This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft File: rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft (raw, json) Hash identifier: LO0/omNbs9BgfLAtvipIJwm2E7RTOY8KHsHlrzBvhG8= Subject key identifier: 73:64:DD:1B:A1:FC:30:F2:08:A8:AD:EA:F1:CE:E9:89:16:7A:00:5E Authority key identifier: AD:BB:86:DD:76:DD:3C:1F:7B:40:C9:16:3F:75:25:7B:E6:D0:EE:F5 Certificate issuer: /CN=adbb86dd76dd3c1f7b40c9163f75257be6d0eef5 Certificate serial: 019B3FED38FD8DDE281ACBADCF72D2863968 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft Manifest number: 080B Signing time: Sun 21 Dec 2025 08:01:09 +0000 Manifest this update: Sun 21 Dec 2025 08:01:09 +0000 Manifest next update: Mon 22 Dec 2025 08:01:09 +0000 Files and hashes: 1: rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl (hash: 1yYV+5c1HrvKW8Hc0JKHtRfC89wmL6BondotGyJ4H+0=) 2: w4hN4EJQ_3vBdUHqQ3XyJaL8bkA.roa (hash: 4EUB26NuRxe0K3o15R6cS+9ryAyEDIc2bJyCFTz2HoA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:38:fd:8d:de:28:1a:cb:ad:cf:72:d2:86:39:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adbb86dd76dd3c1f7b40c9163f75257be6d0eef5 Validity Not Before: Dec 21 08:01:09 2025 GMT Not After : Dec 22 08:01:09 2025 GMT Subject: CN=7364dd1ba1fc30f208a8adeaf1cee989167a005e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:93:eb:90:5b:ce:67:e0:1c:4c:2f:95:48:2a: 2f:6d:9c:7a:28:cf:92:d1:6f:dc:64:0b:e9:dd:bc: fa:4f:68:92:f9:7d:e8:93:4f:9f:30:21:89:38:9e: 14:41:8e:0e:8b:90:75:96:0e:a1:91:dd:ea:e8:a6: 2b:a5:b5:89:cf:23:b8:7e:a7:1e:f1:38:85:05:ce: 19:70:42:85:57:ce:8d:9e:7b:cd:70:9f:e0:93:e0: 32:da:8d:f0:cb:f1:d6:e9:d4:76:21:a2:6b:47:fc: 7f:e2:f5:f2:e1:60:55:ee:4d:1a:e7:58:a7:60:f9: c0:18:fd:00:9a:48:b3:78:0f:35:95:77:75:a0:44: 6b:54:38:22:d2:aa:0a:9c:b2:8d:a7:86:f3:f4:8d: d6:2b:f6:49:93:f4:53:8b:4a:25:47:fe:34:f3:b1: b2:a2:33:88:e8:1e:76:9e:3c:ed:2e:bf:d7:09:ee: 6d:81:ed:2a:94:25:20:1d:17:2d:ff:8b:8a:db:4c: c5:ee:5e:c2:a4:f5:55:1d:4b:6b:af:94:d1:f2:5b: 9a:fc:c1:f6:48:87:5d:d6:1b:93:f9:f0:b3:2c:0f: 8e:b8:d8:47:50:02:10:df:d9:d9:59:52:6b:bd:a9: 7e:0f:ec:a9:42:6d:e1:c0:e2:f0:fc:9c:8d:90:a7: 0a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:64:DD:1B:A1:FC:30:F2:08:A8:AD:EA:F1:CE:E9:89:16:7A:00:5E X509v3 Authority Key Identifier: keyid:AD:BB:86:DD:76:DD:3C:1F:7B:40:C9:16:3F:75:25:7B:E6:D0:EE:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:bf:16:72:80:61:7d:88:19:34:54:7f:fd:06:0f:e6:ff:d4: 