This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft File: dBSRprEEM7mWFXVv3pMT8r4dPfA.mft (raw, json) Hash identifier: Xh0qZQPbI45hX18+hl8RQ4rzpOg+yJAMF+MZUuUOz1I= Subject key identifier: 3F:CB:1C:33:FE:BE:D6:71:D9:4B:10:18:6B:B1:77:DF:F2:B2:97:7F Authority key identifier: 74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0 Certificate issuer: /CN=741491a6b10433b99615756fde9313f2be1d3df0 Certificate serial: 019B4249D9DA417C28AAB60A8E44E2BF7F11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft Manifest number: 1265 Signing time: Sun 21 Dec 2025 19:01:34 +0000 Manifest this update: Sun 21 Dec 2025 19:01:34 +0000 Manifest next update: Mon 22 Dec 2025 19:01:34 +0000 Files and hashes: 1: dBSRprEEM7mWFXVv3pMT8r4dPfA.crl (hash: aokoKjavYJ/9IWaelkkDvKK5jo6dvB9nyOz//zoytdU=) 2: kyN0WWkyKmvqixy5lWeDm8cyXsk.roa (hash: PvvB6yKuDqOU2looXNznQebEk8ZA6ldARR0PgTYG5Pg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:d9:da:41:7c:28:aa:b6:0a:8e:44:e2:bf:7f:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=741491a6b10433b99615756fde9313f2be1d3df0 Validity Not Before: Dec 21 19:01:34 2025 GMT Not After : Dec 22 19:01:34 2025 GMT Subject: CN=3fcb1c33febed671d94b10186bb177dff2b2977f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9f:03:7d:06:1a:ce:d6:8b:12:d6:bb:29:cc: af:50:26:d5:dc:83:cb:76:d5:3a:88:0e:48:6d:04: 11:66:ab:a5:d7:92:a2:ba:17:42:30:2a:1b:31:24: 3d:de:2c:03:87:38:c4:7c:a4:fd:bb:26:54:c9:ef: 13:fa:63:a7:cd:76:d8:bc:95:d4:42:2f:01:4b:27: f7:8d:2f:46:25:8c:18:7f:7c:92:6d:57:11:a3:d9: f6:d8:0d:90:9d:50:1f:46:59:e8:6a:0a:c8:05:57: 41:31:6d:01:dd:53:90:15:e0:a7:9e:93:c7:e3:0c: fe:44:b3:92:e7:ee:6f:67:3e:5b:16:d9:98:65:fa: e0:30:83:b4:e4:c7:56:e8:ce:2d:b6:a9:87:fb:40: 67:96:d7:d3:5e:fb:ef:cc:b7:21:30:60:be:56:64: 92:93:c6:93:60:77:9a:4c:d2:f8:bf:4c:d8:74:72: 32:08:c2:20:c8:76:ae:f2:43:91:c0:55:91:f4:db: 5c:bd:15:50:1e:15:14:01:de:a6:c5:01:44:22:27: 65:22:b7:5c:76:ad:40:6e:f8:1b:a4:3a:47:03:6b: c1:13:7c:b3:bb:01:f6:07:87:8b:b9:e0:e5:dd:0c: 1d:79:17:90:f9:d0:f2:2d:72:40:d8:ac:e3:94:41: c0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:CB:1C:33:FE:BE:D6:71:D9:4B:10:18:6B:B1:77:DF:F2:B2:97:7F X509v3 Authority Key Identifier: keyid:74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:ae:f4:65:ff:b9:ae:f9:16:fa:64:d9:36:61:ef:d3:1e:53: f7:35:67:3f:c1:32:21:18:e0:5c:2a:18:53:43:7f:80:7b:5b: 6b:a1:d2:9c:4a:71:b4:2b:f6:a8:b5:12:34:f9:84:49:1c:07: c3:3e:02:72:fb:9c:95:f6:0d:20:2b:e6:4c:cd:55:af:57:e6: 18:88:35:66:db:b1:03:3f:e8:e7:8b:7a:eb:36:3c:c3:1e:06: 92:b2:ed:ef:6e:06:de:33:03:52:2a:b5:d4:b1:fd:3f:df:cc: b4:4c:42:3e:13:90:1c:c1:c3:93:ee:7a:dd:3c:ae:2e:6b:e4: 15:86:cd:86:7f:ce:17:49:13:90:41:46:b9:e5:49:26:2b:60: 6f:34:34:3b:dd:02:84:50:69:e8:2a:23:57:1a:5f:58:51:6e: 7a:d0:87:14:c9:fb:b0:69:31:d8:81:b5:4a:45:fd:83:b6:7b: fd:2d:08:82:3c:f7:3c:c0:5d:db:8e:20:c4:f3:77:99:80:43: 93:16:b9:95:03:2d:32:f6:00:76:6a:07:e3:d2:25:2b:7b:db: ff:42:4d:35:fe:72:0a:09:07:7b:a4:b6:a1:03:02:b4:ff:78: d6:1d:73:be:d3:0e:c9:b8:c8:99:69:5b:b6:d6:48:45:05:77: f1:8f:3a:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSdnaQXwoqrYKjkTiv38RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MTQ5MWE2YjEwNDMzYjk5NjE1NzU2ZmRlOTMxM2YyYmUx ZDNkZjAwHhcNMjUxMjIxMTkwMTM0WhcNMjUxMjIyMTkwMTM0WjAzMTEwLwYDVQQD EygzZmNiMWMzM2ZlYmVkNjcxZDk0YjEwMTg2YmIxNzdkZmYyYjI5NzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ8DfQYaztaLEta7KcyvUCbV3IPL dtU6iA5IbQQRZqul15KiuhdCMCobMSQ93iwDhzjEfKT9uyZUye8T+mOnzXbYvJXU Qi8BSyf3jS9GJYwYf3ySbVcRo9n22A2QnVAfRlnoagrIBVdBMW0B3VOQFeCnnpPH 4wz+RLOS5+5vZz5bFtmYZfrgMIO05MdW6M4ttqmH+0BnltfTXvvvzLchMGC+VmSS k8aTYHeaTNL4v0zYdHIyCMIgyHau8kORwFWR9NtcvRVQHhUUAd6mxQFEIidlIrdc dq1AbvgbpDpHA2vBE3yzuwH2B4eLueDl3QwdeReQ+dDyLXJA2KzjlEHALwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/LHDP+vtZx2UsQGGuxd9/yspd/MB8GA1UdIwQY MBaAFHQUkaaxBDO5lhV1b96TE/K+HT3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9mNTRjYjMtZWJhZS00NmIyLThiMTct ODRiNTc2OTNjN2E4LzEvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9mNTRjYjMtZWJhZS00NmIyLThiMTctODRiNTc2OTNjN2E4 LzEvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW670Zf+5 rvkW+mTZNmHv0x5T9zVnP8EyIRjgXCoYU0N/gHtba6HSnEpxtCv2qLUSNPmESRwH wz4CcvuclfYNICvmTM1Vr1fmGIg1ZtuxAz/o54t66zY8wx4GkrLt724G3jMDUiq1 1LH9P9/MtExCPhOQHMHDk+563TyuLmvkFYbNhn/OF0kTkEFGueVJJitgbzQ0O90C hFBp6CojVxpfWFFuetCHFMn7sGkx2IG1SkX9g7Z7/S0Igjz3PMBd244gxPN3mYBD kxa5lQMtMvYAdmoH49IlK3vb/0JNNf5yCgkHe6S2oQMCtP941h1zvtMOybjImWlb ttZIRQV38Y86dA== -----END CERTIFICATE-----Generated at Sun Dec 21 23:10:35 2025 by rpki-client