This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft File: DM1NST05HKRGjmEs6RtH8cgoM2I.mft (raw, json) Hash identifier: wosN+5/PhiZxDdvgbu93Hw8slQyH78WLo3VTLRYw9QY= Subject key identifier: 2C:7A:84:0F:B5:DE:C9:0F:60:3E:9B:26:18:95:D3:8A:E0:71:7A:C3 Authority key identifier: 0C:CD:4D:49:3D:39:1C:A4:46:8E:61:2C:E9:1B:47:F1:C8:28:33:62 Certificate issuer: /CN=0ccd4d493d391ca4468e612ce91b47f1c8283362 Certificate serial: 019AF276EDAE27D7C9BD7C7FF76B9BBFAAC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DM1NST05HKRGjmEs6RtH8cgoM2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft Manifest number: 01D7 Signing time: Sat 06 Dec 2025 07:01:11 +0000 Manifest this update: Sat 06 Dec 2025 07:01:11 +0000 Manifest next update: Sun 07 Dec 2025 07:01:11 +0000 Files and hashes: 1: DM1NST05HKRGjmEs6RtH8cgoM2I.crl (hash: gAAqIiXmN8IFZjAe9AvOM9mliGDznDqfz4hx/zXAZFA=) 2: UCbP0uMxwI1Dtwy_MSnoOs0srFA.roa (hash: FXCOZ3RR1v7GAOBmOczwXx+7sehvCfZ7oMWfxcGZPmk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft rsync://rpki.ripe.net/repository/DEFAULT/DM1NST05HKRGjmEs6RtH8cgoM2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:ed:ae:27:d7:c9:bd:7c:7f:f7:6b:9b:bf:aa:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ccd4d493d391ca4468e612ce91b47f1c8283362 Validity Not Before: Dec 6 07:01:11 2025 GMT Not After : Dec 7 07:01:11 2025 GMT Subject: CN=2c7a840fb5dec90f603e9b261895d38ae0717ac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e1:6c:f2:59:c1:d1:b2:ca:66:b0:64:00:9d: 91:46:15:e5:4b:af:de:49:10:b9:52:a2:ae:f7:3f: ca:14:bc:5a:35:b2:71:fd:67:55:fb:55:27:3f:67: 93:0a:29:d6:41:f7:2f:f7:30:b4:b4:f2:7b:02:ec: cb:5a:d8:da:d5:e5:67:29:8b:bd:17:e6:14:3c:63: 7d:41:c3:58:b2:2d:95:48:2c:02:fa:80:35:f6:f5: 16:8e:56:69:8b:a4:f7:1d:cf:38:27:ad:7c:2e:0c: b2:56:e7:83:9d:a6:92:30:1c:30:13:d8:75:51:f6: bf:b2:f0:be:18:25:f0:40:f8:90:d8:b5:8a:7b:45: 72:a3:83:eb:c8:3b:7c:98:93:f4:21:8d:88:cb:5c: 70:bb:1a:8d:e9:59:3d:40:c0:e1:9b:ef:22:6b:68: e4:70:00:c8:fb:9b:39:f6:db:e4:15:11:20:1c:45: 1f:b1:d7:6f:52:04:0c:fa:b7:f0:e3:d2:de:43:f5: 0b:43:1e:5c:1a:ef:e7:6e:42:d1:f8:7b:8e:e5:d2: 40:12:c7:73:5b:5f:3c:48:34:4b:a3:17:77:f5:2c: 68:62:06:dc:20:0d:12:32:58:c0:e3:54:e2:7b:07: 98:12:b5:ee:21:31:95:be:37:62:9b:45:b2:1c:11: 05:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:7A:84:0F:B5:DE:C9:0F:60:3E:9B:26:18:95:D3:8A:E0:71:7A:C3 X509v3 Authority Key Identifier: keyid:0C:CD:4D:49:3D:39:1C:A4:46:8E:61:2C:E9:1B:47:F1:C8:28:33:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DM1NST05HKRGjmEs6RtH8cgoM2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:a7:b1:2a:6a:72:73:68:df:6c:bf:3d:87:d6:a1:59:37:08: 