This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft File: C28enwlQ5POcnF_uP4aKJOs2HvE.mft (raw, json) Hash identifier: aVlTeIpQsOTafJvfmcWXypl+9GSu49N7cmke4UcNfn0= Subject key identifier: C2:ED:77:58:76:FF:23:69:59:E2:BA:D5:2A:2A:C1:A9:C2:40:12:34 Authority key identifier: 0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1 Certificate issuer: /CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1 Certificate serial: 019B5BD21CEDA576CA327863199E297CE49A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft Manifest number: 0A2D Signing time: Fri 26 Dec 2025 18:00:55 +0000 Manifest this update: Fri 26 Dec 2025 18:00:55 +0000 Manifest next update: Sat 27 Dec 2025 18:00:55 +0000 Files and hashes: 1: 9T-K1Qm3b8gpXgz9zJRHreyTvgM.roa (hash: dWSzFCZcssBKJcBODdxFw6oV27vvhXKSqLYxiGBOtGQ=) 2: C28enwlQ5POcnF_uP4aKJOs2HvE.crl (hash: 5xmCteOkZ/WLEySSq5Eb8cV9tIdGn6OxwK7Pe9eY+D4=) 3: hEhkAm4wvhKI8lm4TouQ913BI64.roa (hash: QBQPmns85EKoDttpiWLYZhYuUsat9iVL0D6w2NFPGj8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 18:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:d2:1c:ed:a5:76:ca:32:78:63:19:9e:29:7c:e4:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1 Validity Not Before: Dec 26 18:00:55 2025 GMT Not After : Dec 27 18:00:55 2025 GMT Subject: CN=c2ed775876ff236959e2bad52a2ac1a9c2401234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:b4:1a:ad:fb:cc:a4:fd:6a:fc:85:a7:ba:e5: 71:a6:ec:78:33:20:1e:3b:ce:79:b3:02:48:9e:fe: 87:e4:f6:63:5b:20:e1:cc:57:7b:ce:b5:89:8c:43: 7c:fe:e9:57:89:c3:b1:48:5f:4d:89:8d:3d:3b:ed: f5:97:6f:8d:54:3f:a8:9b:2e:c2:41:f9:03:1e:6a: 14:93:39:97:60:c5:4b:f4:ef:d1:4e:cf:6b:8d:2b: 46:7f:ec:11:4d:5d:2b:1b:fa:54:4c:67:73:9d:1c: 4f:4a:21:66:f6:b9:be:52:f7:a6:97:50:29:95:87: c3:93:62:0d:72:4d:c8:1a:01:fb:0e:0a:a0:84:1d: 17:c9:26:c6:8f:b8:d3:0b:ca:d2:f2:7d:a5:0f:24: 38:39:b5:54:be:af:78:a9:28:01:54:d2:67:f6:1b: ce:be:da:0e:25:3b:c1:01:ee:f0:7e:58:9a:a5:15: 19:5a:c9:ff:62:4c:23:00:3b:0c:bb:a4:b4:0e:fc: d0:ab:2f:a1:95:fb:d5:0e:b2:65:da:08:c3:76:ae: a6:6a:fb:29:d8:8d:75:40:61:72:7c:a8:55:2e:0e: b5:06:3a:cd:a5:02:aa:2f:b4:66:64:0c:e1:e4:c1: 19:b9:f2:3e:a7:fb:3c:20:c2:50:8c:8d:0a:f7:30: a9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:ED:77:58:76:FF:23:69:59:E2:BA:D5:2A:2A:C1:A9:C2:40:12:34 X509v3 Authority Key Identifier: keyid:0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:46:cb:f4:f8:98:d6:e9:f9:fb:5c:f6:70:5c:36:d2:19:89: f2:57:6f:57:9a:a4:6e:4f:86:38:91:b8:9b:07:bd:9b:87:34: e8:7c:f9:7f:97:a6:b9:8e:7f:25:93:24:5d:6e:86:37:5b:21: b5:76:98:c0:68:96:ee:e1:20:1f:13:4f:ed:c9:83:a6:dd:85: 0c:ee:ee:d0:c3:7d:a3:60:47:b4:cd:dd:a1:b5:16:bd:e5:0b: 31:de:b4:db:c2:59:d6:e2:12:c0:b9:49:80:db:4d:e8:60:6a: 1e:e2:b2:fe:d6:ab:40:7b:7c:e5:ea:7a:ed:ec:13:07:6f:15: 2e:61:c6:34:71:41:25:89:ed:d6:f9:91:2e:19:a4:cd:22:9e: 20:6b:66:fe:69:00:2c:39:99:57:cc:37:43:75:44:9a:92:da: 17:c1:a7:a7:fb:a0:9c:01:70:6e:f2:51:3d:89:74:75:04:6b: ff:f7:f1:d5:52:42:b0:16:5c:b3:fc:8c:ea:00:bb:b4:e1:e4: 8e:e7:85:77:55:f0:e6:f9:14:26:fe:70:8b:cf:4e:19:9e:8e: 5b:df:f1:5f:c6:ac:f8:84:e9:6e:36:de:fc:ad:e7:42:dd:7f: 7c:d4:ad:20:94:d7:ff:70:24:f0:b6:b6:2a:e9:32:79:4a:66: d0:31:7d:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtb0hztpXbKMnhjGZ4pfOSaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNmYxZTlmMDk1MGU0ZjM5YzljNWZlZTNmODY4YTI0ZWIz NjFlZjEwHhcNMjUxMjI2MTgwMDU1WhcNMjUxMjI3MTgwMDU1WjAzMTEwLwYDVQQD EyhjMmVkNzc1ODc2ZmYyMzY5NTllMmJhZDUyYTJhYzFhOWMyNDAxMjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8bQarfvMpP1q/IWnuuVxpux4MyAe O855swJInv6H5PZjWyDhzFd7zrWJjEN8/ulXicOxSF9NiY09O+31l2+NVD+omy7C QfkDHmoUkzmXYMVL9O/RTs9rjStGf+wRTV0rG/pUTGdznRxPSiFm9rm+Uveml1Ap lYfDk2INck3IGgH7DgqghB0XySbGj7jTC8rS8n2lDyQ4ObVUvq94qSgBVNJn9hvO vtoOJTvBAe7wfliapRUZWsn/YkwjADsMu6S0DvzQqy+hlfvVDrJl2gjDdq6mavsp 2I11QGFyfKhVLg61BjrNpQKqL7RmZAzh5MEZufI+p/s8IMJQjI0K9zCp9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMLtd1h2/yNpWeK61SoqwanCQBI0MB8GA1UdIwQY MBaAFAtvHp8JUOTznJxf7j+GiiTrNh7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzI4ZW53bFE1UE9jbkZfdVA0YUtKT3MySHZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lNjliZDMtMjE1ZS00NDIyLTkxNzAt MDgxYmNiYWM0ZGFmLzEvQzI4ZW53bFE1UE9jbkZfdVA0YUtKT3MySHZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lNjliZDMtMjE1ZS00NDIyLTkxNzAtMDgxYmNiYWM0ZGFm LzEvQzI4ZW53bFE1UE9jbkZfdVA0YUtKT3MySHZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABkbL9PiY 1un5+1z2cFw20hmJ8ldvV5qkbk+GOJG4mwe9m4c06Hz5f5emuY5/JZMkXW6GN1sh tXaYwGiW7uEgHxNP7cmDpt2FDO7u0MN9o2BHtM3dobUWveULMd6028JZ1uISwLlJ gNtN6GBqHuKy/tarQHt85ep67ewTB28VLmHGNHFBJYnt1vmRLhmkzSKeIGtm/mkA LDmZV8w3Q3VEmpLaF8Gnp/ugnAFwbvJRPYl0dQRr//fx1VJCsBZcs/yM6gC7tOHk jueFd1Xw5vkUJv5wi89OGZ6OW9/xX8as+ITpbjbe/K3nQt1/fNStIJTX/3Ak8La2 KukyeUpm0DF9Jw== -----END CERTIFICATE-----Generated at Sat Dec 27 04:11:45 2025 by rpki-client