This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft File: DM6IMtApSYAfEZjp0TuxjtWDLQw.mft (raw, json) Hash identifier: BirUc5iDgbJmQ9C7Cskh7GD5u2zgX5xfFLErdit5NHk= Subject key identifier: C0:A8:D2:BA:E3:D4:EF:CE:38:72:04:4A:6F:4A:27:44:2A:01:3F:BD Authority key identifier: 0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C Certificate issuer: /CN=0cce8832d02949801f1198e9d13bb18ed5832d0c Certificate serial: 019AF209A26617699781D693E5AA534BBABF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 05:01:48 +0000 Manifest this update: Sat 06 Dec 2025 05:01:48 +0000 Manifest next update: Sun 07 Dec 2025 05:01:48 +0000 Files and hashes: 1: DM6IMtApSYAfEZjp0TuxjtWDLQw.crl (hash: FxKhSVpp378lHj8MCLezBdIXjA4oIiSEcArDz6Xcu0E=) 2: Vj26lr7hbbX_fCXK7w3hESEooM0.roa (hash: gGIWp8lV6uKwDTfCg2XsPsepLLQekr1mHTq2CjmnAag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:a2:66:17:69:97:81:d6:93:e5:aa:53:4b:ba:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cce8832d02949801f1198e9d13bb18ed5832d0c Validity Not Before: Dec 6 05:01:48 2025 GMT Not After : Dec 7 05:01:48 2025 GMT Subject: CN=c0a8d2bae3d4efce3872044a6f4a27442a013fbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a3:1e:e3:91:79:46:d4:9b:44:e8:83:8d:20: cb:cb:3f:51:e6:12:7a:9d:9a:ed:de:6f:f5:4a:05: 74:96:b5:a2:6e:b9:5e:6a:bd:41:19:fa:c1:15:47: 58:da:75:a2:38:f7:ff:7d:98:3e:5c:29:f5:3c:43: 6b:93:bb:a6:58:ac:e2:24:ac:9a:f0:2b:28:9d:8a: 83:55:73:a2:83:9f:cf:88:0f:33:a3:65:b1:9c:68: dd:76:70:05:f2:47:24:d9:83:30:ca:39:0a:c8:6f: 83:fc:e4:27:98:4d:75:b4:e3:84:4d:18:d9:1b:ef: 51:4e:5c:52:b9:eb:09:45:fd:ab:22:6a:37:c5:f5: be:d6:d6:a7:bc:de:88:02:b0:d9:89:11:96:7e:e2: c7:b3:8a:63:94:b8:7f:33:fa:bd:f6:61:64:13:79: b2:ef:41:4e:ca:ac:ed:34:73:9d:fe:97:0e:f7:1b: 1b:19:18:d3:a0:fe:19:9e:d9:a6:d3:2d:19:0a:f5: 3e:a6:60:73:11:8f:83:d2:0a:4f:a2:2a:b1:65:00: c4:9f:c0:88:31:6f:36:42:fc:e1:59:a7:86:bd:03: c1:2a:02:24:7a:46:49:31:13:0f:c0:5e:9b:10:70: 1f:c1:6b:4f:b2:cc:b1:75:88:c0:dc:e3:97:5a:d6: f5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A8:D2:BA:E3:D4:EF:CE:38:72:04:4A:6F:4A:27:44:2A:01:3F:BD X509v3 Authority Key Identifier: keyid:0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:24:f0:d6:8b:f6:95:97:6d:e7:7a:d7:47:3a:74:d6:b3:71: 12:84:b2:d5:00:95:dc:50:45:69:f2:09:3d:d2:8f:ec:8d:fb: