This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft File: dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft (raw, json) Hash identifier: 8dH22/JZtPAQYGu9cCsMqYDTiuxNXVftxk/9WRPj7WA= Subject key identifier: D2:73:15:FC:95:75:28:48:5D:01:83:20:2B:3A:EC:DE:07:AF:D3:93 Authority key identifier: 75:FA:CB:07:F2:CC:B9:2E:EB:A8:78:54:C9:42:40:E4:F5:AC:8F:52 Certificate issuer: /CN=75facb07f2ccb92eeba87854c94240e4f5ac8f52 Certificate serial: 019B533D06F3D2BF0E52F9ED0496AFDFB67B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft Manifest number: 1795 Signing time: Thu 25 Dec 2025 02:01:06 +0000 Manifest this update: Thu 25 Dec 2025 02:01:06 +0000 Manifest next update: Fri 26 Dec 2025 02:01:06 +0000 Files and hashes: 1: dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl (hash: QVhH6yL2mVjVu34Yl6Dgbkk8J3A/8P7gP4xEwiuOeM4=) 2: wUNIEVtYpwrG63HG0eeD7I7tvcM.roa (hash: oXVfh0sTirB6aA53rQRtUtH/R5Wu4DiNaIy7B2RuTkE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:3d:06:f3:d2:bf:0e:52:f9:ed:04:96:af:df:b6:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75facb07f2ccb92eeba87854c94240e4f5ac8f52 Validity Not Before: Dec 25 02:01:06 2025 GMT Not After : Dec 26 02:01:06 2025 GMT Subject: CN=d27315fc957528485d0183202b3aecde07afd393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:25:4b:29:41:0d:1e:39:fd:ac:72:9b:5e:e5: ef:d4:88:67:c1:c9:5b:23:40:79:c1:0d:b4:a5:00: 1a:b2:67:4e:c8:91:1c:50:eb:10:de:04:6f:03:f4: b5:fa:6d:70:a4:64:e0:90:e4:32:00:f5:ca:73:aa: 6e:c1:86:60:93:96:9c:31:a1:75:d6:43:60:2b:2f: 4d:e7:73:67:d8:23:3a:dc:65:bc:83:4a:88:81:64: f2:62:68:c4:2a:f9:34:2a:b9:a4:39:c5:ea:c8:1f: b7:ad:d9:36:d9:ca:a0:97:f6:61:4c:37:c9:22:b7: 8b:1e:b3:2c:9e:63:0f:fd:16:0b:5a:80:04:42:b0: e5:77:90:da:55:4c:3a:60:40:6a:5e:95:bb:b4:b1: 05:79:da:ca:8e:de:bd:bf:db:c8:d0:9d:f4:fd:b8: a4:a5:7d:eb:ae:e3:1b:32:18:ec:f9:c1:40:09:46: bb:5d:3d:64:e6:51:1c:44:7d:99:33:d5:3b:19:af: f9:a7:b3:41:dc:8b:ae:d3:3a:ad:b5:c3:2d:c7:65: 65:fd:f2:02:d0:c3:4c:49:1c:e9:49:c4:58:66:fb: cc:c4:f3:c9:eb:06:15:17:78:af:06:e6:db:c0:64: f2:eb:7d:87:8f:49:23:94:03:b1:b8:ae:e6:c7:27: 04:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:73:15:FC:95:75:28:48:5D:01:83:20:2B:3A:EC:DE:07:AF:D3:93 X509v3 Authority Key Identifier: keyid:75:FA:CB:07:F2:CC:B9:2E:EB:A8:78:54:C9:42:40:E4:F5:AC:8F:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:eb:c0:30:5e:88:3c:0c:cb:b4:83:64:c1:a4:65:67:f8:cb: 