This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft File: DSXP1Saq1ypMj0cz-soPTbf592c.mft (raw, json) Hash identifier: iK9P0GTgD58aIX123VLlV3GSzupqvky+01ZsOXYl+3Y= Subject key identifier: F4:E6:04:62:50:6C:CA:12:51:68:CA:A6:3E:1C:54:39:64:B0:A7:F3 Authority key identifier: 0D:25:CF:D5:26:AA:D7:2A:4C:8F:47:33:FA:CA:0F:4D:B7:F9:F7:67 Certificate issuer: /CN=0d25cfd526aad72a4c8f4733faca0f4db7f9f767 Certificate serial: 019AF19AE593C3D1A2025EEAC98F9F4000AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft Manifest number: 011D Signing time: Sat 06 Dec 2025 03:00:51 +0000 Manifest this update: Sat 06 Dec 2025 03:00:51 +0000 Manifest next update: Sun 07 Dec 2025 03:00:51 +0000 Files and hashes: 1: 1-VF1HeLc0TVIs0YYW6YwoXZdo8c.asa (hash: KLFgdmKccdlHIAP3ZnS+JYnP7Rs5RZwMaM2WwUNBXZU=) 2: DSXP1Saq1ypMj0cz-soPTbf592c.crl (hash: vwBF/8P0U7D8/sIgbfizjnHRkZLkgOKBzVqoSFy4bCs=) 3: zQtGsgzqOK-0hoW-F87Yx5VVUg0.roa (hash: PEtW7YagTcXDXA2f9YO+bwyb8k/56XuZ1pNjFIGkhUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:e5:93:c3:d1:a2:02:5e:ea:c9:8f:9f:40:00:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d25cfd526aad72a4c8f4733faca0f4db7f9f767 Validity Not Before: Dec 6 03:00:51 2025 GMT Not After : Dec 7 03:00:51 2025 GMT Subject: CN=f4e60462506cca125168caa63e1c543964b0a7f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d6:5a:92:d1:87:a1:7c:c0:58:8f:e0:d0:f6: ae:aa:c1:7f:c7:3d:63:6a:a9:87:48:66:01:f9:2e: 05:d6:0b:9f:c7:cb:f7:09:96:58:87:1f:fe:9b:56: 1a:05:13:97:b0:d9:02:db:97:60:c7:1c:d6:63:9f: 95:ce:53:3b:bc:51:3a:d6:ed:1a:c1:c2:34:37:f1: 0f:e1:9f:90:fe:70:a2:23:af:a1:f6:1c:17:c9:64: a3:19:d5:53:08:a9:6d:d5:3f:5e:19:c4:fd:5e:bf: 22:b7:7e:f3:e7:04:af:19:09:49:4f:fc:8d:de:35: 10:05:4c:cc:cf:ef:6e:00:6d:b9:e5:5c:63:8f:00: db:06:63:03:27:4a:90:60:d2:4a:43:2c:a8:73:ad: 93:ea:49:b7:85:b1:59:38:1d:63:1f:5f:2a:b9:03: 5f:b2:0e:68:7f:e0:8e:0a:80:16:1e:36:c3:02:bf: 56:e1:23:50:3c:11:1c:89:26:cc:af:9f:3d:af:3f: 4c:26:62:7b:0b:da:88:3e:ff:63:c7:5a:5d:69:c5: 58:28:6e:e7:55:85:d4:c1:00:55:f1:c7:66:78:8b: 06:41:1c:bd:ad:91:27:22:41:a1:99:40:25:50:ab: 60:3b:d8:d8:da:c7:8a:99:a5:d0:e7:e1:d5:b2:ef: 79:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E6:04:62:50:6C:CA:12:51:68:CA:A6:3E:1C:54:39:64:B0:A7:F3 X509v3 Authority Key Identifier: keyid:0D:25:CF:D5:26:AA:D7:2A:4C:8F:47:33:FA:CA:0F:4D:B7:F9:F7:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:4c:b0:b3:5d:8f:f5:5e:c0:2d:6c:21:4d:05:b7:a4:df:59: