This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft File: DC-bLoowUI05GSr9WzTuVvd1l54.mft (raw, json) Hash identifier: 5Ux4h/k6BUaY3a1Sso8MzlVyDjQXFf31QNPtnq6teyY= Subject key identifier: E8:CA:FA:E0:41:F1:36:DB:E1:07:1F:C8:F5:7F:4F:AB:F8:4E:A9:B6 Authority key identifier: 0C:2F:9B:2E:8A:30:50:8D:39:19:2A:FD:5B:34:EE:56:F7:75:97:9E Certificate issuer: /CN=0c2f9b2e8a30508d39192afd5b34ee56f775979e Certificate serial: 019B41A44BACD35B2C2D5F97097F74C533E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft Manifest number: 0F66 Signing time: Sun 21 Dec 2025 16:00:44 +0000 Manifest this update: Sun 21 Dec 2025 16:00:44 +0000 Manifest next update: Mon 22 Dec 2025 16:00:44 +0000 Files and hashes: 1: DC-bLoowUI05GSr9WzTuVvd1l54.crl (hash: 4tHniksH+vy7+sKe24nIV+VYFDpiPpJ0Why+FUCTOX0=) 2: NWAGhC2XbatfDitWodooC7bbFFI.roa (hash: FWUOW7wQ0G0TGl1V+k/KtSrSZ/FDNVfXj5gqfrNEtSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.crl rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:4b:ac:d3:5b:2c:2d:5f:97:09:7f:74:c5:33:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c2f9b2e8a30508d39192afd5b34ee56f775979e Validity Not Before: Dec 21 16:00:44 2025 GMT Not After : Dec 22 16:00:44 2025 GMT Subject: CN=e8cafae041f136dbe1071fc8f57f4fabf84ea9b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6e:52:e0:09:81:39:54:b6:a8:57:50:5e:8b: 78:2e:b9:34:4b:8b:19:89:19:c9:6f:7c:9a:33:26: 38:b2:44:46:2e:a3:8d:90:08:05:d8:2a:9a:1d:25: ce:fa:e5:42:85:fd:ed:31:3f:e8:e9:e8:76:1d:06: 4e:23:1f:27:f6:2e:c4:72:02:96:1c:ad:2f:ad:00: 28:fb:15:ae:34:c0:c4:71:80:b3:0a:05:ed:1c:25: 8f:66:04:f2:a6:9f:56:91:0a:85:dc:c0:9d:3d:6c: 89:b2:4f:35:8f:e6:ad:a7:8c:71:cd:7c:c6:f0:1d: 8b:a7:b9:21:21:00:83:84:7b:87:2c:11:66:91:f4: d5:cb:c0:ac:ed:94:9a:4a:7d:6c:5a:57:72:59:69: a6:3a:24:3e:60:b2:35:b0:76:f5:6d:85:02:ee:ae: 6c:97:2a:28:af:38:33:88:41:2f:f1:56:65:df:68: 43:6f:79:1e:b8:07:f6:a0:62:f7:6e:df:7d:0a:bb: 40:63:0f:87:e8:95:25:17:19:97:cf:4c:70:89:ee: 66:3f:ae:86:9c:5a:6d:84:31:e6:58:d8:b7:2a:72: 57:69:c5:43:38:5e:e2:80:7a:23:96:93:cf:91:cd: 65:79:40:5a:e4:23:ec:fd:d5:18:f9:c8:e7:3a:a6: 2e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:CA:FA:E0:41:F1:36:DB:E1:07:1F:C8:F5:7F:4F:AB:F8:4E:A9:B6 X509v3 Authority Key Identifier: keyid:0C:2F:9B:2E:8A:30:50:8D:39:19:2A:FD:5B:34:EE:56:F7:75:97:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:75:a8:86:8d:44:f9:f7:72:39:0d:ff:a2:37:d9:23:cc:75: 