2e:03:e8:79:fe:24:9a:c5:55:63:e9:14:4c:aa:8f:e8:bc:b8: a1:87:60:82:63:69:93:04:e9:ce:68:26:a8:43:5f:08:81:da: 27:1e:a8:d4:87:ea:60:b9:03:dd:10:2b:9e:ac:fa:a1:ac:1d: 35:3c:f1:90:61:55:13:bf:63:5c:28:95:c4:b8:f3:21:c7:5c: 0f:ef:c9:ce:62:58:2a:bb:1c:a6:50:b4:3f:04:d9:e9:b1:b9: 7d:76:59:4f:f1:ff:34:2b:bc:88:0a:92:02:ab:6e:1a:67:14: 4c:7a:a3:3e:56:54:f6:23:ec:d2:88:e1:db:39:6a:5a:83:f7: 15:43:a8:08:c8:81:f8:f7:1c:4d:10:db:b9:1b:ed:92:70:0d: 5a:2b:fb:b7:38:d1:62:f2:9f:f1:3d:a6:1e:b0:be:3e:4f:1b: a2:e6:7a:f8:b8:f5:04:39:7d:c3:d7:c1:68:68:58:61:ee:2c: 89:15:74:d9:fa:25:85:1c:3b:0e:36:19:b3:e5:75:e9:90:94: 48:0d:8b:eb:7d:7f:13:36:fb:64:61:1c:83:1c:d3:82:9d:16: 6f:ce:bb:0c:9d:ea:cb:ab:05:70:b8:90:6e:16:79:18:f2:a6: a5:58:65:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7Tj9jd4oGsutz3LShjloMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYmI4NmRkNzZkZDNjMWY3YjQwYzkxNjNmNzUyNTdiZTZk MGVlZjUwHhcNMjUxMjIxMDgwMTA5WhcNMjUxMjIyMDgwMTA5WjAzMTEwLwYDVQQD Eyg3MzY0ZGQxYmExZmMzMGYyMDhhOGFkZWFmMWNlZTk4OTE2N2EwMDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZPrkFvOZ+AcTC+VSCovbZx6KM+S 0W/cZAvp3bz6T2iS+X3ok0+fMCGJOJ4UQY4Oi5B1lg6hkd3q6KYrpbWJzyO4fqce 8TiFBc4ZcEKFV86NnnvNcJ/gk+Ay2o3wy/HW6dR2IaJrR/x/4vXy4WBV7k0a51in YPnAGP0AmkizeA81lXd1oERrVDgi0qoKnLKNp4bz9I3WK/ZJk/RTi0olR/4087Gy ojOI6B52njztLr/XCe5tge0qlCUgHRct/4uK20zF7l7CpPVVHUtrr5TR8lua/MH2 SIdd1huT+fCzLA+OuNhHUAIQ39nZWVJrval+D+ypQm3hwOLw/JyNkKcKcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHNk3Ruh/DDyCKit6vHO6YkWegBeMB8GA1UdIwQY MBaAFK27ht123Twfe0DJFj91JXvm0O71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmJ1RzNYYmRQQjk3UU1rV1AzVWxlLWJRN3ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9iZjhkMTMtNzlmMC00M2VhLTgyZDgt OWNjNjk1OWZmM2U5LzEvcmJ1RzNYYmRQQjk3UU1rV1AzVWxlLWJRN3ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9iZjhkMTMtNzlmMC00M2VhLTgyZDgtOWNjNjk1OWZmM2U5 LzEvcmJ1RzNYYmRQQjk3UU1rV1AzVWxlLWJRN3ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeb8WcoBh fYgZNFR//QYP5v/ULgPoef4kmsVVY+kUTKqP6Ly4oYdggmNpkwTpzmgmqENfCIHa Jx6o1IfqYLkD3RArnqz6oawdNTzxkGFVE79jXCiVxLjzIcdcD+/JzmJYKrscplC0 PwTZ6bG5fXZZT/H/NCu8iAqSAqtuGmcUTHqjPlZU9iPs0ojh2zlqWoP3FUOoCMiB +PccTRDbuRvtknANWiv7tzjRYvKf8T2mHrC+Pk8bouZ6+Lj1BDl9w9fBaGhYYe4s iRV02folhRw7DjYZs+V16ZCUSA2L631/Ezb7ZGEcgxzTgp0Wb867DJ3qy6sFcLiQ bhZ5GPKmpVhluw== -----END CERTIFICATE-----Generated at Sun Dec 21 13:03:46 2025 by rpki-client