This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft File: DSXP1Saq1ypMj0cz-soPTbf592c.mft (raw, json) Hash identifier: Uo3QCRuegGyx4yvZbpIDpR6MG99wwy0UIt/mNdwVZYE= Subject key identifier: AD:CA:91:58:59:00:EB:40:77:90:C9:61:00:2C:85:22:BF:FD:AA:97 Authority key identifier: 0D:25:CF:D5:26:AA:D7:2A:4C:8F:47:33:FA:CA:0F:4D:B7:F9:F7:67 Certificate issuer: /CN=0d25cfd526aad72a4c8f4733faca0f4db7f9f767 Certificate serial: 019B25BFD8D32C28370F818D2288465CD8BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft Manifest number: 0138 Signing time: Tue 16 Dec 2025 06:01:28 +0000 Manifest this update: Tue 16 Dec 2025 06:01:28 +0000 Manifest next update: Wed 17 Dec 2025 06:01:28 +0000 Files and hashes: 1: 1-VF1HeLc0TVIs0YYW6YwoXZdo8c.asa (hash: KLFgdmKccdlHIAP3ZnS+JYnP7Rs5RZwMaM2WwUNBXZU=) 2: DSXP1Saq1ypMj0cz-soPTbf592c.crl (hash: 3d9oWEojyaBfnQ96QKCUr6R03nrSLvg9sKzcRwTNwUc=) 3: zQtGsgzqOK-0hoW-F87Yx5VVUg0.roa (hash: PEtW7YagTcXDXA2f9YO+bwyb8k/56XuZ1pNjFIGkhUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:bf:d8:d3:2c:28:37:0f:81:8d:22:88:46:5c:d8:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d25cfd526aad72a4c8f4733faca0f4db7f9f767 Validity Not Before: Dec 16 06:01:28 2025 GMT Not After : Dec 17 06:01:28 2025 GMT Subject: CN=adca91585900eb407790c961002c8522bffdaa97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:87:67:d9:71:aa:ed:2d:58:e3:01:98:b1:f2: 7b:c3:e4:3f:15:0a:45:bd:69:db:bd:6e:2a:55:12: d7:cd:f8:48:aa:b0:46:4e:76:3c:36:14:6b:8a:c2: cc:ec:3e:29:35:bc:e8:d6:99:fb:f8:0a:77:76:43: 14:68:c3:69:0e:e1:46:d2:fc:31:b0:b4:12:56:c5: f6:67:e9:fd:dc:4c:f1:21:37:fc:85:24:fb:66:c6: 36:fa:ed:7e:b1:c8:81:a3:bc:66:12:50:66:87:4d: d7:c6:7d:47:bf:b2:74:4b:63:a1:9b:bb:da:cc:c2: 3d:39:00:99:18:44:f4:7f:0e:b8:78:32:f1:0e:8b: 7c:ae:c9:78:24:bb:b3:75:ef:ff:0c:c6:1a:8d:d6: 82:e1:ae:95:a6:24:25:85:c9:7d:fc:01:41:76:30: ba:f4:93:06:fa:cf:2c:0b:ae:a5:9e:93:01:b8:7a: a9:0a:76:89:3f:6e:71:2e:01:e3:78:fa:20:8a:1b: 47:d7:f3:b6:0e:0e:75:b8:8a:d0:76:92:8e:a6:c4: 29:0e:c2:7c:13:17:a8:d4:c0:26:40:79:2c:bb:0c: 1e:94:b4:f4:62:21:54:5b:06:15:dc:46:81:da:93: 3a:ea:02:28:79:e7:4e:91:d5:7c:eb:b3:32:93:20: d7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:CA:91:58:59:00:EB:40:77:90:C9:61:00:2C:85:22:BF:FD:AA:97 X509v3 Authority Key Identifier: keyid:0D:25:CF:D5:26:AA:D7:2A:4C:8F:47:33:FA:CA:0F:4D:B7:F9:F7:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:e0:8b:64:01:27:36:62:67:66:95:c6:1d:c8:30:a2:51:df: 