This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft File: DSMGTjwn7JK36rZnZJ0gTlZzg44.mft (raw, json) Hash identifier: bpuEv9gwZF+JuHu0uJ1PkJFhrpaNbYI6Sd0YdjXihY8= Subject key identifier: 79:DF:A4:AF:B4:DC:25:CF:11:A6:ED:B7:6D:91:29:6D:30:A2:4B:C9 Authority key identifier: 0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E Certificate issuer: /CN=0d23064e3c27ec92b7eab667649d204e5673838e Certificate serial: 019B42EEABDC57F86D944D38F78607D295AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft Manifest number: 128F Signing time: Sun 21 Dec 2025 22:01:36 +0000 Manifest this update: Sun 21 Dec 2025 22:01:36 +0000 Manifest next update: Mon 22 Dec 2025 22:01:36 +0000 Files and hashes: 1: AiN7Ez2w_b0YE1rusXobhUE3Svs.roa (hash: ZSIj8QVrkX7C1hvAMfX1/++sMORTKY7694MSitrCN1I=) 2: DSMGTjwn7JK36rZnZJ0gTlZzg44.crl (hash: V95lBA5nMxJdv3UP8FxSZZ6aPpQ8JWv+oNcDoMrLPUE=) 3: YA4coPbjcwqSnvPjF4zJfKILsGk.roa (hash: k8y/R8lkcGetmx+8pflXY4l14HDBBXn9CJweDPgs5YQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:ab:dc:57:f8:6d:94:4d:38:f7:86:07:d2:95:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d23064e3c27ec92b7eab667649d204e5673838e Validity Not Before: Dec 21 22:01:36 2025 GMT Not After : Dec 22 22:01:36 2025 GMT Subject: CN=79dfa4afb4dc25cf11a6edb76d91296d30a24bc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:16:91:f1:58:b8:e5:aa:83:71:1b:3b:4e:d3: da:72:92:3e:97:32:97:5b:62:54:77:fa:92:cb:c6: b3:39:36:35:9e:0a:85:45:ab:f6:27:e1:bf:2c:65: 53:50:6f:db:e3:00:20:74:be:61:73:2b:ce:20:7c: 53:51:31:ec:42:8f:3d:e5:dd:c3:63:aa:59:59:3f: a8:c0:24:95:2e:c1:bb:6c:20:11:2d:d3:34:3d:c4: 40:49:49:33:2e:01:bf:55:2e:59:d0:17:70:da:bf: b8:fc:fe:4e:dd:6f:e3:32:b1:67:34:5c:76:8c:b9: 15:27:6a:0c:c2:af:4b:c8:20:00:c5:37:a6:0a:59: 9d:06:ba:1b:b4:8b:7e:4a:f1:db:24:19:15:3b:64: 28:c6:2b:2e:80:88:0a:4e:35:9b:d6:4b:16:b9:11: c1:20:e8:e4:18:42:0c:02:2c:cc:05:06:8d:9f:4c: a1:23:ca:3b:ed:e4:c0:98:c5:39:d9:08:7b:a9:ef: 50:22:d6:1b:9c:51:3c:fa:ac:9a:88:3e:11:aa:eb: a4:2f:fd:df:d0:c4:b1:7e:81:ff:b9:f6:8e:95:c6: 7c:31:37:3c:e3:1e:83:4c:f8:b1:52:a7:17:a4:0f: 75:96:4a:8b:41:54:bf:bd:2d:62:4c:b8:73:01:5b: 01:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:DF:A4:AF:B4:DC:25:CF:11:A6:ED:B7:6D:91:29:6D:30:A2:4B:C9 X509v3 Authority Key Identifier: keyid:0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:6a:38:eb:19:70:eb:59:cc:f9:cc:64:57:75:cc:d3:f6:23: 