This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft File: DASLX4FSNcOT_qdh4H64uLv4f9M.mft (raw, json) Hash identifier: eatyDvH0+dObVYidELtDVajVLLJvrY5OKESNylrBE04= Subject key identifier: BF:88:3C:B3:D0:A1:47:7A:35:33:BD:72:52:34:51:F2:7D:E9:8E:55 Authority key identifier: 0C:04:8B:5F:81:52:35:C3:93:FE:A7:61:E0:7E:B8:B8:BB:F8:7F:D3 Certificate issuer: /CN=0c048b5f815235c393fea761e07eb8b8bbf87fd3 Certificate serial: 019AF2097D1727C70A4AE6FFB2C4CF47F1C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 05:01:39 +0000 Manifest this update: Sat 06 Dec 2025 05:01:39 +0000 Manifest next update: Sun 07 Dec 2025 05:01:39 +0000 Files and hashes: 1: 1XNJWBeFIM2IRAvxd79b-HcAo9o.roa (hash: FW3/MZh4Uk7LDpQNsxMFINYM6j9D7wIMnyrZzis42ZE=) 2: DASLX4FSNcOT_qdh4H64uLv4f9M.crl (hash: wZ8BKM3XKIoVajbh0waPLGMaBnw7hhP7ms4mmG83p5E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.crl rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:7d:17:27:c7:0a:4a:e6:ff:b2:c4:cf:47:f1:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c048b5f815235c393fea761e07eb8b8bbf87fd3 Validity Not Before: Dec 6 05:01:39 2025 GMT Not After : Dec 7 05:01:39 2025 GMT Subject: CN=bf883cb3d0a1477a3533bd72523451f27de98e55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:6e:30:12:e9:4a:11:f8:04:16:e0:16:d2:24: 12:3a:4e:e6:1d:b6:bd:86:06:c6:bf:cc:25:42:c8: 46:d0:e7:b8:89:3d:7a:60:1e:49:71:96:10:a4:bf: b6:96:e3:e1:78:58:cd:45:9d:10:77:fc:26:8e:00: 84:7a:ab:f7:52:4b:f1:ed:a8:4b:b5:2a:8d:e1:e8: 5c:ce:a1:35:c5:82:52:8c:8f:49:c3:d7:b5:d6:90: c5:b4:5f:41:2d:85:94:ae:28:c9:0c:b4:9e:f1:05: ce:aa:0e:71:0d:28:e0:11:d4:be:5d:da:24:a6:dc: 18:ce:ec:25:ad:7f:df:d0:ae:8e:4e:02:d7:08:10: 37:ad:03:83:18:f8:15:b1:37:20:15:98:98:8d:27: fe:5c:39:e8:f2:e6:60:02:7c:72:c2:b9:0f:d6:10: f3:5a:5c:88:92:e3:17:43:5a:0d:3b:c9:f9:e1:92: 46:5d:46:ae:7b:1d:26:94:b4:ad:91:31:b8:b6:c7: 0d:5b:e5:fe:48:84:56:b9:c0:3e:55:c7:1a:87:48: de:58:db:60:e6:1e:d3:98:ef:93:04:3c:50:d9:a3: 02:a5:ae:3f:d1:cb:25:d6:7f:cb:e0:6c:f1:ef:de: 5c:37:2d:6f:19:75:c4:df:cb:eb:00:9c:31:b2:05: 0c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:88:3C:B3:D0:A1:47:7A:35:33:BD:72:52:34:51:F2:7D:E9:8E:55 X509v3 Authority Key Identifier: keyid:0C:04:8B:5F:81:52:35:C3:93:FE:A7:61:E0:7E:B8:B8:BB:F8:7F:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:b3:5d:6b:51:50:b1:98:ad:a4:3a:db:e5:7f:bf:ad:bb:02: 