This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft File: DMgdB0NX3l0y-KZc2e56WFvz7G8.mft (raw, json) Hash identifier: hkA9Zu3X2+fHT1v8UxsjzC6wdiPYV244b6U6ZaS7dZs= Subject key identifier: 0B:D9:87:E2:B3:C8:62:C5:99:FA:33:04:2E:ED:50:B6:EE:AD:E6:13 Authority key identifier: 0C:C8:1D:07:43:57:DE:5D:32:F8:A6:5C:D9:EE:7A:58:5B:F3:EC:6F Certificate issuer: /CN=0cc81d074357de5d32f8a65cd9ee7a585bf3ec6f Certificate serial: 019B59ACC201BE2E610B3C812D730B83D4AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 08:00:52 +0000 Manifest this update: Fri 26 Dec 2025 08:00:52 +0000 Manifest next update: Sat 27 Dec 2025 08:00:52 +0000 Files and hashes: 1: DMgdB0NX3l0y-KZc2e56WFvz7G8.crl (hash: LBBwrjsrMc183Q1uv0dxdU5kK8Vf/ykWZMh36dBufQo=) 2: SUwSO2Fs2FjhvtnhOTiiq1oGzWM.roa (hash: olDxnIOko1Itz17Pa+h1ZPnFbbCInWHBCOkMHLf/KiI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:c2:01:be:2e:61:0b:3c:81:2d:73:0b:83:d4:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cc81d074357de5d32f8a65cd9ee7a585bf3ec6f Validity Not Before: Dec 26 08:00:52 2025 GMT Not After : Dec 27 08:00:52 2025 GMT Subject: CN=0bd987e2b3c862c599fa33042eed50b6eeade613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2e:70:15:ca:7b:f8:3f:cc:5c:d6:6f:da:af: 64:28:73:ce:c8:46:ff:1b:e5:9f:03:f9:a2:85:0c: 4d:b4:75:46:10:96:ef:43:62:8f:6b:f6:cd:40:4f: 06:6c:db:c9:88:81:d4:f6:91:d1:b1:39:22:b9:52: 14:48:9c:56:b6:4a:b5:c2:53:ec:06:24:59:2a:81: 77:cb:38:f5:89:07:da:d1:b3:d7:22:89:4b:3a:09: 22:5d:78:6e:cd:73:8e:e1:73:b8:4e:5b:ee:a0:1e: ac:e2:b7:5b:6a:6a:e3:ff:78:84:8c:3c:28:e8:44: 44:b2:0d:5e:86:5e:b4:d5:45:5c:83:2a:5d:1d:02: 53:56:06:a7:fb:0e:24:cb:1f:df:03:62:ae:f3:3a: e5:1d:58:b1:74:4c:8e:a6:32:47:0d:a0:94:d3:cf: 4b:d9:7a:a1:92:98:1b:73:da:1e:ab:81:fb:64:90: 38:45:e6:cf:0e:8c:3f:34:3c:1f:b8:15:36:5b:19: 16:bf:96:c5:35:4d:b6:a4:92:9b:d8:85:83:e5:09: 05:16:7a:bd:3d:c8:0c:79:28:da:2d:89:55:7b:cb: 39:67:ae:8a:2d:2e:31:2d:31:72:68:c8:be:3a:3d: 35:c2:4b:ca:c3:01:9c:c5:6f:7a:5f:cf:67:55:99: b4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D9:87:E2:B3:C8:62:C5:99:FA:33:04:2E:ED:50:B6:EE:AD:E6:13 X509v3 Authority Key Identifier: keyid:0C:C8:1D:07:43:57:DE:5D:32:F8:A6:5C:D9:EE:7A:58:5B:F3:EC:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:e1:7a:11:92:20:d1:b1:b8:6e:d3:48:ef:72:bd:c0:28:fc: 3d:a6:dd:0b:5c:a6:87:97:ac:40:79:c6:c3:6e:b4:70:c5:e1: 