This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft File: DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft (raw, json) Hash identifier: 06vds3alYVC3B9MtAeiGCMKm/il00IVpLzsR8lckEKo= Subject key identifier: 02:EE:95:24:BA:89:D1:93:4B:6B:0F:A2:1F:09:97:77:F6:20:88:2D Authority key identifier: 0D:93:02:D5:46:E0:68:C2:FD:76:77:D9:D5:20:0A:DD:36:C8:BC:D5 Certificate issuer: /CN=0d9302d546e068c2fd7677d9d5200add36c8bcd5 Certificate serial: 019B32316557CAE58672EA13B2E39FE3E9EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 16:00:56 +0000 Manifest this update: Thu 18 Dec 2025 16:00:56 +0000 Manifest next update: Fri 19 Dec 2025 16:00:56 +0000 Files and hashes: 1: 1-sk04SJKaJ6g1Y9khEpsLFas3Kk.roa (hash: XxZhRBWthERVmL3LKPQQh5B0868NCMjhs1tFs+3eMxM=) 2: 4QpvM3CE_nzBSqatuahpsYYH1qM.roa (hash: Qrg/EHEt9L0x/2vBVqdC/NUou31du+BoDTLXvsaFSGk=) 3: DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl (hash: eKs7UYEJ4IkPEdwpl2ttTB6TR6hUp4NOjO+hOL7D67M=) 4: OKvzKSdRprY6KmoCf5oHQIz_91A.roa (hash: c7CmyJe2kYuAmiLCH0rQuuU8EyGxHjQvlpZniPCLw0U=) 5: mHALm7hBq5s0140ybe8Xc1F8234.roa (hash: imdhLSNxS5EA5IBXEn3VpwdKjS6o+zDqUc/wlGF8Pzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:65:57:ca:e5:86:72:ea:13:b2:e3:9f:e3:e9:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d9302d546e068c2fd7677d9d5200add36c8bcd5 Validity Not Before: Dec 18 16:00:56 2025 GMT Not After : Dec 19 16:00:56 2025 GMT Subject: CN=02ee9524ba89d1934b6b0fa21f099777f620882d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:67:ae:34:56:bb:f9:2d:7a:78:f7:72:7c:f1: 62:4c:e4:05:a7:d8:ee:ec:19:c5:90:12:7c:87:cc: ed:38:2f:02:2c:52:ca:39:f3:c9:4c:f5:9a:f4:cc: 34:62:f1:dc:ce:1a:4f:5c:bf:32:16:9e:b7:0f:92: d2:8b:28:7c:f3:34:fe:35:d9:69:9d:18:ce:9a:49: ea:cb:2d:7a:12:53:29:ea:9f:12:48:92:cb:63:08: 3f:de:6a:27:95:41:3b:80:f8:3b:4e:b0:74:51:bb: e3:09:2d:02:00:73:8f:85:a1:a8:16:d9:18:1b:6b: 41:4d:48:89:52:df:07:2f:3f:21:10:b1:62:4f:2b: 04:3f:bc:38:c5:06:20:40:40:ea:1b:12:62:8c:62: 2e:bb:09:48:6f:85:6b:26:ad:4f:ac:37:bb:85:2d: 67:ff:32:22:27:e6:7d:51:41:b8:3a:14:d9:90:34: e9:d4:f7:7b:a1:79:ed:e8:fe:af:d9:6f:e6:1c:93: e7:99:f6:80:db:72:c9:be:cc:f1:81:8a:87:e4:c5: 9e:a6:66:a6:7e:b4:cc:e1:6e:08:0e:a3:97:c6:df: 0f:05:06:10:62:6b:dc:05:b1:61:54:b3:a8:ce:49: fb:11:0a:59:08:05:c3:6b:c3:a4:e8:dd:84:06:e9: 09:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:EE:95:24:BA:89:D1:93:4B:6B:0F:A2:1F:09:97:77:F6:20:88:2D X509v3 Authority Key Identifier: