This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.mft File: dLMSaPL_fozq3x3pX5fwsdKxX5Y.mft (raw, json) Hash identifier: mIhhf1MsTsl6v6amPO+MZkQNld0sXrhhRi4gLWUGvFA= Subject key identifier: 55:66:55:E3:89:C6:85:45:CA:76:38:87:84:3D:CC:58:D4:1F:BA:B9 Authority key identifier: 74:B3:12:68:F2:FF:7E:8C:EA:DF:1D:E9:5F:97:F0:B1:D2:B1:5F:96 Certificate issuer: /CN=74b31268f2ff7e8ceadf1de95f97f0b1d2b15f96 Certificate serial: 019B2F9E9230623FF53D61EA4D36E381A2B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLMSaPL_fozq3x3pX5fwsdKxX5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.mft Manifest number: 1253 Signing time: Thu 18 Dec 2025 04:01:19 +0000 Manifest this update: Thu 18 Dec 2025 04:01:19 +0000 Manifest next update: Fri 19 Dec 2025 04:01:19 +0000 Files and hashes: 1: dLMSaPL_fozq3x3pX5fwsdKxX5Y.crl (hash: VgzkPvumlId2ic5qf54/emJExYKzXb+i9TTcxe3IDos=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/dLMSaPL_fozq3x3pX5fwsdKxX5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:92:30:62:3f:f5:3d:61:ea:4d:36:e3:81:a2:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b31268f2ff7e8ceadf1de95f97f0b1d2b15f96 Validity Not Before: Dec 18 04:01:19 2025 GMT Not After : Dec 19 04:01:19 2025 GMT Subject: CN=556655e389c68545ca763887843dcc58d41fbab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:1f:c1:6b:6d:da:1a:31:77:fb:39:0f:09:de: 7c:bf:80:b2:5c:43:fe:54:6a:f5:b4:5d:04:31:74: 7f:f4:7b:51:e1:b6:ad:e4:5a:16:76:45:b6:ed:cc: b8:66:f8:ed:68:66:d0:f9:77:f4:b0:b9:d0:b5:99: c6:2d:44:94:fa:d8:c9:82:67:af:4d:40:f1:91:c8: 7c:78:80:8f:dc:32:df:ae:28:8a:97:fc:7c:56:1e: 3a:88:f9:30:c6:6c:8c:75:14:37:99:20:91:c9:95: a6:53:02:d2:bd:b7:db:3e:5e:69:74:7a:2c:13:2e: ab:31:02:3d:83:43:eb:89:9a:f8:62:bc:92:97:fd: 1d:2c:47:ed:2c:7c:c7:7c:23:59:e6:ef:49:3b:7d: 40:1c:a7:6e:d1:60:13:7f:82:b2:97:62:69:4a:17: 43:e7:35:27:ca:91:c7:d4:66:59:45:e0:a6:eb:88: c4:70:38:8e:bf:c7:26:6e:5c:21:12:43:b1:c7:de: 50:a7:8c:c9:95:95:ff:bd:85:7e:7b:1d:95:7c:ed: e3:27:e6:2f:26:c5:b8:e1:58:9a:ea:6a:62:1b:92: d7:1a:28:6a:0c:17:12:1f:f2:1f:94:e1:63:f2:ee: 3a:fd:99:32:59:68:c5:d8:bf:30:c6:4b:1b:17:b5: 84:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:66:55:E3:89:C6:85:45:CA:76:38:87:84:3D:CC:58:D4:1F:BA:B9 X509v3 Authority Key Identifier: keyid:74:B3:12:68:F2:FF:7E:8C:EA:DF:1D:E9:5F:97:F0:B1:D2:B1:5F:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLMSaPL_fozq3x3pX5fwsdKxX5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:b8:f9:3a:d7:49:6b:00:1e:22:c8:1d:7e:27:46:47:95:ed: 