This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft File: dBSRprEEM7mWFXVv3pMT8r4dPfA.mft (raw, json) Hash identifier: q6KtgrRD13hpmZgQJ3IV5f//L4RD1HcrkCFTL3C4xIY= Subject key identifier: 7A:55:F5:88:15:D8:E2:C0:FA:52:4E:E4:BE:59:21:08:5C:15:C6:39 Authority key identifier: 74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0 Certificate issuer: /CN=741491a6b10433b99615756fde9313f2be1d3df0 Certificate serial: 019B1013D84910FA7737E4054AFFCF02EAFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft Manifest number: 124B Signing time: Fri 12 Dec 2025 01:01:34 +0000 Manifest this update: Fri 12 Dec 2025 01:01:34 +0000 Manifest next update: Sat 13 Dec 2025 01:01:34 +0000 Files and hashes: 1: dBSRprEEM7mWFXVv3pMT8r4dPfA.crl (hash: 86tBAH0fPTH+fUvS9bfzPDpfgNwHieC/9/O2pGnw4LE=) 2: kyN0WWkyKmvqixy5lWeDm8cyXsk.roa (hash: PvvB6yKuDqOU2looXNznQebEk8ZA6ldARR0PgTYG5Pg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:d8:49:10:fa:77:37:e4:05:4a:ff:cf:02:ea:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=741491a6b10433b99615756fde9313f2be1d3df0 Validity Not Before: Dec 12 01:01:34 2025 GMT Not After : Dec 13 01:01:34 2025 GMT Subject: CN=7a55f58815d8e2c0fa524ee4be5921085c15c639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:af:3f:1e:1a:b0:ef:05:69:f5:f2:ba:93:a6: 32:e2:f4:5d:22:49:4e:09:9e:b4:20:cf:35:ee:f0: 57:2f:28:a9:06:29:c9:6b:49:05:07:af:68:6c:e6: d9:84:23:60:0c:77:7a:39:43:e3:26:ff:64:d8:e0: ca:30:bb:7b:17:4f:43:dd:4d:6b:03:7d:6c:2d:42: a9:66:39:78:a2:42:1d:7c:aa:23:12:20:bd:17:1a: a8:f5:5e:9e:74:32:aa:86:96:87:dd:dd:94:ee:cd: 85:c7:bc:53:10:8d:22:98:1f:b5:c1:a8:7f:d9:f2: 81:f8:b0:9b:85:5a:01:71:0c:27:79:b2:d9:d7:e4: 2c:6c:a9:f2:1e:a3:00:cf:74:2c:c4:b6:07:e8:ea: dc:d1:8f:99:03:76:bc:30:3b:d3:72:b9:8e:76:de: 66:16:ef:41:a0:d4:b3:37:72:e4:9b:30:9f:6a:e3: b8:0e:9c:ee:28:fe:f5:e7:0a:01:dc:dd:80:e0:f9: 2b:bc:78:00:48:ac:7b:e3:bf:47:8a:2d:1d:d0:89: 3c:b8:72:1f:97:94:07:e5:dc:ff:55:63:40:6b:bb: b9:35:59:d9:ab:8d:e7:fb:47:e0:2d:e2:62:7a:b2: 6d:aa:6a:4a:a7:ef:f5:0b:d2:d1:0a:9c:69:a9:7b: 2e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:55:F5:88:15:D8:E2:C0:FA:52:4E:E4:BE:59:21:08:5C:15:C6:39 X509v3 Authority Key Identifier: keyid:74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:e6:e5:a0:88:17:75:4b:fc:33:89:01:e7:5f:27:17:fd:87: