This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft File: Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft (raw, json) Hash identifier: 1X8K5iNYXnkIhL8OxyMgOvbZS3LqOjPIB8GtsiHGRZk= Subject key identifier: 61:D9:6A:19:97:4C:FA:64:08:2F:BC:C4:74:95:7E:DD:42:AD:BB:D5 Authority key identifier: 0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22 Certificate issuer: /CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222 Certificate serial: 019AF509A59EF158A3B01CB6D419056D3345 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft Manifest number: 0CAF Signing time: Sat 06 Dec 2025 19:00:41 +0000 Manifest this update: Sat 06 Dec 2025 19:00:41 +0000 Manifest next update: Sun 07 Dec 2025 19:00:41 +0000 Files and hashes: 1: Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl (hash: E/zFEDujfvp17RExRp9y5biXrvW8+oEHnea4ZQ+jbjw=) 2: UpC6gDLL8NBJUYJh0fB1QdxJsxc.roa (hash: AMS5OmBsrOosO5V/m0O5SOOQUVpbn+jWhd8fpreEyHw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:a5:9e:f1:58:a3:b0:1c:b6:d4:19:05:6d:33:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222 Validity Not Before: Dec 6 19:00:41 2025 GMT Not After : Dec 7 19:00:41 2025 GMT Subject: CN=61d96a19974cfa64082fbcc474957edd42adbbd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:79:af:40:3e:96:bb:b8:55:34:f0:2e:19:e1: f2:22:b9:fa:4e:b5:95:ba:c1:bd:55:15:48:84:29: ff:46:8a:b4:37:ea:ac:8c:f9:b8:0f:91:43:21:da: 5f:eb:69:cd:6a:5c:c9:83:4a:38:c9:b9:83:0a:58: f4:f6:25:a1:98:13:6c:51:3f:f3:29:94:61:18:05: 1e:bf:83:32:13:47:36:31:e3:f8:e9:81:25:8f:1f: e7:6b:a2:b3:f6:dc:2a:45:84:99:f0:85:c2:18:fc: 3c:ff:e7:b2:37:24:fb:be:92:87:f9:31:5e:36:d1: f2:1a:ba:15:32:23:73:c5:64:dd:28:cf:ee:0d:81: e7:13:5a:ab:f3:1f:89:3a:d6:24:69:22:1f:52:12: 43:9f:dd:2f:83:4d:05:c9:f8:70:c4:f6:48:0b:4c: d4:16:6d:d4:b2:9c:3d:f4:0f:56:aa:f3:3f:c3:ff: 60:52:90:fd:58:4f:c2:9d:90:9e:40:ff:5e:70:4c: 18:4a:35:4c:2b:e5:60:48:fb:3b:3d:ec:26:4d:56: f2:67:82:ee:91:b6:74:60:c7:4c:d2:25:c6:69:9d: a3:46:49:bc:39:c0:d5:d5:e2:4f:d2:e7:d2:c0:c4: f1:12:61:9e:d2:d0:5a:a3:c9:21:b5:25:63:8e:cc: 77:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D9:6A:19:97:4C:FA:64:08:2F:BC:C4:74:95:7E:DD:42:AD:BB:D5 X509v3 Authority Key Identifier: keyid:0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:96:2b:a1:51:b0:f8:6a:6c:cf:f9:52:b2:29:52:87:dd:08: 7b:c9:89:26:b0:57:22:ad:d1:2b:c8:d7:97:19:69:2a:a4:42: 