3b:13:55:52:e5:2b:2f:bb:52:1a:be:0d:5a:f0:3d:7a:50:dc: fa:20:ab:86:72:d8:b7:6e:9c:1f:93:41:b9:7f:87:c3:8b:47: e4:43:ba:9c:b1:85:76:23:90:f9:f3:8b:9b:1c:80:8e:0c:4a: 49:4c:90:5c:0a:a1:93:4b:00:c9:b5:6e:fe:71:6f:3d:86:7b: 0b:c2:aa:12:e9:cd:02:91:64:85:41:30:bd:a2:e5:2b:97:0b: cd:1e:94:6d:2e:f7:28:67:6f:59:09:eb:bf:46:89:d4:90:65: fc:de:c3:0f:1e:22:69:a2:ae:a7:9c:bc:91:6d:57:c8:25:18: 56:55:1d:41:31:00:fb:24:c4:17:d4:86:86:60:50:9c:c8:bc: 98:60:27:84:b6:34:00:f0:7e:b8:7d:86:e9:72:ee:bb:1b:d2: 3a:9d:08:a5:0e:2c:c3:77:15:5f:4f:56:5d:9c:89:fd:7e:93: 36:e9:4c:c5:20:84:e4:f2:54:e7:59:84:d7:90:18:d2:16:58: de:30:4d:7e:de:c4:85:ea:34:9d:c3:46:f6:f2:d9:75:86:a3: dc:4a:85:15:7b:ac:27:df:54:ac:f2:af:97:c9:4e:b2:e2:ae: 22:ed:7c:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCX0XJ8cKSub/ssTPR/HIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMDQ4YjVmODE1MjM1YzM5M2ZlYTc2MWUwN2ViOGI4YmJm ODdmZDMwHhcNMjUxMjA2MDUwMTM5WhcNMjUxMjA3MDUwMTM5WjAzMTEwLwYDVQQD EyhiZjg4M2NiM2QwYTE0NzdhMzUzM2JkNzI1MjM0NTFmMjdkZTk4ZTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAim4wEulKEfgEFuAW0iQSOk7mHba9 hgbGv8wlQshG0Oe4iT16YB5JcZYQpL+2luPheFjNRZ0Qd/wmjgCEeqv3Ukvx7ahL tSqN4ehczqE1xYJSjI9Jw9e11pDFtF9BLYWUrijJDLSe8QXOqg5xDSjgEdS+Xdok ptwYzuwlrX/f0K6OTgLXCBA3rQODGPgVsTcgFZiYjSf+XDno8uZgAnxywrkP1hDz WlyIkuMXQ1oNO8n54ZJGXUauex0mlLStkTG4tscNW+X+SIRWucA+Vccah0jeWNtg 5h7TmO+TBDxQ2aMCpa4/0csl1n/L4Gzx795cNy1vGXXE38vrAJwxsgUMWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL+IPLPQoUd6NTO9clI0UfJ96Y5VMB8GA1UdIwQY MBaAFAwEi1+BUjXDk/6nYeB+uLi7+H/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREFTTFg0RlNOY09UX3FkaDRINjR1THY0ZjlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My82ZDdjMWMtOGViZC00MjQ2LTgzZjkt NWYzY2MzMThmMTgwLzEvREFTTFg0RlNOY09UX3FkaDRINjR1THY0ZjlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My82ZDdjMWMtOGViZC00MjQ2LTgzZjktNWYzY2MzMThmMTgw LzEvREFTTFg0RlNOY09UX3FkaDRINjR1THY0ZjlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIrNda1FQ sZitpDrb5X+/rbsCOxNVUuUrL7tSGr4NWvA9elDc+iCrhnLYt26cH5NBuX+Hw4tH 5EO6nLGFdiOQ+fOLmxyAjgxKSUyQXAqhk0sAybVu/nFvPYZ7C8KqEunNApFkhUEw vaLlK5cLzR6UbS73KGdvWQnrv0aJ1JBl/N7DDx4iaaKup5y8kW1XyCUYVlUdQTEA +yTEF9SGhmBQnMi8mGAnhLY0APB+uH2G6XLuuxvSOp0IpQ4sw3cVX09WXZyJ/X6T NulMxSCE5PJU51mE15AY0hZY3jBNft7Eheo0ncNG9vLZdYaj3EqFFXusJ99UrPKv l8lOsuKuIu18dQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:07:09 2025 by rpki-client