1b:f6:b9:54:57:76:6e:3b:00:50:a8:1f:91:e1:87:37:57:34: 8e:ea:8a:32:b4:03:22:e4:92:79:a0:9b:a6:a0:46:30:ea:92: cc:a4:c0:6a:a8:a2:5c:8d:61:83:41:50:24:94:6f:96:15:d4: 7a:d5:fd:ff:66:60:60:fe:20:30:cb:bd:c7:53:d5:b9:97:8d: 55:07:22:3f:65:9e:a3:2f:0c:55:2e:80:3e:6c:10:44:7b:21: 95:ec:b3:4f:df:a8:0a:a4:dc:04:c1:ef:04:94:1d:4d:01:bb: e9:8d:9e:a8:05:81:d0:0c:77:8f:92:8d:17:0d:41:fb:ef:3f: f7:38:61:54:21:44:b0:25:7a:e6:95:65:40:f8:d2:b4:4f:39: 21:35:f0:a0:a0:e4:28:b8:61:c4:b2:28:ae:ff:a3:23:17:f6: ae:4b:e4:37:62:cd:9e:9f:96:1e:fb:54:6b:00:97:fc:ea:eb: 4b:e3:34:d0:3c:b4:ac:ef:a3:3d:ab:d7:14:20:3e:ed:88:e5: 5a:2e:f4:94:2a:e2:77:73:9e:f6:e4:fa:60:58:7b:df:75:bc: 1b:ff:0b:8d:af:7d:be:d5:9a:73:b3:2d:26:2d:37:64:27:73: 4a:d6:21:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnpIwYj/1PWHqTTbjgaKxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YjMxMjY4ZjJmZjdlOGNlYWRmMWRlOTVmOTdmMGIxZDJi MTVmOTYwHhcNMjUxMjE4MDQwMTE5WhcNMjUxMjE5MDQwMTE5WjAzMTEwLwYDVQQD Eyg1NTY2NTVlMzg5YzY4NTQ1Y2E3NjM4ODc4NDNkY2M1OGQ0MWZiYWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5h/Ba23aGjF3+zkPCd58v4CyXEP+ VGr1tF0EMXR/9HtR4bat5FoWdkW27cy4ZvjtaGbQ+Xf0sLnQtZnGLUSU+tjJgmev TUDxkch8eICP3DLfriiKl/x8Vh46iPkwxmyMdRQ3mSCRyZWmUwLSvbfbPl5pdHos Ey6rMQI9g0PriZr4YrySl/0dLEftLHzHfCNZ5u9JO31AHKdu0WATf4Kyl2JpShdD 5zUnypHH1GZZReCm64jEcDiOv8cmblwhEkOxx95Qp4zJlZX/vYV+ex2VfO3jJ+Yv JsW44Via6mpiG5LXGihqDBcSH/IflOFj8u46/ZkyWWjF2L8wxksbF7WE4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFVmVeOJxoVFynY4h4Q9zFjUH7q5MB8GA1UdIwQY MBaAFHSzEmjy/36M6t8d6V+X8LHSsV+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZExNU2FQTF9mb3pxM3gzcFg1ZndzZEt4WDVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS85ZDkxMTItZjU3ZS00OWM3LWE5M2It ZDg1NDllZGY3Y2VmLzEvZExNU2FQTF9mb3pxM3gzcFg1ZndzZEt4WDVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS85ZDkxMTItZjU3ZS00OWM3LWE5M2ItZDg1NDllZGY3Y2Vm LzEvZExNU2FQTF9mb3pxM3gzcFg1ZndzZEt4WDVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhbj5OtdJ awAeIsgdfidGR5XtG/a5VFd2bjsAUKgfkeGHN1c0juqKMrQDIuSSeaCbpqBGMOqS zKTAaqiiXI1hg0FQJJRvlhXUetX9/2ZgYP4gMMu9x1PVuZeNVQciP2Weoy8MVS6A PmwQRHshleyzT9+oCqTcBMHvBJQdTQG76Y2eqAWB0Ax3j5KNFw1B++8/9zhhVCFE sCV65pVlQPjStE85ITXwoKDkKLhhxLIorv+jIxf2rkvkN2LNnp+WHvtUawCX/Orr S+M00Dy0rO+jPavXFCA+7YjlWi70lCrid3Oe9uT6YFh733W8G/8Lja99vtWac7Mt Ji03ZCdzStYhSw== -----END CERTIFICATE-----Generated at Thu Dec 18 11:14:24 2025 by rpki-client