9c:15:bc:cb:27:06:e3:44:2c:2e:17:fa:b6:98:da:3a:bd:7f: a8:37:5b:7c:fc:e5:5c:9f:49:27:a8:ba:d0:88:0f:4a:30:b1: bd:10:7d:c0:cb:7b:c2:4c:a8:ba:65:0a:71:03:30:a2:82:41: b2:0f:5a:72:4e:ae:52:52:22:cb:50:b9:09:13:76:a2:95:8a: 10:51:53:30:d4:d9:04:91:86:27:82:01:b9:d4:89:da:d0:4f: 7b:71:65:26:60:47:6d:2d:79:5f:16:a1:46:ee:63:83:09:55: 4b:92:a1:de:3a:7b:4f:d5:68:4d:15:2d:24:7e:21:89:da:f6: 79:5d:33:dd:ca:cd:b4:1b:71:8f:24:08:ec:5c:04:80:7a:9f: ea:a5:e6:3b:58:19:5c:a6:00:c3:54:5d:3d:4e:90:c5:ea:56: 31:f1:70:22:24:57:34:51:20:4a:15:7c:2f:20:c6:77:7f:b9: 03:f1:b5:d5:86:88:94:8f:d5:52:e5:43:4e:75:d3:b0:cf:a8: 03:32:6a:dc:14:e8:f9:b5:df:79:ac:5b:03:63:80:95:6c:09: 66:36:3d:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrMIBvi5hCzyBLXMLg9SvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjYzgxZDA3NDM1N2RlNWQzMmY4YTY1Y2Q5ZWU3YTU4NWJm M2VjNmYwHhcNMjUxMjI2MDgwMDUyWhcNMjUxMjI3MDgwMDUyWjAzMTEwLwYDVQQD EygwYmQ5ODdlMmIzYzg2MmM1OTlmYTMzMDQyZWVkNTBiNmVlYWRlNjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC5wFcp7+D/MXNZv2q9kKHPOyEb/ G+WfA/mihQxNtHVGEJbvQ2KPa/bNQE8GbNvJiIHU9pHRsTkiuVIUSJxWtkq1wlPs BiRZKoF3yzj1iQfa0bPXIolLOgkiXXhuzXOO4XO4TlvuoB6s4rdbamrj/3iEjDwo 6EREsg1ehl601UVcgypdHQJTVgan+w4kyx/fA2Ku8zrlHVixdEyOpjJHDaCU089L 2Xqhkpgbc9oeq4H7ZJA4RebPDow/NDwfuBU2WxkWv5bFNU22pJKb2IWD5QkFFnq9 PcgMeSjaLYlVe8s5Z66KLS4xLTFyaMi+Oj01wkvKwwGcxW96X89nVZm0GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvZh+KzyGLFmfozBC7tULbureYTMB8GA1UdIwQY MBaAFAzIHQdDV95dMvimXNnuelhb8+xvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE1nZEIwTlgzbDB5LUtaYzJlNTZXRnZ6N0c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9iMmQ2MDQtZGRmYi00ZWZmLWI0OWEt ZGY1Y2U1NmU3YjRiLzEvRE1nZEIwTlgzbDB5LUtaYzJlNTZXRnZ6N0c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9iMmQ2MDQtZGRmYi00ZWZmLWI0OWEtZGY1Y2U1NmU3YjRi LzEvRE1nZEIwTlgzbDB5LUtaYzJlNTZXRnZ6N0c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgOF6EZIg 0bG4btNI73K9wCj8PabdC1ymh5esQHnGw260cMXhnBW8yycG40QsLhf6tpjaOr1/ qDdbfPzlXJ9JJ6i60IgPSjCxvRB9wMt7wkyoumUKcQMwooJBsg9ack6uUlIiy1C5 CRN2opWKEFFTMNTZBJGGJ4IBudSJ2tBPe3FlJmBHbS15XxahRu5jgwlVS5Kh3jp7 T9VoTRUtJH4hidr2eV0z3crNtBtxjyQI7FwEgHqf6qXmO1gZXKYAw1RdPU6QxepW MfFwIiRXNFEgShV8LyDGd3+5A/G11YaIlI/VUuVDTnXTsM+oAzJq3BTo+bXfeaxb A2OAlWwJZjY9Aw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:04 2025 by rpki-client