This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft File: dmcCNs0OA4aEozGUvefUuVrcZvc.mft (raw, json) Hash identifier: nbYRqGgqd25xrc6mPZOlSOYOYNRhYgkaLJYe0XqvNdc= Subject key identifier: 15:89:BE:88:FD:3D:0E:BC:41:C5:D3:73:21:26:27:2C:E3:C6:04:AF Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7 Certificate serial: 019B39EAD61A35332F7DFA761F38B9536BD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft Manifest number: 0F71 Signing time: Sat 20 Dec 2025 04:00:50 +0000 Manifest this update: Sat 20 Dec 2025 04:00:50 +0000 Manifest next update: Sun 21 Dec 2025 04:00:50 +0000 Files and hashes: 1: 3aGZcGWIs_eMlaFgLeBFbbKoNDQ.roa (hash: TFkuucN4UO3fh05NKBE3AbRffgRyYyePtYVgR0x7i+c=) 2: VxpPmjuX-xDJQCZmjad0BLzyqaQ.roa (hash: scQCA4WB1SH7VqMcUYx00R9CCsEQG1/Vi2LqLMj0V5E=) 3: YX6TdSLrfQISm2CR9jSMfrWeHto.roa (hash: thQkWvF4nLGlemNm7VcbLLVFDEUCum3r3Jy72QYLpXE=) 4: _EShF3PxGOJE5SZRfQySmvZg1kg.roa (hash: Fv1ecycEXgD6srZq4/0n/myzWwH/n6NbHepwG+mEp58=) 5: bH5bF_8mxPt1PuFzjL55ZoPT9u4.roa (hash: 61i/OUkjcDYfRXVmFio9adx3zcL9HFjQz1PgrGFxL9g=) 6: dmcCNs0OA4aEozGUvefUuVrcZvc.crl (hash: 6w36wgb4jiIhrTGcpmJikbFyHhZLTZuN7lOKkmlr3Ac=) 7: fMMGd3zJDjytcmyhyCVTpEhw1kU.roa (hash: 8DAdzVawL9mvA1o+Hlejvqrd7KSs7UEw/UCVjERrvbY=) 8: oWAjJbQBfxx3e4wlWi3kdlBilW0.roa (hash: PNb++l6AXajvtQHdYlCiHKFX324+t6SV7D+grw9N748=) 9: w0j3028GTs0XxpRerIzPD_MNXeU.roa (hash: lraXgIU7h+zQb9zRqFGVcDbnN4LuLIfjAyKAE8V60jM=) 10: xHUWp-IhZmk_U8CwKK_n9BGOcbI.roa (hash: 2RFD3xexMzAEEdEVrKN657pvNZq2T3uOKQ0MCXLlbXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:d6:1a:35:33:2f:7d:fa:76:1f:38:b9:53:6b:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7 Validity Not Before: Dec 20 04:00:50 2025 GMT Not After : Dec 21 04:00:50 2025 GMT Subject: CN=1589be88fd3d0ebc41c5d3732126272ce3c604af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3e:45:b6:73:96:16:c2:f3:21:74:4f:5a:61: 40:69:c3:31:4a:e2:cb:92:82:44:ed:7d:3f:10:b6: 92:81:64:cc:c2:76:78:35:84:f8:e7:86:b4:ae:99: 1b:ec:d1:9a:ea:35:90:2b:58:ae:6d:c7:2d:37:d4: 20:1b:b3:b1:f3:c5:4b:c1:3d:bf:81:f7:a9:9e:b6: 39:30:bb:ce:3a:a9:5c:e6:1e:55:1f:05:d2:e6:80: e9:fe:d2:3f:28:86:52:43:f1:40:90:b9:b7:f7:91: cf:ea:ad:2f:18:77:ea:64:1c:46:aa:52:91:96:22: 14:ef:07:52:41:46:2d:87:c0:d5:89:e0:94:82:5c: 12:67:92:6a:79:94:e6:5f:1c:ef:ab:3b:fe:61:e3: b4:8a:70:dc:0c:0e:4e:0c:95:c4:10:c1:3a:86:fe: 48:f3:ce:c5:9b:a7:53:73:fc:3c:29:36:07:33:18: 5c:cc:7c:b1:3d:22:44:54:da:0d:0e:21:42:e1:37: aa:74:cf:7d:35:d9:25:c0:eb:dd:cf:fc:bf:6e:04: 0f:77:d8:6a:54:b7:07:bb:a9:dd:39:5e:f1:44:c5: 59:b6:7b:71:83:37:16:7b:fc:8c:63:13:34:c6:98: 9f:ef:93:ad:74:d7:a8:7b:44:0b:87:2b:ee:b7:6a: 68:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:89:BE:88:FD:3D:0E:BC:41:C5:D3:73:21:26:27:2C:E3:C6:04:AF X509v3 Authority Key Identifier: keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:0c:6a:81:ee:b3:4f:6b:d8:80:2c:9d:a0:21:36:55:d6:0f: b8:c2:9a:ce:01:22:91:70:60:f0:c7:10:de:de:93:de:a9:8c: cc:3e:f6:2f:75:fe:1f:a0:a1:44:75:fe:2c:db:08:9b:1d:a8: 05:ed:f4:66:37:72:4e:0e:95:72:28:76:12:11:ce:d4:bc:79: 69:3c:8e:e3:28:89:5f:84:6e:60:93:7f:c6:fd:68:c3:e7:92: f9:ca:8d:53:96:f2:3c:3f:4e:53:6a:a9:32:73:56:1c:35:6a: 10:67:90:41:89:23:f3:c9:31:fc:e9:7f:8b:6e:fd:56:22:0a: 69:45:32:3d:fa:b0:43:ae:1e:9e:c4:c8:8b:30:a3:46:9f:fd: 7d:c8:10:a7:c0:8a:71:da:66:8b:fa:7c:27:30:72:95:ae:25: 9d:8f:64:3b:d3:71:4a:51:a1:5e:dc:73:a7:9b:b0:33:a4:79: ba:12:80:21:3a:de:2d:d6:9c:e7:9b:1a:7a:ff:85:39:b3:74: 3d:a5:f2:22:b1:e8:e8:48:8a:c6:34:47:c6:07:bf:92:89:de: e8:f3:9c:b0:e1:29:cd:af:10:a2:dd:85:5e:1d:60:30:b9:99: 6a:15:c3:a1:b6:f3:1b:f7:eb:c1:10:6f:bf:33:d2:62:46:e0: 48:5d:d0:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56tYaNTMvffp2Hzi5U2vTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk YzY2ZjcwHhcNMjUxMjIwMDQwMDUwWhcNMjUxMjIxMDQwMDUwWjAzMTEwLwYDVQQD EygxNTg5YmU4OGZkM2QwZWJjNDFjNWQzNzMyMTI2MjcyY2UzYzYwNGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyD5FtnOWFsLzIXRPWmFAacMxSuLL koJE7X0/ELaSgWTMwnZ4NYT454a0rpkb7NGa6jWQK1iubcctN9QgG7Ox88VLwT2/ gfepnrY5MLvOOqlc5h5VHwXS5oDp/tI/KIZSQ/FAkLm395HP6q0vGHfqZBxGqlKR liIU7wdSQUYth8DVieCUglwSZ5JqeZTmXxzvqzv+YeO0inDcDA5ODJXEEME6hv5I 887Fm6dTc/w8KTYHMxhczHyxPSJEVNoNDiFC4TeqdM99NdklwOvdz/y/bgQPd9hq VLcHu6ndOV7xRMVZtntxgzcWe/yMYxM0xpif75OtdNeoe0QLhyvut2poYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBWJvoj9PQ68QcXTcyEmJyzjxgSvMB8GA1UdIwQY MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt YmE0ZmMyMzQ2ODNlLzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkwxqge6z T2vYgCydoCE2VdYPuMKazgEikXBg8McQ3t6T3qmMzD72L3X+H6ChRHX+LNsImx2o Be30ZjdyTg6Vcih2EhHO1Lx5aTyO4yiJX4RuYJN/xv1ow+eS+cqNU5byPD9OU2qp MnNWHDVqEGeQQYkj88kx/Ol/i279ViIKaUUyPfqwQ64ensTIizCjRp/9fcgQp8CK cdpmi/p8JzByla4lnY9kO9NxSlGhXtxzp5uwM6R5uhKAITreLdac55saev+FObN0 PaXyIrHo6EiKxjRHxge/kone6POcsOEpza8Qot2FXh1gMLmZahXDobbzG/frwRBv vzPSYkbgSF3QoQ== -----END CERTIFICATE-----Generated at Sat Dec 20 09:46:15 2025 by rpki-client