This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft File: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft (raw, json) Hash identifier: oZJgrAiU6ajLZ5H3LMD1AttBea1BQF0QVxC1D4KrV44= Subject key identifier: 66:88:97:6F:49:08:C9:41:58:73:62:27:6B:43:AF:60:74:A3:CD:7C Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Certificate serial: 019AEE99DEA2A28410447769773394E6439F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft Manifest number: 1054 Signing time: Fri 05 Dec 2025 13:00:52 +0000 Manifest this update: Fri 05 Dec 2025 13:00:52 +0000 Manifest next update: Sat 06 Dec 2025 13:00:52 +0000 Files and hashes: 1: 0-YPkmULAfXnz-x8O4HjpPXrRgc.roa (hash: 4hkO4QjkvJDhiXFvv5DxoiJEgtCK4O1iDNeqMzaTU3Y=) 2: 1-_faHefIQXiAFnH3LNhBjrPU09I.roa (hash: 7InTaPWZ/MJFW8mHuJCEltHrQe/oJd/TwCKtlJ9uvvg=) 3: 2TU9zRlg4BupLvfFfZ7nbqZ_3fY.roa (hash: Q+LzT1EBZiXr+my5xIMRRPF6wrKo64s9mQmOfTnOJXc=) 4: 3cmiag-OFPHODxLb1KMirqc2FN4.roa (hash: di5HoeNyYyjDjq7zRaZtas9CEUZ0AIaTVNE5BqvZ7NU=) 5: 9Viq0D0yeyudHsOyGwiWq4c9Zm8.roa (hash: F3Gen1bFVipiyLDRBWS2zGC6+19TslOL2dJD3LXtkbA=) 6: BSzGMTPMq-wN-qGAx5X2D1S9LyA.roa (hash: BvSVSe8mZx3zsVFBrO0OJZXXGEEERCM53ZjLPIwFvwo=) 7: CTV38ZT_kPdUbW8ChEbSmJ6D_xY.roa (hash: yntCphEUvGZYiNPfiCzzcsgLL+fxDyvsgRdAxblWwLU=) 8: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl (hash: vBRbeIj8uC4NGYz0B3k/Zd/Q7OXdac6N7c5vQoJMmzc=) 9: FWQETtkN_oL4od4Al2G3UDgEL5c.roa (hash: xaM2HH/7hc4DXnOzRecNa3benIQdBaCSuVr3xBWruxw=) 10: I3HMzg_QmJAYWZSbsxJu7-jY00E.roa (hash: GSyQIbiBxY1fX31ira1MjHAesY8aGG/De+BRbgOx2qc=) 11: J1hhtf3gTs8cmUIBfj_g7V7c5qk.roa (hash: Str6Vmr/NRskfnPMQpbp4pXOuly0BQP6BEJAk+C3Jm4=) 12: NmY3Cr2hTmLmrJ4cFR4Mbk6O2f8.roa (hash: 3vnVC3SAIOmJWTDh9HP/nluckKtdf1CaP0omwy3IFuI=) 13: OKEgLmB_4ei0G0uw28caa8G3iPw.roa (hash: w8AbZTm+uTbT/9sxDIvDozMxX1t2Mfifb772t5Mh9zE=) 14: R10kzlmrHw9WAyAvK8-iRqbaBaA.roa (hash: XqcsBbYv+/IKS1qiI7jigpCKSJFXUkDBvTdSLdA8/XI=) 15: Y8BxdOG4E83LClpFnmkd0iyca1M.roa (hash: Ho2liFzRTVRlfVeCSm6qtB/bpgcQQigB8GNzfsMibJM=) 16: a2k-bxYcmm3kHfce2aU5FLKv-4E.roa (hash: Idu0EAICE2kNK56b/YbhSusdo/ak8Y2nDki9I5fmt4o=) 17: c_BvljorzCC91xKN9SXmWQ8PZtY.roa (hash: tm7MMwTrRhcL2zqzjy3kf+lPaC41oVQy/y652O4EMmQ=) 