This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft File: DM6IMtApSYAfEZjp0TuxjtWDLQw.mft (raw, json) Hash identifier: Cf8ODGuCiZE9w4vu/SV738tUr6qk+oVCPM9qiz7yBRw= Subject key identifier: F3:8C:22:9E:47:3B:9E:6C:46:5F:95:A9:80:DA:0C:F4:51:29:F3:AC Authority key identifier: 0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C Certificate issuer: /CN=0cce8832d02949801f1198e9d13bb18ed5832d0c Certificate serial: 019B5A52006DD76745D2BFB257546CE6CE29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft Manifest number: 179C Signing time: Fri 26 Dec 2025 11:01:21 +0000 Manifest this update: Fri 26 Dec 2025 11:01:21 +0000 Manifest next update: Sat 27 Dec 2025 11:01:21 +0000 Files and hashes: 1: DM6IMtApSYAfEZjp0TuxjtWDLQw.crl (hash: CRsN/mM5nTNlPQYwuhBpTle7FxLdTTlZ+tKFe9Ff2Mo=) 2: Vj26lr7hbbX_fCXK7w3hESEooM0.roa (hash: gGIWp8lV6uKwDTfCg2XsPsepLLQekr1mHTq2CjmnAag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:52:00:6d:d7:67:45:d2:bf:b2:57:54:6c:e6:ce:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cce8832d02949801f1198e9d13bb18ed5832d0c Validity Not Before: Dec 26 11:01:21 2025 GMT Not After : Dec 27 11:01:21 2025 GMT Subject: CN=f38c229e473b9e6c465f95a980da0cf45129f3ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d9:b7:30:78:5e:a1:d1:10:a1:93:a0:42:e8: 2d:08:8b:b0:fd:69:8b:44:d0:70:e0:47:53:bb:f3: 88:03:2f:eb:3c:e1:a7:15:f0:e4:4c:71:94:2b:82: 09:62:2a:c1:b0:06:65:54:2e:bc:05:48:7d:69:9b: 2b:58:32:c6:84:35:47:10:fb:f6:35:f6:e9:9d:79: 13:ec:74:a5:22:a9:3c:28:b0:e2:7b:99:7c:7b:de: 1c:af:1f:b8:dd:25:c7:36:cf:b3:35:d8:d3:69:d2: c2:2c:bb:c7:5a:7d:4e:11:03:37:5a:c8:16:e6:0e: 94:b4:76:cb:24:77:e0:a4:32:24:6d:8d:15:8b:d4: 65:d3:c3:f6:b4:ec:b2:26:06:69:b1:35:7e:dc:46: fb:dd:91:d5:3c:3a:40:08:7c:80:2b:97:7a:9e:37: 9d:81:e0:e5:ba:f5:f8:1f:fa:c5:11:02:17:84:bb: 2e:a6:06:0d:ef:fb:5f:5c:57:79:99:3e:57:82:57: fb:53:4b:66:17:81:c4:73:9d:67:6b:93:f3:77:8e: cc:76:1c:95:28:e7:13:9d:97:73:c6:5b:ce:60:1c: 51:09:e9:a8:61:ba:1c:97:5d:de:b8:37:52:78:b5: de:cc:24:e0:3a:2c:68:4b:88:cf:fe:07:ff:be:60: 89:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:8C:22:9E:47:3B:9E:6C:46:5F:95:A9:80:DA:0C:F4:51:29:F3:AC X509v3 Authority Key Identifier: keyid:0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:cd:de:02:63:e3:1f:3b:7b:3f:30:21:f9:9c:9a:c1:5b:7d: 10:42:2e:34:d2:c6:28:91:78:f2:b0:79:c8:2b:c3:b7:ad:ca: