This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft File: DASLX4FSNcOT_qdh4H64uLv4f9M.mft (raw, json) Hash identifier: y8XfeNSqjQhmdTH/NHO8BqlPMvkHQ08hF1MGHiIkLqc= Subject key identifier: FC:63:CE:2D:B6:45:F9:82:01:60:C8:0E:9A:61:57:47:D0:EB:F7:74 Authority key identifier: 0C:04:8B:5F:81:52:35:C3:93:FE:A7:61:E0:7E:B8:B8:BB:F8:7F:D3 Certificate issuer: /CN=0c048b5f815235c393fea761e07eb8b8bbf87fd3 Certificate serial: 019B22507CD8E1D7BEB5B2D0EBAACB69489A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft Manifest number: 1780 Signing time: Mon 15 Dec 2025 14:00:58 +0000 Manifest this update: Mon 15 Dec 2025 14:00:58 +0000 Manifest next update: Tue 16 Dec 2025 14:00:58 +0000 Files and hashes: 1: 1XNJWBeFIM2IRAvxd79b-HcAo9o.roa (hash: FW3/MZh4Uk7LDpQNsxMFINYM6j9D7wIMnyrZzis42ZE=) 2: DASLX4FSNcOT_qdh4H64uLv4f9M.crl (hash: 0X7OHWJ/yUFWDHNWAhJnEqgYYuZALVmsVDVyVEkb1WM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.crl rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:50:7c:d8:e1:d7:be:b5:b2:d0:eb:aa:cb:69:48:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c048b5f815235c393fea761e07eb8b8bbf87fd3 Validity Not Before: Dec 15 14:00:58 2025 GMT Not After : Dec 16 14:00:58 2025 GMT Subject: CN=fc63ce2db645f9820160c80e9a615747d0ebf774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:44:cf:4c:de:51:e9:96:b1:6f:74:6b:8c:17: 95:ae:f8:99:7f:4a:64:0e:85:53:03:38:3b:ad:cd: a1:cd:af:8e:30:ae:95:7d:56:ae:13:b8:7b:ee:6f: 5b:96:e6:ec:c4:4b:34:d0:36:50:de:07:1d:41:ba: f3:bb:bc:ef:94:eb:64:66:cb:5c:0d:d6:6f:70:4b: f7:f3:9a:bd:34:a1:fb:1d:27:0a:12:5c:0b:10:43: 1a:d5:93:3a:cc:4b:1b:d7:0e:c6:2b:da:58:31:19: 5c:fc:28:70:f0:96:f3:8b:4a:31:98:e5:b8:57:4f: 0e:0e:36:6a:66:7d:ee:fe:f3:ae:8f:bc:54:d4:c7: d7:61:91:a0:7c:31:15:ee:ef:1a:eb:57:8c:a4:f5: c7:12:d1:8d:1e:fa:ca:3f:ad:b2:76:00:aa:1f:90: d8:35:3a:c8:cf:1d:b5:5d:ab:a8:75:cc:c2:6e:c2: 36:67:e0:4b:d8:19:31:14:52:e8:57:21:9a:6d:26: f6:0b:f6:21:d7:dd:5a:88:6b:9b:b7:16:64:0b:6d: c4:cf:09:65:e5:21:7e:fc:08:a5:22:5e:5f:a4:97: c8:ff:1e:96:7f:17:a7:79:7b:8a:55:bd:c3:0a:60: 61:41:2e:fb:ee:64:85:b9:0f:d2:bd:09:d1:2f:3f: 5c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:63:CE:2D:B6:45:F9:82:01:60:C8:0E:9A:61:57:47:D0:EB:F7:74 X509v3 Authority Key Identifier: keyid:0C:04:8B:5F:81:52:35:C3:93:FE:A7:61:E0:7E:B8:B8:BB:F8:7F:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:c4:89:a3:44:b4:55:fc:f5:8b:93:6a:3c:7a:ef:ee:74:4e: 