18: dfRwLnd7H7w_OVSLP8kz-J08HvU.roa (hash: FPuBb8+13HSQLJU9CpclAE8hKmqwuolZDcDf1PJudFQ=) 19: dtKVxUHGrAkfKqCobm6KXtRp0E8.roa (hash: 83vvkJxmaytP0GLHWBg53bMWqx3mr1WoGbL8xTTfoKE=) 20: eobitmCPSS93nZyZrt6H4tzwfb0.roa (hash: LnX7b8s+/yLhrNscuvO3jZ4nog0puSgY6ARRzJz2m78=) 21: ivaRRc1DWzJYCrjzmD7SPHajmck.roa (hash: fbqrU3gLkOHm9Lw9w1LVFyGxETrg/SyMnPOPP5yhyR0=) 22: jI6_drTo1PWnufC4oiNHSu223XA.roa (hash: Ni1IeOuPqg+nIvkmnYu+vOs52S50BNNNPDhfXtty6xU=) 23: mGwtUKTp1lrZYeXsHRygkPmeOjs.roa (hash: IXq7ynhykZbaN/EO7syj+TvBCLuqP/D/GJNTwgfgRF4=) 24: sbxNn528r3_zzXNbv7r2uOHDqfE.roa (hash: qSGnUn/ItuImBIisLX01AnYKn5TPmOvO3e69Iv0XU/o=) 25: t1LshJm8xEx-87XbFhNq7UZM0do.roa (hash: qxpyfe2Q7y0I+2bbmEdIUUqvN7x6u3MnxvZPf3Uv5NQ=) 26: tYTCXjdd6a-Lr6S2LTPv_OpkXmc.roa (hash: GHmsgW330iSp8of0BZELcAg4KzkX+Jd8lu+4iluVCwo=) 27: xNs_MXSsSqQhb7POy7D96jrbBfE.roa (hash: Kqde4DiWfgPpGL5KKhrxdr3e5I5JwanO0Au/BQUqUf4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:99:de:a2:a2:84:10:44:77:69:77:33:94:e6:43:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Validity Not Before: Dec 5 13:00:52 2025 GMT Not After : Dec 6 13:00:52 2025 GMT Subject: CN=6688976f4908c941587362276b43af6074a3cd7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e4:cb:a5:73:1d:d2:ce:86:7d:65:50:4e:eb: 60:58:83:73:c6:de:92:a4:e0:35:78:fe:c0:f5:c3: 3a:79:30:a2:e7:1e:ce:76:41:54:7f:e2:3a:87:46: 5c:d7:b2:eb:a8:f4:e8:71:9a:a0:f5:0d:65:54:a0: 2a:ed:3f:19:c1:a4:f8:ed:17:a8:46:17:c3:2c:31: 93:47:89:18:76:32:1a:18:a4:4b:94:15:d6:27:bd: a0:f2:04:d3:44:c4:d5:a4:0f:ab:40:17:bb:be:36: 15:50:3f:7b:19:f2:b6:ea:7b:75:72:20:12:80:ef: f0:bf:8c:0a:27:ff:2a:fe:b9:30:76:52:42:b3:14: 9a:fc:12:d0:38:32:8c:e1:4a:83:1b:aa:40:e1:70: 21:a7:fa:c1:2b:65:63:2f:5b:e1:17:6e:1a:b3:42: bf:93:7d:54:90:68:03:3f:cb:a0:cf:40:3b:a0:82: 13:96:86:de:71:a7:f3:d2:e4:45:94:a1:24:e5:88: 59:7d:ca:b9:cb:33:af:6e:49:f1:69:10:38:c7:2b: f5:7d:e7:e0:b4:5b:28:ad:16:ba:ea:ed:a7:07:cf: 6c:44:89:0f:6a:12:80:43:6c:24:2e:c9:20:49:4f: e8:6b:a2:90:de:89:53:10:b4:dc:0c:62:5f:27:cb: 55:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:88:97:6F:49:08:C9:41:58:73:62:27:6B:43:AF:60:74:A3:CD:7C X509v3 Authority Key Identifier: keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:a7:92:62:ea:eb:4e:88:d6:38:4a:19:a1:78:13:1d:b5:d1: 34:57:0d:f6:f1:12:c8:2a:ed:39:b1:09:d5:07:f8:03:f6:40: 81:61:9d:e0:8f:cb:b5:b0:63:c6:17:d9:3c:aa:9e:b7:63:59: bf:95:32:53:8c:eb:6b:2a:23:3b:28:18:a7:6e:99:d9:12:f9: 55:e4:1a:36:42:fe:b5:20:eb:51:3b:f1:fc:cf:f5:b2:54:ab: 45:13:de:bd:12:2c:b5:f7:55:9e:23:f2:53:e8:4c:03:91:60: d9:d2:9d:7d:76:b2:11:e1:37:35:cd:33:5b:8b:49:a0:2a:8f: 03:53:a4:7a:e7:a7:17:9d:b8:a4:40:02:e4:89:49:ed:0c:20: 4b:ae:e1:ec:78:bd:36:90:8b:8d:c1:fc:a8:29:c7:14:e5:6b: ed:55:8c:5d:94:8d:7b:4a:4a:40:8a:a0:b8:be:41:13:e4:0d: c1:6c:51:2b:74:ee:4b:04:34:87:aa:f5:25:6e:3c:06:d8:c0: 75:0c:6f:4a:71:c4:02:a3:e1:e9:b4:f7:dd:b2:6a:20:79:ba: 4c:dc:19:0a:bc:5b:93:06:a5:f8:60:91:dc:ea:32:2f:3a:94: 08:98:82:f7:47:e8:59:77:9d:6c:fd:c8:22:07:c9:52:d0:2c: cc:5b:66:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrumd6iooQQRHdpdzOU5kOfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl NzM2NjQwHhcNMjUxMjA1MTMwMDUyWhcNMjUxMjA2MTMwMDUyWjAzMTEwLwYDVQQD Eyg2Njg4OTc2ZjQ5MDhjOTQxNTg3MzYyMjc2YjQzYWY2MDc0YTNjZDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruTLpXMd0s6GfWVQTutgWINzxt6S pOA1eP7A9cM6eTCi5x7OdkFUf+I6h0Zc17LrqPTocZqg9Q1lVKAq7T8ZwaT47Reo RhfDLDGTR4kYdjIaGKRLlBXWJ72g8gTTRMTVpA+rQBe7vjYVUD97GfK26nt1ciAS gO/wv4wKJ/8q/rkwdlJCsxSa/BLQODKM4UqDG6pA4XAhp/rBK2VjL1vhF24as0K/ k31UkGgDP8ugz0A7oIITlobecafz0uRFlKEk5YhZfcq5yzOvbknxaRA4xyv1fefg tFsorRa66u2nB89sRIkPahKAQ2wkLskgSU/oa6KQ3olTELTcDGJfJ8tVVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGaIl29JCMlBWHNiJ2tDr2B0o818MB8GA1UdIwQY MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt OGMxNTM5NjViYWM5LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5 LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgKeSYurr TojWOEoZoXgTHbXRNFcN9vESyCrtObEJ1Qf4A/ZAgWGd4I/LtbBjxhfZPKqet2NZ v5UyU4zrayojOygYp26Z2RL5VeQaNkL+tSDrUTvx/M/1slSrRRPevRIstfdVniPy U+hMA5Fg2dKdfXayEeE3Nc0zW4tJoCqPA1OkeuenF524pEAC5IlJ7QwgS67h7Hi9 NpCLjcH8qCnHFOVr7VWMXZSNe0pKQIqguL5BE+QNwWxRK3TuSwQ0h6r1JW48BtjA dQxvSnHEAqPh6bT33bJqIHm6TNwZCrxbkwal+GCR3OoyLzqUCJiC90foWXedbP3I IgfJUtAszFtmdA== -----END CERTIFICATE-----Generated at Fri Dec 5 16:20:05 2025 by rpki-client