This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft File: dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft (raw, json) Hash identifier: ytxunkbYjcFhNYsjRrrmizdRLkK1tGwy6BphFq1JUkE= Subject key identifier: 23:F1:B0:C2:7C:AB:71:EC:14:F6:0E:1C:2A:56:50:3F:B1:77:A5:EA Authority key identifier: 75:FA:CB:07:F2:CC:B9:2E:EB:A8:78:54:C9:42:40:E4:F5:AC:8F:52 Certificate issuer: /CN=75facb07f2ccb92eeba87854c94240e4f5ac8f52 Certificate serial: 019AF49C3C2DCD79695A61AFC2A312642D6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 17:01:10 +0000 Manifest this update: Sat 06 Dec 2025 17:01:10 +0000 Manifest next update: Sun 07 Dec 2025 17:01:10 +0000 Files and hashes: 1: dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl (hash: 2vY58JD7NLC47d+gRvhXWoF67cJaPxrIU5EroJC9gNs=) 2: wUNIEVtYpwrG63HG0eeD7I7tvcM.roa (hash: oXVfh0sTirB6aA53rQRtUtH/R5Wu4DiNaIy7B2RuTkE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:3c:2d:cd:79:69:5a:61:af:c2:a3:12:64:2d:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75facb07f2ccb92eeba87854c94240e4f5ac8f52 Validity Not Before: Dec 6 17:01:10 2025 GMT Not After : Dec 7 17:01:10 2025 GMT Subject: CN=23f1b0c27cab71ec14f60e1c2a56503fb177a5ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d2:c4:06:5c:c6:df:ad:4b:9b:47:04:a7:18: 5c:0a:6e:2d:ac:cc:c6:04:a2:d0:79:ce:63:75:c0: 41:d4:45:c7:5e:30:01:f2:d7:8d:ee:8d:f5:98:bb: e5:b3:65:46:de:8b:65:e2:d6:82:ce:7b:2a:89:e7: 01:6d:1f:ea:bf:fc:fa:e4:d3:54:f0:bf:6b:55:fe: de:8d:0e:66:dc:d0:ef:27:df:ca:0e:0e:83:ba:22: 77:a0:87:6b:78:a7:4d:6e:24:99:dd:f7:5d:8b:41: b4:0d:eb:4c:19:19:c8:20:7f:69:4a:42:0d:a5:30: f8:61:96:0b:cb:b4:63:9b:99:88:dd:f3:b3:4a:ce: fa:1c:5c:83:e1:b0:fb:33:41:a8:d5:15:59:9c:1d: bc:c4:34:49:50:f1:37:72:09:65:ee:60:89:80:81: 2e:91:26:36:a2:dd:67:b5:98:bc:53:79:ad:07:c7: 74:b3:a7:23:2d:80:83:47:97:0d:6a:49:8f:e4:b5: 75:b9:0f:fc:93:3e:f7:58:da:41:aa:bc:e9:9b:6b: b8:c6:c3:58:25:d9:4d:9b:cd:78:44:3b:80:1f:10: 09:7b:52:1f:e0:52:bb:7f:4c:a1:9a:88:c4:fb:60: 29:ed:50:95:e7:ae:d9:3b:11:05:69:5b:62:ba:51: 67:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:F1:B0:C2:7C:AB:71:EC:14:F6:0E:1C:2A:56:50:3F:B1:77:A5:EA X509v3 Authority Key Identifier: keyid:75:FA:CB:07:F2:CC:B9:2E:EB:A8:78:54:C9:42:40:E4:F5:AC:8F:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:09:9e:a6:53:dd:f3:5d:d5:20:79:1e:93:7d:9b:34:d9:65: 