This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft File: DSkZIlh_dQ94oZeVy9ibxymvF9U.mft (raw, json) Hash identifier: IVhvK0eWhPzElIeyFa7HqPYG4Iqz4suImWZ6weP/kyo= Subject key identifier: 8F:C3:1A:E3:0B:71:E5:F4:2D:2C:A9:BE:73:42:09:B3:15:04:CB:7F Authority key identifier: 0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5 Certificate issuer: /CN=0d291922587f750f78a19795cbd89bc729af17d5 Certificate serial: 019B04EAC68AC538EA0CEF792F6C05A92815 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft Manifest number: 13E3 Signing time: Tue 09 Dec 2025 21:00:53 +0000 Manifest this update: Tue 09 Dec 2025 21:00:53 +0000 Manifest next update: Wed 10 Dec 2025 21:00:53 +0000 Files and hashes: 1: 1g3YzsLZ5QOCf6qi-eFi1LVqHQ8.roa (hash: +wFJ5tj+lSmxnwgEedsXBX4o8rthXQtXpU++hvEpCkM=) 2: DSkZIlh_dQ94oZeVy9ibxymvF9U.crl (hash: Lk+W1zkdIlaiWtAoZnvU579NgOVll/TIMNduZiYkF18=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 16:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:04:ea:c6:8a:c5:38:ea:0c:ef:79:2f:6c:05:a9:28:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d291922587f750f78a19795cbd89bc729af17d5 Validity Not Before: Dec 9 21:00:53 2025 GMT Not After : Dec 10 21:00:53 2025 GMT Subject: CN=8fc31ae30b71e5f42d2ca9be734209b31504cb7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a5:73:9f:18:17:69:a6:28:14:76:5c:b6:b5: 52:27:83:a6:14:f7:ee:ee:25:33:d0:3c:20:34:ac: 77:60:71:28:4a:e3:f3:d0:35:1d:4c:8c:7c:25:32: 07:85:88:71:3f:10:b3:47:d6:14:76:8b:1a:a7:6f: d7:60:a1:a6:16:7a:84:e5:47:92:13:69:e4:28:3f: af:1e:ab:26:28:be:70:bd:40:be:9c:04:e1:3b:d4: 5a:7c:fe:99:04:41:81:40:5e:3c:27:68:1e:78:7b: 8c:81:cf:f8:93:05:52:ab:1d:aa:2e:6d:1c:da:2a: 33:e8:38:62:e0:e1:ba:78:92:8f:91:85:aa:6c:33: 2c:bd:93:8b:97:fd:a4:b9:1d:52:bf:92:66:d1:99: ff:5c:08:15:25:8f:72:cb:6a:52:66:7d:7f:1d:68: 60:b7:c6:54:a2:52:84:a2:ac:04:ec:c7:6c:d4:5a: 2e:7e:2b:fa:7b:ae:ab:8f:a1:55:1b:c3:f9:63:5e: 9c:52:92:0f:61:6e:85:31:38:28:90:fb:62:26:6b: 95:bc:4c:de:63:2d:b7:51:56:65:b1:ed:8a:d0:cb: 11:91:aa:ac:f9:b3:02:53:f0:6f:f4:bb:97:53:1a: a9:c5:f1:34:be:00:60:33:25:89:f4:cf:a5:14:ba: 07:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C3:1A:E3:0B:71:E5:F4:2D:2C:A9:BE:73:42:09:B3:15:04:CB:7F X509v3 Authority Key Identifier: keyid:0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:94:2f:10:af:65:41:21:36:c0:de:d2:3c:23:69:26:38:5c: 