f9:15:ae:df:a2:0a:70:4b:45:ab:32:0b:26:2e:fc:a6:6a:d7: 06:e9:f6:5d:ed:41:da:8c:0d:b5:4d:22:81:08:b9:47:ab:43: 53:ec:37:4f:bf:c9:ff:66:33:99:ce:a1:70:cf:39:ad:09:c3: 13:25:5c:a8:8b:b7:e6:e5:5e:fd:51:dd:ae:b2:4d:97:7d:e1: dd:22:32:5e:b3:07:9d:84:95:8c:db:72:54:4c:0e:51:6a:d6: 80:79:0e:40:d9:a7:0d:49:0f:78:18:93:f8:80:71:db:63:1a: 48:d0:04:7a:4a:1a:f4:a5:74:39:a2:43:40:73:3e:7e:83:da: 2f:c2:7a:e2:24:08:6d:cb:7b:dc:43:17:b3:92:9c:5a:e9:27: 66:f3:fa:60:68:70:47:fc:54:a5:65:bf:17:88:d0:87:3a:39: 3c:bc:af:64:2e:b8:7e:43:94:b7:11:d1:07:af:ec:01:9a:fd: b5:05:c1:db:eb:68:68:2d:bf:6d:53:2a:e9:37:9a:1f:ba:01: d8:e0:ed:eb:47:93:38:83:01:25:b8:10:1f:0b:04:1b:a8:e8: ef:4e:82:47:29:39:b0:93:75:e8:20:7d:c5:a6:47:aa:94:c1: 28:07:91:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmuWTw9GiAl7qyY+fQACqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMjVjZmQ1MjZhYWQ3MmE0YzhmNDczM2ZhY2EwZjRkYjdm OWY3NjcwHhcNMjUxMjA2MDMwMDUxWhcNMjUxMjA3MDMwMDUxWjAzMTEwLwYDVQQD EyhmNGU2MDQ2MjUwNmNjYTEyNTE2OGNhYTYzZTFjNTQzOTY0YjBhN2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tZaktGHoXzAWI/g0PauqsF/xz1j aqmHSGYB+S4F1gufx8v3CZZYhx/+m1YaBROXsNkC25dgxxzWY5+VzlM7vFE61u0a wcI0N/EP4Z+Q/nCiI6+h9hwXyWSjGdVTCKlt1T9eGcT9Xr8it37z5wSvGQlJT/yN 3jUQBUzMz+9uAG255VxjjwDbBmMDJ0qQYNJKQyyoc62T6km3hbFZOB1jH18quQNf sg5of+COCoAWHjbDAr9W4SNQPBEciSbMr589rz9MJmJ7C9qIPv9jx1pdacVYKG7n VYXUwQBV8cdmeIsGQRy9rZEnIkGhmUAlUKtgO9jY2seKmaXQ5+HVsu95KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPTmBGJQbMoSUWjKpj4cVDlksKfzMB8GA1UdIwQY MBaAFA0lz9UmqtcqTI9HM/rKD023+fdnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFNYUDFTYXExeXBNajBjei1zb1BUYmY1OTJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS85NjI4MmYtNWEyOS00ZmRkLWFkZjkt ZDIxMDgzOGE0NmU2LzEvRFNYUDFTYXExeXBNajBjei1zb1BUYmY1OTJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS85NjI4MmYtNWEyOS00ZmRkLWFkZjktZDIxMDgzOGE0NmU2 LzEvRFNYUDFTYXExeXBNajBjei1zb1BUYmY1OTJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASUyws12P 9V7ALWwhTQW3pN9Z+RWu36IKcEtFqzILJi78pmrXBun2Xe1B2owNtU0igQi5R6tD U+w3T7/J/2Yzmc6hcM85rQnDEyVcqIu35uVe/VHdrrJNl33h3SIyXrMHnYSVjNty VEwOUWrWgHkOQNmnDUkPeBiT+IBx22MaSNAEekoa9KV0OaJDQHM+foPaL8J64iQI bct73EMXs5KcWuknZvP6YGhwR/xUpWW/F4jQhzo5PLyvZC64fkOUtxHRB6/sAZr9 tQXB2+toaC2/bVMq6TeaH7oB2ODt60eTOIMBJbgQHwsEG6jo706CRyk5sJN16CB9 xaZHqpTBKAeR9g== -----END CERTIFICATE-----Generated at Sat Dec 6 05:03:45 2025 by rpki-client