This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft File: DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft (raw, json) Hash identifier: PfhMhaksyLOEzTHUqvJWdtXHyecLRXPNecF5r0NhxP0= Subject key identifier: 7D:98:59:43:A4:00:43:2C:21:78:B0:69:FE:F3:47:84:05:BD:7F:2A Authority key identifier: 0C:CC:36:02:8D:00:58:10:CA:BA:24:61:4B:D6:07:31:DD:49:50:33 Certificate issuer: /CN=0ccc36028d005810caba24614bd60731dd495033 Certificate serial: 019B39EAFF9CA9D119BF945E737F755FAFEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft Manifest number: 02F8 Signing time: Sat 20 Dec 2025 04:01:00 +0000 Manifest this update: Sat 20 Dec 2025 04:01:00 +0000 Manifest next update: Sun 21 Dec 2025 04:01:00 +0000 Files and hashes: 1: DMw2Ao0AWBDKuiRhS9YHMd1JUDM.crl (hash: t4WVDaMp9f8z+/CxoJgZXxbm3kOxdI0LxuDI18Ldxtc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft rsync://rpki.ripe.net/repository/DEFAULT/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:ff:9c:a9:d1:19:bf:94:5e:73:7f:75:5f:af:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ccc36028d005810caba24614bd60731dd495033 Validity Not Before: Dec 20 04:01:00 2025 GMT Not After : Dec 21 04:01:00 2025 GMT Subject: CN=7d985943a400432c2178b069fef3478405bd7f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ff:57:7e:38:ac:97:b3:c9:10:3f:4b:ac:44: 9b:a3:01:ba:ff:4b:f7:0f:50:03:65:39:8c:4c:94: ee:e5:a8:94:8e:d0:5a:1d:7b:f1:8b:f1:f4:00:60: bd:59:a7:9c:7b:41:6f:4c:fd:1f:67:0a:87:9a:b9: c7:e9:0b:b2:80:75:84:d0:fc:80:6b:b4:97:60:c6: 4b:93:aa:31:45:a7:a8:ec:76:01:86:18:79:a0:53: 75:e6:f0:39:2b:e0:9e:7a:2e:9e:68:c7:7f:35:15: 36:12:4b:43:e1:6e:6f:40:7b:6f:10:0b:dd:75:ea: 2f:ef:ec:06:53:8a:ba:90:74:8e:7a:e3:d3:cb:c9: 38:a2:55:41:a2:e7:bc:7d:80:c8:5a:96:74:1f:c4: 2e:71:7e:ee:28:0c:97:2a:1d:b6:b8:06:68:12:40: f1:7d:21:94:75:26:67:b6:74:ac:2f:84:8f:58:ef: a8:47:8c:5b:aa:5c:7c:21:48:66:a9:c0:d1:92:8e: bf:3f:30:fd:8e:81:81:ef:9c:39:06:65:f5:d9:b5: 53:75:57:e5:df:83:a8:b9:db:90:d9:e2:86:4d:06: a2:e2:da:f3:c9:fc:28:97:90:22:8f:5c:0f:a1:57: 6a:7f:e8:c6:5b:67:31:41:6e:97:5f:45:19:a6:bf: 5f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:98:59:43:A4:00:43:2C:21:78:B0:69:FE:F3:47:84:05:BD:7F:2A X509v3 Authority Key Identifier: keyid:0C:CC:36:02:8D:00:58:10:CA:BA:24:61:4B:D6:07:31:DD:49:50:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:0f:55:95:f9:c5:5e:a2:ab:43:51:3d:b0:0f:1f:f8:2d:4d: 