This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft File: DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft (raw, json) Hash identifier: wOawljDIQgyGJV5RU5+zg3XFcJPAjFmWDV58Kb2hLto= Subject key identifier: 88:6B:CB:71:D3:AB:2E:5F:79:BB:9E:36:62:8E:45:2D:15:C5:95:DF Authority key identifier: 0C:20:26:63:DE:85:2C:70:60:FD:EA:02:98:B4:90:D5:ED:CC:0F:24 Certificate issuer: /CN=0c202663de852c7060fdea0298b490d5edcc0f24 Certificate serial: 019B23D097A72630D4A287E9B12FF45DFD05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft Manifest number: 1785 Signing time: Mon 15 Dec 2025 21:00:31 +0000 Manifest this update: Mon 15 Dec 2025 21:00:31 +0000 Manifest next update: Tue 16 Dec 2025 21:00:31 +0000 Files and hashes: 1: 28r3lezFt1DhHYHa7zUp6dp6gek.roa (hash: UnpOGH6h0Mhuee/PLRufj5c9ShCIaJkFN7bgA7Z1mp8=) 2: DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl (hash: fkPsv9jR5NQpYCMirEmv1R4OG85xgre+8oPdzTA0D0Y=) 3: S3gytHIiWuDnii46Cee6MjqDODU.roa (hash: WjQ4G+4EZrW+UzIf8d/g5pUPAeGGv9rfo0G8Gxn9x1c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 21:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:d0:97:a7:26:30:d4:a2:87:e9:b1:2f:f4:5d:fd:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c202663de852c7060fdea0298b490d5edcc0f24 Validity Not Before: Dec 15 21:00:31 2025 GMT Not After : Dec 16 21:00:31 2025 GMT Subject: CN=886bcb71d3ab2e5f79bb9e36628e452d15c595df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:14:c7:45:0f:11:e0:69:05:b9:3c:be:d8:d5: 18:e3:54:e6:6f:b6:3d:d5:5f:71:c8:33:54:fa:6b: df:52:16:e7:51:1a:be:3d:25:b1:de:5d:5c:6a:7e: de:29:52:88:43:3f:cb:cd:ca:7c:8b:ca:be:15:82: 8a:bc:97:99:92:13:46:75:70:c5:63:bf:16:93:e9: 24:84:ab:6f:e4:d3:ff:1f:17:78:ea:98:76:1e:18: 29:92:bc:6a:21:de:34:d0:b9:3e:4c:e0:f4:c5:13: 90:86:4c:c3:3f:50:6d:72:da:e9:8c:a2:ca:b5:27: 58:59:64:41:9a:a5:72:72:1e:98:5e:69:fb:8e:8d: 36:25:b9:bc:2d:45:62:23:0c:44:8f:6d:47:65:1c: 70:8b:bf:fb:3c:2a:da:77:66:5e:5e:e2:1a:e9:0d: eb:42:1d:cf:4d:a0:e7:3b:d1:2c:49:bf:c9:d6:f9: fc:2b:53:4e:70:1b:42:e8:f7:ad:7f:fc:c6:cd:8b: 6c:57:ab:b2:fb:71:21:b4:39:e5:c1:53:87:d9:9e: aa:03:bc:af:71:fe:02:23:cf:35:ff:26:24:1f:14: 74:57:be:2b:42:9c:44:13:8d:c1:47:21:3a:b8:e5: a5:12:a6:03:41:ce:c7:81:59:e1:c6:2e:d5:79:e6: d8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:6B:CB:71:D3:AB:2E:5F:79:BB:9E:36:62:8E:45:2D:15:C5:95:DF X509v3 Authority Key Identifier: keyid:0C:20:26:63:DE:85:2C:70:60:FD:EA:02:98:B4:90:D5:ED:CC:0F:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:37:b5:95:98:6f:2d:32:d1:98:d3:1b:ba:f0:98:36:0d:84: