This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft File: DMgShJHbEyzPzYKt5wDeswayFho.mft (raw, json) Hash identifier: xYNKcgTO3RVAojP3Bc6Th7pZdeUP/RaKDJ44/6S7LQM= Subject key identifier: 89:D4:E8:56:F9:F2:0E:84:E9:2B:05:65:F9:E8:0D:10:D4:19:75:13 Authority key identifier: 0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A Certificate issuer: /CN=0cc8128491db132ccfcd82ade700deb306b2161a Certificate serial: 019B435C44208D866FDEFCB499B8F5D72F04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 00:01:18 +0000 Manifest this update: Mon 22 Dec 2025 00:01:18 +0000 Manifest next update: Tue 23 Dec 2025 00:01:18 +0000 Files and hashes: 1: DMgShJHbEyzPzYKt5wDeswayFho.crl (hash: aNqaMqTeQAcoh9gLCoS4fKEs3yesQpoZ+x4cF4IAC1o=) 2: y_bNAAFyln0l2OAbHxvZF5RByIA.roa (hash: V4mHpVmDU1it/2lH0Vz4ctCIXcFfTQBDa792VzELUIU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5c:44:20:8d:86:6f:de:fc:b4:99:b8:f5:d7:2f:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cc8128491db132ccfcd82ade700deb306b2161a Validity Not Before: Dec 22 00:01:18 2025 GMT Not After : Dec 23 00:01:18 2025 GMT Subject: CN=89d4e856f9f20e84e92b0565f9e80d10d4197513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:91:9b:e8:7a:47:48:09:ef:c3:58:77:33:31: ce:e2:11:00:14:03:58:87:7a:1c:7f:57:e3:71:08: b3:13:a6:c3:1e:23:51:ca:74:ec:54:57:b0:76:06: d6:a7:5d:06:e4:d6:fb:aa:ad:36:f6:2c:b9:3f:20: 72:e5:69:47:14:e4:5a:ec:00:61:b6:de:18:9a:01: 77:ea:f3:35:68:6c:6a:38:c5:cc:c7:5f:ca:f0:48: 0e:1c:10:c8:e4:4e:19:d0:04:a7:19:92:5d:a3:03: 37:26:4c:46:57:15:11:b6:8c:75:c2:83:84:1b:bf: 77:80:6d:bc:f4:40:e1:e1:6a:0a:67:ee:a5:43:2b: 70:45:9a:d8:cf:19:0d:0c:7e:40:10:50:c6:5b:6a: 3f:f6:4d:0f:6c:cc:11:d4:d9:e5:4b:7e:62:90:ac: ff:f0:09:3e:65:b5:84:36:09:6a:87:fb:5f:2a:f6: 72:c4:18:c5:6d:c7:d9:4c:a8:c9:59:0f:5d:aa:ad: 3e:53:63:ea:d0:d0:cc:13:85:c2:a5:b1:a8:26:57: ae:9e:74:2b:46:9f:c4:9f:98:ba:dd:3c:e7:cb:82: 8a:4a:72:c8:50:d8:fa:b5:65:31:52:63:d8:b9:69: c3:18:af:09:10:d6:90:9c:83:0b:2a:db:cb:4b:65: 38:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D4:E8:56:F9:F2:0E:84:E9:2B:05:65:F9:E8:0D:10:D4:19:75:13 X509v3 Authority Key Identifier: keyid:0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:f1:5d:33:32:e7:1b:33:b4:6d:d1:41:0c:14:91:73:13:93: 24:7d:a9:d4:e3:2d:10:21:57:1b:a4:fa:93:14:d6:d3:83:25: 