07:09:df:89:af:a3:33:cd:1c:13:b4:e3:6f:7c:7c:c2:e9:d2: 26:f6:34:77:ad:98:02:3c:1b:4d:ef:9d:37:9c:37:4f:80:37: 1d:cb:4b:92:99:4d:6b:88:af:92:c5:34:6d:c5:52:47:b8:d1: e2:27:62:11:1b:0c:97:ce:9d:9d:31:53:f7:bf:a9:39:25:66: 96:6d:9c:cb:40:ba:25:ae:5b:f6:2d:6c:33:cd:65:d6:c2:d9: 9e:f1:7b:7d:89:ff:b6:1c:bd:64:ac:58:2a:9b:c6:37:3a:1e: 0e:db:ad:da:39:bd:f1:ce:1d:44:ce:7b:c0:25:a0:57:0d:73: fb:ea:05:cc:63:a2:f5:31:53:4b:6d:8b:f8:92:63:18:ed:1b: aa:74:fd:1a:56:53:7d:70:e1:b6:bc:c9:13:2a:60:33:8d:4e: 99:ab:8e:c6:81:ad:be:82:c6:b2:d3:12:14:e8:60:64:5f:08: c3:97:62:a8:79:75:52:cc:c5:cc:da:3b:e0:af:31:59:b8:c8: 55:6f:5a:f4:3f:6f:d0:82:28:64:4a:99:5b:74:39:82:64:f7: cc:93:8f:b3:14:2e:f4:74:3b:c9:68:0b:9b:f1:49:f6:0d:83: 51:ef:e8:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56v+cqdEZv5Rec391X6/uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjY2MzNjAyOGQwMDU4MTBjYWJhMjQ2MTRiZDYwNzMxZGQ0 OTUwMzMwHhcNMjUxMjIwMDQwMTAwWhcNMjUxMjIxMDQwMTAwWjAzMTEwLwYDVQQD Eyg3ZDk4NTk0M2E0MDA0MzJjMjE3OGIwNjlmZWYzNDc4NDA1YmQ3ZjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhv9Xfjisl7PJED9LrESbowG6/0v3 D1ADZTmMTJTu5aiUjtBaHXvxi/H0AGC9Waece0FvTP0fZwqHmrnH6QuygHWE0PyA a7SXYMZLk6oxRaeo7HYBhhh5oFN15vA5K+Ceei6eaMd/NRU2EktD4W5vQHtvEAvd deov7+wGU4q6kHSOeuPTy8k4olVBoue8fYDIWpZ0H8QucX7uKAyXKh22uAZoEkDx fSGUdSZntnSsL4SPWO+oR4xbqlx8IUhmqcDRko6/PzD9joGB75w5BmX12bVTdVfl 34OouduQ2eKGTQai4trzyfwol5Aij1wPoVdqf+jGW2cxQW6XX0UZpr9f8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH2YWUOkAEMsIXiwaf7zR4QFvX8qMB8GA1UdIwQY MBaAFAzMNgKNAFgQyrokYUvWBzHdSVAzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE13MkFvMEFXQkRLdWlSaFM5WUhNZDFKVURNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8wZmM5MDAtN2M0OC00YTUxLTgzZmUt ZGNmM2ExYzI1Y2YzLzEvRE13MkFvMEFXQkRLdWlSaFM5WUhNZDFKVURNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8wZmM5MDAtN2M0OC00YTUxLTgzZmUtZGNmM2ExYzI1Y2Yz LzEvRE13MkFvMEFXQkRLdWlSaFM5WUhNZDFKVURNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADw9VlfnF XqKrQ1E9sA8f+C1NBwnfia+jM80cE7Tjb3x8wunSJvY0d62YAjwbTe+dN5w3T4A3 HctLkplNa4ivksU0bcVSR7jR4idiERsMl86dnTFT97+pOSVmlm2cy0C6Ja5b9i1s M81l1sLZnvF7fYn/thy9ZKxYKpvGNzoeDtut2jm98c4dRM57wCWgVw1z++oFzGOi 9TFTS22L+JJjGO0bqnT9GlZTfXDhtrzJEypgM41OmauOxoGtvoLGstMSFOhgZF8I w5diqHl1UszFzNo74K8xWbjIVW9a9D9v0IIoZEqZW3Q5gmT3zJOPsxQu9HQ7yWgL m/FJ9g2DUe/oIg== -----END CERTIFICATE-----Generated at Sat Dec 20 10:21:47 2025 by rpki-client