This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.mft File: 28lQCYQ2KBzuVCoedFRlUeHlUoM.mft (raw, json) Hash identifier: CDi6WgyV+UmW7fHrfxYys/URWT+XwWXPaIsHYRH0ilw= Subject key identifier: 9A:FC:11:68:52:D5:32:1E:58:A6:BE:22:73:FA:DC:5F:D4:B9:C2:45 Authority key identifier: DB:C9:50:09:84:36:28:1C:EE:54:2A:1E:74:54:65:51:E1:E5:52:83 Certificate issuer: /CN=dbc950098436281cee542a1e74546551e1e55283 Certificate serial: 019B3DC7C1860418E35A5F76446E666AE908 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28lQCYQ2KBzuVCoedFRlUeHlUoM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 22:00:59 +0000 Manifest this update: Sat 20 Dec 2025 22:00:59 +0000 Manifest next update: Sun 21 Dec 2025 22:00:59 +0000 Files and hashes: 1: 28lQCYQ2KBzuVCoedFRlUeHlUoM.crl (hash: l1x7zaHJ/tmSy1Gs59pY0EDIeinszjkCcn6V1lYEiD4=) 2: 5OG6iGTbUMv4yreuCzltBDVdDTU.roa (hash: B8Cg7jxvmm1JBGJPeKqbsREjncwII7bdGdlW3Ml3/PA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.crl rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.mft rsync://rpki.ripe.net/repository/DEFAULT/28lQCYQ2KBzuVCoedFRlUeHlUoM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:c1:86:04:18:e3:5a:5f:76:44:6e:66:6a:e9:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbc950098436281cee542a1e74546551e1e55283 Validity Not Before: Dec 20 22:00:59 2025 GMT Not After : Dec 21 22:00:59 2025 GMT Subject: CN=9afc116852d5321e58a6be2273fadc5fd4b9c245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f9:f2:39:c0:b6:30:77:39:5b:1c:0e:21:bd: 00:e6:5f:21:38:c0:cd:1e:ef:f7:d2:03:87:05:42: 48:57:e1:f2:8a:9e:31:ac:a1:90:5f:6f:79:ee:cc: 35:39:0e:a8:af:b8:53:1b:a1:6b:51:85:1c:f1:77: 8c:81:1f:8d:55:7f:a9:47:c6:34:2f:49:9b:11:4f: 22:3d:f0:9a:6e:30:06:02:ea:36:2c:d2:c3:16:d8: 21:8e:62:8b:cb:90:96:f3:f9:b0:13:4f:44:6c:cc: 4c:4f:ad:6e:d1:6d:2f:33:e2:bf:7f:8b:bc:2a:8c: d5:f3:13:19:00:6c:1f:0c:0d:4a:f5:1d:41:2f:dc: 3b:e7:15:dd:54:19:7a:4b:84:53:03:3c:8f:8b:4c: a5:ca:7a:55:14:a5:1e:64:2c:38:45:74:d3:39:a0: c5:4a:9b:43:c1:42:9b:31:17:72:b2:dd:c1:0b:6c: e3:b6:a6:90:38:12:90:0c:3b:41:5a:4b:99:7f:3f: 99:7c:bf:0e:49:95:7e:5f:01:91:e3:a3:63:ec:34: d0:14:a3:ed:88:b0:c9:4f:76:d6:28:86:5c:32:7a: cf:44:ec:e7:45:66:fa:db:8c:4d:4f:14:cc:65:27: 9d:77:26:18:4d:00:82:bc:72:b5:5e:8e:67:c2:c0: 35:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:FC:11:68:52:D5:32:1E:58:A6:BE:22:73:FA:DC:5F:D4:B9:C2:45 X509v3 Authority Key Identifier: keyid:DB:C9:50:09:84:36:28:1C:EE:54:2A:1E:74:54:65:51:E1:E5:52:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28lQCYQ2KBzuVCoedFRlUeHlUoM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:5e:fc:c8:f5:ee:ad:04:ea:a2:a6:43:a9:90:31:43:c6:94: 31:ec:8a:ed:d6:1a:a0:6a:2b:68:86:88:6f:61:45:e4:7d:2e: ef:2f:fb:a1:0d:74:78:45:83:4f:8c:14:ff:53:d3:3c:c9:bc: fd:7a:fc:77:26:ba:dd:e9:1d:14:17:6a:4e:ff:f7:f4:5c:8f: a6:e0:b7:5a:1d:06:f7:20:1c:1e:df:e3:ae:6e:14:87:e0:b0: 3c:6d:d0:80:ca:62:5b:a7:fc:45:3d:68:12:7d:02:35:e5:f8: 3f:8a:c6:33:69:ae:b4:29:1b:8b:7f:7f:41:b1:20:a5:ce:41: 47:91:2d:7e:0e:38:1c:b5:7d:d4:c7:ad:ac:f6:57:45:78:47: d8:4f:c5:d7:fa:33:b0:30:df:36:b3:0a:df:80:57:5d:aa:05: 46:3c:2c:3e:3c:b0:30:dc:6f:cd:5e:a6:b4:77:59:1e:85:52: b6:3f:44:51:0b:34:c4:c2:5a:81:17:e8:90:13:33:c6:35:50: ec:b0:63:dd:80:2c:c6:a4:fb:2e:97:3f:ce:12:55:4d:31:5e: eb:55:ab:d0:e7:bd:10:7c:a6:56:ee:b4:70:16:62:73:c5:35: b1:88:af:96:d8:60:fe:0e:ab:7f:93:69:ee:30:c6:ba:5d:35: 93:7d:d4:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x8GGBBjjWl92RG5maukIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiYzk1MDA5ODQzNjI4MWNlZTU0MmExZTc0NTQ2NTUxZTFl NTUyODMwHhcNMjUxMjIwMjIwMDU5WhcNMjUxMjIxMjIwMDU5WjAzMTEwLwYDVQQD Eyg5YWZjMTE2ODUyZDUzMjFlNThhNmJlMjI3M2ZhZGM1ZmQ0YjljMjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfnyOcC2MHc5WxwOIb0A5l8hOMDN Hu/30gOHBUJIV+Hyip4xrKGQX2957sw1OQ6or7hTG6FrUYUc8XeMgR+NVX+pR8Y0 L0mbEU8iPfCabjAGAuo2LNLDFtghjmKLy5CW8/mwE09EbMxMT61u0W0vM+K/f4u8 KozV8xMZAGwfDA1K9R1BL9w75xXdVBl6S4RTAzyPi0ylynpVFKUeZCw4RXTTOaDF SptDwUKbMRdyst3BC2zjtqaQOBKQDDtBWkuZfz+ZfL8OSZV+XwGR46Nj7DTQFKPt iLDJT3bWKIZcMnrPROznRWb624xNTxTMZSeddyYYTQCCvHK1Xo5nwsA1XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJr8EWhS1TIeWKa+InP63F/UucJFMB8GA1UdIwQY MBaAFNvJUAmENigc7lQqHnRUZVHh5VKDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjhsUUNZUTJLQnp1VkNvZWRGUmxVZUhsVW9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi81YWE0NDgtNjQzZi00YWVlLTkwZDkt ZjQ3ZTE2OTI2NmMyLzEvMjhsUUNZUTJLQnp1VkNvZWRGUmxVZUhsVW9NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi81YWE0NDgtNjQzZi00YWVlLTkwZDktZjQ3ZTE2OTI2NmMy LzEvMjhsUUNZUTJLQnp1VkNvZWRGUmxVZUhsVW9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcF78yPXu rQTqoqZDqZAxQ8aUMeyK7dYaoGoraIaIb2FF5H0u7y/7oQ10eEWDT4wU/1PTPMm8 /Xr8dya63ekdFBdqTv/39FyPpuC3Wh0G9yAcHt/jrm4Uh+CwPG3QgMpiW6f8RT1o En0CNeX4P4rGM2mutCkbi39/QbEgpc5BR5Etfg44HLV91MetrPZXRXhH2E/F1/oz sDDfNrMK34BXXaoFRjwsPjywMNxvzV6mtHdZHoVStj9EUQs0xMJagRfokBMzxjVQ 7LBj3YAsxqT7Lpc/zhJVTTFe61Wr0Oe9EHymVu60cBZic8U1sYivlthg/g6rf5Np 7jDGul01k33Usw== -----END CERTIFICATE-----Generated at Sat Dec 20 23:57:00 2025 by rpki-client