This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft File: DSMGTjwn7JK36rZnZJ0gTlZzg44.mft (raw, json) Hash identifier: FLoIvV6jVZKZQ2NAEHBJHyESm5N2516bAn+RCQEUFT4= Subject key identifier: 1E:73:A5:AE:18:FB:A3:59:EE:91:B5:34:A5:FE:7F:AB:BB:46:20:6D Authority key identifier: 0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E Certificate issuer: /CN=0d23064e3c27ec92b7eab667649d204e5673838e Certificate serial: 019AF3BFFED4D2111E393BFF255A50FD0A24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft Manifest number: 1266 Signing time: Sat 06 Dec 2025 13:00:37 +0000 Manifest this update: Sat 06 Dec 2025 13:00:37 +0000 Manifest next update: Sun 07 Dec 2025 13:00:37 +0000 Files and hashes: 1: AiN7Ez2w_b0YE1rusXobhUE3Svs.roa (hash: ZSIj8QVrkX7C1hvAMfX1/++sMORTKY7694MSitrCN1I=) 2: DSMGTjwn7JK36rZnZJ0gTlZzg44.crl (hash: BFS4SW2ARnqR6nrhkPLmcImONomTkZnD1fiyOXi1w1M=) 3: YA4coPbjcwqSnvPjF4zJfKILsGk.roa (hash: k8y/R8lkcGetmx+8pflXY4l14HDBBXn9CJweDPgs5YQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:bf:fe:d4:d2:11:1e:39:3b:ff:25:5a:50:fd:0a:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d23064e3c27ec92b7eab667649d204e5673838e Validity Not Before: Dec 6 13:00:37 2025 GMT Not After : Dec 7 13:00:37 2025 GMT Subject: CN=1e73a5ae18fba359ee91b534a5fe7fabbb46206d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c9:90:0b:93:af:64:82:c6:79:ba:39:ce:a3: 8c:17:1a:b7:b8:46:21:fe:37:22:ca:6a:86:77:9e: 7b:b9:4c:a4:13:b1:2d:78:7b:2b:26:40:4c:26:de: f5:91:4b:92:32:ed:81:ec:23:d2:c5:8b:40:02:6d: 56:a6:7f:42:2e:fd:1c:79:09:a8:a6:39:3a:17:a1: d6:ec:ce:f3:1f:fa:5b:f6:d3:a8:d0:f3:7b:c2:58: 4e:df:c1:e9:3a:02:a9:08:e7:b9:49:d5:19:1c:4f: d6:15:cd:69:52:fc:a1:a3:21:23:d2:8c:2a:71:86: be:01:eb:a8:05:ed:63:ba:55:ff:90:66:f4:83:7b: eb:01:bc:af:5a:7f:4d:14:55:92:2c:cf:9f:08:15: 26:46:4f:76:e7:d1:ae:24:f8:b8:a6:97:fc:15:80: df:e5:92:14:63:5e:98:85:99:c9:ab:31:bc:1a:0c: c5:cb:a9:39:66:fa:db:79:30:07:c9:49:21:43:84: 35:6d:44:24:67:1d:c7:9e:b2:19:8d:6f:10:71:82: 01:4e:87:c1:a9:18:19:ee:05:9f:a1:c4:84:2a:a9: 46:c5:1b:20:39:45:f9:3d:73:38:d0:d4:99:e9:9d: f1:41:20:3c:39:ac:63:11:d1:dc:77:0a:ca:41:65: d2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:73:A5:AE:18:FB:A3:59:EE:91:B5:34:A5:FE:7F:AB:BB:46:20:6D X509v3 Authority Key Identifier: keyid:0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:28:ef:48:42:b5:a1:93:8d:fe:b3:b8:63:9b:de:e0:11:45: a1:b5:42:4b:6e:19:13:f4:2c:3f:a1:de:64:d5:1a:dd:3f:48: ea:df:2a:7b:c9:db:31:34:e6:c6:b9:e1:b8:0a:b9:d7:50:44: c4:e6:98:1e:5c:bb:da:89:8d:34:3e:5e:55:80:c5:9f:c6:1a: 3a:fc:7b:b6:5d:3c:55:bb:fb:3d:a5:1e:88:dd:87:bb:fd:5b: fd:c7:c4:8f:60:b6:25:ec:ce:7b:f7:38:82:e6:b9:4f:ba:75: d7:15:3b:b7:e8:e6:f2:27:e4:56:8d:bd:13:8c:be:e8:39:6c: f9:be:5b:3d:9c:44:42:e7:20:ba:d6:c4:01:18:18:94:c0:36: 97:56:9f:93:ce:c6:7d:97:f9:ef:78:e8:06:7d:48:88:db:6a: f5:77:c9:28:ae:a5:4a:07:0b:75:c1:74:51:8e:4c:8d:bc:ec: dc:8a:ec:4b:dd:1a:43:3c:8b:ae:7c:30:97:42:a6:ea:06:51: 05:63:0d:8f:2e:61:1e:9b:cd:8e:48:e8:ca:d9:81:d1:82:1e: f0:36:a2:65:a6:56:01:1d:83:bf:62:ee:2b:72:ff:10:61:2e: 57:70:b4:39:e3:43:c1:37:23:5b:85:b0:83:c8:35:bf:8c:37: 84:79:be:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzv/7U0hEeOTv/JVpQ/QokMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMjMwNjRlM2MyN2VjOTJiN2VhYjY2NzY0OWQyMDRlNTY3 MzgzOGUwHhcNMjUxMjA2MTMwMDM3WhcNMjUxMjA3MTMwMDM3WjAzMTEwLwYDVQQD EygxZTczYTVhZTE4ZmJhMzU5ZWU5MWI1MzRhNWZlN2ZhYmJiNDYyMDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMmQC5OvZILGebo5zqOMFxq3uEYh /jciymqGd557uUykE7EteHsrJkBMJt71kUuSMu2B7CPSxYtAAm1Wpn9CLv0ceQmo pjk6F6HW7M7zH/pb9tOo0PN7wlhO38HpOgKpCOe5SdUZHE/WFc1pUvyhoyEj0owq cYa+AeuoBe1julX/kGb0g3vrAbyvWn9NFFWSLM+fCBUmRk9259GuJPi4ppf8FYDf 5ZIUY16YhZnJqzG8GgzFy6k5ZvrbeTAHyUkhQ4Q1bUQkZx3HnrIZjW8QcYIBTofB qRgZ7gWfocSEKqlGxRsgOUX5PXM40NSZ6Z3xQSA8OaxjEdHcdwrKQWXS6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB5zpa4Y+6NZ7pG1NKX+f6u7RiBtMB8GA1UdIwQY MBaAFA0jBk48J+ySt+q2Z2SdIE5Wc4OOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFNNR1Rqd243SkszNnJablpKMGdUbFp6ZzQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83MmZhZWQtYThmOC00YTMzLThkZGMt NWNlZjA0Yjc5NzM3LzEvRFNNR1Rqd243SkszNnJablpKMGdUbFp6ZzQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS83MmZhZWQtYThmOC00YTMzLThkZGMtNWNlZjA0Yjc5NzM3 LzEvRFNNR1Rqd243SkszNnJablpKMGdUbFp6ZzQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkSjvSEK1 oZON/rO4Y5ve4BFFobVCS24ZE/QsP6HeZNUa3T9I6t8qe8nbMTTmxrnhuAq511BE xOaYHly72omNND5eVYDFn8YaOvx7tl08Vbv7PaUeiN2Hu/1b/cfEj2C2JezOe/c4 gua5T7p11xU7t+jm8ifkVo29E4y+6Dls+b5bPZxEQucgutbEARgYlMA2l1afk87G fZf573joBn1IiNtq9XfJKK6lSgcLdcF0UY5Mjbzs3IrsS90aQzyLrnwwl0Km6gZR BWMNjy5hHpvNjkjoytmB0YIe8DaiZaZWAR2Dv2LuK3L/EGEuV3C0OeNDwTcjW4Ww g8g1v4w3hHm+FQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:50:29 2025 by rpki-client