This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft File: dBSRprEEM7mWFXVv3pMT8r4dPfA.mft (raw, json) Hash identifier: ILmClYDhcs70rx2LpUWtCrUwvNCM6qbolqqSFyT2f6g= Subject key identifier: 11:46:7D:FC:36:DA:9E:AC:1F:B2:E1:18:BF:C4:C3:68:F6:32:AD:AF Authority key identifier: 74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0 Certificate issuer: /CN=741491a6b10433b99615756fde9313f2be1d3df0 Certificate serial: 019AF31C084F91D7ECF44C966AF2EB62A6A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft Manifest number: 123C Signing time: Sat 06 Dec 2025 10:01:31 +0000 Manifest this update: Sat 06 Dec 2025 10:01:31 +0000 Manifest next update: Sun 07 Dec 2025 10:01:31 +0000 Files and hashes: 1: dBSRprEEM7mWFXVv3pMT8r4dPfA.crl (hash: 9LRgbo/xSSRcLo7QuuNyyBgC5ZBZV6LWvi4ZIsukmqY=) 2: kyN0WWkyKmvqixy5lWeDm8cyXsk.roa (hash: PvvB6yKuDqOU2looXNznQebEk8ZA6ldARR0PgTYG5Pg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:08:4f:91:d7:ec:f4:4c:96:6a:f2:eb:62:a6:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=741491a6b10433b99615756fde9313f2be1d3df0 Validity Not Before: Dec 6 10:01:31 2025 GMT Not After : Dec 7 10:01:31 2025 GMT Subject: CN=11467dfc36da9eac1fb2e118bfc4c368f632adaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ac:41:dc:3f:92:9a:35:59:b7:fa:b3:21:9c: e7:45:0a:f2:8b:55:1d:5a:5d:49:a9:ee:8a:9c:ec: 39:55:47:64:d8:f3:bd:3a:1b:25:7d:24:2f:28:51: 73:de:65:63:de:41:a5:f9:c7:0d:21:a4:d1:af:ea: 1a:9e:c3:1d:96:5c:9a:3c:66:c4:12:d9:1e:ec:cb: b0:a6:56:b9:c2:8f:b9:15:2c:27:ef:eb:25:b0:d0: b7:da:0c:30:00:f4:c2:0d:49:3e:9e:72:2d:0c:72: ad:ac:cd:20:98:77:c4:e3:25:a6:1d:b8:76:ff:16: 70:4d:80:4f:3b:ae:07:8d:3a:15:fc:7d:ba:80:f0: b3:fc:56:28:a0:51:08:30:4d:8a:2a:80:d4:9a:f5: b9:f2:d3:57:45:9d:84:73:45:e1:11:96:da:fd:00: f5:03:06:f5:e2:03:52:13:6e:f6:92:09:ed:f3:01: c0:31:6d:53:76:4f:8f:2c:45:c9:2e:80:62:c1:ea: ae:f4:eb:9b:54:71:05:75:b3:1f:c1:dc:df:ce:5f: 6e:9d:76:5f:aa:48:39:d0:a5:ca:f4:a9:03:be:ff: 18:d3:14:13:e2:c4:ad:57:96:6c:73:8d:58:29:5c: 0f:e5:40:3e:03:68:d3:ef:12:73:16:4a:16:d3:02: f8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:46:7D:FC:36:DA:9E:AC:1F:B2:E1:18:BF:C4:C3:68:F6:32:AD:AF X509v3 Authority Key Identifier: keyid:74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:6b:cc:5e:bb:d5:12:d3:97:ff:0e:aa:fc:69:0f:8e:75:b0: 9b:db:8e:89:05:72:47:2f:4d:98:52:3f:0e:78:34:e7:61:8a: 2a:d4:0c:7e:3c:6f:ea:18:a2:bb:7b:30:03:05:3a:93:eb:d3: 51:32:3f:f9:d4:79:d6:e0:eb:db:0a:d0:2a:c7:86:db:6f:17: c2:19:13:17:dd:dc:7b:ff:fa:10:db:38:02:15:0d:7d:38:e4: fb:94:9c:23:57:43:6c:5f:a4:8f:60:0d:92:86:2a:0d:aa:8c: dd:2e:04:36:bf:1f:fc:2f:6d:c9:02:29:c5:6c:f7:e8:42:aa: d2:8c:ba:87:94:fb:b7:e0:e5:c6:d9:21:b2:87:3a:5d:e0:51: e8:b5:b5:a1:66:35:10:c8:e5:31:d3:89:c2:92:1f:3e:43:5e: 70:73:6a:c3:25:33:25:41:70:51:b9:85:a2:92:80:4f:09:0b: e1:30:b6:c6:34:36:0e:19:8a:3c:ce:4d:51:1a:d2:0f:5c:10: 2d:ae:ad:a5:d9:93:91:28:c3:ce:77:8e:c7:1b:99:62:e7:b3: c2:b9:23:a4:be:8d:a6:9b:76:1a:2e:1a:b7:55:27:81:9a:78: be:fd:80:51:69:b9:13:49:10:6c:1f:da:b9:08:15:48:fe:bc: 91:22:e4:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHAhPkdfs9EyWavLrYqajMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MTQ5MWE2YjEwNDMzYjk5NjE1NzU2ZmRlOTMxM2YyYmUx ZDNkZjAwHhcNMjUxMjA2MTAwMTMxWhcNMjUxMjA3MTAwMTMxWjAzMTEwLwYDVQQD EygxMTQ2N2RmYzM2ZGE5ZWFjMWZiMmUxMThiZmM0YzM2OGY2MzJhZGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaxB3D+SmjVZt/qzIZznRQryi1Ud Wl1Jqe6KnOw5VUdk2PO9OhslfSQvKFFz3mVj3kGl+ccNIaTRr+oansMdllyaPGbE Etke7Muwpla5wo+5FSwn7+slsNC32gwwAPTCDUk+nnItDHKtrM0gmHfE4yWmHbh2 /xZwTYBPO64HjToV/H26gPCz/FYooFEIME2KKoDUmvW58tNXRZ2Ec0XhEZba/QD1 Awb14gNSE272kgnt8wHAMW1Tdk+PLEXJLoBiwequ9OubVHEFdbMfwdzfzl9unXZf qkg50KXK9KkDvv8Y0xQT4sStV5Zsc41YKVwP5UA+A2jT7xJzFkoW0wL4twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFGffw22p6sH7LhGL/Ew2j2Mq2vMB8GA1UdIwQY MBaAFHQUkaaxBDO5lhV1b96TE/K+HT3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9mNTRjYjMtZWJhZS00NmIyLThiMTct ODRiNTc2OTNjN2E4LzEvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9mNTRjYjMtZWJhZS00NmIyLThiMTctODRiNTc2OTNjN2E4 LzEvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANWvMXrvV EtOX/w6q/GkPjnWwm9uOiQVyRy9NmFI/Dng052GKKtQMfjxv6hiiu3swAwU6k+vT UTI/+dR51uDr2wrQKseG228XwhkTF93ce//6ENs4AhUNfTjk+5ScI1dDbF+kj2AN koYqDaqM3S4ENr8f/C9tyQIpxWz36EKq0oy6h5T7t+Dlxtkhsoc6XeBR6LW1oWY1 EMjlMdOJwpIfPkNecHNqwyUzJUFwUbmFopKATwkL4TC2xjQ2DhmKPM5NURrSD1wQ La6tpdmTkSjDzneOxxuZYuezwrkjpL6Nppt2Gi4at1UngZp4vv2AUWm5E0kQbB/a uQgVSP68kSLk+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 20:16:21 2025 by rpki-client