This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft File: DMgShJHbEyzPzYKt5wDeswayFho.mft (raw, json) Hash identifier: +oEnWHB76np62Zp8De1S7n8vnChne8PrE29BnpI5Vug= Subject key identifier: 16:AF:D8:20:84:5B:18:16:87:2C:4C:74:E8:19:81:60:29:E6:A2:B4 Authority key identifier: 0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A Certificate issuer: /CN=0cc8128491db132ccfcd82ade700deb306b2161a Certificate serial: 019AF23FD4AF8AE22908D15479418380D127 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 06:01:00 +0000 Manifest this update: Sat 06 Dec 2025 06:01:00 +0000 Manifest next update: Sun 07 Dec 2025 06:01:00 +0000 Files and hashes: 1: DMgShJHbEyzPzYKt5wDeswayFho.crl (hash: 2cu3ky993RBnQCjlGvqfL0xwncxo5QOC/mUT9ZcJrco=) 2: y_bNAAFyln0l2OAbHxvZF5RByIA.roa (hash: V4mHpVmDU1it/2lH0Vz4ctCIXcFfTQBDa792VzELUIU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:d4:af:8a:e2:29:08:d1:54:79:41:83:80:d1:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cc8128491db132ccfcd82ade700deb306b2161a Validity Not Before: Dec 6 06:01:00 2025 GMT Not After : Dec 7 06:01:00 2025 GMT Subject: CN=16afd820845b1816872c4c74e819816029e6a2b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:22:0f:3f:47:48:ef:2c:6b:50:c7:bb:8b:6a: 0d:12:70:f3:c2:d6:0d:0e:10:d2:cc:e0:f2:c8:e0: 23:2f:99:fc:aa:bb:1d:0f:68:97:8f:02:84:09:ed: fc:c2:ed:55:e3:d1:e1:b7:e5:2c:7e:ab:f0:27:96: 18:f5:45:56:da:7d:ec:5a:37:d4:f4:69:ed:a4:6e: 1b:7e:ac:7c:37:1b:ad:5c:42:50:a4:d3:a9:cc:3a: 51:19:39:6c:ea:9e:61:61:b2:6b:55:16:8d:09:3b: f1:2a:f4:7b:4c:a9:43:d1:9b:74:d9:ff:4f:4c:04: f7:27:b9:d3:be:97:e1:5e:ad:9b:ec:2f:e4:95:4c: fd:c6:56:66:ea:9a:5f:7e:17:34:35:a7:fa:73:a5: da:25:7f:be:ec:40:43:78:c9:f8:c2:3a:6c:0b:0a: 74:0d:d6:90:d1:b3:e6:59:0c:0d:02:a2:57:7c:67: a1:40:2f:42:28:0e:57:f3:49:3f:1f:9b:da:56:35: 47:c1:53:3d:90:6a:fc:f6:8e:e3:b2:27:b3:92:c0: 02:13:48:8e:8f:19:d1:00:fd:fc:15:e7:de:18:9c: 06:36:34:b3:22:22:9a:c7:9d:23:b0:b9:5b:24:d7: 8f:bf:47:79:09:1b:2a:b1:ab:b9:ad:8b:db:1b:6f: 27:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:AF:D8:20:84:5B:18:16:87:2C:4C:74:E8:19:81:60:29:E6:A2:B4 X509v3 Authority Key Identifier: keyid:0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:7f:9e:7b:ad:3f:ff:0d:5e:2f:d6:1f:d1:9a:cf:20:48:8b: 75:23:a1:40:36:46:18:71:4b:ea:25:64:b7:8b:03:b3:bb:7c: 