19:ac:ff:63:65:71:78:18:14:ed:76:02:f6:44:4c:39:46:8f: 4b:01:2f:3e:84:33:97:eb:77:37:1f:11:97:96:20:a1:9d:1c: 44:82:dd:ae:ac:0d:b0:25:75:40:15:12:b0:00:fa:78:d8:d3: 70:cf:f3:4a:09:88:6d:0b:e1:62:e0:b8:8e:27:97:f3:8b:0f: c0:bb:9c:7b:43:2f:af:d7:b5:db:5e:91:39:81:25:84:51:54: d0:7b:e2:77:f9:15:d3:9c:f5:1d:99:7b:ab:ae:51:47:c5:fc: 97:9f:87:a7:d2:d8:6f:af:53:1b:a8:fe:8d:1c:71:f3:a5:82: fc:62:55:10:1b:b8:8e:b4:09:4a:74:61:35:19:ef:71:e1:d7: 97:b2:e5:1f:57:e7:a0:3b:c5:0f:0e:a6:06:1e:1a:c5:a9:d2: d0:29:ca:c2:da:21:59:e9:4f:b7:6a:a6:33:37:71:33:6f:f5: fd:7a:94:f4:b6:96:eb:37:61:29:e8:4b:9c:f9:a3:b4:76:0a: 4f:d9:f1:58:56:47:7c:30:a8:cc:99:48:b5:80:d1:04:74:3d: 95:db:9f:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CaWe8VijsBy21BkFbTNFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlY2FiZTA2MWYyZDg5MGE4YzhiNDE4MWFkYmNhNmNhOTQz YmQyMjIwHhcNMjUxMjA2MTkwMDQxWhcNMjUxMjA3MTkwMDQxWjAzMTEwLwYDVQQD Eyg2MWQ5NmExOTk3NGNmYTY0MDgyZmJjYzQ3NDk1N2VkZDQyYWRiYmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3mvQD6Wu7hVNPAuGeHyIrn6TrWV usG9VRVIhCn/Roq0N+qsjPm4D5FDIdpf62nNalzJg0o4ybmDClj09iWhmBNsUT/z KZRhGAUev4MyE0c2MeP46YEljx/na6Kz9twqRYSZ8IXCGPw8/+eyNyT7vpKH+TFe NtHyGroVMiNzxWTdKM/uDYHnE1qr8x+JOtYkaSIfUhJDn90vg00FyfhwxPZIC0zU Fm3Uspw99A9WqvM/w/9gUpD9WE/CnZCeQP9ecEwYSjVMK+VgSPs7PewmTVbyZ4Lu kbZ0YMdM0iXGaZ2jRkm8OcDV1eJP0ufSwMTxEmGe0tBao8khtSVjjsx3YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGHZahmXTPpkCC+8xHSVft1CrbvVMB8GA1UdIwQY MBaAFA7KvgYfLYkKjItBga28psqUO9IiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHNxLUJoOHRpUXFNaTBHQnJieW15cFE3MGlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yZmQwMTktNzczZC00Yzk5LWFjZjUt MDRhMWY5NTQxM2Y3LzEvRHNxLUJoOHRpUXFNaTBHQnJieW15cFE3MGlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yZmQwMTktNzczZC00Yzk5LWFjZjUtMDRhMWY5NTQxM2Y3 LzEvRHNxLUJoOHRpUXFNaTBHQnJieW15cFE3MGlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwZYroVGw +Gpsz/lSsilSh90Ie8mJJrBXIq3RK8jXlxlpKqRCGaz/Y2VxeBgU7XYC9kRMOUaP SwEvPoQzl+t3Nx8Rl5YgoZ0cRILdrqwNsCV1QBUSsAD6eNjTcM/zSgmIbQvhYuC4 jieX84sPwLuce0Mvr9e1216ROYElhFFU0Hvid/kV05z1HZl7q65RR8X8l5+Hp9LY b69TG6j+jRxx86WC/GJVEBu4jrQJSnRhNRnvceHXl7LlH1fnoDvFDw6mBh4axanS 0CnKwtohWelPt2qmMzdxM2/1/XqU9LaW6zdhKehLnPmjtHYKT9nxWFZHfDCozJlI tYDRBHQ9ldufhQ== -----END CERTIFICATE-----Generated at Sun Dec 7 03:59:06 2025 by rpki-client