This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft File: DMgdB0NX3l0y-KZc2e56WFvz7G8.mft (raw, json) Hash identifier: wAE7gafm0C5UP4azDGte0kZ5FDzqNPJTCTSxl7/ulM4= Subject key identifier: F9:FE:DC:F5:07:7E:0F:2F:67:39:C3:8D:DB:9C:39:86:D5:59:93:92 Authority key identifier: 0C:C8:1D:07:43:57:DE:5D:32:F8:A6:5C:D9:EE:7A:58:5B:F3:EC:6F Certificate issuer: /CN=0cc81d074357de5d32f8a65cd9ee7a585bf3ec6f Certificate serial: 019AF16430C271390CBF624F6A9CF71A5E2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 02:01:06 +0000 Manifest this update: Sat 06 Dec 2025 02:01:06 +0000 Manifest next update: Sun 07 Dec 2025 02:01:06 +0000 Files and hashes: 1: DMgdB0NX3l0y-KZc2e56WFvz7G8.crl (hash: Mb0VyVk7M5jO8srgFtFZdk9nhNAZi4KBIqro4bihPYo=) 2: SUwSO2Fs2FjhvtnhOTiiq1oGzWM.roa (hash: olDxnIOko1Itz17Pa+h1ZPnFbbCInWHBCOkMHLf/KiI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:30:c2:71:39:0c:bf:62:4f:6a:9c:f7:1a:5e:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cc81d074357de5d32f8a65cd9ee7a585bf3ec6f Validity Not Before: Dec 6 02:01:06 2025 GMT Not After : Dec 7 02:01:06 2025 GMT Subject: CN=f9fedcf5077e0f2f6739c38ddb9c3986d5599392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fc:6f:f6:2d:b8:56:ad:ed:58:da:3c:8b:95: 61:54:8d:b6:d7:2e:51:45:c4:7f:bf:f5:cb:6b:34: 73:c9:fe:af:ad:38:aa:a7:2c:eb:35:8f:ae:f4:af: 16:82:72:b5:05:0d:fd:4f:9c:2f:8f:84:d7:5b:2f: 38:2a:21:64:84:01:52:68:f7:fd:39:b6:0d:73:7c: 76:70:fc:0f:90:72:83:5a:7e:0d:c7:a7:ae:a6:df: 05:b3:3d:40:d2:fd:b7:97:8e:f9:91:43:99:82:05: f1:60:68:d9:e8:fe:43:90:e5:49:bc:41:c2:2f:b0: bf:c1:c2:a6:78:c2:d9:cd:5e:0e:56:86:14:3f:4d: e0:a9:93:19:a7:c7:fd:ef:09:4d:f1:8f:63:64:12: 55:b9:a9:0e:ff:c3:d5:3a:0e:5a:a8:5b:ed:33:ef: 66:37:c7:dd:3e:2c:a6:e1:90:38:95:58:c3:28:d1: 3c:32:08:ff:c3:1d:7d:46:ab:78:06:5f:db:7c:27: f3:bf:b4:82:35:c4:82:08:85:c4:16:ff:10:2b:e5: 90:06:4a:24:ef:10:11:02:f2:37:05:16:bd:69:f4: 72:9b:ae:0b:75:09:07:12:b2:5e:f8:fe:31:d9:b8: 18:74:f7:c6:f9:8c:10:09:a3:32:34:2b:54:20:51: 81:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:FE:DC:F5:07:7E:0F:2F:67:39:C3:8D:DB:9C:39:86:D5:59:93:92 X509v3 Authority Key Identifier: keyid:0C:C8:1D:07:43:57:DE:5D:32:F8:A6:5C:D9:EE:7A:58:5B:F3:EC:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:c5:d5:20:c3:ea:f0:b6:41:a0:2e:4b:cc:19:87:54:b4:b2: 03:f1:e4:9c:26:44:d9:47:fb:d6:79:7b:e6:b8:95:aa:d8:d5: 