b8:78:16:0d:05:68:3f:59:ec:1d:87:ca:f7:a5:30:72:1e:16: 5e:a7:a0:c7:e5:ff:a5:77:be:d9:b0:fa:bb:cf:f2:02:a1:3f: 76:10:f1:b4:3d:38:ca:86:49:66:95:98:93:5b:78:0f:f3:34: 5e:21:c5:f9:6a:a9:3b:c0:57:a5:de:6b:df:2f:6a:cf:ae:74: 5f:48:bf:e0:f7:25:94:01:a4:44:bb:fc:d4:10:ba:ac:a3:e5: e1:4f:41:56:70:01:69:fe:46:42:c1:df:66:b2:67:b2:26:58: 83:fe:a5:9e:75:7c:cf:0a:de:f2:86:46:0d:ea:77:f1:7a:f3: a4:c5:6c:5f:39:f6:e4:a6:ea:69:e9:ef:f1:81:f1:76:6d:8c: b7:e7:50:05:9c:dd:0d:75:84:da:e1:84:f4:ef:56:22:c1:18: 02:55:80:ef:05:6d:e3:73:3f:34:38:12:ea:08:b2:c3:56:06: 50:0c:78:7f:1b:a5:55:31:59:e2:73:f1:0a:70:a5:f6:63:8d: 68:f1:45:de:ce:fc:67:8b:1d:f6:d1:c4:b8:d5:71:50:17:e2: ba:20:c1:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCaJmF2mXgdaT5apTS7q/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjY2U4ODMyZDAyOTQ5ODAxZjExOThlOWQxM2JiMThlZDU4 MzJkMGMwHhcNMjUxMjA2MDUwMTQ4WhcNMjUxMjA3MDUwMTQ4WjAzMTEwLwYDVQQD EyhjMGE4ZDJiYWUzZDRlZmNlMzg3MjA0NGE2ZjRhMjc0NDJhMDEzZmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKMe45F5RtSbROiDjSDLyz9R5hJ6 nZrt3m/1SgV0lrWibrlear1BGfrBFUdY2nWiOPf/fZg+XCn1PENrk7umWKziJKya 8CsonYqDVXOig5/PiA8zo2WxnGjddnAF8kck2YMwyjkKyG+D/OQnmE11tOOETRjZ G+9RTlxSuesJRf2rImo3xfW+1tanvN6IArDZiRGWfuLHs4pjlLh/M/q99mFkE3my 70FOyqztNHOd/pcO9xsbGRjToP4Zntmm0y0ZCvU+pmBzEY+D0gpPoiqxZQDEn8CI MW82QvzhWaeGvQPBKgIkekZJMRMPwF6bEHAfwWtPssyxdYjA3OOXWtb1zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMCo0rrj1O/OOHIESm9KJ0QqAT+9MB8GA1UdIwQY MBaAFAzOiDLQKUmAHxGY6dE7sY7Vgy0MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE02SU10QXBTWUFmRVpqcDBUdXhqdFdETFF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC83NzdjMGEtY2E0NC00M2VjLWFiNzkt NWUwYWZlYzEzNmIxLzEvRE02SU10QXBTWUFmRVpqcDBUdXhqdFdETFF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC83NzdjMGEtY2E0NC00M2VjLWFiNzktNWUwYWZlYzEzNmIx LzEvRE02SU10QXBTWUFmRVpqcDBUdXhqdFdETFF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiiTw1ov2 lZdt53rXRzp01rNxEoSy1QCV3FBFafIJPdKP7I37uHgWDQVoP1nsHYfK96Uwch4W Xqegx+X/pXe+2bD6u8/yAqE/dhDxtD04yoZJZpWYk1t4D/M0XiHF+WqpO8BXpd5r 3y9qz650X0i/4PcllAGkRLv81BC6rKPl4U9BVnABaf5GQsHfZrJnsiZYg/6lnnV8 zwre8oZGDep38XrzpMVsXzn25Kbqaenv8YHxdm2Mt+dQBZzdDXWE2uGE9O9WIsEY AlWA7wVt43M/NDgS6giyw1YGUAx4fxulVTFZ4nPxCnCl9mONaPFF3s78Z4sd9tHE uNVxUBfiuiDBzA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:25:16 2025 by rpki-client