This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft File: Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft (raw, json) Hash identifier: LjaAa7KgwAt8YYqqfQt2sWJTkc4YUWwDB9zM7F3w4sw= Subject key identifier: 25:3E:77:5E:AB:2E:FD:B9:E4:20:58:36:4D:F4:C2:38:BE:95:5B:A6 Authority key identifier: 0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22 Certificate issuer: /CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222 Certificate serial: 019B32D69178AC25784B700F1A632900132D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft Manifest number: 0CCF Signing time: Thu 18 Dec 2025 19:01:21 +0000 Manifest this update: Thu 18 Dec 2025 19:01:21 +0000 Manifest next update: Fri 19 Dec 2025 19:01:21 +0000 Files and hashes: 1: Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl (hash: SDe25h0UBLy5fMGIt12uPzXI0OgBqlXXILUtR9HeZ3E=) 2: UpC6gDLL8NBJUYJh0fB1QdxJsxc.roa (hash: AMS5OmBsrOosO5V/m0O5SOOQUVpbn+jWhd8fpreEyHw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:91:78:ac:25:78:4b:70:0f:1a:63:29:00:13:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222 Validity Not Before: Dec 18 19:01:21 2025 GMT Not After : Dec 19 19:01:21 2025 GMT Subject: CN=253e775eab2efdb9e42058364df4c238be955ba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3f:a1:23:2c:50:d5:c8:b2:68:ee:79:a7:fe: b1:0f:9e:90:fd:d9:10:47:bc:8c:ec:98:a2:c4:74: 11:64:55:cf:25:4b:20:23:ff:f4:90:21:15:05:34: 82:36:b4:2f:97:52:30:61:65:a7:85:d5:58:21:68: 5c:da:ef:e9:f0:44:40:7c:ed:9c:c1:1b:98:8d:1f: 50:e8:43:98:47:f4:ef:a4:06:8b:44:4c:d5:0d:1b: a5:7a:ce:69:3e:16:78:23:35:8d:09:7b:15:64:56: fd:5e:c6:cb:d1:35:d5:f4:d2:58:a2:53:a6:2e:10: 09:9e:6e:8a:df:b9:07:7b:b0:87:86:59:71:04:49: 48:15:9a:a9:fb:9c:8e:95:5c:4e:99:a5:d9:bb:ba: 3b:19:cd:92:95:38:f1:18:7a:4c:8a:fd:f8:68:79: cf:28:22:b9:fe:cc:40:48:cc:6f:48:ca:d2:13:98: b6:7f:1c:a9:25:8b:c4:28:9c:06:de:6f:1d:e1:52: a0:2f:83:4d:f5:ed:6d:70:fa:6f:fc:a4:97:14:9a: a6:90:b0:de:54:50:72:52:88:bc:0d:78:55:97:88: 66:c7:2d:36:89:d2:94:05:90:84:fc:78:63:9d:ee: fa:05:43:49:37:e6:99:49:80:65:08:b8:ca:a3:83: 82:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:3E:77:5E:AB:2E:FD:B9:E4:20:58:36:4D:F4:C2:38:BE:95:5B:A6 X509v3 Authority Key Identifier: keyid:0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:e9:41:24:23:08:91:7c:22:e3:09:91:0f:c9:ce:c8:93:af: b6:86:d1:86:bf:26:51:f0:35:68:93:dc:d1:62:f0:b8:f9:a6: 53:54:a7:87:d9:3e:78:29:71:82:74:0c:ac:33:17:af:cf:da: c7:7c:e7:22:f0:02:be:da:eb:c3:88:ee:85:c7:a7:1d:27:5c: c6:de:8e:06:f9:54:44:43:1e:73:c5:90:a5:21:ae:7c:9c:66: c0:a5:cf:06:75:0b:e9:54:d3:ed:62:5e:94:e2:1d:14:c6:62: 8e:da:e5:c4:aa:fa:84:f5:7d:9f:b8:f3:26:d6:51:a5:bf:ac: e0:17:62:a6:4c:9f:a4:bc:2e:88:58:94:61:34:7e:7d:fc:d4: a6:5e:fe:ce:49:9e:fa:99:64:b1:22:fb:cc:8f:b0:b5:59:ad: 6c:86:c2:13:67:9d:81:ad:7e:f0:84:1e:eb:50:de:5f:9c:71: bc:84:73:5f:e1:54:f2:9e:a9:f2:c1:4c:72:67:25:20:79:21: d4:16:0c:f8:9d:75:90:39:6e:36:ef:c2:48:99:94:f8:a6:a9: 45:c2:45:ee:1f:ae:a3:e9:27:2e:f3:8e:c8:eb:93:25:df:db: d3:3d:a0:92:45:c1:14:c5:a9:8b:80:75:26:93:c3:26:65:9d: 3a:e8:79:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1pF4rCV4S3APGmMpABMtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlY2FiZTA2MWYyZDg5MGE4YzhiNDE4MWFkYmNhNmNhOTQz YmQyMjIwHhcNMjUxMjE4MTkwMTIxWhcNMjUxMjE5MTkwMTIxWjAzMTEwLwYDVQQD EygyNTNlNzc1ZWFiMmVmZGI5ZTQyMDU4MzY0ZGY0YzIzOGJlOTU1YmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz+hIyxQ1ciyaO55p/6xD56Q/dkQ R7yM7JiixHQRZFXPJUsgI//0kCEVBTSCNrQvl1IwYWWnhdVYIWhc2u/p8ERAfO2c wRuYjR9Q6EOYR/TvpAaLREzVDRules5pPhZ4IzWNCXsVZFb9XsbL0TXV9NJYolOm LhAJnm6K37kHe7CHhllxBElIFZqp+5yOlVxOmaXZu7o7Gc2SlTjxGHpMiv34aHnP KCK5/sxASMxvSMrSE5i2fxypJYvEKJwG3m8d4VKgL4NN9e1tcPpv/KSXFJqmkLDe VFByUoi8DXhVl4hmxy02idKUBZCE/Hhjne76BUNJN+aZSYBlCLjKo4OC/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCU+d16rLv255CBYNk30wji+lVumMB8GA1UdIwQY MBaAFA7KvgYfLYkKjItBga28psqUO9IiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHNxLUJoOHRpUXFNaTBHQnJieW15cFE3MGlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yZmQwMTktNzczZC00Yzk5LWFjZjUt MDRhMWY5NTQxM2Y3LzEvRHNxLUJoOHRpUXFNaTBHQnJieW15cFE3MGlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yZmQwMTktNzczZC00Yzk5LWFjZjUtMDRhMWY5NTQxM2Y3 LzEvRHNxLUJoOHRpUXFNaTBHQnJieW15cFE3MGlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANulBJCMI kXwi4wmRD8nOyJOvtobRhr8mUfA1aJPc0WLwuPmmU1Snh9k+eClxgnQMrDMXr8/a x3znIvACvtrrw4juhcenHSdcxt6OBvlUREMec8WQpSGufJxmwKXPBnUL6VTT7WJe lOIdFMZijtrlxKr6hPV9n7jzJtZRpb+s4BdipkyfpLwuiFiUYTR+ffzUpl7+zkme +plksSL7zI+wtVmtbIbCE2edga1+8IQe61DeX5xxvIRzX+FU8p6p8sFMcmclIHkh 1BYM+J11kDluNu/CSJmU+KapRcJF7h+uo+knLvOOyOuTJd/b0z2gkkXBFMWpi4B1 JpPDJmWdOuh5KA== -----END CERTIFICATE-----Generated at Thu Dec 18 23:05:17 2025 by rpki-client