cf:1e:4b:98:59:a7:3c:1f:b1:a6:af:4b:06:7f:34:1d:c6:fb: e2:a2:47:b3:f5:97:3b:3b:3d:bf:42:72:03:d0:6d:02:bb:50: 4c:35:92:c3:0c:43:53:a5:1c:8e:b0:5b:aa:42:5c:93:f4:5a: 64:c5:7c:28:64:18:9f:0f:e1:5d:b4:28:8f:aa:32:52:ec:24: 66:bc:d1:17:cd:57:c7:0c:ee:93:f7:57:ac:7e:91:cb:81:08: 93:21:99:b6:df:a1:9d:d3:99:76:25:1b:c8:21:f4:3f:da:94: bd:da:28:85:66:78:cb:6c:43:1b:14:e8:0e:5b:2a:38:af:74: e5:0e:58:fa:a5:c9:04:55:8f:7b:01:ac:65:25:2e:20:31:ad: e5:05:78:40:66:5f:1f:27:02:44:ae:4a:a6:a1:21:8b:07:67: 1c:65:4c:75:92:a2:47:63:77:28:d0:71:b9:0a:da:5d:8b:4a: 4c:fe:91:99:8f:6d:f9:c5:6c:d1:0a:1b:0e:ec:41:e9:5b:e5: f8:d0:1b:54:32:29:20:c4:ee:75:d3:7a:cc:ac:d5:ee:9e:bb: 63:2d:7b:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUgBt12dF0r+yV1Rs5s4pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjY2U4ODMyZDAyOTQ5ODAxZjExOThlOWQxM2JiMThlZDU4 MzJkMGMwHhcNMjUxMjI2MTEwMTIxWhcNMjUxMjI3MTEwMTIxWjAzMTEwLwYDVQQD EyhmMzhjMjI5ZTQ3M2I5ZTZjNDY1Zjk1YTk4MGRhMGNmNDUxMjlmM2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNm3MHheodEQoZOgQugtCIuw/WmL RNBw4EdTu/OIAy/rPOGnFfDkTHGUK4IJYirBsAZlVC68BUh9aZsrWDLGhDVHEPv2 NfbpnXkT7HSlIqk8KLDie5l8e94crx+43SXHNs+zNdjTadLCLLvHWn1OEQM3WsgW 5g6UtHbLJHfgpDIkbY0Vi9Rl08P2tOyyJgZpsTV+3Eb73ZHVPDpACHyAK5d6njed geDluvX4H/rFEQIXhLsupgYN7/tfXFd5mT5Xglf7U0tmF4HEc51na5Pzd47MdhyV KOcTnZdzxlvOYBxRCemoYbocl13euDdSeLXezCTgOixoS4jP/gf/vmCJEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPOMIp5HO55sRl+VqYDaDPRRKfOsMB8GA1UdIwQY MBaAFAzOiDLQKUmAHxGY6dE7sY7Vgy0MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE02SU10QXBTWUFmRVpqcDBUdXhqdFdETFF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC83NzdjMGEtY2E0NC00M2VjLWFiNzkt NWUwYWZlYzEzNmIxLzEvRE02SU10QXBTWUFmRVpqcDBUdXhqdFdETFF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC83NzdjMGEtY2E0NC00M2VjLWFiNzktNWUwYWZlYzEzNmIx LzEvRE02SU10QXBTWUFmRVpqcDBUdXhqdFdETFF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAds3eAmPj Hzt7PzAh+ZyawVt9EEIuNNLGKJF48rB5yCvDt63Kzx5LmFmnPB+xpq9LBn80Hcb7 4qJHs/WXOzs9v0JyA9BtArtQTDWSwwxDU6UcjrBbqkJck/RaZMV8KGQYnw/hXbQo j6oyUuwkZrzRF81Xxwzuk/dXrH6Ry4EIkyGZtt+hndOZdiUbyCH0P9qUvdoohWZ4 y2xDGxToDlsqOK905Q5Y+qXJBFWPewGsZSUuIDGt5QV4QGZfHycCRK5KpqEhiwdn HGVMdZKiR2N3KNBxuQraXYtKTP6RmY9t+cVs0QobDuxB6Vvl+NAbVDIpIMTuddN6 zKzV7p67Yy17ig== -----END CERTIFICATE-----Generated at Fri Dec 26 14:08:53 2025 by rpki-client