4e:d8:11:e9:77:37:55:a6:33:41:8f:0b:91:29:62:8c:40:d8: 66:ae:7f:08:02:1c:9c:e3:8b:99:d5:56:e1:d3:10:da:d8:be: 2f:fd:60:62:d1:91:77:71:da:1f:d7:9c:63:a9:4b:f5:2c:06: bf:98:00:8e:f0:4f:0e:34:71:d3:5a:ba:c5:33:1d:6e:8e:f8: 38:e5:8e:cf:7c:00:ae:d4:77:3b:1e:99:75:d0:35:9b:e4:42: ac:4b:2d:04:39:9c:1d:58:cf:b4:c3:9e:d2:07:1b:24:22:4a: 2f:f3:e0:9e:44:0d:24:9d:03:95:df:d1:3e:bf:d8:42:3f:c3: f8:de:f2:0e:34:34:da:f8:23:10:bb:27:ff:b8:6a:15:27:6c: 4c:fa:31:84:04:97:9e:fb:cc:a4:c0:c3:c0:39:8f:d7:9b:40: 14:ec:11:43:69:a5:cb:be:fd:c7:3c:e2:95:d6:1f:66:36:aa: 61:a8:77:11:27:36:d8:b9:3b:59:14:d5:87:9a:ae:73:6a:73: 95:ee:ab:73:0f:9a:75:5d:5f:4c:67:e0:54:74:3e:a7:84:3d: da:bc:26:cc:88:64:42:bf:a3:3b:e3:f8:8c:bc:91:7e:9d:3b: 78:e3:b2:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiUHzY4de+tbLQ66rLaUiaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMDQ4YjVmODE1MjM1YzM5M2ZlYTc2MWUwN2ViOGI4YmJm ODdmZDMwHhcNMjUxMjE1MTQwMDU4WhcNMjUxMjE2MTQwMDU4WjAzMTEwLwYDVQQD EyhmYzYzY2UyZGI2NDVmOTgyMDE2MGM4MGU5YTYxNTc0N2QwZWJmNzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUTPTN5R6Zaxb3RrjBeVrviZf0pk DoVTAzg7rc2hza+OMK6VfVauE7h77m9blubsxEs00DZQ3gcdQbrzu7zvlOtkZstc DdZvcEv385q9NKH7HScKElwLEEMa1ZM6zEsb1w7GK9pYMRlc/Chw8Jbzi0oxmOW4 V08ODjZqZn3u/vOuj7xU1MfXYZGgfDEV7u8a61eMpPXHEtGNHvrKP62ydgCqH5DY NTrIzx21XauodczCbsI2Z+BL2BkxFFLoVyGabSb2C/Yh191aiGubtxZkC23Ezwll 5SF+/AilIl5fpJfI/x6WfxeneXuKVb3DCmBhQS777mSFuQ/SvQnRLz9cowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPxjzi22RfmCAWDIDpphV0fQ6/d0MB8GA1UdIwQY MBaAFAwEi1+BUjXDk/6nYeB+uLi7+H/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREFTTFg0RlNOY09UX3FkaDRINjR1THY0ZjlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My82ZDdjMWMtOGViZC00MjQ2LTgzZjkt NWYzY2MzMThmMTgwLzEvREFTTFg0RlNOY09UX3FkaDRINjR1THY0ZjlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My82ZDdjMWMtOGViZC00MjQ2LTgzZjktNWYzY2MzMThmMTgw LzEvREFTTFg0RlNOY09UX3FkaDRINjR1THY0ZjlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc8SJo0S0 Vfz1i5NqPHrv7nROTtgR6Xc3VaYzQY8LkSlijEDYZq5/CAIcnOOLmdVW4dMQ2ti+ L/1gYtGRd3HaH9ecY6lL9SwGv5gAjvBPDjRx01q6xTMdbo74OOWOz3wArtR3Ox6Z ddA1m+RCrEstBDmcHVjPtMOe0gcbJCJKL/PgnkQNJJ0Dld/RPr/YQj/D+N7yDjQ0 2vgjELsn/7hqFSdsTPoxhASXnvvMpMDDwDmP15tAFOwRQ2mly779xzzildYfZjaq Yah3ESc22Lk7WRTVh5quc2pzle6rcw+adV1fTGfgVHQ+p4Q92rwmzIhkQr+jO+P4 jLyRfp07eOOyZw== -----END CERTIFICATE-----Generated at Mon Dec 15 16:56:40 2025 by rpki-client