This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft File: DSMGTjwn7JK36rZnZJ0gTlZzg44.mft (raw, json) Hash identifier: zbb6UU6ZUyU2purUt6NdjFxQhVVdaB1/FGUCoeflxnA= Subject key identifier: 84:03:54:97:F0:14:1C:17:BA:AD:C9:EB:9C:BF:70:8E:05:44:1C:73 Authority key identifier: 0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E Certificate issuer: /CN=0d23064e3c27ec92b7eab667649d204e5673838e Certificate serial: 019B3F11A543DCFEAD4A44762B954BE24585 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft Manifest number: 128D Signing time: Sun 21 Dec 2025 04:01:19 +0000 Manifest this update: Sun 21 Dec 2025 04:01:19 +0000 Manifest next update: Mon 22 Dec 2025 04:01:19 +0000 Files and hashes: 1: AiN7Ez2w_b0YE1rusXobhUE3Svs.roa (hash: ZSIj8QVrkX7C1hvAMfX1/++sMORTKY7694MSitrCN1I=) 2: DSMGTjwn7JK36rZnZJ0gTlZzg44.crl (hash: 5awfx7r+pCG1/94uenVx3/Cvq2xdZHGwtMXq8p9F+iw=) 3: YA4coPbjcwqSnvPjF4zJfKILsGk.roa (hash: k8y/R8lkcGetmx+8pflXY4l14HDBBXn9CJweDPgs5YQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:a5:43:dc:fe:ad:4a:44:76:2b:95:4b:e2:45:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d23064e3c27ec92b7eab667649d204e5673838e Validity Not Before: Dec 21 04:01:19 2025 GMT Not After : Dec 22 04:01:19 2025 GMT Subject: CN=84035497f0141c17baadc9eb9cbf708e05441c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:54:04:f6:53:9b:fe:6a:78:11:5b:90:ae:b8: c9:7c:24:85:af:9a:83:f4:9c:74:1e:d0:4b:04:29: 05:7d:e0:1f:a0:4f:73:49:de:ca:bf:13:58:4e:7f: bd:c2:98:7b:19:a1:72:be:f3:b7:34:be:f4:94:87: 3d:ec:4f:19:cb:e5:e6:c8:63:b6:38:e7:56:49:57: 8a:9a:79:a7:46:e1:01:e5:cf:58:47:c0:d6:db:9f: c9:f8:a9:f5:62:15:7a:6b:bc:72:63:e8:71:58:d9: 3c:04:30:b9:43:f0:91:e0:ee:b1:c0:cf:a3:c2:b8: 4f:ab:da:04:7f:38:ee:55:a9:30:85:29:6f:4b:4f: 1e:42:b3:50:b7:a0:bd:80:cc:3e:9f:c8:b0:31:07: 45:fe:f9:2c:7e:e0:51:6b:fa:34:f9:26:9b:e3:32: 93:37:59:5a:e4:2d:a2:f1:7f:1a:09:0a:fe:3e:eb: d5:01:12:98:7b:d6:a0:27:4c:bd:39:57:83:ba:cd: fc:b5:d3:cf:ab:27:52:50:e6:86:09:6d:e5:6c:2e: 6b:ed:8f:55:72:58:a1:17:89:0b:66:97:05:6b:68: 4a:48:49:1f:84:63:35:2b:34:0e:00:fc:28:6c:c5: 19:bb:a4:83:e8:a9:06:07:d1:f4:38:25:6c:09:0f: 22:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:03:54:97:F0:14:1C:17:BA:AD:C9:EB:9C:BF:70:8E:05:44:1C:73 X509v3 Authority Key Identifier: keyid:0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:74:63:b7:1e:10:bc:2a:95:15:37:d5:2e:6f:d5:77:6f:6c: 