This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.mft File: 28lQCYQ2KBzuVCoedFRlUeHlUoM.mft (raw, json) Hash identifier: 0i1tvyKGPnim4nFC7txDBkCbDpuP/MpcEkl1c46gUhA= Subject key identifier: 92:46:17:A1:2A:BB:EA:D9:9A:82:84:E0:8D:A4:CF:03:7F:93:E7:D1 Authority key identifier: DB:C9:50:09:84:36:28:1C:EE:54:2A:1E:74:54:65:51:E1:E5:52:83 Certificate issuer: /CN=dbc950098436281cee542a1e74546551e1e55283 Certificate serial: 019B684480FE6A03C453A5826EB410037652 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28lQCYQ2KBzuVCoedFRlUeHlUoM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.mft Manifest number: 17A1 Signing time: Mon 29 Dec 2025 04:01:18 +0000 Manifest this update: Mon 29 Dec 2025 04:01:18 +0000 Manifest next update: Tue 30 Dec 2025 04:01:18 +0000 Files and hashes: 1: 28lQCYQ2KBzuVCoedFRlUeHlUoM.crl (hash: EweCYrCfIfAzZ9LN9v4C0loxFoBj2bVRvjBJkuIQmRg=) 2: 5OG6iGTbUMv4yreuCzltBDVdDTU.roa (hash: B8Cg7jxvmm1JBGJPeKqbsREjncwII7bdGdlW3Ml3/PA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.crl rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.mft rsync://rpki.ripe.net/repository/DEFAULT/28lQCYQ2KBzuVCoedFRlUeHlUoM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 04:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:44:80:fe:6a:03:c4:53:a5:82:6e:b4:10:03:76:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbc950098436281cee542a1e74546551e1e55283 Validity Not Before: Dec 29 04:01:18 2025 GMT Not After : Dec 30 04:01:18 2025 GMT Subject: CN=924617a12abbead99a8284e08da4cf037f93e7d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:50:37:bd:61:82:c9:3e:51:db:a0:8d:99:13: b3:f5:73:be:d3:89:e4:6d:ff:0b:25:96:f5:58:85: a9:2e:70:bc:4d:db:b6:b6:4a:80:aa:c0:c7:76:90: c9:bd:d7:c7:cb:57:06:a6:44:6b:53:24:a1:b2:e4: 95:47:0e:13:0a:09:ce:69:74:69:44:bc:27:7e:08: 5c:4b:68:c9:cb:44:c8:94:bb:12:5c:04:79:1b:57: e1:83:ad:01:fc:80:04:4c:25:4e:89:a7:2d:20:a7: 32:c3:d7:0e:97:e3:8a:d0:a2:b0:93:bf:24:a3:07: 29:7c:ce:51:bf:cf:8a:f8:43:02:5b:98:2f:bf:5d: b0:cc:43:02:d2:11:55:8c:f5:cb:b8:8e:55:49:0a: 50:b2:c7:7b:f3:71:67:16:66:48:23:10:d8:9b:dc: 2f:eb:05:7c:aa:d6:5d:da:3f:14:88:60:34:f4:ff: f5:e1:58:ca:e4:df:a2:e0:0a:1e:79:dd:a3:94:68: 57:1c:75:10:ca:9a:de:2b:58:ab:82:10:b2:dd:69: ed:f0:6d:4d:cf:7b:1c:08:dd:e0:73:1e:d8:32:fc: 7a:bb:6e:15:b2:cb:79:36:a3:d1:ef:59:90:1d:15: 7a:e3:a0:df:e6:fd:72:6a:e7:16:9f:c7:c3:91:5d: 59:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:46:17:A1:2A:BB:EA:D9:9A:82:84:E0:8D:A4:CF:03:7F:93:E7:D1 X509v3 Authority Key Identifier: