This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft File: 28eECSDRxwn_KZrtNoLCP7Qydn0.mft (raw, json) Hash identifier: tcTyY8hE/MQihg424Wy6oYvSiPRW2vX3Rig+zOKmW5Y= Subject key identifier: 5C:47:5A:9D:8B:FE:54:5C:14:F4:39:8C:E2:AD:DF:F8:22:36:A0:DF Authority key identifier: DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D Certificate issuer: /CN=dbc7840920d1c709ff299aed3682c23fb432767d Certificate serial: 019B3D23AB5A80E1047D09A46474CACE6525 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft Manifest number: 13D6 Signing time: Sat 20 Dec 2025 19:01:46 +0000 Manifest this update: Sat 20 Dec 2025 19:01:46 +0000 Manifest next update: Sun 21 Dec 2025 19:01:46 +0000 Files and hashes: 1: 28eECSDRxwn_KZrtNoLCP7Qydn0.crl (hash: kFWEyvH99jZ6zL8hh5iupgOHgO8nl8cKbKrBbvaY+rU=) 2: e_UFXyqaeTvL3E6lukMB0WgwTVE.roa (hash: OXE+evWhqp6U3n1wOYbBBjgTwYv/71GDxDwJtwclFB8=) 3: lZ-AOq7_6QtP_M2_NSdFkS5kWDw.roa (hash: QIlc9W3HH3Xuxs2UHApl1aj37iKKZQTLV1xjUXcHjZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:ab:5a:80:e1:04:7d:09:a4:64:74:ca:ce:65:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbc7840920d1c709ff299aed3682c23fb432767d Validity Not Before: Dec 20 19:01:46 2025 GMT Not After : Dec 21 19:01:46 2025 GMT Subject: CN=5c475a9d8bfe545c14f4398ce2addff82236a0df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:54:cd:eb:58:97:41:44:94:19:8e:c1:f2:98: 7c:00:66:24:74:c7:3c:8c:ed:c2:f3:8b:51:17:10: 26:eb:52:ee:25:fd:20:54:2e:31:29:38:49:aa:8e: d0:0b:4a:72:4a:9a:6a:92:f7:02:51:9f:f6:0b:3d: 6b:2a:5d:7b:76:e7:a7:ec:6b:79:75:fd:48:7b:a7: 45:2f:60:8b:3f:69:f2:9e:d9:74:56:85:ee:81:2d: fb:28:5e:9b:99:03:5f:d2:8b:90:96:4b:b6:1a:46: ab:b2:bf:10:f2:82:5a:31:94:1a:ba:76:4b:45:e7: a2:23:b2:c0:40:46:ad:eb:be:fd:5c:ef:68:e7:4a: 3c:b3:3f:82:ab:e2:83:2f:24:aa:b5:e9:4b:64:7a: 54:77:7a:05:a8:a3:95:2a:d8:21:0d:7a:de:b7:e7: 17:4c:0d:9f:c8:b8:be:5e:4f:44:44:c7:12:ab:7c: 64:f5:cc:ff:da:19:92:04:37:aa:7e:43:ac:42:f3: f0:e1:9b:7b:6d:2f:6d:8e:c4:90:cd:f1:83:9f:3b: f3:dc:d8:cf:68:8a:fd:19:0e:47:28:55:38:73:f7: c3:51:1c:ac:db:1b:03:32:1c:49:60:4f:8c:fe:bf: ad:03:7e:f1:81:b0:05:70:e6:88:e6:c1:e7:16:e0: a0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:47:5A:9D:8B:FE:54:5C:14:F4:39:8C:E2:AD:DF:F8:22:36:A0:DF X509v3 Authority Key Identifier: keyid:DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:58:58:6d:51:86:61:5b:7c:2f:40:3c:d7:d0:3f:48:e8:29: 