This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft File: DMgdB0NX3l0y-KZc2e56WFvz7G8.mft (raw, json) Hash identifier: TW5UDdWtTjFoKBDqd9+Ie9rgRUo9clKrs9jT8fjczrA= Subject key identifier: BC:D4:22:DA:85:89:23:74:D5:7B:15:81:49:44:1B:6F:F0:AF:B5:EE Authority key identifier: 0C:C8:1D:07:43:57:DE:5D:32:F8:A6:5C:D9:EE:7A:58:5B:F3:EC:6F Certificate issuer: /CN=0cc81d074357de5d32f8a65cd9ee7a585bf3ec6f Certificate serial: 019B2776CDE9A6BC36BA831042BADDE42B14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft Manifest number: 177D Signing time: Tue 16 Dec 2025 14:00:55 +0000 Manifest this update: Tue 16 Dec 2025 14:00:55 +0000 Manifest next update: Wed 17 Dec 2025 14:00:55 +0000 Files and hashes: 1: DMgdB0NX3l0y-KZc2e56WFvz7G8.crl (hash: dI1CvbM6KtFRw6Pr1EjRxPKSsaL2mi+9Y6fVqXH0Vs8=) 2: SUwSO2Fs2FjhvtnhOTiiq1oGzWM.roa (hash: olDxnIOko1Itz17Pa+h1ZPnFbbCInWHBCOkMHLf/KiI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:76:cd:e9:a6:bc:36:ba:83:10:42:ba:dd:e4:2b:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cc81d074357de5d32f8a65cd9ee7a585bf3ec6f Validity Not Before: Dec 16 14:00:55 2025 GMT Not After : Dec 17 14:00:55 2025 GMT Subject: CN=bcd422da85892374d57b158149441b6ff0afb5ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d2:72:28:e8:c8:f3:bf:1e:39:40:f2:ac:b1: ff:de:71:26:bb:4f:79:49:4c:96:8c:cc:3f:ef:cc: 6d:2f:39:66:0c:80:30:52:f0:ff:04:29:ef:a4:fe: db:e3:6b:88:71:b2:b8:cb:78:4b:49:c1:09:63:c2: 19:84:60:ad:bd:9e:32:e1:90:a5:f3:22:57:e9:a2: 69:a1:7c:43:40:ee:3a:c4:01:13:23:81:f3:ec:59: 36:fb:b0:f8:86:c5:70:b1:02:44:a2:4f:61:03:6e: 3f:59:cb:21:31:45:9b:f3:f7:d5:0e:d6:1b:b4:ca: 63:f1:88:12:69:ce:18:33:c7:1b:9d:f8:84:95:2d: 52:d8:b5:e9:47:98:39:c3:9f:b4:27:9a:94:b0:4a: 5b:30:0b:fc:33:23:04:1d:90:0d:a0:b9:b4:c9:c5: 6d:22:4d:13:e7:8d:c7:9d:4f:13:e3:44:06:b1:86: b0:05:5d:90:58:b6:28:c7:39:d6:36:dd:c2:f2:13: 96:6d:83:5e:05:5b:c6:9e:d7:11:2a:f8:63:17:10: 78:b5:93:a0:fd:0b:bf:a3:70:92:51:d5:b4:5e:cd: d4:0f:8e:63:3c:9a:b3:41:c9:0a:c9:62:42:3d:3d: 1c:73:17:92:d5:83:60:9b:7b:d4:a0:4c:3c:ee:52: f8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D4:22:DA:85:89:23:74:D5:7B:15:81:49:44:1B:6F:F0:AF:B5:EE X509v3 Authority Key Identifier: keyid:0C:C8:1D:07:43:57:DE:5D:32:F8:A6:5C:D9:EE:7A:58:5B:F3:EC:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:ed:94:b5:05:00:5a:0e:a2:75:f4:b6:37:7c:e2:4f:01:44: c0:52:95:fb:3b:78:94:d1:a0:4c:62:28:98:b2:17:bc:5c:bf: a6:ab:f8:2d:c4:7f:43:cf:ad:f0:64:2e:3d:26:e8:56:7d:1d: ac:97:8c:43:07:d7:ba:62:3f:c5:0b:2e:3f:dc:7e:b3:43:cc: e2:0d:4d:70:6a:a6:88:38:14:1b:38:fc:dc:83:48:63:47:45: ee:f0:8e:97:01:a4:69:2c:76:c2:b1:eb:56:5f:ca:e4:c9:f4: cd:c3:89:21:65:09:7b:ff:53:2b:cd:aa:73:ec:db:3a:69:35: 1d:f7:24:24:df:e4:b1:2e:09:e6:5d:f6:99:78:38:35:ed:b0: 52:64:56:9b:62:06:59:69:90:35:7f:e4:70:03:dd:0e:f1:36: 87:ef:e3:02:e2:6b:b7:59:b0:a2:6e:b4:9f:93:01:25:30:a1: 12:8f:0e:4e:a0:cd:8c:12:0b:08:43:c9:d2:b4:20:cf:f2:e3: 64:6d:21:07:c4:8b:84:3c:ec:12:92:0e:24:77:7d:95:a2:6b: 4d:17:e4:f4:ca:08:2b:32:65:be:2d:ff:47:ab:dd:0c:b0:e7: fd:7c:05:b5:39:93:9f:af:e7:59:c8:30:f5:15:6c:2b:7e:90: c1:11:c7:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnds3pprw2uoMQQrrd5CsUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjYzgxZDA3NDM1N2RlNWQzMmY4YTY1Y2Q5ZWU3YTU4NWJm M2VjNmYwHhcNMjUxMjE2MTQwMDU1WhcNMjUxMjE3MTQwMDU1WjAzMTEwLwYDVQQD EyhiY2Q0MjJkYTg1ODkyMzc0ZDU3YjE1ODE0OTQ0MWI2ZmYwYWZiNWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdJyKOjI878eOUDyrLH/3nEmu095 SUyWjMw/78xtLzlmDIAwUvD/BCnvpP7b42uIcbK4y3hLScEJY8IZhGCtvZ4y4ZCl 8yJX6aJpoXxDQO46xAETI4Hz7Fk2+7D4hsVwsQJEok9hA24/WcshMUWb8/fVDtYb tMpj8YgSac4YM8cbnfiElS1S2LXpR5g5w5+0J5qUsEpbMAv8MyMEHZANoLm0ycVt Ik0T543HnU8T40QGsYawBV2QWLYoxznWNt3C8hOWbYNeBVvGntcRKvhjFxB4tZOg /Qu/o3CSUdW0Xs3UD45jPJqzQckKyWJCPT0ccxeS1YNgm3vUoEw87lL4+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLzUItqFiSN01XsVgUlEG2/wr7XuMB8GA1UdIwQY MBaAFAzIHQdDV95dMvimXNnuelhb8+xvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE1nZEIwTlgzbDB5LUtaYzJlNTZXRnZ6N0c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9iMmQ2MDQtZGRmYi00ZWZmLWI0OWEt ZGY1Y2U1NmU3YjRiLzEvRE1nZEIwTlgzbDB5LUtaYzJlNTZXRnZ6N0c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9iMmQ2MDQtZGRmYi00ZWZmLWI0OWEtZGY1Y2U1NmU3YjRi LzEvRE1nZEIwTlgzbDB5LUtaYzJlNTZXRnZ6N0c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAke2UtQUA Wg6idfS2N3ziTwFEwFKV+zt4lNGgTGIomLIXvFy/pqv4LcR/Q8+t8GQuPSboVn0d rJeMQwfXumI/xQsuP9x+s0PM4g1NcGqmiDgUGzj83INIY0dF7vCOlwGkaSx2wrHr Vl/K5Mn0zcOJIWUJe/9TK82qc+zbOmk1HfckJN/ksS4J5l32mXg4Ne2wUmRWm2IG WWmQNX/kcAPdDvE2h+/jAuJrt1mwom60n5MBJTChEo8OTqDNjBILCEPJ0rQgz/Lj ZG0hB8SLhDzsEpIOJHd9laJrTRfk9MoIKzJlvi3/R6vdDLDn/XwFtTmTn6/nWcgw 9RVsK36QwRHHBQ== -----END CERTIFICATE-----Generated at Wed Dec 17 00:28:35 2025 by rpki-client