This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft File: RBBkfZUukSEiD0FOiKXd1ivII3s.mft (raw, json) Hash identifier: xdszGFwQGiYTmTWp1cM5XOFZ2Kc2xqw5R/DUlEd1sNA= Subject key identifier: 28:A6:15:94:7C:40:47:33:55:57:CF:6C:87:D5:62:EA:17:6B:F7:93 Authority key identifier: 44:10:64:7D:95:2E:91:21:22:0F:41:4E:88:A5:DD:D6:2B:C8:23:7B Certificate issuer: /CN=4410647d952e9121220f414e88a5ddd62bc8237b Certificate serial: 019B5E9C2517843964504F6E8EB3E26DAAC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft Manifest number: 01CD Signing time: Sat 27 Dec 2025 07:00:49 +0000 Manifest this update: Sat 27 Dec 2025 07:00:49 +0000 Manifest next update: Sun 28 Dec 2025 07:00:49 +0000 Files and hashes: 1: RBBkfZUukSEiD0FOiKXd1ivII3s.crl (hash: j4T0xPGGVJEXkIhx9xInx6vlNAyvUoZrBTPsUQGivw4=) 2: p12I-ru8S8FXjKziObzMY5uNEZE.roa (hash: AoXZbQHCJONRAMAiMe6YpP5PYiXNKcBqe2FpH/bOcvY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5e:9c:25:17:84:39:64:50:4f:6e:8e:b3:e2:6d:aa:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4410647d952e9121220f414e88a5ddd62bc8237b Validity Not Before: Dec 27 07:00:49 2025 GMT Not After : Dec 28 07:00:49 2025 GMT Subject: CN=28a615947c4047335557cf6c87d562ea176bf793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:13:3f:7a:42:62:ae:92:a8:ba:77:d2:36:52: 82:72:a9:8d:a5:25:48:5b:ac:60:7e:6b:9b:2a:27: 04:f6:3d:03:53:1b:4e:8e:c1:48:ee:62:40:a7:8f: 89:ef:0c:f2:f2:1a:6b:88:a1:fa:80:dd:06:b6:86: 3c:cc:dc:f5:fb:29:73:61:6e:ca:77:cf:44:d3:b9: d5:de:d4:e1:8b:57:d3:3a:61:0c:6a:dd:34:12:ef: fc:17:cc:ec:a1:cd:f9:f1:53:57:73:f0:98:78:33: c7:0e:e5:92:3d:38:2c:11:32:bb:b3:66:c4:21:41: c2:67:54:73:97:fa:b1:22:29:0e:98:39:cf:58:80: 19:13:48:3e:67:4d:45:35:03:83:4a:37:b8:40:eb: d3:b6:71:bd:ca:72:04:3d:c6:b1:8a:a0:a7:b8:95: 4e:b8:d2:b8:19:81:ec:9f:c1:21:a3:1a:24:41:28: 59:04:7b:a8:45:82:7f:a2:a3:4c:b0:be:4c:4f:42: 27:99:fa:bb:8a:ca:c9:32:b8:1e:65:16:f5:0a:25: ce:83:db:fa:44:57:b0:c8:6e:eb:70:ce:29:1d:12: b0:a3:ed:4c:f8:32:6c:0e:ae:83:73:91:e0:9e:75: 22:59:f0:6e:5d:32:45:69:d3:f0:c4:a8:12:d6:a3: 1a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A6:15:94:7C:40:47:33:55:57:CF:6C:87:D5:62:EA:17:6B:F7:93 X509v3 Authority Key Identifier: keyid:44:10:64:7D:95:2E:91:21:22:0F:41:4E:88:A5:DD:D6:2B:C8:23:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:33:61:b6:1a:cf:07:42:4c:4a:a6:85:59:e5:21:e3:38:d9: c9:31:bd:4d:b1:ee:e8:16:35:ca:4e:4d:b8:59:18:f8:f2:98: 19:8f:7e:b6:11:8d:bd:b1:06:30:7f:b1:12:e8:8b:a2:80:40: e7:2f:3e:e4:c9:f1:dc:64:42:6a:01:a7:5b:40:5a:15:9d:54: bf:fc:05:c8:6b:c6:ba:d9:2c:fe:8b:7a:b8:f2:ef:f1:b7:3c: 0c:bc:fd:0c:61:b9:13:89:cc:4b:d8:14:9d:bc:f0:ed:f4:6e: 0d:be:32:38:55:a9:b4:5b:95:30:2f:d3:4d:c3:d4:09:c9:4c: cc:73:b5:c7:43:be:aa:29:19:d1:70:c5:ef:22:a0:36:0f:fc: 12:f1:27:24:e2:8b:85:19:09:0a:71:c0:19:ee:09:1b:87:b8: 70:4e:98:e8:62:c3:96:d9:c5:58:82:45:a0:98:ee:46:46:0a: 17:35:88:a8:26:6a:93:72:09:da:5f:ba:53:37:94:4d:5c:d7: 22:f3:82:dd:97:44:e8:02:c9:63:3c:65:b5:eb:4c:b7:96:4b: 5b:81:d3:28:fb:62:6b:05:95:5e:36:e2:60:64:ba:b3:64:19: 24:ec:aa:53:39:91:66:a0:8c:12:4e:03:2a:fc:91:6c:52:7a: e3:0c:51:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtenCUXhDlkUE9ujrPibarGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0MTA2NDdkOTUyZTkxMjEyMjBmNDE0ZTg4YTVkZGQ2MmJj ODIzN2IwHhcNMjUxMjI3MDcwMDQ5WhcNMjUxMjI4MDcwMDQ5WjAzMTEwLwYDVQQD EygyOGE2MTU5NDdjNDA0NzMzNTU1N2NmNmM4N2Q1NjJlYTE3NmJmNzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9RM/ekJirpKounfSNlKCcqmNpSVI W6xgfmubKicE9j0DUxtOjsFI7mJAp4+J7wzy8hpriKH6gN0GtoY8zNz1+ylzYW7K d89E07nV3tThi1fTOmEMat00Eu/8F8zsoc358VNXc/CYeDPHDuWSPTgsETK7s2bE IUHCZ1Rzl/qxIikOmDnPWIAZE0g+Z01FNQODSje4QOvTtnG9ynIEPcaxiqCnuJVO uNK4GYHsn8EhoxokQShZBHuoRYJ/oqNMsL5MT0Inmfq7isrJMrgeZRb1CiXOg9v6 RFewyG7rcM4pHRKwo+1M+DJsDq6Dc5HgnnUiWfBuXTJFadPwxKgS1qMaiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCimFZR8QEczVVfPbIfVYuoXa/eTMB8GA1UdIwQY MBaAFEQQZH2VLpEhIg9BToil3dYryCN7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkJCa2ZaVXVrU0VpRDBGT2lLWGQxaXZJSTNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8xN2I4OGQtMWFmYy00NDA3LWIwMTgt NTQ1ZGNhODBiZjQ5LzEvUkJCa2ZaVXVrU0VpRDBGT2lLWGQxaXZJSTNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8xN2I4OGQtMWFmYy00NDA3LWIwMTgtNTQ1ZGNhODBiZjQ5 LzEvUkJCa2ZaVXVrU0VpRDBGT2lLWGQxaXZJSTNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATzNhthrP B0JMSqaFWeUh4zjZyTG9TbHu6BY1yk5NuFkY+PKYGY9+thGNvbEGMH+xEuiLooBA 5y8+5Mnx3GRCagGnW0BaFZ1Uv/wFyGvGutks/ot6uPLv8bc8DLz9DGG5E4nMS9gU nbzw7fRuDb4yOFWptFuVMC/TTcPUCclMzHO1x0O+qikZ0XDF7yKgNg/8EvEnJOKL hRkJCnHAGe4JG4e4cE6Y6GLDltnFWIJFoJjuRkYKFzWIqCZqk3IJ2l+6UzeUTVzX IvOC3ZdE6ALJYzxltetMt5ZLW4HTKPtiawWVXjbiYGS6s2QZJOyqUzmRZqCMEk4D KvyRbFJ64wxR1Q== -----END CERTIFICATE-----Generated at Sat Dec 27 09:03:38 2025 by rpki-client