This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft
File: dmcCNs0OA4aEozGUvefUuVrcZvc.mft (raw, json)
Hash identifier: hBKoeDzjuT5R7PLA8exEntpycD//aW7Gp2jk2ug2fGM=
Subject key identifier: 0E:0D:95:F7:E6:0B:A8:6E:61:0A:C0:00:66:C7:4E:F4:A9:B8:24:1E
Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7
Certificate serial: 019B134B2854497CABF60FF75AC16BF1D1D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft
Manifest number: 0F5D
Signing time: Fri 12 Dec 2025 16:00:51 +0000
Manifest this update: Fri 12 Dec 2025 16:00:51 +0000
Manifest next update: Sat 13 Dec 2025 16:00:51 +0000
Files and hashes: 1: 3aGZcGWIs_eMlaFgLeBFbbKoNDQ.roa (hash: TFkuucN4UO3fh05NKBE3AbRffgRyYyePtYVgR0x7i+c=)
2: VxpPmjuX-xDJQCZmjad0BLzyqaQ.roa (hash: scQCA4WB1SH7VqMcUYx00R9CCsEQG1/Vi2LqLMj0V5E=)
3: YX6TdSLrfQISm2CR9jSMfrWeHto.roa (hash: thQkWvF4nLGlemNm7VcbLLVFDEUCum3r3Jy72QYLpXE=)
4: _EShF3PxGOJE5SZRfQySmvZg1kg.roa (hash: Fv1ecycEXgD6srZq4/0n/myzWwH/n6NbHepwG+mEp58=)
5: bH5bF_8mxPt1PuFzjL55ZoPT9u4.roa (hash: 61i/OUkjcDYfRXVmFio9adx3zcL9HFjQz1PgrGFxL9g=)
6: dmcCNs0OA4aEozGUvefUuVrcZvc.crl (hash: G3k4Shhvm8doFO3bXOauX7WR8+xokTcoQ4cOx1o/Qhs=)
7: fMMGd3zJDjytcmyhyCVTpEhw1kU.roa (hash: 8DAdzVawL9mvA1o+Hlejvqrd7KSs7UEw/UCVjERrvbY=)
8: oWAjJbQBfxx3e4wlWi3kdlBilW0.roa (hash: PNb++l6AXajvtQHdYlCiHKFX324+t6SV7D+grw9N748=)
9: w0j3028GTs0XxpRerIzPD_MNXeU.roa (hash: lraXgIU7h+zQb9zRqFGVcDbnN4LuLIfjAyKAE8V60jM=)
10: xHUWp-IhZmk_U8CwKK_n9BGOcbI.roa (hash: 2RFD3xexMzAEEdEVrKN657pvNZq2T3uOKQ0MCXLlbXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Dec 2025 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:13:4b:28:54:49:7c:ab:f6:0f:f7:5a:c1:6b:f1:d1:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7
Validity
Not Before: Dec 12 16:00:51 2025 GMT
Not After : Dec 13 16:00:51 2025 GMT
Subject: CN=0e0d95f7e60ba86e610ac00066c74ef4a9b8241e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cf:a3:09:74:1e:46:fc:73:e4:d6:61:5e:c5:
ad:bc:5b:80:42:1a:61:f4:a0:12:e4:5e:53:fd:df:
56:a5:92:b0:d5:01:d2:b4:03:5a:2e:bf:da:61:87:
c3:c6:b4:ce:ae:3b:84:8b:a2:4a:6a:36:db:cc:9e:
17:c6:0b:ff:ba:ee:67:aa:af:66:45:d0:3b:cb:9a:
ce:aa:8a:99:81:5a:fe:8a:96:5a:8d:dd:45:c9:fb:
ca:f7:49:aa:72:a9:41:14:8b:55:4f:b0:1f:42:b2:
b8:44:46:88:6b:61:71:32:2b:8b:a5:91:9b:a2:eb:
b4:69:64:46:69:0c:a1:2e:b0:78:31:53:05:a5:ad:
13:52:f1:73:8d:d1:7b:04:c3:f0:18:86:f1:c7:f2:
2a:9e:f8:39:62:82:c0:c6:f4:9c:45:dd:e5:c1:fc:
85:fc:57:2c:45:bf:0c:c1:70:f4:bf:e6:34:f6:10:
b7:ca:8e:a0:5b:1e:6f:29:ba:7d:82:d3:99:51:3b:
