This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft File: rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft (raw, json) Hash identifier: SYYT9NwKSqO1B1Ta8mw+u2qUMJR0jJ1c3ISTC6mrido= Subject key identifier: 5C:04:35:DE:B2:E2:BF:F5:06:59:2D:80:03:4B:C0:78:0A:9C:B0:84 Authority key identifier: AD:BC:5F:77:21:A4:AC:CB:96:35:DE:17:5B:BC:6D:31:E1:7C:9A:8D Certificate issuer: /CN=adbc5f7721a4accb9635de175bbc6d31e17c9a8d Certificate serial: 019B28C04836A087DD54AC3CA6A0E8A1C069 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft Manifest number: 0EA6 Signing time: Tue 16 Dec 2025 20:00:48 +0000 Manifest this update: Tue 16 Dec 2025 20:00:48 +0000 Manifest next update: Wed 17 Dec 2025 20:00:48 +0000 Files and hashes: 1: CDUJExHuCJVPUownDG0KoC95j6g.roa (hash: ec1LWrgiCmmzqFwlIQnZ7qEB99QoLDe3mTnBITPZ9Fo=) 2: rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl (hash: 62rvXMhpF/pWhDoNjZUCyC3bRZhnZwpKAT+Q9p7Ar54=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:c0:48:36:a0:87:dd:54:ac:3c:a6:a0:e8:a1:c0:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adbc5f7721a4accb9635de175bbc6d31e17c9a8d Validity Not Before: Dec 16 20:00:48 2025 GMT Not After : Dec 17 20:00:48 2025 GMT Subject: CN=5c0435deb2e2bff506592d80034bc0780a9cb084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6f:5b:45:08:dc:4f:e8:96:f5:1f:13:64:9c: d7:d6:23:74:69:3c:f7:7f:f8:54:3b:a9:b4:88:57: e2:53:90:ed:e7:4d:1e:22:2a:b5:7e:8f:1e:b1:49: 93:f5:a3:cf:84:33:f3:68:ae:68:f1:3c:a9:ff:a8: 55:08:29:30:64:f5:b4:4c:8e:d2:f3:7e:ca:ee:70: b7:dc:24:c5:ff:dc:61:53:29:a2:84:21:21:b6:33: f2:2c:af:ad:b9:af:4e:7f:8a:3c:e3:64:d6:77:18: fd:de:04:a1:48:04:82:6a:2c:e7:47:ed:84:b9:28: 9f:85:6d:d7:f0:d4:c9:43:ac:ed:12:9f:24:90:82: 01:0b:15:66:81:70:9b:5d:ff:2c:ea:8e:fb:42:9d: 8b:d4:17:ff:03:ff:95:85:64:3e:20:2b:51:c2:14: 27:cb:ff:02:48:b7:1b:8c:bb:ce:0f:f4:bb:58:0c: d3:d3:73:50:40:32:73:b2:9c:6e:1d:38:0b:16:82: 04:83:b5:3e:7c:1e:d0:ba:b2:e1:f7:98:3c:09:0d: a7:44:2e:da:27:ec:f6:7c:40:a4:3b:3d:61:71:fa: ea:e1:61:7b:74:03:94:91:f7:6f:99:c3:2a:27:50: 02:bd:28:34:3d:05:64:9a:a7:dc:e4:3e:56:b7:1c: 39:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:04:35:DE:B2:E2:BF:F5:06:59:2D:80:03:4B:C0:78:0A:9C:B0:84 X509v3 Authority Key Identifier: keyid:AD:BC:5F:77:21:A4:AC:CB:96:35:DE:17:5B:BC:6D:31:E1:7C:9A:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:d8:bf:42:d5:c2:d5:db:13:19:27:bc:20:30:46:a4:35:83: 