This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft File: DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft (raw, json) Hash identifier: 50maoocvw7QEbwaDS/4h9t0gLETNU6ZLbc9pcUb0uVA= Subject key identifier: 98:4A:89:80:2B:78:D4:1E:53:05:E4:ED:14:CB:AA:DE:FE:28:87:FA Authority key identifier: 0C:CC:36:02:8D:00:58:10:CA:BA:24:61:4B:D6:07:31:DD:49:50:33 Certificate issuer: /CN=0ccc36028d005810caba24614bd60731dd495033 Certificate serial: 019B1B0547D20ADD6AFE0A37F012354A7DD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft Manifest number: 02E8 Signing time: Sun 14 Dec 2025 04:01:29 +0000 Manifest this update: Sun 14 Dec 2025 04:01:29 +0000 Manifest next update: Mon 15 Dec 2025 04:01:29 +0000 Files and hashes: 1: DMw2Ao0AWBDKuiRhS9YHMd1JUDM.crl (hash: fLfWG3JpbYhjz5Q2a/Fj3m8Hlq3h1Eaj/6tEzzvRp0w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft rsync://rpki.ripe.net/repository/DEFAULT/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:05:47:d2:0a:dd:6a:fe:0a:37:f0:12:35:4a:7d:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ccc36028d005810caba24614bd60731dd495033 Validity Not Before: Dec 14 04:01:29 2025 GMT Not After : Dec 15 04:01:29 2025 GMT Subject: CN=984a89802b78d41e5305e4ed14cbaadefe2887fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:0a:c7:0e:a9:76:5f:32:08:69:42:52:76:8b: 10:92:8b:c8:4c:a3:83:3b:87:a4:2b:a0:55:04:46: 81:ef:2f:4c:7a:fb:99:b3:9c:e4:45:c8:45:b6:ce: b6:ea:3e:66:5a:16:dd:6f:9e:d4:14:0b:a1:f1:d2: 14:2a:c0:8c:6a:d6:76:5a:99:88:dd:fe:ee:7b:5c: 9c:5a:3d:43:a4:f1:3d:48:f1:41:62:0d:04:3c:2f: b4:96:0f:3d:fe:9d:d7:9f:af:01:7f:d6:c2:e8:88: af:ae:7c:e7:9c:61:99:ed:c2:35:54:e1:c9:6d:c2: 9d:08:77:45:52:08:30:8a:5d:a5:0c:9d:21:b8:85: a4:b4:15:fd:05:fe:9d:63:ec:92:39:0b:a6:73:04: bf:f2:ee:88:34:18:62:90:a0:a9:b0:c9:fd:81:1a: 49:b4:31:da:23:55:a1:7c:5e:e5:4f:6f:c5:cd:c4: 19:51:90:c7:24:33:f6:8e:ce:45:d5:58:cd:7a:e5: a2:db:e1:e5:01:27:48:96:68:4f:bd:38:49:74:31: 2b:85:dd:0c:65:eb:0f:48:49:1b:23:e0:fe:62:b6: 20:5e:5c:6d:bf:25:10:1c:5f:ed:29:03:c6:25:7c: f5:0f:9b:05:1e:94:08:75:22:5c:a7:a3:f3:2f:1c: 12:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:4A:89:80:2B:78:D4:1E:53:05:E4:ED:14:CB:AA:DE:FE:28:87:FA X509v3 Authority Key Identifier: keyid:0C:CC:36:02:8D:00:58:10:CA:BA:24:61:4B:D6:07:31:DD:49:50:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:b8:4a:11:b2:c7:3a:bf:b3:80:bf:14:d9:8e:e4:4d:08:5e: 