This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft File: dBSRprEEM7mWFXVv3pMT8r4dPfA.mft (raw, json) Hash identifier: sAen+jOfyl1EEfPR8Wq48BA2tUyvEEpwT43sarCgOxQ= Subject key identifier: 2A:C2:BC:AE:78:9E:D9:F1:27:FF:27:9A:E7:65:F1:28:1F:12:BC:CA Authority key identifier: 74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0 Certificate issuer: /CN=741491a6b10433b99615756fde9313f2be1d3df0 Certificate serial: 019B2175B622ED640599B80482E36D7507E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft Manifest number: 1254 Signing time: Mon 15 Dec 2025 10:02:01 +0000 Manifest this update: Mon 15 Dec 2025 10:02:01 +0000 Manifest next update: Tue 16 Dec 2025 10:02:01 +0000 Files and hashes: 1: dBSRprEEM7mWFXVv3pMT8r4dPfA.crl (hash: 11b+MP6wRWp2CQT6f/jw/Ecyv4mdTuNAWEQghJr75t8=) 2: kyN0WWkyKmvqixy5lWeDm8cyXsk.roa (hash: PvvB6yKuDqOU2looXNznQebEk8ZA6ldARR0PgTYG5Pg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:b6:22:ed:64:05:99:b8:04:82:e3:6d:75:07:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=741491a6b10433b99615756fde9313f2be1d3df0 Validity Not Before: Dec 15 10:02:01 2025 GMT Not After : Dec 16 10:02:01 2025 GMT Subject: CN=2ac2bcae789ed9f127ff279ae765f1281f12bcca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d1:82:de:7e:d6:4f:19:42:ab:9b:6b:58:de: 5d:3b:96:83:a8:61:06:d9:d8:d0:c8:8e:0d:3f:a0: 2b:cc:c6:04:22:b5:d3:6e:da:2e:9a:50:4d:50:f6: a0:33:94:ef:a4:d3:fa:b6:3d:75:b6:3b:06:ac:02: 22:86:e6:6e:f5:dd:69:0d:b6:0b:ba:7a:8b:a6:c7: c4:ca:33:d7:ae:8b:4f:e4:21:cc:35:bf:d3:12:81: 78:6a:fd:bb:6a:ca:28:bb:ba:47:37:fc:4b:d2:ce: 24:ac:48:98:9f:1d:df:c2:c4:9d:5e:d1:b7:28:98: 04:81:fe:75:91:7b:bb:e4:15:67:b4:fd:cd:bb:55: 34:d6:69:3f:06:a5:df:7b:ee:ac:c5:a4:7b:21:9d: ae:07:dd:fd:8f:00:a6:bd:49:c6:61:b9:ef:06:71: 7b:4e:4e:ed:3f:35:02:70:c0:c0:13:02:9a:af:f9: 21:dc:e5:7b:2f:a9:c7:43:71:0e:4a:3e:e6:2a:8f: 53:e3:14:12:aa:db:3b:a0:57:16:1c:7b:eb:18:0b: 0e:8e:e0:f7:73:32:31:23:72:a4:60:0a:d0:a5:67: f5:57:63:dd:86:57:81:10:8d:0f:07:3b:52:38:b7: 4c:54:73:e6:d1:c2:ca:60:25:b4:92:35:e9:34:24: 58:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C2:BC:AE:78:9E:D9:F1:27:FF:27:9A:E7:65:F1:28:1F:12:BC:CA X509v3 Authority Key Identifier: keyid:74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:df:47:6c:c5:8b:ea:54:b8:95:d7:35:49:bc:9a:f3:af:24: 