46:6c:ea:de:d7:e8:67:85:42:38:78:54:74:73:76:3d:c9:02: b2:a1:c9:63:b9:32:76:b7:ff:55:87:b4:3e:34:7d:29:7d:1a: 33:d3:fe:1d:02:ae:87:34:f6:37:b4:c3:8c:df:53:be:06:21: ac:a8:4f:81:f7:0c:00:b0:5c:e2:91:f7:be:bd:5e:f5:34:2c: 54:f9:99:25:f1:94:e3:b2:9d:5f:11:f4:e4:fe:f1:a6:2a:5e: 3c:b3:d1:c7:6a:14:9c:c2:29:ec:0a:17:98:ac:cc:26:e7:1c: 3b:d3:a4:66:7d:ef:0b:e1:5e:bc:29:75:2d:c6:1d:7a:d4:79: 80:88:fb:3e:18:d8:26:02:b2:01:07:34:03:fb:19:27:1e:87: 0e:e4:d9:66:59:ad:7f:80:e0:bc:91:31:e5:40:ba:17:41:c0: 61:e8:33:63:a1:8d:35:0e:f6:88:d4:fa:43:88:98:be:ca:0f: 21:2b:10:c9:9c:0f:98:09:88:6b:e5:d6:5d:dd:41:0f:12:35: 69:46:70:b6:58:d9:d2:7e:e1:3c:1d:05:73:f3:84:e8:1f:d7: 71:e2:70:eb:51:d0:02:5d:ea:b4:30:e6:ce:fc:9b:62:7a:43: 90:6b:97:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpEus01ssLV+XCX90xTPgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMmY5YjJlOGEzMDUwOGQzOTE5MmFmZDViMzRlZTU2Zjc3 NTk3OWUwHhcNMjUxMjIxMTYwMDQ0WhcNMjUxMjIyMTYwMDQ0WjAzMTEwLwYDVQQD EyhlOGNhZmFlMDQxZjEzNmRiZTEwNzFmYzhmNTdmNGZhYmY4NGVhOWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqG5S4AmBOVS2qFdQXot4Lrk0S4sZ iRnJb3yaMyY4skRGLqONkAgF2CqaHSXO+uVChf3tMT/o6eh2HQZOIx8n9i7EcgKW HK0vrQAo+xWuNMDEcYCzCgXtHCWPZgTypp9WkQqF3MCdPWyJsk81j+atp4xxzXzG 8B2Lp7khIQCDhHuHLBFmkfTVy8Cs7ZSaSn1sWldyWWmmOiQ+YLI1sHb1bYUC7q5s lyoorzgziEEv8VZl32hDb3keuAf2oGL3bt99CrtAYw+H6JUlFxmXz0xwie5mP66G nFpthDHmWNi3KnJXacVDOF7igHojlpPPkc1leUBa5CPs/dUY+cjnOqYucwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOjK+uBB8Tbb4QcfyPV/T6v4Tqm2MB8GA1UdIwQY MBaAFAwvmy6KMFCNORkq/Vs07lb3dZeeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREMtYkxvb3dVSTA1R1NyOVd6VHVWdmQxbDU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8zNmNiODItMDM5OS00MzZjLWI5NTIt OWVkYTU3YzIzZWRmLzEvREMtYkxvb3dVSTA1R1NyOVd6VHVWdmQxbDU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8zNmNiODItMDM5OS00MzZjLWI5NTItOWVkYTU3YzIzZWRm LzEvREMtYkxvb3dVSTA1R1NyOVd6VHVWdmQxbDU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJnWoho1E +fdyOQ3/ojfZI8x1Rmzq3tfoZ4VCOHhUdHN2PckCsqHJY7kydrf/VYe0PjR9KX0a M9P+HQKuhzT2N7TDjN9TvgYhrKhPgfcMALBc4pH3vr1e9TQsVPmZJfGU47KdXxH0 5P7xpipePLPRx2oUnMIp7AoXmKzMJuccO9OkZn3vC+FevCl1LcYdetR5gIj7PhjY JgKyAQc0A/sZJx6HDuTZZlmtf4DgvJEx5UC6F0HAYegzY6GNNQ72iNT6Q4iYvsoP ISsQyZwPmAmIa+XWXd1BDxI1aUZwtljZ0n7hPB0Fc/OE6B/XceJw61HQAl3qtDDm zvybYnpDkGuXGw== -----END CERTIFICATE-----Generated at Sun Dec 21 21:27:45 2025 by rpki-client