53:db:d9:84:70:ee:83:3d:2c:b5:82:4d:af:7e:24:a0:1e:1c: 84:81:45:1c:ca:a2:66:4c:f1:c2:d1:5f:fa:aa:ad:bf:f9:0b: 77:20:63:75:a1:c1:fc:62:32:4a:ff:0c:42:3f:f5:dd:49:93: 54:88:ea:f2:db:12:c4:2c:97:2a:85:dd:15:91:15:67:98:bc: 4a:6a:a3:47:4c:21:e3:bd:ac:4f:5a:9c:49:ea:3e:33:c8:00: 83:ba:0d:22:24:41:c9:d5:98:74:16:c6:2a:48:e8:5e:f8:1d: 42:da:18:67:31:be:d9:0a:c4:f7:eb:83:40:cb:2c:56:a8:82: 22:4c:02:08:00:6b:3c:3e:b9:a8:0c:14:3e:4e:c3:4f:5e:7a: 7d:85:2d:cf:2c:2a:9c:86:47:bb:1f:9d:d1:5b:f3:17:dd:8e: c9:00:4a:96:d0:8f:ec:6a:0e:8b:4a:26:1b:9c:1b:55:9a:b6: 82:f4:73:de:92:84:84:6b:88:8d:5a:9c:58:4f:ed:d4:ad:90: 37:d2:96:fb:0a:df:de:f5:d7:65:72:a5:33:45:e2:eb:5e:c7: 41:55:58:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9SviuIpCNFUeUGDgNEnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjYzgxMjg0OTFkYjEzMmNjZmNkODJhZGU3MDBkZWIzMDZi MjE2MWEwHhcNMjUxMjA2MDYwMTAwWhcNMjUxMjA3MDYwMTAwWjAzMTEwLwYDVQQD EygxNmFmZDgyMDg0NWIxODE2ODcyYzRjNzRlODE5ODE2MDI5ZTZhMmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyIPP0dI7yxrUMe7i2oNEnDzwtYN DhDSzODyyOAjL5n8qrsdD2iXjwKECe38wu1V49Hht+UsfqvwJ5YY9UVW2n3sWjfU 9GntpG4bfqx8NxutXEJQpNOpzDpRGTls6p5hYbJrVRaNCTvxKvR7TKlD0Zt02f9P TAT3J7nTvpfhXq2b7C/klUz9xlZm6ppffhc0Naf6c6XaJX++7EBDeMn4wjpsCwp0 DdaQ0bPmWQwNAqJXfGehQC9CKA5X80k/H5vaVjVHwVM9kGr89o7jsiezksACE0iO jxnRAP38FefeGJwGNjSzIiKax50jsLlbJNePv0d5CRsqsau5rYvbG28nhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBav2CCEWxgWhyxMdOgZgWAp5qK0MB8GA1UdIwQY MBaAFAzIEoSR2xMsz82CrecA3rMGshYaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE1nU2hKSGJFeXpQellLdDV3RGVzd2F5RmhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yYzNmNTMtMWJhYi00ZDMyLTgzODAt ZDU5MTA4YjU3MjE0LzEvRE1nU2hKSGJFeXpQellLdDV3RGVzd2F5RmhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8yYzNmNTMtMWJhYi00ZDMyLTgzODAtZDU5MTA4YjU3MjE0 LzEvRE1nU2hKSGJFeXpQellLdDV3RGVzd2F5RmhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm3+ee60/ /w1eL9Yf0ZrPIEiLdSOhQDZGGHFL6iVkt4sDs7t8U9vZhHDugz0stYJNr34koB4c hIFFHMqiZkzxwtFf+qqtv/kLdyBjdaHB/GIySv8MQj/13UmTVIjq8tsSxCyXKoXd FZEVZ5i8SmqjR0wh472sT1qcSeo+M8gAg7oNIiRBydWYdBbGKkjoXvgdQtoYZzG+ 2QrE9+uDQMssVqiCIkwCCABrPD65qAwUPk7DT156fYUtzywqnIZHux+d0VvzF92O yQBKltCP7GoOi0omG5wbVZq2gvRz3pKEhGuIjVqcWE/t1K2QN9KW+wrf3vXXZXKl M0Xi617HQVVY+w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:04 2025 by rpki-client