29:1d:30:16:31:3d:fd:61:52:dd:7d:dc:d6:ed:d1:bf:da:97: ca:f9:cb:c1:2f:1c:e5:b9:0d:2f:cf:5c:58:6d:15:f9:35:f5: dc:64:b3:e9:c1:b8:fe:4b:48:5d:81:1d:92:df:ff:86:51:e6: e3:c2:ea:20:37:62:e7:dc:a2:2e:b2:78:b5:0f:df:10:b2:1d: 85:27:29:0e:6e:fb:5a:17:74:15:af:03:92:85:48:7d:11:53: 20:f6:cb:d7:90:25:c1:6c:46:9b:e7:9b:c2:92:97:52:87:7c: 2c:93:18:a5:e9:fb:11:77:1f:29:a6:3f:ca:2f:79:4e:4f:99: d4:78:57:60:4e:01:ef:c8:79:fc:5c:28:e9:73:73:42:46:d7: c0:ed:ee:28:ed:7c:9d:f8:a9:80:91:59:b6:f5:2d:fa:9a:84: 75:fa:e9:16:25:09:cc:e6:04:53:ec:47:f7:dd:cc:de:99:1b: df:dc:ac:c1:ad:b8:b7:18:e0:16:c8:2f:f6:32:d7:99:a6:68: 8b:6e:e3:e1:a8:5f:03:c9:58:d6:4b:af:73:9f:c9:49:01:07: 18:2e:3a:40:cb:7d:9f:a5:c0:04:67:c7:54:ba:e7:e2:2e:7d: c9:90:0f:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsowEg2oIfdVKw8pqDoocBpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYmM1Zjc3MjFhNGFjY2I5NjM1ZGUxNzViYmM2ZDMxZTE3 YzlhOGQwHhcNMjUxMjE2MjAwMDQ4WhcNMjUxMjE3MjAwMDQ4WjAzMTEwLwYDVQQD Eyg1YzA0MzVkZWIyZTJiZmY1MDY1OTJkODAwMzRiYzA3ODBhOWNiMDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW9bRQjcT+iW9R8TZJzX1iN0aTz3 f/hUO6m0iFfiU5Dt500eIiq1fo8esUmT9aPPhDPzaK5o8Typ/6hVCCkwZPW0TI7S 837K7nC33CTF/9xhUymihCEhtjPyLK+tua9Of4o842TWdxj93gShSASCaiznR+2E uSifhW3X8NTJQ6ztEp8kkIIBCxVmgXCbXf8s6o77Qp2L1Bf/A/+VhWQ+ICtRwhQn y/8CSLcbjLvOD/S7WAzT03NQQDJzspxuHTgLFoIEg7U+fB7QurLh95g8CQ2nRC7a J+z2fECkOz1hcfrq4WF7dAOUkfdvmcMqJ1ACvSg0PQVkmqfc5D5Wtxw5PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFwENd6y4r/1BlktgANLwHgKnLCEMB8GA1UdIwQY MBaAFK28X3chpKzLljXeF1u8bTHhfJqNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmJ4ZmR5R2tyTXVXTmQ0WFc3eHRNZUY4bW8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9kMDIxZjktYTAwMS00NTJiLWE1ZWUt YWJiZjFmMDc4YWQzLzEvcmJ4ZmR5R2tyTXVXTmQ0WFc3eHRNZUY4bW8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9kMDIxZjktYTAwMS00NTJiLWE1ZWUtYWJiZjFmMDc4YWQz LzEvcmJ4ZmR5R2tyTXVXTmQ0WFc3eHRNZUY4bW8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtNi/QtXC 1dsTGSe8IDBGpDWDKR0wFjE9/WFS3X3c1u3Rv9qXyvnLwS8c5bkNL89cWG0V+TX1 3GSz6cG4/ktIXYEdkt//hlHm48LqIDdi59yiLrJ4tQ/fELIdhScpDm77Whd0Fa8D koVIfRFTIPbL15AlwWxGm+ebwpKXUod8LJMYpen7EXcfKaY/yi95Tk+Z1HhXYE4B 78h5/Fwo6XNzQkbXwO3uKO18nfipgJFZtvUt+pqEdfrpFiUJzOYEU+xH993M3pkb 39yswa24txjgFsgv9jLXmaZoi27j4ahfA8lY1kuvc5/JSQEHGC46QMt9n6XABGfH VLrn4i59yZAPog== -----END CERTIFICATE-----Generated at Tue Dec 16 22:34:48 2025 by rpki-client