This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft File: DSkZIlh_dQ94oZeVy9ibxymvF9U.mft (raw, json) Hash identifier: Go2IDMY01vAW3bdkDjA2wHEg4VskOh20xvxBUMPjodU= Subject key identifier: 09:CB:C8:85:65:47:44:E7:54:01:9B:85:6C:D2:45:19:9A:00:8F:50 Authority key identifier: 0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5 Certificate issuer: /CN=0d291922587f750f78a19795cbd89bc729af17d5 Certificate serial: 019AF389EEDF2B68A54814B524669AAFF954 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft Manifest number: 13DA Signing time: Sat 06 Dec 2025 12:01:34 +0000 Manifest this update: Sat 06 Dec 2025 12:01:34 +0000 Manifest next update: Sun 07 Dec 2025 12:01:34 +0000 Files and hashes: 1: 1g3YzsLZ5QOCf6qi-eFi1LVqHQ8.roa (hash: +wFJ5tj+lSmxnwgEedsXBX4o8rthXQtXpU++hvEpCkM=) 2: DSkZIlh_dQ94oZeVy9ibxymvF9U.crl (hash: Q0xtwlm71Pq4E8IhqWOlXvCePZwKQRhgUqLakHUzHOQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:ee:df:2b:68:a5:48:14:b5:24:66:9a:af:f9:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d291922587f750f78a19795cbd89bc729af17d5 Validity Not Before: Dec 6 12:01:34 2025 GMT Not After : Dec 7 12:01:34 2025 GMT Subject: CN=09cbc885654744e754019b856cd245199a008f50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cd:a4:4a:5a:eb:71:7a:3c:b8:b5:ed:29:e1: 7d:d6:fe:15:92:8b:f2:40:b9:ad:1a:4c:9b:3b:7d: 0f:44:6c:85:5f:c6:d8:a5:7e:87:8f:cc:a0:0e:c2: 85:76:c2:24:5b:3b:b9:af:98:ec:40:ee:ae:6e:84: a5:34:d7:58:cd:6d:b8:a9:65:f3:6e:23:0b:9a:1e: 58:0c:dd:ed:c4:86:1c:52:25:28:3e:ac:4a:59:a3: 01:21:b7:cc:aa:ae:24:93:2f:be:20:81:c1:20:67: 5f:13:8f:74:5b:59:a2:e9:0b:90:e3:1e:2d:1d:b7: a2:0b:ea:ef:66:db:c3:27:34:bd:40:5c:bd:be:87: ae:73:ef:dc:e9:06:2e:38:e7:7c:44:cd:e7:48:b6: 3a:63:58:4c:b6:ac:db:21:c9:56:9e:75:47:60:e9: 11:35:8d:59:aa:1d:0e:cc:de:9d:c3:3f:83:e1:ba: fb:a3:ea:35:b9:16:47:87:c4:a7:15:f0:1b:61:1f: 7b:11:e4:e8:b1:b5:44:a8:b9:a6:b3:55:c6:ab:08: d0:02:3b:f7:25:76:bb:4a:39:cc:af:94:d0:46:b1: 30:f7:c4:a2:e5:92:1a:13:f2:5c:5d:c2:8f:08:15: f1:d1:61:3a:2e:12:28:df:bb:1e:a5:8b:ee:b1:0c: 3b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:CB:C8:85:65:47:44:E7:54:01:9B:85:6C:D2:45:19:9A:00:8F:50 X509v3 Authority Key Identifier: keyid:0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:90:b9:14:2f:29:f0:8a:27:3a:91:5e:da:d6:e9:df:10:14: 45:5c:ac:d6:37:a1:60:1e:2f:e2:c1:76:bc:dc:8d:12:58:7d: 