This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft File: DASLX4FSNcOT_qdh4H64uLv4f9M.mft (raw, json) Hash identifier: /ax13W+P8nZrN3dFC47z9HCCMm7v9gciqEn15Nd1CmI= Subject key identifier: 51:86:92:F0:64:BC:5B:D0:DA:57:A6:32:AC:64:DF:13:63:C8:B2:B0 Authority key identifier: 0C:04:8B:5F:81:52:35:C3:93:FE:A7:61:E0:7E:B8:B8:BB:F8:7F:D3 Certificate issuer: /CN=0c048b5f815235c393fea761e07eb8b8bbf87fd3 Certificate serial: 019B413685D8355C97D33B96593B02D0CB39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft Manifest number: 1790 Signing time: Sun 21 Dec 2025 14:00:50 +0000 Manifest this update: Sun 21 Dec 2025 14:00:50 +0000 Manifest next update: Mon 22 Dec 2025 14:00:50 +0000 Files and hashes: 1: 1XNJWBeFIM2IRAvxd79b-HcAo9o.roa (hash: FW3/MZh4Uk7LDpQNsxMFINYM6j9D7wIMnyrZzis42ZE=) 2: DASLX4FSNcOT_qdh4H64uLv4f9M.crl (hash: EDFURGFoE5paDIF7adWg/KL/HLYF3fIG0AREZcBmtEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.crl rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:85:d8:35:5c:97:d3:3b:96:59:3b:02:d0:cb:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c048b5f815235c393fea761e07eb8b8bbf87fd3 Validity Not Before: Dec 21 14:00:50 2025 GMT Not After : Dec 22 14:00:50 2025 GMT Subject: CN=518692f064bc5bd0da57a632ac64df1363c8b2b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e5:78:3d:68:16:42:2c:51:2c:16:05:b8:4e: b0:3d:20:ee:1e:91:53:e2:4d:9f:00:92:29:1b:19: c0:5e:2f:54:47:58:ce:7f:21:60:0e:35:ec:5c:14: 1c:8e:5c:2b:e8:45:9b:6e:9d:66:9c:82:5d:ab:e1: 8a:d5:45:7e:9d:8d:c0:6d:7c:ba:a8:d0:2d:b9:a0: 5d:52:0d:f2:eb:c9:7e:c5:c5:1c:f2:6f:2e:82:02: 7b:71:37:05:e0:2c:b2:81:3f:0d:63:4d:cb:54:d2: e0:b1:aa:22:cf:4b:a2:e8:56:48:9a:ea:d7:7f:28: c7:a9:06:d3:cb:10:7b:47:69:eb:66:73:fe:cf:5e: c7:6f:a5:71:6c:ad:e1:f2:6d:d6:26:39:bc:b8:16: 69:98:75:9e:ac:bd:18:dc:f9:27:01:0b:db:7e:cf: be:df:ef:f6:5c:dc:47:40:56:38:f1:18:1b:17:25: ad:44:2d:19:31:d5:9b:73:1d:63:70:f5:c6:31:9d: 92:b7:45:c5:83:12:8b:ba:72:85:b1:7f:91:e1:d1: 3a:d9:e3:3e:b2:af:4f:63:6c:be:37:bd:eb:f1:4f: 63:8b:7f:f0:0e:84:81:3a:92:dc:b3:8e:f2:89:f3: d0:51:62:d7:ab:c7:bf:17:aa:6f:ba:b7:5c:9a:42: f6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:86:92:F0:64:BC:5B:D0:DA:57:A6:32:AC:64:DF:13:63:C8:B2:B0 X509v3 Authority Key Identifier: keyid:0C:04:8B:5F:81:52:35:C3:93:FE:A7:61:E0:7E:B8:B8:BB:F8:7F:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:e7:68:af:f7:b6:e0:c7:2a:bc:e6:10:44:f8:1f:c5:ad:bc: c1:ea:19:02:68:32:73:73:0a:ac:59:d5:5d:a2:12:c0:75:a3: 19:a6:3d:9c:ba:c4:4d:47:89:7d:06:58:96:5d:34:ed:7d:2d: 15:57:48:e9:6f:77:f1:4b:71:44:72:bc:b1:74:e3:6f:6f:ea: 3e:b1:ff:e0:dd:00:0d:bf:dc:68:8e:96:47:eb:b0:4f:03:a8: 52:b5:d2:b9:d7:19:88:97:97:9f:b0:e6:ec:06:c1:9d:c3:aa: d8:58:c4:9b:ee:b3:21:b4:14:d7:ca:6a:c1:2d:f5:fe:e3:db: bc:da:92:b7:37:92:6b:f8:f7:ef:d4:18:65:31:c3:43:f1:ab: 3e:51:b7:b0:4d:62:3d:0a:11:35:2a:c2:df:9e:c2:cc:c5:22: db:42:9b:53:20:50:ea:e5:30:16:78:b5:a6:d1:40:0c:e4:0e: 51:6d:7f:58:aa:be:b0:6b:c6:5a:a3:3d:56:63:00:d4:d6:33: ff:81:8e:37:78:71:cd:4b:e9:f5:2f:b9:7e:94:e9:43:e7:60: 9a:37:9b:9c:e2:65:72:29:bb:1d:27:1f:2d:ca:5d:dc:d0:0f: 27:ca:31:48:ef:e8:4a:62:ad:ea:cf:db:91:b8:a9:4d:16:45: d6:b3:1a:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNoXYNVyX0zuWWTsC0Ms5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMDQ4YjVmODE1MjM1YzM5M2ZlYTc2MWUwN2ViOGI4YmJm ODdmZDMwHhcNMjUxMjIxMTQwMDUwWhcNMjUxMjIyMTQwMDUwWjAzMTEwLwYDVQQD Eyg1MTg2OTJmMDY0YmM1YmQwZGE1N2E2MzJhYzY0ZGYxMzYzYzhiMmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveV4PWgWQixRLBYFuE6wPSDuHpFT 4k2fAJIpGxnAXi9UR1jOfyFgDjXsXBQcjlwr6EWbbp1mnIJdq+GK1UV+nY3AbXy6 qNAtuaBdUg3y68l+xcUc8m8uggJ7cTcF4CyygT8NY03LVNLgsaoiz0ui6FZImurX fyjHqQbTyxB7R2nrZnP+z17Hb6VxbK3h8m3WJjm8uBZpmHWerL0Y3PknAQvbfs++ 3+/2XNxHQFY48RgbFyWtRC0ZMdWbcx1jcPXGMZ2St0XFgxKLunKFsX+R4dE62eM+ sq9PY2y+N73r8U9ji3/wDoSBOpLcs47yifPQUWLXq8e/F6pvurdcmkL29QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFGGkvBkvFvQ2lemMqxk3xNjyLKwMB8GA1UdIwQY MBaAFAwEi1+BUjXDk/6nYeB+uLi7+H/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREFTTFg0RlNOY09UX3FkaDRINjR1THY0ZjlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My82ZDdjMWMtOGViZC00MjQ2LTgzZjkt NWYzY2MzMThmMTgwLzEvREFTTFg0RlNOY09UX3FkaDRINjR1THY0ZjlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My82ZDdjMWMtOGViZC00MjQ2LTgzZjktNWYzY2MzMThmMTgw LzEvREFTTFg0RlNOY09UX3FkaDRINjR1THY0ZjlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZedor/e2 4McqvOYQRPgfxa28weoZAmgyc3MKrFnVXaISwHWjGaY9nLrETUeJfQZYll007X0t FVdI6W938UtxRHK8sXTjb2/qPrH/4N0ADb/caI6WR+uwTwOoUrXSudcZiJeXn7Dm 7AbBncOq2FjEm+6zIbQU18pqwS31/uPbvNqStzeSa/j379QYZTHDQ/GrPlG3sE1i PQoRNSrC357CzMUi20KbUyBQ6uUwFni1ptFADOQOUW1/WKq+sGvGWqM9VmMA1NYz /4GON3hxzUvp9S+5fpTpQ+dgmjebnOJlcim7HScfLcpd3NAPJ8oxSO/oSmKt6s/b kbipTRZF1rMa1A== -----END CERTIFICATE-----Generated at Sun Dec 21 15:36:50 2025 by rpki-client