keyid:DB:C9:50:09:84:36:28:1C:EE:54:2A:1E:74:54:65:51:E1:E5:52:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28lQCYQ2KBzuVCoedFRlUeHlUoM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:75:f2:d3:bd:ea:60:0e:1d:ce:af:4c:26:b5:11:53:66:5a: 03:cc:c7:42:44:14:21:7a:4e:06:bc:2a:4f:26:1d:7b:b0:67: c2:e1:aa:c0:d5:25:9f:b5:46:d9:5b:e2:d3:2f:35:55:e1:42: 26:d7:e2:c9:61:9c:4f:2d:6e:ff:71:ce:1a:05:d3:1f:5e:fc: e4:0f:36:d9:74:54:1a:ae:c3:97:6d:3e:cb:47:99:66:b6:ab: 7e:db:a2:94:f0:f3:e1:f2:97:43:e1:0b:b3:99:99:83:27:1c: 12:6e:35:e2:74:eb:98:1d:18:62:4f:37:51:b2:08:9e:0a:75: e6:2d:7c:04:4d:e4:8c:85:71:a3:de:07:1f:8a:b6:ae:ac:4e: 3e:8d:21:c0:77:90:54:13:09:f0:07:35:99:f3:49:53:d3:ad: 29:7a:fa:da:b5:70:3f:a9:8d:e9:26:3e:86:e7:07:da:51:64: 53:0e:97:7f:ff:91:5a:7a:0d:7c:d1:5f:89:21:bc:2d:de:6d: 8d:27:06:d8:46:36:c4:db:67:f8:20:a2:03:b4:a5:9c:b8:fe: 27:f5:dd:09:eb:6e:dd:48:e7:10:42:f1:11:2e:06:d0:46:80: 99:c1:1c:d3:a5:10:85:2e:56:05:77:aa:3a:e5:ab:08:e5:fe: 57:21:d6:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtoRID+agPEU6WCbrQQA3ZSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiYzk1MDA5ODQzNjI4MWNlZTU0MmExZTc0NTQ2NTUxZTFl NTUyODMwHhcNMjUxMjI5MDQwMTE4WhcNMjUxMjMwMDQwMTE4WjAzMTEwLwYDVQQD Eyg5MjQ2MTdhMTJhYmJlYWQ5OWE4Mjg0ZTA4ZGE0Y2YwMzdmOTNlN2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlA3vWGCyT5R26CNmROz9XO+04nk bf8LJZb1WIWpLnC8Tdu2tkqAqsDHdpDJvdfHy1cGpkRrUyShsuSVRw4TCgnOaXRp RLwnfghcS2jJy0TIlLsSXAR5G1fhg60B/IAETCVOiactIKcyw9cOl+OK0KKwk78k owcpfM5Rv8+K+EMCW5gvv12wzEMC0hFVjPXLuI5VSQpQssd783FnFmZIIxDYm9wv 6wV8qtZd2j8UiGA09P/14VjK5N+i4Aoeed2jlGhXHHUQypreK1irghCy3Wnt8G1N z3scCN3gcx7YMvx6u24Vsst5NqPR71mQHRV646Df5v1yaucWn8fDkV1Z+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJJGF6Equ+rZmoKE4I2kzwN/k+fRMB8GA1UdIwQY MBaAFNvJUAmENigc7lQqHnRUZVHh5VKDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjhsUUNZUTJLQnp1VkNvZWRGUmxVZUhsVW9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi81YWE0NDgtNjQzZi00YWVlLTkwZDkt ZjQ3ZTE2OTI2NmMyLzEvMjhsUUNZUTJLQnp1VkNvZWRGUmxVZUhsVW9NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi81YWE0NDgtNjQzZi00YWVlLTkwZDktZjQ3ZTE2OTI2NmMy LzEvMjhsUUNZUTJLQnp1VkNvZWRGUmxVZUhsVW9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACnXy073q YA4dzq9MJrURU2ZaA8zHQkQUIXpOBrwqTyYde7BnwuGqwNUln7VG2Vvi0y81VeFC JtfiyWGcTy1u/3HOGgXTH1785A822XRUGq7Dl20+y0eZZrarftuilPDz4fKXQ+EL s5mZgyccEm414nTrmB0YYk83UbIIngp15i18BE3kjIVxo94HH4q2rqxOPo0hwHeQ VBMJ8Ac1mfNJU9OtKXr62rVwP6mN6SY+hucH2lFkUw6Xf/+RWnoNfNFfiSG8Ld5t jScG2EY2xNtn+CCiA7SlnLj+J/XdCetu3UjnEELxES4G0EaAmcEc06UQhS5WBXeq OuWrCOX+VyHWFA== -----END CERTIFICATE-----Generated at Mon Dec 29 13:25:46 2025 by rpki-client