This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft File: Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft (raw, json) Hash identifier: +turPmMgyt/JqYaQi7TxhD7w6UCUhTMrjW+BTWEs/z8= Subject key identifier: F7:B0:B3:88:25:6E:99:06:2E:03:6F:9F:87:47:3A:E7:CE:A3:3C:02 Authority key identifier: 0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22 Certificate issuer: /CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222 Certificate serial: 019B4DDFE3B09BCFED05856266463DF91B83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft Manifest number: 0CDD Signing time: Wed 24 Dec 2025 01:01:16 +0000 Manifest this update: Wed 24 Dec 2025 01:01:16 +0000 Manifest next update: Thu 25 Dec 2025 01:01:16 +0000 Files and hashes: 1: Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl (hash: 6WZRJ9//js3mnslGnOXHW59GJRvLnSK/rscWQGxNZYY=) 2: UpC6gDLL8NBJUYJh0fB1QdxJsxc.roa (hash: AMS5OmBsrOosO5V/m0O5SOOQUVpbn+jWhd8fpreEyHw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 01:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:df:e3:b0:9b:cf:ed:05:85:62:66:46:3d:f9:1b:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222 Validity Not Before: Dec 24 01:01:16 2025 GMT Not After : Dec 25 01:01:16 2025 GMT Subject: CN=f7b0b388256e99062e036f9f87473ae7cea33c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:04:e0:80:7b:37:6d:68:93:e4:89:3c:0e:c3: 0b:56:9b:98:1d:df:0b:5c:fc:31:32:9a:06:09:67: 66:1c:b4:d5:a2:29:f4:37:ca:63:5a:c7:7a:19:26: 9d:61:1c:4c:fd:63:36:82:b4:7c:2d:04:b8:5a:1a: a2:eb:cd:8e:d9:f8:86:06:bf:47:c7:01:3e:39:33: 2b:f1:62:5e:ac:1e:ec:59:ee:55:f4:d3:37:4c:08: 83:f9:f8:ea:c0:e7:d8:ca:90:0f:a2:fc:0d:49:63: 89:e3:59:7c:1f:fd:03:54:fd:ec:ec:b5:5a:72:f0: 32:70:c0:c9:90:a4:c2:a0:bd:d6:10:37:0d:4c:94: 84:8c:34:58:7f:23:9f:7c:2f:e8:4a:a7:9a:db:27: 46:2c:42:44:e8:3e:35:d4:cd:32:d7:ef:e1:75:4e: 89:4a:89:7a:11:7b:ad:25:35:70:11:f2:5d:3c:c3: d2:66:a6:1c:c3:69:10:e8:34:f4:d7:7e:e8:26:c3: e0:d0:bd:f4:21:28:50:ff:4a:ed:d8:b2:97:44:5c: 13:2a:24:0e:18:de:d6:0e:3f:a9:9e:27:87:9e:f4: c6:2c:f1:aa:e3:19:13:4b:4a:14:96:29:b2:fa:7a: 80:7a:7c:87:65:d9:50:1d:7c:7f:c6:c7:2e:6c:71: be:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B0:B3:88:25:6E:99:06:2E:03:6F:9F:87:47:3A:E7:CE:A3:3C:02 X509v3 Authority Key Identifier: keyid:0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:a5:79:15:3d:60:02:b3:0d:60:68:87:e3:15:1d:2e:06:31: 