This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft File: DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft (raw, json) Hash identifier: e6CpfxR7jH0PtglP+99qZdhoqzLXEKEUr5GNVJztySI= Subject key identifier: 5B:C4:A7:9D:10:F6:F7:30:EC:31:CD:33:FB:9C:82:E6:94:24:4E:18 Authority key identifier: 0C:20:26:63:DE:85:2C:70:60:FD:EA:02:98:B4:90:D5:ED:CC:0F:24 Certificate issuer: /CN=0c202663de852c7060fdea0298b490d5edcc0f24 Certificate serial: 019AF19B22D72219D9F14DDC65E4DB02F353 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft Manifest number: 176B Signing time: Sat 06 Dec 2025 03:01:07 +0000 Manifest this update: Sat 06 Dec 2025 03:01:07 +0000 Manifest next update: Sun 07 Dec 2025 03:01:07 +0000 Files and hashes: 1: 28r3lezFt1DhHYHa7zUp6dp6gek.roa (hash: UnpOGH6h0Mhuee/PLRufj5c9ShCIaJkFN7bgA7Z1mp8=) 2: DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl (hash: ty8kem5oQtZSiddUqVIjbFYAbUEN/OXFNywB2gBylrc=) 3: S3gytHIiWuDnii46Cee6MjqDODU.roa (hash: WjQ4G+4EZrW+UzIf8d/g5pUPAeGGv9rfo0G8Gxn9x1c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:22:d7:22:19:d9:f1:4d:dc:65:e4:db:02:f3:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c202663de852c7060fdea0298b490d5edcc0f24 Validity Not Before: Dec 6 03:01:07 2025 GMT Not After : Dec 7 03:01:07 2025 GMT Subject: CN=5bc4a79d10f6f730ec31cd33fb9c82e694244e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:00:e5:bd:6e:55:8e:dd:80:d7:e2:83:5c:11: b7:6e:d3:bf:25:74:38:88:1e:f6:f8:3e:39:91:2f: e7:a8:67:03:63:45:f9:45:1b:70:32:c7:be:b2:91: 83:57:10:23:e4:81:5e:b3:ae:72:2e:06:8a:f6:48: a9:28:96:35:96:aa:c8:7c:28:55:be:b6:26:1b:98: 69:d5:14:f1:88:b1:52:d6:a1:d1:bf:d8:8b:3d:45: 73:ae:7e:40:c8:bb:da:31:3c:82:8d:49:d3:0b:9c: c5:e3:cd:b1:a5:96:4d:dc:3a:1c:e9:28:87:88:a4: 64:97:2a:5a:af:1b:d8:3c:ab:8c:45:8c:a4:94:96: 72:79:a2:12:d8:42:66:7d:67:86:2e:8d:00:73:51: 68:c7:9d:8e:71:cb:9b:c0:c3:0a:d0:c8:58:c9:b5: be:5e:a2:f7:f7:7f:16:45:fe:80:9f:6f:51:8b:b1: c1:12:5a:04:66:84:91:1a:b8:59:26:61:a7:eb:6a: 1c:03:3f:32:07:2a:0f:59:28:2d:cc:5a:b9:b4:81: 98:ca:30:eb:ec:79:3d:55:cf:1d:43:d0:f6:93:2a: 46:92:57:fe:02:ed:65:6f:70:03:5c:42:ec:e1:31: b2:6b:af:ea:70:7c:2b:3d:82:04:bf:04:7b:0e:40: 0e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:C4:A7:9D:10:F6:F7:30:EC:31:CD:33:FB:9C:82:E6:94:24:4E:18 X509v3 Authority Key Identifier: keyid:0C:20:26:63:DE:85:2C:70:60:FD:EA:02:98:B4:90:D5:ED:CC:0F:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:c3:62:7f:6e:e7:e7:7c:0b:46:d0:47:9c:4f:e4:68:5a:bb: f9:f6:e9:be:a9:1e:2d:4f:82:9d:04:d9:82:1c:90:0d:83:04: 86:a9:21:b0:22:d6:8a:5c:8b:fd:ea:92:a6:09:89:9e:59:a4: 99:11:00:cb:c3:e4:07:50:9d:40:25:92:f9:58:3e:51:37:b0: e0:aa:96:f7:50:08:14:74:82:e9:93:be:18:47:9c:ca:0a:44: e2:0b:08:d8:25:60:33:2b:c4:f6:b3:fa:e2:85:f2:30:11:96: fa:c4:9a:11:b2:e8:f5:90:4c:3b:0d:05:9a:99:64:06:67:b8: 00:81:d3:7e:0a:96:e0:de:d5:2d:f7:91:78:39:c0:85:0d:64: a1:31:76:c0:5f:24:ef:19:67:79:8e:2e:88:02:45:1a:fd:75: 7c:61:ac:ef:67:3f:69:02:2d:67:4e:a4:e3:c8:a4:fd:bf:1b: 3f:fc:91:f6:4a:b5:6b:c5:5b:9f:a8:31:02:9a:34:f5:6f:bc: 9b:89:40:ba:20:2b:18:e6:e5:17:44:26:95:af:5b:c5:91:e5: d3:bd:7e:93:ed:52:4d:83:da:f6:1e:eb:21:ff:16:ff:31:c4: b2:a9:b2:ad:ad:4f:d1:b5:c5:9a:25:cd:6d:09:52:0c:20:0a: 5f:34:d0:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmyLXIhnZ8U3cZeTbAvNTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjAyNjYzZGU4NTJjNzA2MGZkZWEwMjk4YjQ5MGQ1ZWRj YzBmMjQwHhcNMjUxMjA2MDMwMTA3WhcNMjUxMjA3MDMwMTA3WjAzMTEwLwYDVQQD Eyg1YmM0YTc5ZDEwZjZmNzMwZWMzMWNkMzNmYjljODJlNjk0MjQ0ZTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigDlvW5Vjt2A1+KDXBG3btO/JXQ4 iB72+D45kS/nqGcDY0X5RRtwMse+spGDVxAj5IFes65yLgaK9kipKJY1lqrIfChV vrYmG5hp1RTxiLFS1qHRv9iLPUVzrn5AyLvaMTyCjUnTC5zF482xpZZN3Doc6SiH iKRklyparxvYPKuMRYyklJZyeaIS2EJmfWeGLo0Ac1Fox52OccubwMMK0MhYybW+ XqL3938WRf6An29Ri7HBEloEZoSRGrhZJmGn62ocAz8yByoPWSgtzFq5tIGYyjDr 7Hk9Vc8dQ9D2kypGklf+Au1lb3ADXELs4TGya6/qcHwrPYIEvwR7DkAOLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFvEp50Q9vcw7DHNM/ucguaUJE4YMB8GA1UdIwQY MBaAFAwgJmPehSxwYP3qApi0kNXtzA8kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENBbVk5NkZMSEJnX2VvQ21MU1ExZTNNRHlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wOTEwZTYtYzA3NC00MGQwLWI3ODkt YTE3ODA0NDM5ODk1LzEvRENBbVk5NkZMSEJnX2VvQ21MU1ExZTNNRHlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8wOTEwZTYtYzA3NC00MGQwLWI3ODktYTE3ODA0NDM5ODk1 LzEvRENBbVk5NkZMSEJnX2VvQ21MU1ExZTNNRHlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANcNif27n 53wLRtBHnE/kaFq7+fbpvqkeLU+CnQTZghyQDYMEhqkhsCLWilyL/eqSpgmJnlmk mREAy8PkB1CdQCWS+Vg+UTew4KqW91AIFHSC6ZO+GEecygpE4gsI2CVgMyvE9rP6 4oXyMBGW+sSaEbLo9ZBMOw0FmplkBme4AIHTfgqW4N7VLfeReDnAhQ1koTF2wF8k 7xlneY4uiAJFGv11fGGs72c/aQItZ06k48ik/b8bP/yR9kq1a8Vbn6gxApo09W+8 m4lAuiArGOblF0Qmla9bxZHl071+k+1STYPa9h7rIf8W/zHEsqmyra1P0bXFmiXN bQlSDCAKXzTQIw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:13:54 2025 by rpki-client