This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft File: DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft (raw, json) Hash identifier: A+/Qwj+lNs6aGeMEadpVLh85xUwhlwj8tC6FYjoLavo= Subject key identifier: BB:EE:D1:10:AE:09:B1:32:06:C7:75:81:60:6D:79:D7:B6:DB:CC:86 Authority key identifier: 0D:20:87:B0:F6:71:6D:23:C8:D2:3E:B3:D0:39:2B:6B:F6:42:AD:4B Certificate issuer: /CN=0d2087b0f6716d23c8d23eb3d0392b6bf642ad4b Certificate serial: 019B23D15AF05D5F73DCF04739221D34DD5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft Manifest number: 1784 Signing time: Mon 15 Dec 2025 21:01:21 +0000 Manifest this update: Mon 15 Dec 2025 21:01:21 +0000 Manifest next update: Tue 16 Dec 2025 21:01:21 +0000 Files and hashes: 1: BCBgNqu47uxxNNiHpeHJ8N3bbPk.roa (hash: YwTUOz8aV/A2kQXL80C7PIKK4Uk0yf33ChXiFW3offA=) 2: CQXjCa3yi8toyI8D2iyn1nJHCCE.roa (hash: zzTAvRa0dIhKCaLz0Z33rjK8d1jpJKtgjFLfVr4tcRc=) 3: C_6jHHvmJCuXf7-9ZrzZKkeinQ0.roa (hash: DpUPOeeCn88xeSleMuuST/hLTdDc3MQtSglU/x83oyg=) 4: DSCHsPZxbSPI0j6z0Dkra_ZCrUs.crl (hash: Iq/chFttDytsV2ZsADUOBdHnrc0d5FkhbdrqAQhQ8Tc=) 5: GnA_U6yrJNcD4I305e9_wWN89yk.roa (hash: 2luzlca7nkI+/OgJSfsF0VSesUNyR6ggunt3bmajK+c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:d1:5a:f0:5d:5f:73:dc:f0:47:39:22:1d:34:dd:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d2087b0f6716d23c8d23eb3d0392b6bf642ad4b Validity Not Before: Dec 15 21:01:21 2025 GMT Not After : Dec 16 21:01:21 2025 GMT Subject: CN=bbeed110ae09b13206c77581606d79d7b6dbcc86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a3:e9:2a:86:c3:24:6a:10:55:1a:af:36:59: 29:6c:78:e1:3f:60:b2:22:f0:e2:0c:5e:8f:1f:e4: 43:1c:2d:e4:3d:aa:07:ab:37:09:01:ed:36:91:0a: 33:0c:cf:58:26:1c:75:31:ee:28:53:79:ce:86:d8: 84:df:5d:e3:63:18:d8:52:86:02:a6:05:42:b7:ad: 15:e1:9c:53:26:5e:6a:5c:70:df:c5:33:a1:a9:62: 59:4d:41:38:03:1c:81:7f:89:ba:61:fd:d7:13:62: e2:03:4a:4b:a7:da:f7:09:2d:30:44:25:de:f5:56: c1:5c:69:85:62:8e:4d:c3:86:8e:61:a6:58:60:9c: 69:9e:4b:cd:89:57:fd:c0:65:c8:2d:01:ef:b3:76: 05:7b:7d:80:b9:3e:e8:c8:f6:cb:f5:8e:a5:42:8b: 85:25:ff:04:44:ed:fb:7b:67:34:9a:cc:57:63:48: 81:5d:dd:0d:9e:a3:66:4b:9c:07:ca:55:fe:7f:81: 38:18:ba:6d:8b:51:15:e5:0e:82:97:86:8e:53:9a: 42:2a:42:e6:8b:06:a5:e6:9c:6f:a8:79:04:03:4e: ab:9a:1d:a0:a9:26:1a:40:c6:8d:75:d6:76:64:1a: 77:8b:84:2e:d6:16:39:26:ce:5d:4f:05:41:11:b1: 84:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:EE:D1:10:AE:09:B1:32:06:C7:75:81:60:6D:79:D7:B6:DB:CC:86 X509v3 Authority Key Identifier: keyid:0D:20:87:B0:F6:71:6D:23:C8:D2:3E:B3:D0:39:2B:6B:F6:42:AD:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:5e:0b:f2:92:60:96:54:91:d2:81:e7:83:d7:2b:3d:48:ff: ff:fb:aa:23:89:32:1f:97:76:80:1d:46:54:71:a4:b1:a5:e8: 52:2e:f3:ab:54:7c:83:be:be:db:2f:51:db:41:86:a7:a6:4a: 3a:6b:e8:3d:80:3a:db:16:20:52:2d:c4:fd:9f:25:ec:a3:a5: 5a:e2:f4:6c:58:04:74:e8:2d:ab:7e:23:bd:a8:f3:46:16:a9: 8b:77:60:2f:44:cb:09:9a:8f:c3:a8:ec:10:df:3a:92:58:93: 83:8a:ce:12:e5:33:c2:13:07:7c:07:a9:c1:3c:01:11:d4:3a: c9:7f:47:a0:3c:62:48:e9:da:f1:be:14:47:55:82:e6:2f:42: 2a:c1:1e:03:f7:8f:91:eb:e4:5d:a8:a4:c2:ac:53:4a:9b:52: 43:8b:b4:db:70:c6:4b:94:45:ad:6d:11:10:9d:4d:93:aa:75: 2d:60:17:4a:f9:ce:d1:fe:29:aa:85:f6:8e:8b:31:49:6f:8f: 31:3d:6c:cc:0e:1c:0c:7f:31:09:8e:9a:bb:63:4a:07:5d:66: b9:de:90:63:d3:fe:4e:c4:4a:4e:fe:69:42:9b:a0:a2:5f:65: 20:d9:9d:12:8d:fb:be:cc:58:cd:78:74:1e:e0:61:bf:8f:30: 9b:3d:08:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsj0VrwXV9z3PBHOSIdNN1bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMjA4N2IwZjY3MTZkMjNjOGQyM2ViM2QwMzkyYjZiZjY0 MmFkNGIwHhcNMjUxMjE1MjEwMTIxWhcNMjUxMjE2MjEwMTIxWjAzMTEwLwYDVQQD EyhiYmVlZDExMGFlMDliMTMyMDZjNzc1ODE2MDZkNzlkN2I2ZGJjYzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aPpKobDJGoQVRqvNlkpbHjhP2Cy IvDiDF6PH+RDHC3kPaoHqzcJAe02kQozDM9YJhx1Me4oU3nOhtiE313jYxjYUoYC pgVCt60V4ZxTJl5qXHDfxTOhqWJZTUE4AxyBf4m6Yf3XE2LiA0pLp9r3CS0wRCXe 9VbBXGmFYo5Nw4aOYaZYYJxpnkvNiVf9wGXILQHvs3YFe32AuT7oyPbL9Y6lQouF Jf8ERO37e2c0msxXY0iBXd0NnqNmS5wHylX+f4E4GLpti1EV5Q6Cl4aOU5pCKkLm iwal5pxvqHkEA06rmh2gqSYaQMaNddZ2ZBp3i4Qu1hY5Js5dTwVBEbGEOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvu0RCuCbEyBsd1gWBtede228yGMB8GA1UdIwQY MBaAFA0gh7D2cW0jyNI+s9A5K2v2Qq1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFNDSHNQWnhiU1BJMGo2ejBEa3JhX1pDclVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9mY2I3MjktYzI4OC00ZTE1LTkzODQt YTIwZDJkNzUxZWI1LzEvRFNDSHNQWnhiU1BJMGo2ejBEa3JhX1pDclVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9mY2I3MjktYzI4OC00ZTE1LTkzODQtYTIwZDJkNzUxZWI1 LzEvRFNDSHNQWnhiU1BJMGo2ejBEa3JhX1pDclVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuV4L8pJg llSR0oHng9crPUj///uqI4kyH5d2gB1GVHGksaXoUi7zq1R8g76+2y9R20GGp6ZK OmvoPYA62xYgUi3E/Z8l7KOlWuL0bFgEdOgtq34jvajzRhapi3dgL0TLCZqPw6js EN86kliTg4rOEuUzwhMHfAepwTwBEdQ6yX9HoDxiSOna8b4UR1WC5i9CKsEeA/eP kevkXaikwqxTSptSQ4u023DGS5RFrW0REJ1Nk6p1LWAXSvnO0f4pqoX2josxSW+P MT1szA4cDH8xCY6au2NKB11mud6QY9P+TsRKTv5pQpugol9lINmdEo37vsxYzXh0 HuBhv48wmz0IgQ== -----END CERTIFICATE-----Generated at Tue Dec 16 01:00:01 2025 by rpki-client