This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft File: rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft (raw, json) Hash identifier: e476nw5LbOXrouRe9Vm4+LF8jCrzTqomE/Duy8eAZQ4= Subject key identifier: 5D:93:C6:92:F0:54:28:D7:AE:57:0E:6C:2F:40:C5:8D:18:3E:4E:B3 Authority key identifier: AD:BD:8E:99:F8:27:FF:95:D2:81:D4:FF:7B:C2:7F:04:5F:AB:F1:05 Certificate issuer: /CN=adbd8e99f827ff95d281d4ff7bc27f045fabf105 Certificate serial: 019B42B7041E1903FAB7EE8DC91ADF12AE69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 21:00:48 +0000 Manifest this update: Sun 21 Dec 2025 21:00:48 +0000 Manifest next update: Mon 22 Dec 2025 21:00:48 +0000 Files and hashes: 1: 82G84G32y1mgU0Q3YtZB3rFx4UE.roa (hash: lPGmw8XEMipvSgR8GKq/jdBXSYYQonaEL52/1uh2Mmo=) 2: Deo2xTMuFm8QocUJ-a4RvviXgQw.roa (hash: nYDs1ZDulSnhALP5AjppGJbC8hnqemDJikGGe6pDTwQ=) 3: rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl (hash: DKesShaJPJc4WOEsNW+CqWSLPos0+VbXG28RUzhBgLA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:04:1e:19:03:fa:b7:ee:8d:c9:1a:df:12:ae:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adbd8e99f827ff95d281d4ff7bc27f045fabf105 Validity Not Before: Dec 21 21:00:48 2025 GMT Not After : Dec 22 21:00:48 2025 GMT Subject: CN=5d93c692f05428d7ae570e6c2f40c58d183e4eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:44:88:6d:33:3a:6d:76:9d:26:02:c7:5e:96: 56:6c:8f:5a:b0:d9:c0:17:e5:29:66:dc:39:13:9c: b9:fd:94:89:3a:da:6a:5e:54:0d:f6:59:07:e5:d7: 87:d7:f1:41:77:e8:88:97:cb:ed:b4:be:26:05:84: 2a:05:56:3c:70:8f:25:14:78:19:0b:df:54:35:16: 07:18:08:76:36:19:23:20:08:d6:e0:ee:c3:47:d9: 37:be:fd:07:21:66:b2:4f:fd:b3:42:92:04:e7:dc: 36:87:f2:51:30:87:d4:37:48:9f:2d:72:81:2e:b9: 44:fe:14:47:81:f4:db:4f:32:1b:d6:71:ac:47:13: 86:3e:3b:12:ab:a4:3b:83:e6:a5:9a:e8:7a:58:1c: fa:21:10:61:ca:70:30:a7:1e:6e:51:11:58:43:ff: 3c:53:f9:28:e8:a0:01:a6:63:51:7d:7b:c1:59:ee: 02:1b:c9:9b:1b:43:70:99:50:7d:0c:21:54:59:45: 19:f2:1a:cb:73:29:21:ea:a7:cc:2c:34:78:d2:2e: aa:8a:60:1c:31:0f:42:5d:3f:a6:2e:fe:50:6f:f4: c8:5f:75:0d:ba:23:c9:71:b1:48:88:b2:ae:81:7c: 0c:8e:70:75:51:c4:ef:5c:4c:82:b8:dc:f8:17:20: 84:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:93:C6:92:F0:54:28:D7:AE:57:0E:6C:2F:40:C5:8D:18:3E:4E:B3 X509v3 Authority Key Identifier: keyid:AD:BD:8E:99:F8:27:FF:95:D2:81:D4:FF:7B:C2:7F:04:5F:AB:F1:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:72:9c:ad:71:64:51:3b:9e:7c:db:65:68:86:1d:f9:55:84: 