This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft File: dBSRprEEM7mWFXVv3pMT8r4dPfA.mft (raw, json) Hash identifier: qotc/iv1kEISnahuLE0vhfNHA5dc/OQiWk1lwZx8lmI= Subject key identifier: 7D:A9:D2:DF:AD:28:E8:71:73:41:74:01:D0:5F:B4:28:7C:7F:35:05 Authority key identifier: 74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0 Certificate issuer: /CN=741491a6b10433b99615756fde9313f2be1d3df0 Certificate serial: 019B3E6CC517D99F7B45747801B7EB23355A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft Manifest number: 1263 Signing time: Sun 21 Dec 2025 01:01:14 +0000 Manifest this update: Sun 21 Dec 2025 01:01:14 +0000 Manifest next update: Mon 22 Dec 2025 01:01:14 +0000 Files and hashes: 1: dBSRprEEM7mWFXVv3pMT8r4dPfA.crl (hash: R6/GSMOUcjRdre9ChIQTkgV1HWE8RXmSt3CfIKqTgiM=) 2: kyN0WWkyKmvqixy5lWeDm8cyXsk.roa (hash: PvvB6yKuDqOU2looXNznQebEk8ZA6ldARR0PgTYG5Pg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:c5:17:d9:9f:7b:45:74:78:01:b7:eb:23:35:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=741491a6b10433b99615756fde9313f2be1d3df0 Validity Not Before: Dec 21 01:01:14 2025 GMT Not After : Dec 22 01:01:14 2025 GMT Subject: CN=7da9d2dfad28e87173417401d05fb4287c7f3505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6e:9f:5a:4e:18:80:1d:db:9d:e7:77:0a:d5: b9:fc:f9:87:cb:59:88:f0:b7:61:f0:60:10:65:16: 3a:72:b3:cf:55:70:ae:08:05:70:5b:76:03:b1:cd: 7c:0f:d2:94:90:74:44:63:09:ef:15:09:7f:8c:2f: 0f:ae:c8:c2:ff:23:22:c5:4a:ce:22:75:d2:fd:68: ab:48:33:91:05:76:51:41:68:46:d5:e7:7f:76:b4: 94:03:67:3c:69:62:9f:48:c9:7a:f5:9b:6e:c3:47: 6a:3a:e6:c6:ab:41:52:bf:d4:b5:64:f6:41:80:2d: 8a:96:dc:d2:dd:48:56:31:06:4d:1c:a8:95:9b:8e: 46:df:96:91:0a:e9:7d:ab:41:41:7a:11:72:b8:02: 44:40:28:a4:64:49:86:3d:fb:06:c1:4e:da:4e:12: 0e:b7:8c:4f:46:76:49:ba:06:71:4a:ac:36:db:81: 7c:e5:88:5c:f8:a7:b2:65:33:29:bf:be:86:a9:c3: 20:ff:43:52:f8:60:f5:b0:75:8c:58:50:a1:4d:1d: 25:40:3f:85:13:89:b4:fe:ca:15:31:b1:84:9d:6a: b4:5e:0a:b3:11:10:c2:ac:0c:13:45:2c:f2:4a:1c: ff:cf:ca:3f:da:b6:3f:88:d1:b7:9f:f6:d8:c0:23: a9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A9:D2:DF:AD:28:E8:71:73:41:74:01:D0:5F:B4:28:7C:7F:35:05 X509v3 Authority Key Identifier: keyid:74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:1d:63:ed:32:51:78:3b:5e:60:4d:4f:5a:48:de:ce:07:1c: 