70:e8:2f:6b:e9:c1:2e:15:1f:7f:13:94:76:5a:ba:5b:16:af: e7:bc:b0:82:dd:7e:0f:75:13:04:7a:88:3a:02:f6:56:cb:67: ee:8f:94:b1:f0:7d:be:95:3a:ee:c9:16:c7:30:21:5b:98:3d: 35:b6:82:64:92:d6:f7:80:c9:69:50:9f:16:5c:61:96:25:5b: 88:9a:21:80:89:ea:60:96:41:c5:5c:78:3e:df:c0:23:1a:7f: d5:9f:be:fa:83:12:0d:cd:d6:b2:84:f8:17:7a:29:0d:3f:46: 03:ac:5e:99:c7:7d:cc:75:82:2c:40:7a:f9:3b:50:38:90:0d: cb:fb:6f:ee:a8:01:9b:88:3d:f0:cc:d5:27:9e:2c:28:03:10: b0:f5:4a:60:f8:bb:6e:02:04:b8:00:82:c6:44:ea:b1:fb:d2: 4d:f7:8b:e4:39:f9:86:4e:55:dd:e0:f0:23:b9:f0:cb:7e:81: fe:86:0f:40:a4:73:42:c9:6e:b3:88:9c:e5:c7:b1:68:9f:c1: 3a:da:b3:3f:e2:a1:fb:b0:36:fa:b8:4e:6e:40:8d:b8:81:aa: 81:b2:d0:4a:09:91:e6:31:bc:98:80:86:d4:9c:bb:b4:d3:16: 45:c1:a4:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EaVD3P6tSkR2K5VL4kWFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMjMwNjRlM2MyN2VjOTJiN2VhYjY2NzY0OWQyMDRlNTY3 MzgzOGUwHhcNMjUxMjIxMDQwMTE5WhcNMjUxMjIyMDQwMTE5WjAzMTEwLwYDVQQD Eyg4NDAzNTQ5N2YwMTQxYzE3YmFhZGM5ZWI5Y2JmNzA4ZTA1NDQxYzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6VQE9lOb/mp4EVuQrrjJfCSFr5qD 9Jx0HtBLBCkFfeAfoE9zSd7KvxNYTn+9wph7GaFyvvO3NL70lIc97E8Zy+XmyGO2 OOdWSVeKmnmnRuEB5c9YR8DW25/J+Kn1YhV6a7xyY+hxWNk8BDC5Q/CR4O6xwM+j wrhPq9oEfzjuVakwhSlvS08eQrNQt6C9gMw+n8iwMQdF/vksfuBRa/o0+Sab4zKT N1la5C2i8X8aCQr+PuvVARKYe9agJ0y9OVeDus38tdPPqydSUOaGCW3lbC5r7Y9V clihF4kLZpcFa2hKSEkfhGM1KzQOAPwobMUZu6SD6KkGB9H0OCVsCQ8iPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQDVJfwFBwXuq3J65y/cI4FRBxzMB8GA1UdIwQY MBaAFA0jBk48J+ySt+q2Z2SdIE5Wc4OOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFNNR1Rqd243SkszNnJablpKMGdUbFp6ZzQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83MmZhZWQtYThmOC00YTMzLThkZGMt NWNlZjA0Yjc5NzM3LzEvRFNNR1Rqd243SkszNnJablpKMGdUbFp6ZzQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS83MmZhZWQtYThmOC00YTMzLThkZGMtNWNlZjA0Yjc5NzM3 LzEvRFNNR1Rqd243SkszNnJablpKMGdUbFp6ZzQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADnRjtx4Q vCqVFTfVLm/Vd29scOgva+nBLhUffxOUdlq6Wxav57ywgt1+D3UTBHqIOgL2Vstn 7o+UsfB9vpU67skWxzAhW5g9NbaCZJLW94DJaVCfFlxhliVbiJohgInqYJZBxVx4 Pt/AIxp/1Z+++oMSDc3WsoT4F3opDT9GA6xemcd9zHWCLEB6+TtQOJANy/tv7qgB m4g98MzVJ54sKAMQsPVKYPi7bgIEuACCxkTqsfvSTfeL5Dn5hk5V3eDwI7nwy36B /oYPQKRzQslus4ic5cexaJ/BOtqzP+Kh+7A2+rhObkCNuIGqgbLQSgmR5jG8mICG 1Jy7tNMWRcGkBg== -----END CERTIFICATE-----Generated at Sun Dec 21 05:54:10 2025 by rpki-client