This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft File: dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft (raw, json) Hash identifier: 3Y0FcM5N6cW+36P1oYobjdviLFB8hDy8mxBrct3PkGg= Subject key identifier: AD:00:16:E7:FA:AD:AF:EF:88:9C:87:D5:7E:EF:CB:21:56:0C:D4:98 Authority key identifier: 75:FA:CB:07:F2:CC:B9:2E:EB:A8:78:54:C9:42:40:E4:F5:AC:8F:52 Certificate issuer: /CN=75facb07f2ccb92eeba87854c94240e4f5ac8f52 Certificate serial: 019B59083E1F0DEF1A0BCEF6F923AA09BFCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 05:01:10 +0000 Manifest this update: Fri 26 Dec 2025 05:01:10 +0000 Manifest next update: Sat 27 Dec 2025 05:01:10 +0000 Files and hashes: 1: dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl (hash: Z97RbljCCIMn6EHhgHX0zor37TlqXyzGxxwxzlN75qg=) 2: wUNIEVtYpwrG63HG0eeD7I7tvcM.roa (hash: oXVfh0sTirB6aA53rQRtUtH/R5Wu4DiNaIy7B2RuTkE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:08:3e:1f:0d:ef:1a:0b:ce:f6:f9:23:aa:09:bf:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75facb07f2ccb92eeba87854c94240e4f5ac8f52 Validity Not Before: Dec 26 05:01:10 2025 GMT Not After : Dec 27 05:01:10 2025 GMT Subject: CN=ad0016e7faadafef889c87d57eefcb21560cd498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:dc:e7:2b:50:51:a4:0e:35:8d:99:88:0e:92: 85:2e:5e:51:be:91:cc:b9:8f:df:c6:69:20:b4:e2: 6c:f0:e3:89:21:4e:80:30:62:32:c8:8d:89:89:c8: a4:e9:f6:f1:5b:93:73:e5:ca:72:d9:f3:27:13:7d: be:f4:36:00:de:04:b8:aa:e8:33:e4:18:86:56:e8: 79:da:6a:d5:1f:30:b7:66:f4:f3:48:7c:3f:72:91: a3:4a:da:00:cb:97:e7:c5:29:6d:62:a1:2d:77:6b: 78:7a:0b:31:76:93:73:bd:86:21:56:2b:f2:2f:78: ab:4a:71:d1:3b:e3:51:3f:09:1a:d0:bf:2c:57:09: df:65:a5:a7:34:d7:46:e2:cd:37:37:09:f8:5d:29: c9:5a:53:42:b6:ac:40:59:0f:00:6a:eb:96:89:72: 0d:16:18:e9:8c:ef:21:a8:d2:14:49:d5:ba:ea:16: 5e:a8:7e:9e:fe:7c:12:70:fa:4b:d4:1c:84:d3:84: b1:05:24:32:f1:4b:08:02:34:2a:21:42:ab:34:7d: b6:f8:fd:c7:7e:d4:e0:d2:ce:94:43:50:94:11:eb: e8:fb:d8:3b:1f:c6:32:e7:d5:7c:38:7b:7f:b1:c2: b4:bf:1a:38:3f:fe:d9:3e:54:29:07:55:c5:22:3d: 59:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:00:16:E7:FA:AD:AF:EF:88:9C:87:D5:7E:EF:CB:21:56:0C:D4:98 X509v3 Authority Key Identifier: keyid:75:FA:CB:07:F2:CC:B9:2E:EB:A8:78:54:C9:42:40:E4:F5:AC:8F:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:09:f4:dc:19:1d:46:3b:f8:26:e3:6e:f5:0e:d7:4d:a5:aa: b5:21:7f:23:49:b4:03:84:9d:85:b7:7f:66:bc:fb:9f:a8:37: b3:4d:5e:c3:22:cf:aa:4e:2e:7b:af:5f:c8:70:f0:a1:d0:26: 9f:fe:1e:0b:6a:5c:6b:c3:7e:7a:f5:20:c3:e4:a1:d7:9e:d0: ce:7e:8e:ca:ce:4f:ee:bc:01:0d:77:b2:f0:2d:c9:05:cc:5d: 69:38:f0:b4:8d:f3:0d:b6:6b:02:8d:bd:28:5c:c5:8c:b5:57: 37:6a:8b:47:8e:2c:d5:8a:49:2a:ff:48:49:5f:b3:32:d4:a2: 15:14:16:c7:90:bb:2a:59:81:68:cb:9d:92:39:94:5f:5d:5e: 55:7b:a3:91:41:b4:bb:ed:00:ae:92:30:c3:34:c2:2d:23:e5: 02:fc:b8:45:1b:82:55:53:b3:52:d7:fa:8a:9e:7a:83:1c:8b: e0:56:61:16:2e:0e:4f:f9:7b:01:8e:3c:ce:1e:52:0d:30:b4: bb:2d:3e:3b:81:c5:b5:e8:b9:1d:07:b8:97:49:8a:e4:82:c9: 88:7b:f9:ae:2e:f0:5a:65:24:da:db:ad:e3:41:b0:59:43:c1: 61:50:59:1c:ec:83:8d:1b:b3:a3:1c:3b:00:d3:61:c9:52:2c: 7e:d8:3b:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZCD4fDe8aC872+SOqCb/NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ZmFjYjA3ZjJjY2I5MmVlYmE4Nzg1NGM5NDI0MGU0ZjVh YzhmNTIwHhcNMjUxMjI2MDUwMTEwWhcNMjUxMjI3MDUwMTEwWjAzMTEwLwYDVQQD EyhhZDAwMTZlN2ZhYWRhZmVmODg5Yzg3ZDU3ZWVmY2IyMTU2MGNkNDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdznK1BRpA41jZmIDpKFLl5RvpHM uY/fxmkgtOJs8OOJIU6AMGIyyI2Jicik6fbxW5Nz5cpy2fMnE32+9DYA3gS4qugz 5BiGVuh52mrVHzC3ZvTzSHw/cpGjStoAy5fnxSltYqEtd2t4egsxdpNzvYYhVivy L3irSnHRO+NRPwka0L8sVwnfZaWnNNdG4s03Nwn4XSnJWlNCtqxAWQ8AauuWiXIN FhjpjO8hqNIUSdW66hZeqH6e/nwScPpL1ByE04SxBSQy8UsIAjQqIUKrNH22+P3H ftTg0s6UQ1CUEevo+9g7H8Yy59V8OHt/scK0vxo4P/7ZPlQpB1XFIj1ZPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0AFuf6ra/viJyH1X7vyyFWDNSYMB8GA1UdIwQY MBaAFHX6ywfyzLku66h4VMlCQOT1rI9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGZyTEJfTE11UzdycUhoVXlVSkE1UFdzajFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC85MDBjYmYtNDc3Yi00NmJlLThmNWQt YzkxMTQ4M2RhNzhjLzEvZGZyTEJfTE11UzdycUhoVXlVSkE1UFdzajFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC85MDBjYmYtNDc3Yi00NmJlLThmNWQtYzkxMTQ4M2RhNzhj LzEvZGZyTEJfTE11UzdycUhoVXlVSkE1UFdzajFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQQn03Bkd Rjv4JuNu9Q7XTaWqtSF/I0m0A4Sdhbd/Zrz7n6g3s01ewyLPqk4ue69fyHDwodAm n/4eC2pca8N+evUgw+Sh157Qzn6Oys5P7rwBDXey8C3JBcxdaTjwtI3zDbZrAo29 KFzFjLVXN2qLR44s1YpJKv9ISV+zMtSiFRQWx5C7KlmBaMudkjmUX11eVXujkUG0 u+0ArpIwwzTCLSPlAvy4RRuCVVOzUtf6ip56gxyL4FZhFi4OT/l7AY48zh5SDTC0 uy0+O4HFtei5HQe4l0mK5ILJiHv5ri7wWmUk2tut40GwWUPBYVBZHOyDjRuzoxw7 ANNhyVIsftg7wQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:24 2025 by rpki-client