This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft File: rbNlrPb5GEmXB92hPwM-LNYRAwg.mft (raw, json) Hash identifier: DG1xa5YgM0+7ApAmXa32cEZDE5UePN5yPaJ34vdfJSg= Subject key identifier: 16:F0:EF:8E:A2:E4:7C:2A:E5:EA:DD:1C:30:ED:39:B4:CB:F4:D6:99 Authority key identifier: AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08 Certificate issuer: /CN=adb365acf6f918499707dda13f033e2cd6110308 Certificate serial: 019B766E6422321F02AB9D345918F11F5CE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft Manifest number: 17A8 Signing time: Wed 31 Dec 2025 22:01:44 +0000 Manifest this update: Wed 31 Dec 2025 22:01:44 +0000 Manifest next update: Thu 01 Jan 2026 22:01:44 +0000 Files and hashes: 1: rbNlrPb5GEmXB92hPwM-LNYRAwg.crl (hash: LFaHeVJr4hxSOt0qLYOAeR7bSg+oLxMY5givxBGStQs=) 2: zexQv7MMnSMTcRcSk7PaXdu5bh4.roa (hash: VAN/TauThH6QEZkrRALg6rnqCv24/be16q83SWwAfVw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 22:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:6e:64:22:32:1f:02:ab:9d:34:59:18:f1:1f:5c:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adb365acf6f918499707dda13f033e2cd6110308 Validity Not Before: Dec 31 22:01:44 2025 GMT Not After : Jan 1 22:01:44 2026 GMT Subject: CN=16f0ef8ea2e47c2ae5eadd1c30ed39b4cbf4d699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4e:d6:d5:a4:70:cf:c2:ee:57:c9:4a:20:19: 6c:8c:f1:15:b6:d1:e8:c1:a2:7c:5f:7a:0e:ee:e6: 00:67:e2:19:25:78:88:f0:49:85:4e:55:53:ed:c1: 41:88:4b:26:f1:59:99:66:fc:c8:1e:e7:72:f1:1b: 59:f9:49:be:6a:04:0c:e8:79:f2:af:16:99:73:87: 4f:52:56:44:63:19:82:c6:2a:eb:ac:ff:aa:4d:e2: 2f:75:8f:fc:60:8c:61:d4:45:3a:77:9c:ba:aa:f3: f2:d2:5d:19:b9:2d:95:ea:77:ec:df:2f:4b:b2:c1: d3:7d:42:d9:59:75:67:f6:28:35:cf:5c:3f:64:f5: 64:6b:0d:94:96:22:27:cb:51:24:b3:ef:a8:2a:d6: d3:d9:89:75:ca:21:34:3a:49:7f:26:a3:c3:b0:3d: 8a:42:8f:00:b5:30:ee:78:ce:67:34:ca:8f:8e:0b: 36:01:e6:7e:59:ad:67:02:fd:e0:2e:9f:1a:b7:b6: e9:d5:93:14:13:58:10:69:aa:ba:e9:76:b3:62:14: fd:8c:64:33:78:b2:ee:69:b0:eb:98:d5:6b:a7:58: c7:5e:90:3d:40:d0:bd:30:b8:33:1c:9c:b9:c3:19: 44:e9:64:6d:1a:94:65:0f:5d:d7:75:89:36:b3:53: 72:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F0:EF:8E:A2:E4:7C:2A:E5:EA:DD:1C:30:ED:39:B4:CB:F4:D6:99 X509v3 Authority Key Identifier: keyid:AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:27:ae:6e:5c:5f:32:48:60:d7:54:4f:4b:82:99:03:87:30: 