78:d7:8c:25:89:25:01:b6:71:d0:1f:20:6e:92:cc:51:3d:1a: ae:6e:68:d1:47:09:d0:0a:46:fd:a7:60:9a:bd:89:8e:c4:b1: df:f6:4a:43:94:be:11:8d:a7:8c:b3:cb:34:8f:3e:9a:95:bb: 7b:a9:3a:8c:8e:6b:60:a3:58:6a:e2:14:b1:91:35:d5:76:18: 5b:b6:2f:90:54:a5:0b:41:73:21:63:67:b3:a9:b0:cb:a8:48: 64:c6:87:3d:89:1b:35:0a:e5:d9:a3:d5:a7:0a:00:d6:9c:24: b8:66:94:ac:f6:a9:14:05:84:51:af:e2:0a:55:0a:8e:1e:5b: dd:da:74:ce:71:b0:67:d3:d2:dc:91:6c:ec:51:4c:a7:62:25: 4b:10:c2:70:fd:85:dc:7f:44:95:80:06:ec:1c:8d:5e:8b:ec: 2f:99:63:5e:a2:3c:ce:9c:d5:a9:2c:0c:36:97:d5:93:0a:a2: c2:5e:29:a2:2e:f5:09:34:5d:0f:9d:64:50:10:9d:90:90:a5: 2f:bc:79:ea:f5:c7:d5:f4:3e:3a:ad:05:72:56:f8:db:dd:2a: 6e:06:e9:00:93:5f:6e:42:27:eb:73:a9:47:ce:53:53:cd:90: ce:67:54:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN3+Owm8/tBYViZkY9+RuDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlY2FiZTA2MWYyZDg5MGE4YzhiNDE4MWFkYmNhNmNhOTQz YmQyMjIwHhcNMjUxMjI0MDEwMTE2WhcNMjUxMjI1MDEwMTE2WjAzMTEwLwYDVQQD EyhmN2IwYjM4ODI1NmU5OTA2MmUwMzZmOWY4NzQ3M2FlN2NlYTMzYzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQTggHs3bWiT5Ik8DsMLVpuYHd8L XPwxMpoGCWdmHLTVoin0N8pjWsd6GSadYRxM/WM2grR8LQS4Whqi682O2fiGBr9H xwE+OTMr8WJerB7sWe5V9NM3TAiD+fjqwOfYypAPovwNSWOJ41l8H/0DVP3s7LVa cvAycMDJkKTCoL3WEDcNTJSEjDRYfyOffC/oSqea2ydGLEJE6D411M0y1+/hdU6J Sol6EXutJTVwEfJdPMPSZqYcw2kQ6DT0137oJsPg0L30IShQ/0rt2LKXRFwTKiQO GN7WDj+pnieHnvTGLPGq4xkTS0oUlimy+nqAenyHZdlQHXx/xscubHG+MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPews4glbpkGLgNvn4dHOufOozwCMB8GA1UdIwQY MBaAFA7KvgYfLYkKjItBga28psqUO9IiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHNxLUJoOHRpUXFNaTBHQnJieW15cFE3MGlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yZmQwMTktNzczZC00Yzk5LWFjZjUt MDRhMWY5NTQxM2Y3LzEvRHNxLUJoOHRpUXFNaTBHQnJieW15cFE3MGlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yZmQwMTktNzczZC00Yzk5LWFjZjUtMDRhMWY5NTQxM2Y3 LzEvRHNxLUJoOHRpUXFNaTBHQnJieW15cFE3MGlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApqV5FT1g ArMNYGiH4xUdLgYxeNeMJYklAbZx0B8gbpLMUT0arm5o0UcJ0ApG/adgmr2JjsSx 3/ZKQ5S+EY2njLPLNI8+mpW7e6k6jI5rYKNYauIUsZE11XYYW7YvkFSlC0FzIWNn s6mwy6hIZMaHPYkbNQrl2aPVpwoA1pwkuGaUrPapFAWEUa/iClUKjh5b3dp0znGw Z9PS3JFs7FFMp2IlSxDCcP2F3H9ElYAG7ByNXovsL5ljXqI8zpzVqSwMNpfVkwqi wl4poi71CTRdD51kUBCdkJClL7x56vXH1fQ+Oq0Fclb4290qbgbpAJNfbkIn63Op R85TU82QzmdUBg== -----END CERTIFICATE-----Generated at Wed Dec 24 10:07:36 2025 by rpki-client