f5:98:f8:67:96:f7:29:02:d8:e6:60:81:af:03:59:
86:9f:a2:ec:61:fa:d2:12:12:f3:ae:b5:48:4c:d8:
50:56:78:2d:5d:f5:77:e5:e2:83:11:70:63:da:b5:
cf:e2:ab:d9:23:27:0d:22:dd:45:03:c1:74:e4:f7:
03:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0D:95:F7:E6:0B:A8:6E:61:0A:C0:00:66:C7:4E:F4:A9:B8:24:1E
X509v3 Authority Key Identifier:
keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:bc:b6:fa:05:59:cb:e5:57:fa:08:55:e7:f4:07:82:db:9e:
c8:fa:35:60:91:04:b1:5a:f8:83:cf:d5:99:00:00:ca:a8:b1:
c6:be:00:6e:2f:1b:08:1c:b4:65:e8:56:47:db:65:5b:17:be:
4e:68:65:27:7f:2b:96:45:73:e3:d3:e9:65:92:e2:fa:3b:ca:
f0:1a:ef:ed:21:7b:bf:52:64:91:2c:ae:92:c4:b4:2a:a6:df:
46:06:d9:12:dc:a5:3d:fc:7a:37:5a:f1:e8:21:a1:a5:15:00:
57:4e:db:f9:98:d6:22:80:33:e1:da:a9:b5:51:c1:e1:b5:22:
74:f2:87:35:51:8b:e7:88:77:3e:b0:c5:b8:83:02:77:b1:22:
14:08:4b:1c:51:a9:29:1d:31:ff:d3:12:e1:a1:a1:35:93:dc:
7e:47:d2:18:66:67:3d:b4:4d:10:3e:e1:3f:ed:b7:52:fb:fd:
12:d0:89:51:a2:9d:a6:6a:8a:98:ba:1b:4a:e7:ff:8e:a6:f4:
14:ac:ef:85:89:27:33:b9:e2:42:da:c3:2a:bc:9e:e0:aa:05:
e0:9f:12:be:11:a2:44:4f:78:69:b6:d0:b4:d9:89:74:ac:be:
b6:39:5c:d1:09:e7:de:17:4e:4a:e4:5b:4c:43:d9:8f:e3:f0:
09:a8:cf:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsTSyhUSXyr9g/3WsFr8dHSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk
YzY2ZjcwHhcNMjUxMjEyMTYwMDUxWhcNMjUxMjEzMTYwMDUxWjAzMTEwLwYDVQQD
EygwZTBkOTVmN2U2MGJhODZlNjEwYWMwMDA2NmM3NGVmNGE5YjgyNDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus+jCXQeRvxz5NZhXsWtvFuAQhph
9KAS5F5T/d9WpZKw1QHStANaLr/aYYfDxrTOrjuEi6JKajbbzJ4Xxgv/uu5nqq9m
RdA7y5rOqoqZgVr+ipZajd1FyfvK90mqcqlBFItVT7AfQrK4REaIa2FxMiuLpZGb
ouu0aWRGaQyhLrB4MVMFpa0TUvFzjdF7BMPwGIbxx/Iqnvg5YoLAxvScRd3lwfyF
/FcsRb8MwXD0v+Y09hC3yo6gWx5vKbp9gtOZUTv1mPhnlvcpAtjmYIGvA1mGn6Ls
YfrSEhLzrrVITNhQVngtXfV35eKDEXBj2rXP4qvZIycNIt1FA8F05PcD6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA4NlffmC6huYQrAAGbHTvSpuCQeMB8GA1UdIwQY
MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt
YmE0ZmMyMzQ2ODNlLzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl
LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlry2+gVZ
y+VX+ghV5/QHgtueyPo1YJEEsVr4g8/VmQAAyqixxr4Abi8bCBy0ZehWR9tlWxe+
TmhlJ38rlkVz49PpZZLi+jvK8Brv7SF7v1JkkSyuksS0KqbfRgbZEtylPfx6N1rx
6CGhpRUAV07b+ZjWIoAz4dqptVHB4bUidPKHNVGL54h3PrDFuIMCd7EiFAhLHFGp
KR0x/9MS4aGhNZPcfkfSGGZnPbRNED7hP+23Uvv9EtCJUaKdpmqKmLobSuf/jqb0
FKzvhYknM7niQtrDKrye4KoF4J8SvhGiRE94abbQtNmJdKy+tjlc0Qnn3hdOSuRb
TEPZj+PwCajPAQ==
-----END CERTIFICATE-----
Generated at Fri Dec 12 19:29:15 2025 by rpki-client