43:cb:7f:c9:ab:b6:e2:ab:53:30:29:59:6b:35:21:f7:db:82: 95:d4:4d:bd:71:ad:63:d0:a3:25:84:bd:73:49:89:33:a5:6f: 50:e9:eb:36:16:46:2c:ae:ce:9f:2b:a9:0b:a6:3b:fb:d6:80: 91:71:88:c3:8d:50:fd:e3:fb:a6:9b:1d:ee:e5:25:41:6c:37: c5:3e:89:1f:b8:c5:e2:3f:59:d2:c5:be:00:c3:ec:57:d4:c3: 55:e1:49:0e:95:2e:36:ef:81:f8:07:f3:df:71:78:af:c1:d3: 14:92:da:df:12:6e:e1:a0:08:25:06:3b:2f:15:d1:53:ee:f4: 2f:ce:b6:f7:d6:87:d7:f1:d5:27:d7:6d:1f:ed:48:43:d3:f1: 72:cb:7a:5d:62:59:f4:f7:f5:08:b3:c4:98:7a:93:f6:61:bf: a6:23:18:6f:37:ec:ae:1e:53:0b:5e:12:49:f0:f9:e2:cb:02: ff:a7:4a:c3:d2:59:b3:b1:bf:e3:6e:b9:e7:10:7b:91:c4:40: 75:0f:0c:03:ff:cc:90:1c:81:fa:c2:9e:0f:0e:67:55:d0:f9: 5c:40:54:50:de:c9:52:13:a4:83:d0:05:84:54:bc:24:04:99: 8d:04:19:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nDwtzXlpWmGvwqMSZC1rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ZmFjYjA3ZjJjY2I5MmVlYmE4Nzg1NGM5NDI0MGU0ZjVh YzhmNTIwHhcNMjUxMjA2MTcwMTEwWhcNMjUxMjA3MTcwMTEwWjAzMTEwLwYDVQQD EygyM2YxYjBjMjdjYWI3MWVjMTRmNjBlMWMyYTU2NTAzZmIxNzdhNWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdLEBlzG361Lm0cEpxhcCm4trMzG BKLQec5jdcBB1EXHXjAB8teN7o31mLvls2VG3otl4taCznsqiecBbR/qv/z65NNU 8L9rVf7ejQ5m3NDvJ9/KDg6DuiJ3oIdreKdNbiSZ3fddi0G0DetMGRnIIH9pSkIN pTD4YZYLy7Rjm5mI3fOzSs76HFyD4bD7M0Go1RVZnB28xDRJUPE3cgll7mCJgIEu kSY2ot1ntZi8U3mtB8d0s6cjLYCDR5cNakmP5LV1uQ/8kz73WNpBqrzpm2u4xsNY JdlNm814RDuAHxAJe1If4FK7f0yhmojE+2Ap7VCV567ZOxEFaVtiulFniQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCPxsMJ8q3HsFPYOHCpWUD+xd6XqMB8GA1UdIwQY MBaAFHX6ywfyzLku66h4VMlCQOT1rI9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGZyTEJfTE11UzdycUhoVXlVSkE1UFdzajFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC85MDBjYmYtNDc3Yi00NmJlLThmNWQt YzkxMTQ4M2RhNzhjLzEvZGZyTEJfTE11UzdycUhoVXlVSkE1UFdzajFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC85MDBjYmYtNDc3Yi00NmJlLThmNWQtYzkxMTQ4M2RhNzhj LzEvZGZyTEJfTE11UzdycUhoVXlVSkE1UFdzajFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdQmeplPd 813VIHkek32bNNllQ8t/yau24qtTMClZazUh99uCldRNvXGtY9CjJYS9c0mJM6Vv UOnrNhZGLK7OnyupC6Y7+9aAkXGIw41Q/eP7ppsd7uUlQWw3xT6JH7jF4j9Z0sW+ AMPsV9TDVeFJDpUuNu+B+Afz33F4r8HTFJLa3xJu4aAIJQY7LxXRU+70L86299aH 1/HVJ9dtH+1IQ9Pxcst6XWJZ9Pf1CLPEmHqT9mG/piMYbzfsrh5TC14SSfD54ssC /6dKw9JZs7G/42655xB7kcRAdQ8MA//MkByB+sKeDw5nVdD5XEBUUN7JUhOkg9AF hFS8JASZjQQZtA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:18:00 2025 by rpki-client