keyid:0D:93:02:D5:46:E0:68:C2:FD:76:77:D9:D5:20:0A:DD:36:C8:BC:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:ef:85:76:bb:0c:a9:c3:4e:a3:02:63:00:1a:2a:18:ce:2c: 1f:94:3d:d7:e9:40:5b:4b:97:9f:f9:d2:66:49:6c:4b:b7:af: 91:02:5b:1d:0b:c2:74:ec:7a:86:d2:0b:c2:2a:fd:52:8f:8f: 89:e7:6d:90:24:8d:d5:4b:06:84:25:1a:06:02:c8:4d:05:53: 97:cc:df:8e:3f:66:ba:a3:1c:c6:51:5f:74:64:97:f8:0d:02: 43:22:da:72:be:1d:89:1b:64:cd:d4:60:8b:76:bb:3c:20:8b: 36:e4:3b:65:51:1d:b8:04:50:9b:ca:66:f7:08:b7:42:27:e6: 63:91:c3:de:c9:54:c7:04:7d:81:93:c5:a6:7e:29:ba:90:7a: 93:71:b1:8f:5a:d6:ac:b1:04:51:ec:25:58:1c:aa:5d:ee:ff: b1:2d:8d:fe:1f:a1:95:c7:3e:53:d1:e6:43:e2:68:c7:42:53: 79:c4:7c:80:4f:58:28:21:84:5c:73:29:25:b3:52:89:f0:d9: 87:8b:d3:20:83:c1:72:e7:98:c8:98:59:e1:db:7d:da:7f:74: 08:24:32:c3:bb:58:0a:2e:e1:72:e9:2a:a0:3e:06:56:24:93: 4e:ee:e4:06:8c:66:26:89:05:48:98:22:a8:58:66:c5:c7:ff: 41:e8:de:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMWVXyuWGcuoTsuOf4+nuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkOTMwMmQ1NDZlMDY4YzJmZDc2NzdkOWQ1MjAwYWRkMzZj OGJjZDUwHhcNMjUxMjE4MTYwMDU2WhcNMjUxMjE5MTYwMDU2WjAzMTEwLwYDVQQD EygwMmVlOTUyNGJhODlkMTkzNGI2YjBmYTIxZjA5OTc3N2Y2MjA4ODJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWeuNFa7+S16ePdyfPFiTOQFp9ju 7BnFkBJ8h8ztOC8CLFLKOfPJTPWa9Mw0YvHczhpPXL8yFp63D5LSiyh88zT+Ndlp nRjOmknqyy16ElMp6p8SSJLLYwg/3monlUE7gPg7TrB0UbvjCS0CAHOPhaGoFtkY G2tBTUiJUt8HLz8hELFiTysEP7w4xQYgQEDqGxJijGIuuwlIb4VrJq1PrDe7hS1n /zIiJ+Z9UUG4OhTZkDTp1Pd7oXnt6P6v2W/mHJPnmfaA23LJvszxgYqH5MWepmam frTM4W4IDqOXxt8PBQYQYmvcBbFhVLOozkn7EQpZCAXDa8Ok6N2EBukJYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFALulSS6idGTS2sPoh8Jl3f2IIgtMB8GA1UdIwQY MBaAFA2TAtVG4GjC/XZ32dUgCt02yLzVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFpNQzFVYmdhTUw5ZG5mWjFTQUszVGJJdk5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8wMTAxNjEtYjg0MC00NDk3LWFmYmUt NGJlZjQzZDNmYjE3LzEvRFpNQzFVYmdhTUw5ZG5mWjFTQUszVGJJdk5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8wMTAxNjEtYjg0MC00NDk3LWFmYmUtNGJlZjQzZDNmYjE3 LzEvRFpNQzFVYmdhTUw5ZG5mWjFTQUszVGJJdk5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAre+FdrsM qcNOowJjABoqGM4sH5Q91+lAW0uXn/nSZklsS7evkQJbHQvCdOx6htILwir9Uo+P iedtkCSN1UsGhCUaBgLITQVTl8zfjj9muqMcxlFfdGSX+A0CQyLacr4diRtkzdRg i3a7PCCLNuQ7ZVEduARQm8pm9wi3QifmY5HD3slUxwR9gZPFpn4pupB6k3Gxj1rW rLEEUewlWByqXe7/sS2N/h+hlcc+U9HmQ+Jox0JTecR8gE9YKCGEXHMpJbNSifDZ h4vTIIPBcueYyJhZ4dt92n90CCQyw7tYCi7hcukqoD4GViSTTu7kBoxmJokFSJgi qFhmxcf/Qejehg== -----END CERTIFICATE-----Generated at Fri Dec 19 02:02:16 2025 by rpki-client