27:d9:25:49:02:1c:f1:f0:21:0c:69:56:64:01:1a:e3:cb:8f: eb:48:82:55:f7:54:db:ec:86:d3:d6:07:03:1e:06:fc:c0:14: 03:14:3f:f0:3f:29:95:26:ed:85:31:60:93:02:82:bb:43:1a: 54:d6:e2:36:82:fe:ea:5b:1a:23:31:a9:ca:39:13:53:6a:0f: 25:8f:c4:a3:0d:5e:73:69:7e:fd:b3:36:76:fc:21:08:50:a9: fd:2a:6d:6f:db:a0:35:d1:77:c2:d1:96:ee:b3:ad:54:7a:87: 44:1f:3a:61:10:fb:1a:56:1d:28:73:9f:20:d7:17:14:07:a1: b5:df:18:74:40:56:22:9f:83:6e:38:df:00:49:ea:d3:8b:7b: a2:f9:de:e7:8f:36:72:ef:89:6d:2c:d6:36:7c:96:cc:5a:12: c1:a9:11:fb:ad:ad:d3:9d:ed:dd:86:fe:af:4a:2c:bd:10:ca: 3c:2e:e9:d4:3f:9d:17:44:2a:fe:cc:c6:71:67:ae:98:3a:31: c0:b3:7a:91:b7:8f:b3:82:3a:ee:19:93:df:06:e9:a8:ea:7a: cb:16:be:b4:d4:24:53:f8:61:ce:27:c2:9a:09:84:6c:b8:31: 85:cb:70:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I6tagOEEfQmkZHTKzmUlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiYzc4NDA5MjBkMWM3MDlmZjI5OWFlZDM2ODJjMjNmYjQz Mjc2N2QwHhcNMjUxMjIwMTkwMTQ2WhcNMjUxMjIxMTkwMTQ2WjAzMTEwLwYDVQQD Eyg1YzQ3NWE5ZDhiZmU1NDVjMTRmNDM5OGNlMmFkZGZmODIyMzZhMGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVTN61iXQUSUGY7B8ph8AGYkdMc8 jO3C84tRFxAm61LuJf0gVC4xKThJqo7QC0pySppqkvcCUZ/2Cz1rKl17duen7Gt5 df1Ie6dFL2CLP2nyntl0VoXugS37KF6bmQNf0ouQlku2Gkarsr8Q8oJaMZQaunZL ReeiI7LAQEat6779XO9o50o8sz+Cq+KDLySqtelLZHpUd3oFqKOVKtghDXret+cX TA2fyLi+Xk9ERMcSq3xk9cz/2hmSBDeqfkOsQvPw4Zt7bS9tjsSQzfGDnzvz3NjP aIr9GQ5HKFU4c/fDURys2xsDMhxJYE+M/r+tA37xgbAFcOaI5sHnFuCgXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFxHWp2L/lRcFPQ5jOKt3/giNqDfMB8GA1UdIwQY MBaAFNvHhAkg0ccJ/yma7TaCwj+0MnZ9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjhlRUNTRFJ4d25fS1pydE5vTENQN1F5ZG4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC85NTIxZTEtNzYxMC00ZDQzLTg2ODMt NTFiZTJmOTYwOGJjLzEvMjhlRUNTRFJ4d25fS1pydE5vTENQN1F5ZG4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC85NTIxZTEtNzYxMC00ZDQzLTg2ODMtNTFiZTJmOTYwOGJj LzEvMjhlRUNTRFJ4d25fS1pydE5vTENQN1F5ZG4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKFhYbVGG YVt8L0A819A/SOgpJ9klSQIc8fAhDGlWZAEa48uP60iCVfdU2+yG09YHAx4G/MAU AxQ/8D8plSbthTFgkwKCu0MaVNbiNoL+6lsaIzGpyjkTU2oPJY/Eow1ec2l+/bM2 dvwhCFCp/Sptb9ugNdF3wtGW7rOtVHqHRB86YRD7GlYdKHOfINcXFAehtd8YdEBW Ip+DbjjfAEnq04t7ovne5482cu+JbSzWNnyWzFoSwakR+62t053t3Yb+r0osvRDK PC7p1D+dF0Qq/szGcWeumDoxwLN6kbePs4I67hmT3wbpqOp6yxa+tNQkU/hhzifC mgmEbLgxhctwIA== -----END CERTIFICATE-----Generated at Sat Dec 20 21:47:59 2025 by rpki-client