2c:e2:0a:3f:b6:34:bd:38:d2:9f:35:11:31: e5:d5:a4:6e:66:b0:98:fa:d9:27:50:84:94:2c:99: 88:57:35:a5:a8:b0:53:87:1b:c7:6e:0a:75:4d:f8: 38:5b:4f:e9:5f:c3:3c:99:43:c4:ea:10:80:da:02: d0:90:8d:31:cf:eb:bf:3a:d3:80:53:60:0e:0c:92: 2d:22:05:aa:c4:f6:43:07:e4:22:6f:b8:99:7a:ba: b4:ac:52:26:bc:63:c1:10:0e:10:ad:1d:ea:50:88: 32:d2:ef:ab:b6:44:f8:f2:a8:d1:a5:98:87:be:fa: 57:01:61:d3:e8:6c:c9:ab:88:d8:94:b2:76:d6:56: bd:e4:ad:c2:73:aa:a5:f8:40:43:55:c6:2b:09:52: 7f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:56:56:4E:6A:A0:AF:30:71:2C:A5:78:8E:5F:F9:12:3F:E2:49:1A X509v3 Authority Key Identifier: keyid:0C:CC:36:02:8D:00:58:10:CA:BA:24:61:4B:D6:07:31:DD:49:50:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:26:cf:89:8a:6a:04:0f:08:82:d9:02:87:9e:fa:29:40:1e: b2:37:22:6a:e5:63:11:92:3a:be:ac:72:2d:2e:7f:dd:0a:d5: cd:31:e0:48:8e:01:80:54:da:9c:bd:c7:84:89:01:1e:32:df: fd:7f:01:a8:ce:53:af:07:51:bc:67:06:37:48:01:0c:07:97: d3:16:28:d8:23:38:d0:7e:d5:8e:89:91:f8:dd:5c:8e:56:d7: 7c:db:e3:24:e2:52:1d:38:8a:f0:8f:e1:02:26:8f:06:23:71: 41:44:4b:fe:ec:ea:b7:81:ef:78:2c:7d:01:5a:d0:d2:ca:5b: c2:66:e5:bd:e0:41:14:64:94:8d:f2:f4:2f:bd:e7:ef:4d:d1: 99:db:7e:d2:ed:d8:f4:9d:ad:9f:0d:fe:0a:a5:9f:4b:9f:b2: a1:07:36:68:d8:46:09:bb:1c:4a:7b:32:71:93:ad:ad:ce:e7: 2e:3f:89:97:41:e2:52:de:80:22:cb:c9:bb:e6:b1:ea:69:79: 3e:d3:f1:33:8b:c5:60:20:fc:cb:b9:26:82:d0:2d:03:46:15: ba:d8:e3:19:39:02:d3:47:91:73:7f:67:2e:dc:f5:ee:55:aa: 3c:1e:8b:3f:17:0a:a3:c0:fc:13:76:d7:7d:fd:2a:71:93:16: 25:27:03:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydzmW69x/H1mJGq21toTUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjY2MzNjAyOGQwMDU4MTBjYWJhMjQ2MTRiZDYwNzMxZGQ0 OTUwMzMwHhcNMjUxMjA2MDcwMTMwWhcNMjUxMjA3MDcwMTMwWjAzMTEwLwYDVQQD EyhkNDU2NTY0ZTZhYTBhZjMwNzEyY2E1Nzg4ZTVmZjkxMjNmZTI0OTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Bt21L8y9xl1p4fWh9ps7P7ZKDew rzP8dpOqHCCe+0lWLecGeLW/Nvn8nP5RES9iqp07gewIJPpgPniOoe9wgoGQzttW leMB4LZ+LEYtWJNo6wotqrJVZq4zrvjCRb9ZBGEBHfEN0j3C5SziCj+2NL040p81 ETHl1aRuZrCY+tknUISULJmIVzWlqLBThxvHbgp1Tfg4W0/pX8M8mUPE6hCA2gLQ kI0xz+u/OtOAU2AODJItIgWqxPZDB+Qib7iZerq0rFImvGPBEA4QrR3qUIgy0u+r tkT48qjRpZiHvvpXAWHT6GzJq4jYlLJ21la95K3Cc6ql+EBDVcYrCVJ/NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNRWVk5qoK8wcSyleI5f+RI/4kkaMB8GA1UdIwQY MBaAFAzMNgKNAFgQyrokYUvWBzHdSVAzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE13MkFvMEFXQkRLdWlSaFM5WUhNZDFKVURNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8wZmM5MDAtN2M0OC00YTUxLTgzZmUt ZGNmM2ExYzI1Y2YzLzEvRE13MkFvMEFXQkRLdWlSaFM5WUhNZDFKVURNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8wZmM5MDAtN2M0OC00YTUxLTgzZmUtZGNmM2ExYzI1Y2Yz LzEvRE13MkFvMEFXQkRLdWlSaFM5WUhNZDFKVURNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASCbPiYpq BA8IgtkCh576KUAesjciauVjEZI6vqxyLS5/3QrVzTHgSI4BgFTanL3HhIkBHjLf /X8BqM5TrwdRvGcGN0gBDAeX0xYo2CM40H7VjomR+N1cjlbXfNvjJOJSHTiK8I/h AiaPBiNxQURL/uzqt4HveCx9AVrQ0spbwmblveBBFGSUjfL0L73n703Rmdt+0u3Y 9J2tnw3+CqWfS5+yoQc2aNhGCbscSnsycZOtrc7nLj+Jl0HiUt6AIsvJu+ax6ml5 PtPxM4vFYCD8y7kmgtAtA0YVutjjGTkC00eRc39nLtz17lWqPB6LPxcKo8D8E3bX ff0qcZMWJScDXg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:51 2025 by rpki-client