0f:0b:72:fb:c7:0b:aa:38:fe:09:46:37:6d:7e:8c:83:e0:3d: d0:5b:44:25:8c:29:e3:2f:44:49:76:23:81:fc:61:18:7f:20: 1a:75:bd:fe:6d:4a:3a:b1:8b:87:01:f8:f3:78:73:93:39:63: f8:83:82:9b:89:fd:f8:22:42:9b:ee:7d:1c:96:58:7a:ef:04: 95:17:9e:51:bb:c1:c4:9e:3a:c0:f8:39:f1:26:c9:0d:6f:ba: 72:6f:2a:ee:83:87:f4:55:9e:be:78:e7:01:4b:80:7e:65:f2: b1:db:cf:d3:5a:3d:d1:e7:22:c8:e2:8a:b7:3e:2b:a7:98:3e: c8:58:17:f7:cc:b8:89:8f:83:ed:db:6b:90:c9:b3:e0:42:cf: 0e:bc:d9:fc:8b:08:db:2a:9e:68:0a:a1:9d:b4:d4:d3:5c:85: e7:f3:4a:bc:20:a1:e0:7e:85:b9:a1:fb:f9:37:37:7e:b0:27: b8:33:39:5b:34:e0:80:12:b2:43:1a:30:27:c1:56:b5:ce:9f: 77:58:c6:67:23:c2:85:d1:1a:f6:97:19:a9:e4:b1:90:9e:4d: 00:c1:87:3c:df:03:4a:78:3f:a7:21:2a:0f:cc:6e:50:7b:62: 1b:ed:58:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdbYi7WQFmbgEguNtdQfjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MTQ5MWE2YjEwNDMzYjk5NjE1NzU2ZmRlOTMxM2YyYmUx ZDNkZjAwHhcNMjUxMjE1MTAwMjAxWhcNMjUxMjE2MTAwMjAxWjAzMTEwLwYDVQQD EygyYWMyYmNhZTc4OWVkOWYxMjdmZjI3OWFlNzY1ZjEyODFmMTJiY2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9GC3n7WTxlCq5trWN5dO5aDqGEG 2djQyI4NP6ArzMYEIrXTbtoumlBNUPagM5TvpNP6tj11tjsGrAIihuZu9d1pDbYL unqLpsfEyjPXrotP5CHMNb/TEoF4av27asoou7pHN/xL0s4krEiYnx3fwsSdXtG3 KJgEgf51kXu75BVntP3Nu1U01mk/BqXfe+6sxaR7IZ2uB939jwCmvUnGYbnvBnF7 Tk7tPzUCcMDAEwKar/kh3OV7L6nHQ3EOSj7mKo9T4xQSqts7oFcWHHvrGAsOjuD3 czIxI3KkYArQpWf1V2PdhleBEI0PBztSOLdMVHPm0cLKYCW0kjXpNCRYZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCrCvK54ntnxJ/8nmudl8SgfErzKMB8GA1UdIwQY MBaAFHQUkaaxBDO5lhV1b96TE/K+HT3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9mNTRjYjMtZWJhZS00NmIyLThiMTct ODRiNTc2OTNjN2E4LzEvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9mNTRjYjMtZWJhZS00NmIyLThiMTctODRiNTc2OTNjN2E4 LzEvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALd9HbMWL 6lS4ldc1Sbya868kDwty+8cLqjj+CUY3bX6Mg+A90FtEJYwp4y9ESXYjgfxhGH8g GnW9/m1KOrGLhwH483hzkzlj+IOCm4n9+CJCm+59HJZYeu8ElReeUbvBxJ46wPg5 8SbJDW+6cm8q7oOH9FWevnjnAUuAfmXysdvP01o90eciyOKKtz4rp5g+yFgX98y4 iY+D7dtrkMmz4ELPDrzZ/IsI2yqeaAqhnbTU01yF5/NKvCCh4H6FuaH7+Tc3frAn uDM5WzTggBKyQxowJ8FWtc6fd1jGZyPChdEa9pcZqeSxkJ5NAMGHPN8DSng/pyEq D8xuUHtiG+1YhA== -----END CERTIFICATE-----Generated at Mon Dec 15 16:49:23 2025 by rpki-client