7d:b1:da:45:24:70:65:67:1a:28:a1:49:4a:0e:ef:fd:b5:8c: b0:34:ac:af:fe:c6:21:d0:f7:7b:3a:b5:d6:a5:82:25:14:c2: 17:ba:7b:ce:85:45:ba:3a:bf:4b:d3:6e:db:a9:af:fa:ad:d0: 89:93:18:48:f8:e6:e2:71:54:ce:3a:c8:4c:56:ac:e9:75:05: fb:ba:ca:e6:9b:ba:02:20:29:6f:a6:e8:3f:8f:67:2a:8c:1b: ef:a5:df:fb:6f:a4:4d:ff:58:ee:3a:8b:79:2e:3e:f9:61:53: 87:64:c8:7b:04:72:5d:59:1f:3e:50:f2:d3:dd:81:3c:60:66: 6e:4f:7e:df:e2:20:60:bb:b1:0c:6c:d5:ef:91:f2:5a:fb:88: 92:68:42:c4:5b:da:c2:5c:2d:98:24:e3:4f:6d:f0:9a:37:47: 4f:e3:cf:07:e9:15:9b:4e:e4:0f:59:fa:ab:43:5d:e0:e4:a4: ed:a4:a8:6d:a0:69:f3:6e:7c:42:a0:b9:8c:e8:1a:85:92:fc: 95:55:60:df:9f:17:96:cb:70:97:80:75:8d:5d:be:14:50:f9: bd:4a:a5:2a:ec:0e:80:41:6d:6f:11:e3:3d:05:2d:6d:57:52: 40:3f:fe:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTPQbz0r8OUvntBJav37Z7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ZmFjYjA3ZjJjY2I5MmVlYmE4Nzg1NGM5NDI0MGU0ZjVh YzhmNTIwHhcNMjUxMjI1MDIwMTA2WhcNMjUxMjI2MDIwMTA2WjAzMTEwLwYDVQQD EyhkMjczMTVmYzk1NzUyODQ4NWQwMTgzMjAyYjNhZWNkZTA3YWZkMzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiVLKUENHjn9rHKbXuXv1Ihnwclb I0B5wQ20pQAasmdOyJEcUOsQ3gRvA/S1+m1wpGTgkOQyAPXKc6puwYZgk5acMaF1 1kNgKy9N53Nn2CM63GW8g0qIgWTyYmjEKvk0KrmkOcXqyB+3rdk22cqgl/ZhTDfJ IreLHrMsnmMP/RYLWoAEQrDld5DaVUw6YEBqXpW7tLEFedrKjt69v9vI0J30/bik pX3rruMbMhjs+cFACUa7XT1k5lEcRH2ZM9U7Ga/5p7NB3Iuu0zqttcMtx2Vl/fIC 0MNMSRzpScRYZvvMxPPJ6wYVF3ivBubbwGTy632Hj0kjlAOxuK7mxycETQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNJzFfyVdShIXQGDICs67N4Hr9OTMB8GA1UdIwQY MBaAFHX6ywfyzLku66h4VMlCQOT1rI9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGZyTEJfTE11UzdycUhoVXlVSkE1UFdzajFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC85MDBjYmYtNDc3Yi00NmJlLThmNWQt YzkxMTQ4M2RhNzhjLzEvZGZyTEJfTE11UzdycUhoVXlVSkE1UFdzajFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC85MDBjYmYtNDc3Yi00NmJlLThmNWQtYzkxMTQ4M2RhNzhj LzEvZGZyTEJfTE11UzdycUhoVXlVSkE1UFdzajFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ+vAMF6I PAzLtINkwaRlZ/jLfbHaRSRwZWcaKKFJSg7v/bWMsDSsr/7GIdD3ezq11qWCJRTC F7p7zoVFujq/S9Nu26mv+q3QiZMYSPjm4nFUzjrITFas6XUF+7rK5pu6AiApb6bo P49nKowb76Xf+2+kTf9Y7jqLeS4++WFTh2TIewRyXVkfPlDy092BPGBmbk9+3+Ig YLuxDGzV75HyWvuIkmhCxFvawlwtmCTjT23wmjdHT+PPB+kVm07kD1n6q0Nd4OSk 7aSobaBp8258QqC5jOgahZL8lVVg358Xlstwl4B1jV2+FFD5vUqlKuwOgEFtbxHj PQUtbVdSQD/+3w== -----END CERTIFICATE-----Generated at Thu Dec 25 05:31:43 2025 by rpki-client