a2:49:62:97:22:fd:ee:6f:c3:2d:5c:b0:08:6f:7b:24:29:63: e3:5c:c2:e1:32:77:9b:8a:60:4c:e1:c0:33:26:80:c3:60:0d: 3a:6d:d3:08:bd:f7:c6:97:dc:29:53:e9:6e:61:85:90:0a:7c: cf:94:67:77:ac:86:85:60:0d:9e:19:91:2f:f2:92:11:cd:76: d4:38:6d:2a:37:20:75:d0:14:7e:d0:df:48:43:aa:ee:2a:8b: f4:f7:a2:e6:16:a3:4a:10:5a:e0:8f:bc:f9:37:4f:b4:49:06: ba:7b:9e:a6:76:8c:61:50:aa:55:28:5d:a7:8e:2e:70:99:eb: 7d:21:66:64:1e:ea:44:f6:9a:5d:31:aa:e2:46:7c:a8:f4:9b: ec:15:78:32:80:10:f6:04:1c:94:91:82:d6:b8:6f:59:2f:ba: 66:b2:fa:e8:68:de:fb:57:26:bd:55:26:0c:1b:27:54:2a:1d: 8b:02:66:80:4d:ed:62:26:2b:67:79:d2:a5:89:4f:f4:16:aa: 04:4d:91:a2:d9:d8:55:74:af:30:60:40:65:9a:49:7d:5c:ae: e7:3b:5f:81:e6:49:0f:6e:90:89:48:61:ab:bb:bf:a1:57:de: d1:d9:95:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQE9hJEPp3N+QFSv/PAur7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MTQ5MWE2YjEwNDMzYjk5NjE1NzU2ZmRlOTMxM2YyYmUx ZDNkZjAwHhcNMjUxMjEyMDEwMTM0WhcNMjUxMjEzMDEwMTM0WjAzMTEwLwYDVQQD Eyg3YTU1ZjU4ODE1ZDhlMmMwZmE1MjRlZTRiZTU5MjEwODVjMTVjNjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvK8/Hhqw7wVp9fK6k6Yy4vRdIklO CZ60IM817vBXLyipBinJa0kFB69obObZhCNgDHd6OUPjJv9k2ODKMLt7F09D3U1r A31sLUKpZjl4okIdfKojEiC9Fxqo9V6edDKqhpaH3d2U7s2Fx7xTEI0imB+1wah/ 2fKB+LCbhVoBcQwnebLZ1+QsbKnyHqMAz3QsxLYH6Orc0Y+ZA3a8MDvTcrmOdt5m Fu9BoNSzN3LkmzCfauO4DpzuKP715woB3N2A4PkrvHgASKx7479Hii0d0Ik8uHIf l5QH5dz/VWNAa7u5NVnZq43n+0fgLeJierJtqmpKp+/1C9LRCpxpqXsu3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHpV9YgV2OLA+lJO5L5ZIQhcFcY5MB8GA1UdIwQY MBaAFHQUkaaxBDO5lhV1b96TE/K+HT3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9mNTRjYjMtZWJhZS00NmIyLThiMTct ODRiNTc2OTNjN2E4LzEvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9mNTRjYjMtZWJhZS00NmIyLThiMTctODRiNTc2OTNjN2E4 LzEvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKObloIgX dUv8M4kB518nF/2HoklilyL97m/DLVywCG97JClj41zC4TJ3m4pgTOHAMyaAw2AN Om3TCL33xpfcKVPpbmGFkAp8z5Rnd6yGhWANnhmRL/KSEc121DhtKjcgddAUftDf SEOq7iqL9Pei5hajShBa4I+8+TdPtEkGunuepnaMYVCqVShdp44ucJnrfSFmZB7q RPaaXTGq4kZ8qPSb7BV4MoAQ9gQclJGC1rhvWS+6ZrL66Gje+1cmvVUmDBsnVCod iwJmgE3tYiYrZ3nSpYlP9BaqBE2RotnYVXSvMGBAZZpJfVyu5ztfgeZJD26QiUhh q7u/oVfe0dmVBg== -----END CERTIFICATE-----Generated at Fri Dec 12 02:45:25 2025 by rpki-client