2f:61:48:b8:8b:d9:76:3d:12:67:67:1f:28:c9:85:72:e5:6e: 50:7f:90:dc:69:fa:b4:14:79:27:ed:a9:09:87:d1:54:01:68: 41:eb:39:73:9d:ba:bf:1a:9d:75:a1:13:2a:c1:c5:c2:b2:6f: 7c:7a:03:0a:2c:1d:d6:a3:50:21:aa:c3:c1:3f:0d:39:97:57: db:3a:c8:04:c8:4c:a5:f2:84:49:f4:1d:64:dc:82:86:54:a0: 93:d0:2c:c1:99:03:15:df:3b:3f:23:55:c0:66:9c:89:70:dc: 22:6e:b1:8e:32:b1:91:75:37:bd:82:74:a0:bd:ce:42:3c:fb: 7f:ec:99:7d:51:1a:6d:4a:0d:54:cb:6c:80:7e:ea:9c:b5:44: 76:3b:9a:be:a4:40:cf:94:cd:f4:cd:9d:5f:54:70:df:38:c6: f4:94:e2:c0:58:bd:9b:5f:18:99:bd:56:41:98:2c:d8:ba:b9: 68:7c:33:35:70:de:f7:1d:35:60:ad:47:36:99:ef:c1:2b:ff: 89:fb:b5:3c:a2:e9:0b:2a:3f:81:a9:a2:68:4c:ef:2d:52:8c: 23:ef:17:ed:4b:86:06:31:c1:e4:e3:27:00:6d:b2:a1:d7:63: 69:08:a1:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bMUX2Z97RXR4AbfrIzVaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MTQ5MWE2YjEwNDMzYjk5NjE1NzU2ZmRlOTMxM2YyYmUx ZDNkZjAwHhcNMjUxMjIxMDEwMTE0WhcNMjUxMjIyMDEwMTE0WjAzMTEwLwYDVQQD Eyg3ZGE5ZDJkZmFkMjhlODcxNzM0MTc0MDFkMDVmYjQyODdjN2YzNTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApm6fWk4YgB3bned3CtW5/PmHy1mI 8Ldh8GAQZRY6crPPVXCuCAVwW3YDsc18D9KUkHREYwnvFQl/jC8PrsjC/yMixUrO InXS/WirSDORBXZRQWhG1ed/drSUA2c8aWKfSMl69Ztuw0dqOubGq0FSv9S1ZPZB gC2KltzS3UhWMQZNHKiVm45G35aRCul9q0FBehFyuAJEQCikZEmGPfsGwU7aThIO t4xPRnZJugZxSqw224F85Yhc+KeyZTMpv76GqcMg/0NS+GD1sHWMWFChTR0lQD+F E4m0/soVMbGEnWq0XgqzERDCrAwTRSzyShz/z8o/2rY/iNG3n/bYwCOp3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH2p0t+tKOhxc0F0AdBftCh8fzUFMB8GA1UdIwQY MBaAFHQUkaaxBDO5lhV1b96TE/K+HT3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9mNTRjYjMtZWJhZS00NmIyLThiMTct ODRiNTc2OTNjN2E4LzEvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9mNTRjYjMtZWJhZS00NmIyLThiMTctODRiNTc2OTNjN2E4 LzEvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATB1j7TJR eDteYE1PWkjezgccL2FIuIvZdj0SZ2cfKMmFcuVuUH+Q3Gn6tBR5J+2pCYfRVAFo Qes5c526vxqddaETKsHFwrJvfHoDCiwd1qNQIarDwT8NOZdX2zrIBMhMpfKESfQd ZNyChlSgk9AswZkDFd87PyNVwGaciXDcIm6xjjKxkXU3vYJ0oL3OQjz7f+yZfVEa bUoNVMtsgH7qnLVEdjuavqRAz5TN9M2dX1Rw3zjG9JTiwFi9m18Ymb1WQZgs2Lq5 aHwzNXDe9x01YK1HNpnvwSv/ifu1PKLpCyo/gamiaEzvLVKMI+8X7UuGBjHB5OMn AG2yoddjaQihRg== -----END CERTIFICATE-----Generated at Sun Dec 21 07:59:41 2025 by rpki-client