0d:28:47:de:d3:88:40:e2:96:de:41:c7:71:22:1f:d8:d9:24: 1c:a5:11:7b:0d:9a:c0:f2:be:a6:9f:8f:bb:a8:96:f6:fe:a4: 96:74:97:e8:cd:26:98:a3:62:da:e6:1e:ac:c1:84:d6:0b:b3: fc:0e:a8:35:86:2f:70:b7:24:97:6a:4e:74:2a:bb:59:11:89: af:91:3c:4f:38:88:37:52:d4:54:fa:f9:30:aa:e3:e5:3d:44: e7:71:fe:c7:87:25:f8:67:b7:fc:3f:2c:d1:1a:da:4a:83:5f: cf:a7:82:08:7a:f2:2c:56:59:62:40:dd:95:9f:f0:51:ac:3f: 92:b2:22:44:98:9c:10:d4:a0:96:2c:a8:a6:e9:01:02:65:b8: f2:f0:db:d2:e0:9c:22:c5:2c:6c:a5:ba:81:4f:e2:74:f2:08: 7c:ab:3b:82:0f:60:7c:75:6c:f3:03:38:85:1c:ba:92:85:f6: 7a:7a:1f:3e:a4:df:a7:71:1c:4e:53:89:9a:ef:14:ef:02:8e: 88:5d:ea:00:ba:d8:8d:08:fc:a7:3f:ec:88:f9:e2:a7:a6:60: 45:98:3e:44:e5:0d:a0:de:d1:b8:70:bc:a8:bc:e4:70:ab:b6: 54:0c:07:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt2bmQiMh8Cq500WRjxH1zhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYjM2NWFjZjZmOTE4NDk5NzA3ZGRhMTNmMDMzZTJjZDYx MTAzMDgwHhcNMjUxMjMxMjIwMTQ0WhcNMjYwMTAxMjIwMTQ0WjAzMTEwLwYDVQQD EygxNmYwZWY4ZWEyZTQ3YzJhZTVlYWRkMWMzMGVkMzliNGNiZjRkNjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw07W1aRwz8LuV8lKIBlsjPEVttHo waJ8X3oO7uYAZ+IZJXiI8EmFTlVT7cFBiEsm8VmZZvzIHudy8RtZ+Um+agQM6Hny rxaZc4dPUlZEYxmCxirrrP+qTeIvdY/8YIxh1EU6d5y6qvPy0l0ZuS2V6nfs3y9L ssHTfULZWXVn9ig1z1w/ZPVkaw2UliIny1Eks++oKtbT2Yl1yiE0Okl/JqPDsD2K Qo8AtTDueM5nNMqPjgs2AeZ+Wa1nAv3gLp8at7bp1ZMUE1gQaaq66XazYhT9jGQz eLLuabDrmNVrp1jHXpA9QNC9MLgzHJy5wxlE6WRtGpRlD13XdYk2s1NyCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBbw746i5Hwq5erdHDDtObTL9NaZMB8GA1UdIwQY MBaAFK2zZaz2+RhJlwfdoT8DPizWEQMIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmJObHJQYjVHRW1YQjkyaFB3TS1MTllSQXdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hNjgzODctODYxYS00YjkzLWEzZmMt YWRhZGQ2Mjk1ODIyLzEvcmJObHJQYjVHRW1YQjkyaFB3TS1MTllSQXdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9hNjgzODctODYxYS00YjkzLWEzZmMtYWRhZGQ2Mjk1ODIy LzEvcmJObHJQYjVHRW1YQjkyaFB3TS1MTllSQXdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3Ceublxf Mkhg11RPS4KZA4cwDShH3tOIQOKW3kHHcSIf2NkkHKURew2awPK+pp+Pu6iW9v6k lnSX6M0mmKNi2uYerMGE1guz/A6oNYYvcLckl2pOdCq7WRGJr5E8TziIN1LUVPr5 MKrj5T1E53H+x4cl+Ge3/D8s0RraSoNfz6eCCHryLFZZYkDdlZ/wUaw/krIiRJic ENSgliyopukBAmW48vDb0uCcIsUsbKW6gU/idPIIfKs7gg9gfHVs8wM4hRy6koX2 enofPqTfp3EcTlOJmu8U7wKOiF3qALrYjQj8pz/siPnip6ZgRZg+ROUNoN7RuHC8 qLzkcKu2VAwH0w== -----END CERTIFICATE-----Generated at Thu Jan 1 03:54:19 2026 by rpki-client