3f:bf:34:b4:16:2c:b8:1b:f7:43:36:69:c6:8a:bd:d9:8a:42: 00:b4:53:eb:32:11:aa:b8:1a:65:94:a6:ba:c4:6e:c9:bf:a9: 7c:30:3c:9c:d2:25:c0:59:12:eb:c3:6c:a3:23:7f:68:59:6d: f4:f1:1b:7b:69:6c:ac:5b:1c:7b:6b:db:af:1d:4c:62:1c:32: cb:d7:aa:c9:96:f8:e1:38:ef:79:2e:c3:d3:36:e1:14:64:51: c9:09:07:2d:f3:43:82:c5:1f:23:9a:92:a9:a4:e1:e3:ff:9a: d7:7f:15:e3:49:f5:6e:db:34:4d:fd:6c:e0:7f:32:c9:d9:12: aa:cc:f2:9b:e0:32:85:f9:b5:25:03:5b:5d:30:34:ba:23:4e: 41:77:c1:5d:62:9d:23:01:f0:f7:12:25:24:e5:3c:7e:c1:07: 48:21:84:f6:6b:95:7a:c2:53:8c:83:ac:fe:4e:d6:00:d8:39: d0:2a:df:8b:3d:19:b4:d0:e2:b0:2a:f8:30:7b:2e:28:2d:da: ca:fd:89:31:29:34:e8:2c:37:cd:58:75:05:25:40:af:5f:73: 68:88:a3:63:9a:82:f0:4b:b6:ad:5d:86:00:02:f7:7e:3a:cd: 2f:95:92:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsE6saKxTjqDO95L2wFqSgVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMjkxOTIyNTg3Zjc1MGY3OGExOTc5NWNiZDg5YmM3Mjlh ZjE3ZDUwHhcNMjUxMjA5MjEwMDUzWhcNMjUxMjEwMjEwMDUzWjAzMTEwLwYDVQQD Eyg4ZmMzMWFlMzBiNzFlNWY0MmQyY2E5YmU3MzQyMDliMzE1MDRjYjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKVznxgXaaYoFHZctrVSJ4OmFPfu 7iUz0DwgNKx3YHEoSuPz0DUdTIx8JTIHhYhxPxCzR9YUdosap2/XYKGmFnqE5UeS E2nkKD+vHqsmKL5wvUC+nAThO9RafP6ZBEGBQF48J2geeHuMgc/4kwVSqx2qLm0c 2ioz6Dhi4OG6eJKPkYWqbDMsvZOLl/2kuR1Sv5Jm0Zn/XAgVJY9yy2pSZn1/HWhg t8ZUolKEoqwE7Mds1Foufiv6e66rj6FVG8P5Y16cUpIPYW6FMTgokPtiJmuVvEze Yy23UVZlse2K0MsRkaqs+bMCU/Bv9LuXUxqpxfE0vgBgMyWJ9M+lFLoHywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/DGuMLceX0LSypvnNCCbMVBMt/MB8GA1UdIwQY MBaAFA0pGSJYf3UPeKGXlcvYm8cprxfVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFNrWklsaF9kUTk0b1plVnk5aWJ4eW12RjlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My80ZGY4ZjEtMjQxZC00MzM5LWIwZjYt ZDY1YWQ0MzBiZWI3LzEvRFNrWklsaF9kUTk0b1plVnk5aWJ4eW12RjlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My80ZGY4ZjEtMjQxZC00MzM5LWIwZjYtZDY1YWQ0MzBiZWI3 LzEvRFNrWklsaF9kUTk0b1plVnk5aWJ4eW12RjlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjZQvEK9l QSE2wN7SPCNpJjhcP780tBYsuBv3QzZpxoq92YpCALRT6zIRqrgaZZSmusRuyb+p fDA8nNIlwFkS68NsoyN/aFlt9PEbe2lsrFsce2vbrx1MYhwyy9eqyZb44TjveS7D 0zbhFGRRyQkHLfNDgsUfI5qSqaTh4/+a138V40n1bts0Tf1s4H8yydkSqszym+Ay hfm1JQNbXTA0uiNOQXfBXWKdIwHw9xIlJOU8fsEHSCGE9muVesJTjIOs/k7WANg5 0Crfiz0ZtNDisCr4MHsuKC3ayv2JMSk06Cw3zVh1BSVAr19zaIijY5qC8Eu2rV2G AAL3fjrNL5WSgQ== -----END CERTIFICATE-----Generated at Wed Dec 10 02:28:33 2025 by rpki-client