55:e0:3f:6b:3c:d9:e8:49:88:fc:5a:8c:65:6a:26:ee:f0:61: e6:d1:74:9a:79:79:96:08:99:bb:9f:0f:58:6c:ec:46:b4:9a: 92:4c:87:44:a7:07:41:06:91:af:f4:49:cb:51:60:cf:5f:ad: e3:00:b9:5e:4f:77:16:41:e3:ec:90:4d:f5:78:a8:03:4a:74: 8c:eb:83:24:2c:6c:73:17:26:65:09:12:3f:78:fa:4a:cf:c7: 7d:63:8a:b2:11:06:48:4c:bb:37:df:63:90:81:97:5a:51:fe: 17:7e:a4:4a:01:ac:fb:b4:bb:d9:ae:74:5f:9a:d2:bc:b0:41: 22:7c:b7:89:b6:ee:be:c3:94:80:1a:52:5e:dc:49:02:1f:38: 1f:39:71:e1:b4:5f:b1:24:ba:ba:ec:3c:fe:c4:36:45:61:13: 99:af:0d:3f:0c:cf:8c:6e:07:83:c1:0b:32:3f:f4:73:18:e0: 5c:b7:13:b5:b8:05:08:fa:21:72:4a:ae:b1:94:22:94:6c:bc: 3c:6f:01:c9:42:14:5c:f5:5d:fc:1b:a0:62:12:34:0e:7c:87: 6c:cc:9c:61:99:9a:4d:a9:4f:1d:6b:93:bc:7e:c9:c3:cb:c4: 15:68:0b:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCtwQeGQP6t+6NyRrfEq5pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYmQ4ZTk5ZjgyN2ZmOTVkMjgxZDRmZjdiYzI3ZjA0NWZh YmYxMDUwHhcNMjUxMjIxMjEwMDQ4WhcNMjUxMjIyMjEwMDQ4WjAzMTEwLwYDVQQD Eyg1ZDkzYzY5MmYwNTQyOGQ3YWU1NzBlNmMyZjQwYzU4ZDE4M2U0ZWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00SIbTM6bXadJgLHXpZWbI9asNnA F+UpZtw5E5y5/ZSJOtpqXlQN9lkH5deH1/FBd+iIl8vttL4mBYQqBVY8cI8lFHgZ C99UNRYHGAh2NhkjIAjW4O7DR9k3vv0HIWayT/2zQpIE59w2h/JRMIfUN0ifLXKB LrlE/hRHgfTbTzIb1nGsRxOGPjsSq6Q7g+almuh6WBz6IRBhynAwpx5uURFYQ/88 U/ko6KABpmNRfXvBWe4CG8mbG0NwmVB9DCFUWUUZ8hrLcykh6qfMLDR40i6qimAc MQ9CXT+mLv5Qb/TIX3UNuiPJcbFIiLKugXwMjnB1UcTvXEyCuNz4FyCEMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF2TxpLwVCjXrlcObC9AxY0YPk6zMB8GA1UdIwQY MBaAFK29jpn4J/+V0oHU/3vCfwRfq/EFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmIyT21mZ25fNVhTZ2RUX2U4Sl9CRi1yOFFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iOTkzYzctZmE4ZC00M2MwLTkzNzQt MWQzMWExOTYwMTQ3LzEvcmIyT21mZ25fNVhTZ2RUX2U4Sl9CRi1yOFFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9iOTkzYzctZmE4ZC00M2MwLTkzNzQtMWQzMWExOTYwMTQ3 LzEvcmIyT21mZ25fNVhTZ2RUX2U4Sl9CRi1yOFFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUnKcrXFk UTuefNtlaIYd+VWEVeA/azzZ6EmI/FqMZWom7vBh5tF0mnl5lgiZu58PWGzsRrSa kkyHRKcHQQaRr/RJy1Fgz1+t4wC5Xk93FkHj7JBN9XioA0p0jOuDJCxscxcmZQkS P3j6Ss/HfWOKshEGSEy7N99jkIGXWlH+F36kSgGs+7S72a50X5rSvLBBIny3ibbu vsOUgBpSXtxJAh84Hzlx4bRfsSS6uuw8/sQ2RWETma8NPwzPjG4Hg8ELMj/0cxjg XLcTtbgFCPohckqusZQilGy8PG8ByUIUXPVd/BugYhI0DnyHbMycYZmaTalPHWuT vH7Jw8vEFWgLQA== -----END CERTIFICATE-----Generated at Mon Dec 22 00:54:27 2025 by rpki-client