09:df:c4:4d:72:48:8f:a9:8d:95:31:68:f8:0d:f4:7b:dd:96: 1f:a3:6a:73:db:79:95:b9:1b:e9:c6:aa:de:4f:2e:4a:f6:e9: c8:57:fe:86:e5:9f:2f:aa:09:da:b6:0b:c3:5e:7a:90:fc:7c: e6:53:c0:90:c6:7f:75:eb:83:c5:2c:e0:ba:e0:5b:f2:22:88: 6f:da:d6:ba:de:9f:e9:48:2c:c2:d9:ff:6e:6b:75:86:3d:4e: 86:b8:cb:13:78:02:a0:b3:9e:22:4a:74:ba:44:54:84:00:b2: 35:0b:96:55:a9:01:c0:40:9d:1f:de:8a:47:ab:81:5e:97:77: 86:3a:28:28:8e:aa:ab:92:9d:34:07:f2:05:6c:50:62:b5:8a: e7:0e:d3:e5:3b:42:8b:ad:12:cc:2e:60:f8:f1:15:61:0d:21: 2f:b3:99:bc:4b:20:08:1a:c2:2e:95:d9:f1:89:23:b2:00:eb: 96:60:5b:6d:91:25:76:47:ee:72:88:39:17:eb:71:8a:cd:d5: f8:b6:68:ab:7e:40:b4:c0:b0:da:30:9a:e0:d5:19:de:79:62: 3f:7e:4d:4b:b3:18:03:33:f2:cf:64:10:8f:7f:5f:45:13:8f: 23:f0:c4:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbBUfSCt1q/go38BI1Sn3UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjY2MzNjAyOGQwMDU4MTBjYWJhMjQ2MTRiZDYwNzMxZGQ0 OTUwMzMwHhcNMjUxMjE0MDQwMTI5WhcNMjUxMjE1MDQwMTI5WjAzMTEwLwYDVQQD Eyg5ODRhODk4MDJiNzhkNDFlNTMwNWU0ZWQxNGNiYWFkZWZlMjg4N2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjArHDql2XzIIaUJSdosQkovITKOD O4ekK6BVBEaB7y9MevuZs5zkRchFts626j5mWhbdb57UFAuh8dIUKsCMatZ2WpmI 3f7ue1ycWj1DpPE9SPFBYg0EPC+0lg89/p3Xn68Bf9bC6IivrnznnGGZ7cI1VOHJ bcKdCHdFUggwil2lDJ0huIWktBX9Bf6dY+ySOQumcwS/8u6INBhikKCpsMn9gRpJ tDHaI1WhfF7lT2/FzcQZUZDHJDP2js5F1VjNeuWi2+HlASdIlmhPvThJdDErhd0M ZesPSEkbI+D+YrYgXlxtvyUQHF/tKQPGJXz1D5sFHpQIdSJcp6PzLxwS4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJhKiYAreNQeUwXk7RTLqt7+KIf6MB8GA1UdIwQY MBaAFAzMNgKNAFgQyrokYUvWBzHdSVAzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE13MkFvMEFXQkRLdWlSaFM5WUhNZDFKVURNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8wZmM5MDAtN2M0OC00YTUxLTgzZmUt ZGNmM2ExYzI1Y2YzLzEvRE13MkFvMEFXQkRLdWlSaFM5WUhNZDFKVURNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8wZmM5MDAtN2M0OC00YTUxLTgzZmUtZGNmM2ExYzI1Y2Yz LzEvRE13MkFvMEFXQkRLdWlSaFM5WUhNZDFKVURNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs7hKEbLH Or+zgL8U2Y7kTQheCd/ETXJIj6mNlTFo+A30e92WH6Nqc9t5lbkb6caq3k8uSvbp yFf+huWfL6oJ2rYLw156kPx85lPAkMZ/deuDxSzguuBb8iKIb9rWut6f6Ugswtn/ bmt1hj1OhrjLE3gCoLOeIkp0ukRUhACyNQuWVakBwECdH96KR6uBXpd3hjooKI6q q5KdNAfyBWxQYrWK5w7T5TtCi60SzC5g+PEVYQ0hL7OZvEsgCBrCLpXZ8YkjsgDr lmBbbZEldkfucog5F+txis3V+LZoq35AtMCw2jCa4NUZ3nliP35NS7MYAzPyz2QQ j39fRROPI/DEyA== -----END CERTIFICATE-----Generated at Sun Dec 14 07:44:16 2025 by rpki-client