This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft File: DMgShJHbEyzPzYKt5wDeswayFho.mft (raw, json) Hash identifier: uZnVHEIzsXmxnSlcRF2YbdJjlBLMj83h3XVXp/IBZc4= Subject key identifier: 26:60:E4:E7:88:B6:8B:E4:F3:F5:20:35:76:A9:17:34:DA:95:C0:2E Authority key identifier: 0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A Certificate issuer: /CN=0cc8128491db132ccfcd82ade700deb306b2161a Certificate serial: 019B35D773F5D4565524F0A72A80F00A64B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 09:01:10 +0000 Manifest this update: Fri 19 Dec 2025 09:01:10 +0000 Manifest next update: Sat 20 Dec 2025 09:01:10 +0000 Files and hashes: 1: DMgShJHbEyzPzYKt5wDeswayFho.crl (hash: 5kvgf35mi9bbsZV5vjHJljMy+a+oDYdCLsgAghtwvdY=) 2: y_bNAAFyln0l2OAbHxvZF5RByIA.roa (hash: V4mHpVmDU1it/2lH0Vz4ctCIXcFfTQBDa792VzELUIU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:73:f5:d4:56:55:24:f0:a7:2a:80:f0:0a:64:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cc8128491db132ccfcd82ade700deb306b2161a Validity Not Before: Dec 19 09:01:10 2025 GMT Not After : Dec 20 09:01:10 2025 GMT Subject: CN=2660e4e788b68be4f3f5203576a91734da95c02e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:91:5a:0a:84:74:c0:01:2c:ab:25:46:c2:91: 97:a3:b8:77:48:9d:35:ac:55:24:79:0c:b7:bf:39: 6d:7e:f2:80:1a:9b:b6:5c:f5:ad:d7:e8:98:38:26: a4:27:03:ed:66:27:ef:f1:3b:fa:f3:01:aa:8e:f0: 6b:a2:52:45:2b:9f:c3:2a:4a:7b:11:dd:6f:af:72: 9f:5b:1c:b6:52:f1:ae:db:a9:c6:71:bb:a8:21:16: f3:cf:c2:83:97:b2:70:cb:8f:d6:99:45:56:a0:37: 0e:ea:75:1d:fa:23:4a:70:56:23:1d:02:bb:15:f6: ef:60:c0:04:ea:d8:88:71:44:77:eb:ed:41:c2:62: 4a:d0:8f:da:57:e4:63:6e:2e:78:14:f9:73:47:26: 62:79:a6:8a:75:d1:2f:a2:aa:94:eb:05:02:84:57: 73:59:84:8a:11:c5:51:99:e3:94:09:ef:12:3c:6d: b3:94:5b:51:9e:db:14:9c:0e:72:e9:58:11:21:2e: 56:bc:20:3d:6c:8f:51:bc:1a:4b:23:0e:bd:08:b1: d9:dc:65:1b:6c:ce:bf:3b:65:81:33:84:50:f6:45: db:df:f8:68:96:c0:0d:e2:84:0e:28:5c:97:fe:4b: 75:b6:c0:e2:bc:56:b6:73:88:61:10:08:c5:00:2d: 5b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:60:E4:E7:88:B6:8B:E4:F3:F5:20:35:76:A9:17:34:DA:95:C0:2E X509v3 Authority Key Identifier: keyid:0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:48:0e:23:98:c2:4f:d6:ad:0b:02:53:1d:84:ca:4b:40:24: cc:89:26:d2:0f:b6:08:8b:ac:37:04:1e:f6:06:e9:66:3a:17: ca:ad:42:62:4e:1b:79:dc:86:9e:4b:bd:9f:eb:97:64:aa:69: 12:1e:e4:ee:c9:c7:30:17:96:f2:5c:dd:80:63:33:b3:a3:10: d6:ad:20:f3:4a:57:8d:24:26:83:3a:27:72:d3:9d:40:2a:40: b9:1a:f9:f6:90:29:73:c6:a8:e6:6b:21:3c:18:89:91:27:f0: 37:d2:09:8b:b6:3d:bd:00:7b:2e:b2:77:01:c7:25:df:a9:8d: 62:46:5e:49:5c:c8:79:69:1b:cb:b4:20:39:5d:1b:ee:83:a7: b7:6d:69:89:40:af:b8:63:8a:4d:bd:79:a6:31:e6:de:b0:00: 09:d7:36:18:11:a7:39:fd:49:ed:d2:53:83:84:d8:d1:61:7c: c7:cc:88:ec:1e:71:8b:c0:7e:36:8c:cc:00:fc:54:b9:9d:d6: 00:4b:0b:05:d7:32:d2:e7:15:1d:57:90:55:14:cd:e0:1e:97: 94:1a:6e:17:c8:8e:f7:3a:ed:e8:f8:68:57:85:01:26:a8:33: 81:04:29:e6:4c:41:58:26:bb:9c:87:00:7a:84:87:2a:07:9c: 5e:68:4e:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs113P11FZVJPCnKoDwCmS0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjYzgxMjg0OTFkYjEzMmNjZmNkODJhZGU3MDBkZWIzMDZi MjE2MWEwHhcNMjUxMjE5MDkwMTEwWhcNMjUxMjIwMDkwMTEwWjAzMTEwLwYDVQQD EygyNjYwZTRlNzg4YjY4YmU0ZjNmNTIwMzU3NmE5MTczNGRhOTVjMDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpFaCoR0wAEsqyVGwpGXo7h3SJ01 rFUkeQy3vzltfvKAGpu2XPWt1+iYOCakJwPtZifv8Tv68wGqjvBrolJFK5/DKkp7 Ed1vr3KfWxy2UvGu26nGcbuoIRbzz8KDl7Jwy4/WmUVWoDcO6nUd+iNKcFYjHQK7 FfbvYMAE6tiIcUR36+1BwmJK0I/aV+Rjbi54FPlzRyZieaaKddEvoqqU6wUChFdz WYSKEcVRmeOUCe8SPG2zlFtRntsUnA5y6VgRIS5WvCA9bI9RvBpLIw69CLHZ3GUb bM6/O2WBM4RQ9kXb3/holsAN4oQOKFyX/kt1tsDivFa2c4hhEAjFAC1b+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCZg5OeItovk8/UgNXapFzTalcAuMB8GA1UdIwQY MBaAFAzIEoSR2xMsz82CrecA3rMGshYaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE1nU2hKSGJFeXpQellLdDV3RGVzd2F5RmhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yYzNmNTMtMWJhYi00ZDMyLTgzODAt ZDU5MTA4YjU3MjE0LzEvRE1nU2hKSGJFeXpQellLdDV3RGVzd2F5RmhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8yYzNmNTMtMWJhYi00ZDMyLTgzODAtZDU5MTA4YjU3MjE0 LzEvRE1nU2hKSGJFeXpQellLdDV3RGVzd2F5RmhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANkgOI5jC T9atCwJTHYTKS0AkzIkm0g+2CIusNwQe9gbpZjoXyq1CYk4bedyGnku9n+uXZKpp Eh7k7snHMBeW8lzdgGMzs6MQ1q0g80pXjSQmgzonctOdQCpAuRr59pApc8ao5msh PBiJkSfwN9IJi7Y9vQB7LrJ3Accl36mNYkZeSVzIeWkby7QgOV0b7oOnt21piUCv uGOKTb15pjHm3rAACdc2GBGnOf1J7dJTg4TY0WF8x8yI7B5xi8B+NozMAPxUuZ3W AEsLBdcy0ucVHVeQVRTN4B6XlBpuF8iO9zrt6PhoV4UBJqgzgQQp5kxBWCa7nIcA eoSHKgecXmhObg== -----END CERTIFICATE-----Generated at Fri Dec 19 10:05:42 2025 by rpki-client