59:32:8e:6b:da:7e:98:e1:1b:bd:6d:f4:04:6a:99:51:8b:d2: ff:fc:30:27:40:93:54:12:c5:d3:21:13:8b:6f:75:38:09:11: 18:b9:be:7b:90:a6:13:b0:58:71:fc:be:e0:53:be:51:18:d0: 68:c0:5d:2a:0f:e5:31:31:e6:15:4d:26:df:9e:d3:cc:33:85: f9:da:b3:b3:b7:b7:1d:e8:87:e9:73:5a:d8:16:e3:6c:21:1c: 21:84:e7:23:31:7c:de:42:7d:59:7a:48:c6:5c:76:0f:0e:74: 94:cd:85:b3:4f:54:1f:88:ae:41:e6:1c:4c:d2:ab:59:9e:bc: e5:62:9a:a0:07:a8:1e:23:c2:90:23:13:33:c7:e1:54:42:59: 54:56:ce:17:d6:14:f2:13:f8:46:26:85:cd:0c:7f:b0:73:9f: e7:6d:93:d5:95:22:d2:a8:6e:6b:70:2b:04:b3:d5:c7:83:f4: a8:b7:8a:0d:68:50:61:8b:81:d7:e1:f5:d7:bc:36:aa:54:b2: 95:d1:6e:e8:65:e2:35:0c:ed:40:29:4b:e8:a2:f0:6a:7e:00: aa:86:f9:c1:31:c4:c7:9c:ac:d8:80:d4:03:a7:1e:d2:e1:97: 87:2d:0d:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydu2uJ9fJvXx/92ubv6rCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjY2Q0ZDQ5M2QzOTFjYTQ0NjhlNjEyY2U5MWI0N2YxYzgy ODMzNjIwHhcNMjUxMjA2MDcwMTExWhcNMjUxMjA3MDcwMTExWjAzMTEwLwYDVQQD EygyYzdhODQwZmI1ZGVjOTBmNjAzZTliMjYxODk1ZDM4YWUwNzE3YWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+Fs8lnB0bLKZrBkAJ2RRhXlS6/e SRC5UqKu9z/KFLxaNbJx/WdV+1UnP2eTCinWQfcv9zC0tPJ7AuzLWtja1eVnKYu9 F+YUPGN9QcNYsi2VSCwC+oA19vUWjlZpi6T3Hc84J618LgyyVueDnaaSMBwwE9h1 Ufa/svC+GCXwQPiQ2LWKe0Vyo4PryDt8mJP0IY2Iy1xwuxqN6Vk9QMDhm+8ia2jk cADI+5s59tvkFREgHEUfsddvUgQM+rfw49LeQ/ULQx5cGu/nbkLR+HuO5dJAEsdz W188SDRLoxd39SxoYgbcIA0SMljA41TieweYErXuITGVvjdim0WyHBEFJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCx6hA+13skPYD6bJhiV04rgcXrDMB8GA1UdIwQY MBaAFAzNTUk9ORykRo5hLOkbR/HIKDNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE0xTlNUMDVIS1JHam1FczZSdEg4Y2dvTTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi80ZDdhOTYtMDU3NC00YTA5LTg1MGQt NzUxMzdiMTI4NDJiLzEvRE0xTlNUMDVIS1JHam1FczZSdEg4Y2dvTTJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi80ZDdhOTYtMDU3NC00YTA5LTg1MGQtNzUxMzdiMTI4NDJi LzEvRE0xTlNUMDVIS1JHam1FczZSdEg4Y2dvTTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuKexKmpy c2jfbL89h9ahWTcIWTKOa9p+mOEbvW30BGqZUYvS//wwJ0CTVBLF0yETi291OAkR GLm+e5CmE7BYcfy+4FO+URjQaMBdKg/lMTHmFU0m357TzDOF+dqzs7e3HeiH6XNa 2BbjbCEcIYTnIzF83kJ9WXpIxlx2Dw50lM2Fs09UH4iuQeYcTNKrWZ685WKaoAeo HiPCkCMTM8fhVEJZVFbOF9YU8hP4RiaFzQx/sHOf522T1ZUi0qhua3ArBLPVx4P0 qLeKDWhQYYuB1+H117w2qlSyldFu6GXiNQztQClL6KLwan4Aqob5wTHEx5ys2IDU A6ce0uGXhy0NPw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:10 2025 by rpki-client