4a:34:5f:59:0e:2f:bb:f2:6c:3f:c3:a1:94:d0:1c:82:1f:f6: 3b:75:f6:1f:54:18:af:61:89:3b:c0:95:0c:1d:31:c1:63:58: 09:bc:f5:ae:65:ef:98:6a:c4:46:66:75:29:b5:b7:55:9e:f5: 07:13:79:15:3f:89:e5:b6:58:08:ec:f7:21:bc:5b:b7:1f:f0: 43:86:79:5c:c4:96:0f:5a:76:4a:2f:c2:d9:30:a2:11:7c:88: 0e:cd:7f:00:c3:3d:58:32:ae:8a:9f:b6:16:e9:4f:b1:5c:9f: b0:35:83:7a:d1:46:e9:f2:fa:58:a1:fc:ba:bf:23:cc:67:0c: e5:1a:e0:cf:66:e7:f3:af:52:c0:66:c0:11:ed:b5:d2:b7:1d: 92:4e:2d:67:4f:d1:56:81:e7:e4:16:86:f0:64:a4:d8:a2:c8: 28:3a:3e:f8:09:fb:29:25:02:31:4d:ea:ad:ab:e6:11:a9:3e: 30:ec:34:6c:99:70:b8:22:7e:77:b1:fc:6d:e2:99:b9:a7:5e: ed:33:2f:b3:6e:07:0a:b8:e1:65:a6:da:cb:7c:54:f0:94:84: fd:64:68:e3:cb:5c:36:59:c3:83:44:db:e8:1a:e0:b6:fc:c4: 68:09:32:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslv9jTLCg3D4GNIohGXNi8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMjVjZmQ1MjZhYWQ3MmE0YzhmNDczM2ZhY2EwZjRkYjdm OWY3NjcwHhcNMjUxMjE2MDYwMTI4WhcNMjUxMjE3MDYwMTI4WjAzMTEwLwYDVQQD EyhhZGNhOTE1ODU5MDBlYjQwNzc5MGM5NjEwMDJjODUyMmJmZmRhYTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4dn2XGq7S1Y4wGYsfJ7w+Q/FQpF vWnbvW4qVRLXzfhIqrBGTnY8NhRrisLM7D4pNbzo1pn7+Ap3dkMUaMNpDuFG0vwx sLQSVsX2Z+n93EzxITf8hST7ZsY2+u1+sciBo7xmElBmh03Xxn1Hv7J0S2Ohm7va zMI9OQCZGET0fw64eDLxDot8rsl4JLuzde//DMYajdaC4a6VpiQlhcl9/AFBdjC6 9JMG+s8sC66lnpMBuHqpCnaJP25xLgHjePogihtH1/O2Dg51uIrQdpKOpsQpDsJ8 Exeo1MAmQHksuwwelLT0YiFUWwYV3EaB2pM66gIoeedOkdV867MykyDXawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK3KkVhZAOtAd5DJYQAshSK//aqXMB8GA1UdIwQY MBaAFA0lz9UmqtcqTI9HM/rKD023+fdnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFNYUDFTYXExeXBNajBjei1zb1BUYmY1OTJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS85NjI4MmYtNWEyOS00ZmRkLWFkZjkt ZDIxMDgzOGE0NmU2LzEvRFNYUDFTYXExeXBNajBjei1zb1BUYmY1OTJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS85NjI4MmYtNWEyOS00ZmRkLWFkZjktZDIxMDgzOGE0NmU2 LzEvRFNYUDFTYXExeXBNajBjei1zb1BUYmY1OTJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYOCLZAEn NmJnZpXGHcgwolHfSjRfWQ4vu/JsP8OhlNAcgh/2O3X2H1QYr2GJO8CVDB0xwWNY Cbz1rmXvmGrERmZ1KbW3VZ71BxN5FT+J5bZYCOz3Ibxbtx/wQ4Z5XMSWD1p2Si/C 2TCiEXyIDs1/AMM9WDKuip+2FulPsVyfsDWDetFG6fL6WKH8ur8jzGcM5Rrgz2bn 869SwGbAEe210rcdkk4tZ0/RVoHn5BaG8GSk2KLIKDo++An7KSUCMU3qravmEak+ MOw0bJlwuCJ+d7H8beKZuade7TMvs24HCrjhZabay3xU8JSE/WRo48tcNlnDg0Tb 6BrgtvzEaAkyZg== -----END CERTIFICATE-----Generated at Tue Dec 16 09:38:29 2025 by rpki-client