5d:ba:36:71:92:23:14:2a:51:61:6b:6b:3d:2c:39:d4:5e:0a: 96:82:0c:cf:7a:6f:d9:bf:d3:33:ca:e0:92:ff:01:5b:dd:96: d7:05:0d:fd:fa:aa:2c:39:36:8e:31:4d:50:d4:04:47:68:9e: 2b:1f:1d:64:5a:4f:04:61:56:81:05:dc:2a:61:f1:40:eb:60: 80:cb:26:d9:79:53:c8:18:46:44:9a:cb:a1:5a:8f:03:c6:b8: 9f:bf:b4:f1:06:cc:57:07:97:21:0b:69:2e:67:46:3c:7b:d8: fa:77:0c:12:e3:91:09:ac:ca:04:ff:14:60:f2:62:c6:7f:96: f2:a3:5d:92:b4:78:ff:33:2a:ac:56:e3:ac:d1:cd:90:ca:b4: b0:1e:1b:1c:c1:43:a0:54:10:cd:f7:7f:c9:4f:19:f2:27:af: d1:82:14:c8:7c:76:7a:48:a0:36:39:c6:5d:d0:b4:91:e3:c1: 84:dd:0b:df:32:b0:25:87:ec:bc:e0:15:c6:6c:09:b9:c1:8f: 20:8d:52:33:dc:ef:7d:dc:ae:bf:42:73:18:63:e6:fb:49:1b: 52:28:26:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZDDCcTkMv2JPapz3Gl4sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjYzgxZDA3NDM1N2RlNWQzMmY4YTY1Y2Q5ZWU3YTU4NWJm M2VjNmYwHhcNMjUxMjA2MDIwMTA2WhcNMjUxMjA3MDIwMTA2WjAzMTEwLwYDVQQD EyhmOWZlZGNmNTA3N2UwZjJmNjczOWMzOGRkYjljMzk4NmQ1NTk5MzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/xv9i24Vq3tWNo8i5VhVI221y5R RcR/v/XLazRzyf6vrTiqpyzrNY+u9K8WgnK1BQ39T5wvj4TXWy84KiFkhAFSaPf9 ObYNc3x2cPwPkHKDWn4Nx6eupt8Fsz1A0v23l475kUOZggXxYGjZ6P5DkOVJvEHC L7C/wcKmeMLZzV4OVoYUP03gqZMZp8f97wlN8Y9jZBJVuakO/8PVOg5aqFvtM+9m N8fdPiym4ZA4lVjDKNE8Mgj/wx19Rqt4Bl/bfCfzv7SCNcSCCIXEFv8QK+WQBkok 7xARAvI3BRa9afRym64LdQkHErJe+P4x2bgYdPfG+YwQCaMyNCtUIFGBvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPn+3PUHfg8vZznDjducOYbVWZOSMB8GA1UdIwQY MBaAFAzIHQdDV95dMvimXNnuelhb8+xvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE1nZEIwTlgzbDB5LUtaYzJlNTZXRnZ6N0c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9iMmQ2MDQtZGRmYi00ZWZmLWI0OWEt ZGY1Y2U1NmU3YjRiLzEvRE1nZEIwTlgzbDB5LUtaYzJlNTZXRnZ6N0c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9iMmQ2MDQtZGRmYi00ZWZmLWI0OWEtZGY1Y2U1NmU3YjRi LzEvRE1nZEIwTlgzbDB5LUtaYzJlNTZXRnZ6N0c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAecXVIMPq 8LZBoC5LzBmHVLSyA/HknCZE2Uf71nl75riVqtjVXbo2cZIjFCpRYWtrPSw51F4K loIMz3pv2b/TM8rgkv8BW92W1wUN/fqqLDk2jjFNUNQER2ieKx8dZFpPBGFWgQXc KmHxQOtggMsm2XlTyBhGRJrLoVqPA8a4n7+08QbMVweXIQtpLmdGPHvY+ncMEuOR CazKBP8UYPJixn+W8qNdkrR4/zMqrFbjrNHNkMq0sB4bHMFDoFQQzfd/yU8Z8iev 0YIUyHx2ekigNjnGXdC0kePBhN0L3zKwJYfsvOAVxmwJucGPII1SM9zvfdyuv0Jz GGPm+0kbUigmyw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:30 2025 by rpki-client