2f:27:d7:5c:b1:3b:2f:81:66:1e:f4:d5:c5:9b:35:f9:bc:6d: 49:2b:02:02:6b:31:f5:13:56:0e:87:01:65:01:6f:0d:a6:b0: 41:9a:27:f8:19:19:1b:4b:15:8a:6c:21:97:24:e4:a6:31:d9: a6:19:4d:a0:59:b4:08:68:50:05:c3:af:cd:e0:a4:ca:1b:7d: b1:00:a4:98:e7:0f:27:36:a6:d1:95:24:24:e3:c8:5c:f3:8f: 48:1c:bb:b3:24:f0:18:33:6d:49:6e:24:9c:4a:8a:9c:9e:ef: 48:ec:95:fe:f9:c5:68:79:3e:5a:ef:09:8b:1c:b2:d9:e1:24: ee:5f:80:57:9c:ea:45:95:53:6e:2a:f0:e5:ff:fc:d2:90:f2: 46:78:2a:a9:80:7f:23:0b:04:e7:b2:1b:a8:26:8b:ef:18:ea: 15:90:cb:85:07:5d:22:bb:c9:f7:a4:79:5a:e8:a6:28:ac:a7: b9:2f:6c:80:1d:74:21:b2:a8:52:61:f4:53:6a:b1:ec:ef:cd: 63:7d:8c:bb:de:c9:da:a1:a6:6a:7e:a0:4b:18:13:54:5c:6e: ef:fa:0d:78:48:ba:73:50:af:0e:4c:6f:86:76:6f:45:32:59: db:6c:c6:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7qvcV/htlE0494YH0pWtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMjMwNjRlM2MyN2VjOTJiN2VhYjY2NzY0OWQyMDRlNTY3 MzgzOGUwHhcNMjUxMjIxMjIwMTM2WhcNMjUxMjIyMjIwMTM2WjAzMTEwLwYDVQQD Eyg3OWRmYTRhZmI0ZGMyNWNmMTFhNmVkYjc2ZDkxMjk2ZDMwYTI0YmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RaR8Vi45aqDcRs7TtPacpI+lzKX W2JUd/qSy8azOTY1ngqFRav2J+G/LGVTUG/b4wAgdL5hcyvOIHxTUTHsQo895d3D Y6pZWT+owCSVLsG7bCARLdM0PcRASUkzLgG/VS5Z0Bdw2r+4/P5O3W/jMrFnNFx2 jLkVJ2oMwq9LyCAAxTemClmdBrobtIt+SvHbJBkVO2QoxisugIgKTjWb1ksWuRHB IOjkGEIMAizMBQaNn0yhI8o77eTAmMU52Qh7qe9QItYbnFE8+qyaiD4RquukL/3f 0MSxfoH/ufaOlcZ8MTc84x6DTPixUqcXpA91lkqLQVS/vS1iTLhzAVsB8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHnfpK+03CXPEabtt22RKW0wokvJMB8GA1UdIwQY MBaAFA0jBk48J+ySt+q2Z2SdIE5Wc4OOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFNNR1Rqd243SkszNnJablpKMGdUbFp6ZzQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83MmZhZWQtYThmOC00YTMzLThkZGMt NWNlZjA0Yjc5NzM3LzEvRFNNR1Rqd243SkszNnJablpKMGdUbFp6ZzQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS83MmZhZWQtYThmOC00YTMzLThkZGMtNWNlZjA0Yjc5NzM3 LzEvRFNNR1Rqd243SkszNnJablpKMGdUbFp6ZzQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADWo46xlw 61nM+cxkV3XM0/YjLyfXXLE7L4FmHvTVxZs1+bxtSSsCAmsx9RNWDocBZQFvDaaw QZon+BkZG0sVimwhlyTkpjHZphlNoFm0CGhQBcOvzeCkyht9sQCkmOcPJzam0ZUk JOPIXPOPSBy7syTwGDNtSW4knEqKnJ7vSOyV/vnFaHk+Wu8Jixyy2eEk7l+AV5zq RZVTbirw5f/80pDyRngqqYB/IwsE57IbqCaL7xjqFZDLhQddIrvJ96R5WuimKKyn uS9sgB10IbKoUmH0U2qx7O/NY32Mu97J2qGman6gSxgTVFxu7/oNeEi6c1CvDkxv hnZvRTJZ22zGKQ== -----END CERTIFICATE-----Generated at Mon Dec 22 02:17:38 2025 by rpki-client