e5:b5:eb:6c:6c:93:e2:fd:ec:24:02:b9:05:65:a1:7d:19:0b: 76:b2:fb:4c:1f:f3:65:c8:a5:d6:6b:13:c1:ac:66:74:fc:24: d8:97:09:34:fa:fc:1a:8b:b3:d8:2e:da:f5:52:2f:20:d2:6c: 0d:82:77:98:41:11:09:cf:f0:0a:d1:f2:4e:06:89:bf:49:71: 3c:5c:cc:f3:19:4a:bd:00:01:5e:3b:72:a6:75:7e:88:63:16: 6d:9e:ad:9f:94:92:62:3a:f0:c7:c0:af:4a:90:1b:42:c1:ac: cf:6e:43:b8:d8:0c:8a:1d:c4:c2:f4:df:85:74:71:ce:c8:37: ca:60:cf:56:fa:16:63:9c:c9:cc:25:d0:e4:81:3a:d0:7c:8e: 7c:b8:55:6c:ce:dc:c5:45:ed:c8:e8:81:ee:d1:13:11:54:dc: 5e:b1:e2:73:5e:c5:8f:bf:a7:a5:29:3d:27:12:73:65:e4:12: b8:07:0d:c4:11:7b:80:00:20:53:b1:fa:20:8f:82:52:77:20: 7a:4c:c0:a9:f6:4c:7f:f8:02:18:13:13:8d:60:1e:c5:d7:fc: 48:e8:f2:b0:bf:c6:bf:20:cf:6a:58:f7:d8:a0:ff:5c:82:66: 4a:85:e5:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsj0JenJjDUoofpsS/0Xf0FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjAyNjYzZGU4NTJjNzA2MGZkZWEwMjk4YjQ5MGQ1ZWRj YzBmMjQwHhcNMjUxMjE1MjEwMDMxWhcNMjUxMjE2MjEwMDMxWjAzMTEwLwYDVQQD Eyg4ODZiY2I3MWQzYWIyZTVmNzliYjllMzY2MjhlNDUyZDE1YzU5NWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhTHRQ8R4GkFuTy+2NUY41Tmb7Y9 1V9xyDNU+mvfUhbnURq+PSWx3l1can7eKVKIQz/Lzcp8i8q+FYKKvJeZkhNGdXDF Y78Wk+kkhKtv5NP/Hxd46ph2HhgpkrxqId400Lk+TOD0xROQhkzDP1BtctrpjKLK tSdYWWRBmqVych6YXmn7jo02Jbm8LUViIwxEj21HZRxwi7/7PCrad2ZeXuIa6Q3r Qh3PTaDnO9EsSb/J1vn8K1NOcBtC6Petf/zGzYtsV6uy+3EhtDnlwVOH2Z6qA7yv cf4CI881/yYkHxR0V74rQpxEE43BRyE6uOWlEqYDQc7HgVnhxi7VeebYqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhry3HTqy5febueNmKORS0VxZXfMB8GA1UdIwQY MBaAFAwgJmPehSxwYP3qApi0kNXtzA8kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENBbVk5NkZMSEJnX2VvQ21MU1ExZTNNRHlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wOTEwZTYtYzA3NC00MGQwLWI3ODkt YTE3ODA0NDM5ODk1LzEvRENBbVk5NkZMSEJnX2VvQ21MU1ExZTNNRHlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8wOTEwZTYtYzA3NC00MGQwLWI3ODktYTE3ODA0NDM5ODk1 LzEvRENBbVk5NkZMSEJnX2VvQ21MU1ExZTNNRHlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyje1lZhv LTLRmNMbuvCYNg2E5bXrbGyT4v3sJAK5BWWhfRkLdrL7TB/zZcil1msTwaxmdPwk 2JcJNPr8Gouz2C7a9VIvINJsDYJ3mEERCc/wCtHyTgaJv0lxPFzM8xlKvQABXjty pnV+iGMWbZ6tn5SSYjrwx8CvSpAbQsGsz25DuNgMih3EwvTfhXRxzsg3ymDPVvoW Y5zJzCXQ5IE60HyOfLhVbM7cxUXtyOiB7tETEVTcXrHic17Fj7+npSk9JxJzZeQS uAcNxBF7gAAgU7H6II+CUncgekzAqfZMf/gCGBMTjWAexdf8SOjysL/GvyDPalj3 2KD/XIJmSoXlfA== -----END CERTIFICATE-----Generated at Tue Dec 16 04:45:28 2025 by rpki-client