78:00:04:54:e0:2e:1d:92:aa:6b:5f:cc:da:f2:5c:89:8e:2b: 57:4e:c5:e4:0a:82:12:1a:8e:13:a7:fa:8c:55:f0:76:a6:72: ef:01:70:77:ab:27:60:72:5d:0e:62:0e:d9:7c:24:97:b0:20: 85:5b:9a:de:0f:12:8f:7b:da:74:c6:38:d3:c7:ca:d7:ea:6f: 07:63:35:23:a6:37:00:b1:da:ee:1e:dc:35:29:ba:74:a4:48: cd:de:4b:d5:be:a4:da:6a:87:50:cb:84:d1:bb:5e:75:03:fa: 75:a2:cb:e9:54:26:07:be:49:02:c2:2c:1a:d7:60:49:10:b7: f1:1b:ec:66:2d:be:0d:dc:bb:1c:5f:fb:18:db:97:67:ca:ad: da:6a:ee:6b:b1:43:77:ae:c4:f7:e4:bc:8a:d6:66:ec:a2:64: 91:5e:ec:eb:30:fc:7a:2d:78:82:fe:fd:9a:7a:20:71:18:32: 35:f5:47:87:06:25:9b:5f:48:4b:55:23:86:60:0e:9c:17:b4: e8:26:df:0d:22:52:e9:f5:59:0b:fd:4e:98:7b:ad:81:e2:16: 77:12:5b:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzie7fK2ilSBS1JGaar/lUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMjkxOTIyNTg3Zjc1MGY3OGExOTc5NWNiZDg5YmM3Mjlh ZjE3ZDUwHhcNMjUxMjA2MTIwMTM0WhcNMjUxMjA3MTIwMTM0WjAzMTEwLwYDVQQD EygwOWNiYzg4NTY1NDc0NGU3NTQwMTliODU2Y2QyNDUxOTlhMDA4ZjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0c2kSlrrcXo8uLXtKeF91v4Vkovy QLmtGkybO30PRGyFX8bYpX6Hj8ygDsKFdsIkWzu5r5jsQO6uboSlNNdYzW24qWXz biMLmh5YDN3txIYcUiUoPqxKWaMBIbfMqq4kky++IIHBIGdfE490W1mi6QuQ4x4t HbeiC+rvZtvDJzS9QFy9voeuc+/c6QYuOOd8RM3nSLY6Y1hMtqzbIclWnnVHYOkR NY1Zqh0OzN6dwz+D4br7o+o1uRZHh8SnFfAbYR97EeTosbVEqLmms1XGqwjQAjv3 JXa7SjnMr5TQRrEw98Si5ZIaE/JcXcKPCBXx0WE6LhIo37sepYvusQw7OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAnLyIVlR0TnVAGbhWzSRRmaAI9QMB8GA1UdIwQY MBaAFA0pGSJYf3UPeKGXlcvYm8cprxfVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFNrWklsaF9kUTk0b1plVnk5aWJ4eW12RjlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My80ZGY4ZjEtMjQxZC00MzM5LWIwZjYt ZDY1YWQ0MzBiZWI3LzEvRFNrWklsaF9kUTk0b1plVnk5aWJ4eW12RjlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My80ZGY4ZjEtMjQxZC00MzM5LWIwZjYtZDY1YWQ0MzBiZWI3 LzEvRFNrWklsaF9kUTk0b1plVnk5aWJ4eW12RjlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl5C5FC8p 8IonOpFe2tbp3xAURVys1jehYB4v4sF2vNyNElh9eAAEVOAuHZKqa1/M2vJciY4r V07F5AqCEhqOE6f6jFXwdqZy7wFwd6snYHJdDmIO2Xwkl7AghVua3g8Sj3vadMY4 08fK1+pvB2M1I6Y3ALHa7h7cNSm6dKRIzd5L1b6k2mqHUMuE0btedQP6daLL6VQm B75JAsIsGtdgSRC38RvsZi2+Ddy7HF/7GNuXZ8qt2mrua7FDd67E9+S8itZm7KJk kV7s6zD8ei14gv79mnogcRgyNfVHhwYlm19IS1UjhmAOnBe06CbfDSJS6fVZC/1O mHutgeIWdxJb+A== -----END CERTIFICATE-----Generated at Sat Dec 6 21:58:15 2025 by rpki-client