83:28:52:29:73:9a:f6:14:7c:83:cd:dc:57:26:36:96:d1:82: 30:ad:8e:3a:f1:fb:81:dc:19:b5:a9:be:37:e3:89:6c:38:a0: 25:7a:e0:b7:8d:ae:7c:1e:3b:b4:37:24:0e:7d:06:9e:74:58: 00:c3:24:da:63:bd:66:f6:ff:8c:21:c6:09:11:52:06:bf:59: 4f:69:40:f4:aa:ff:78:2b:e9:84:a7:67:4b:ba:89:91:9c:76: e5:bf:63:25:0f:62:24:07:79:f6:83:ec:0d:ea:6b:cb:5f:28: fc:88:76:d6:13:0c:53:0b:91:e2:a7:f5:83:ca:4d:ff:04:fc: 48:b8:98:3c:de:50:ba:3c:17:ad:00:b7:8f:d6:5f:b8:79:e5: bb:7d:b0:76:dd:bb:58:ca:9c:f2:76:1b:2d:87:59:18:3b:b5: e1:4f:73:e1:30:01:87:c9:30:d7:fd:61:48:d1:d0:2a:aa:4c: 8d:05:e1:b0:31:e9:1b:38:5a:90:e5:13:ad:21:67:b8:c5:7f: e4:d0:96:20:e3:f1:62:e9:7d:38:b7:25:6e:6d:76:45:a7:b2: 01:62:7c:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDXEQgjYZv3vy0mbj11y8EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjYzgxMjg0OTFkYjEzMmNjZmNkODJhZGU3MDBkZWIzMDZi MjE2MWEwHhcNMjUxMjIyMDAwMTE4WhcNMjUxMjIzMDAwMTE4WjAzMTEwLwYDVQQD Eyg4OWQ0ZTg1NmY5ZjIwZTg0ZTkyYjA1NjVmOWU4MGQxMGQ0MTk3NTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZGb6HpHSAnvw1h3MzHO4hEAFANY h3ocf1fjcQizE6bDHiNRynTsVFewdgbWp10G5Nb7qq029iy5PyBy5WlHFORa7ABh tt4YmgF36vM1aGxqOMXMx1/K8EgOHBDI5E4Z0ASnGZJdowM3JkxGVxURtox1woOE G793gG289EDh4WoKZ+6lQytwRZrYzxkNDH5AEFDGW2o/9k0PbMwR1NnlS35ikKz/ 8Ak+ZbWENglqh/tfKvZyxBjFbcfZTKjJWQ9dqq0+U2Pq0NDME4XCpbGoJleunnQr Rp/En5i63Tzny4KKSnLIUNj6tWUxUmPYuWnDGK8JENaQnIMLKtvLS2U4ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFInU6Fb58g6E6SsFZfnoDRDUGXUTMB8GA1UdIwQY MBaAFAzIEoSR2xMsz82CrecA3rMGshYaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE1nU2hKSGJFeXpQellLdDV3RGVzd2F5RmhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yYzNmNTMtMWJhYi00ZDMyLTgzODAt ZDU5MTA4YjU3MjE0LzEvRE1nU2hKSGJFeXpQellLdDV3RGVzd2F5RmhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8yYzNmNTMtMWJhYi00ZDMyLTgzODAtZDU5MTA4YjU3MjE0 LzEvRE1nU2hKSGJFeXpQellLdDV3RGVzd2F5RmhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPFdMzLn GzO0bdFBDBSRcxOTJH2p1OMtECFXG6T6kxTW04MlgyhSKXOa9hR8g83cVyY2ltGC MK2OOvH7gdwZtam+N+OJbDigJXrgt42ufB47tDckDn0GnnRYAMMk2mO9Zvb/jCHG CRFSBr9ZT2lA9Kr/eCvphKdnS7qJkZx25b9jJQ9iJAd59oPsDepry18o/Ih21hMM UwuR4qf1g8pN/wT8SLiYPN5QujwXrQC3j9ZfuHnlu32wdt27WMqc8nYbLYdZGDu1 4U9z4TABh8kw1/1hSNHQKqpMjQXhsDHpGzhakOUTrSFnuMV/5NCWIOPxYul9OLcl bm12RaeyAWJ8kA== -----END CERTIFICATE-----Generated at Mon Dec 22 06:29:36 2025 by rpki-client