This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft File: 28rKr4rBOpZKs9Rhk1hByOHJO4A.mft (raw, json) Hash identifier: QWt6unDK97YVLlWbjFTHnoWF83tlfAYypZkGNRxj3pY= Subject key identifier: 2C:83:3D:FE:C2:62:E3:74:1C:79:6D:F2:68:43:44:FD:32:D2:D4:E5 Authority key identifier: DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80 Certificate issuer: /CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80 Certificate serial: 019B3C7FAC4A653885E6F714D10576EDD36D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 16:02:38 +0000 Manifest this update: Sat 20 Dec 2025 16:02:38 +0000 Manifest next update: Sun 21 Dec 2025 16:02:38 +0000 Files and hashes: 1: 28rKr4rBOpZKs9Rhk1hByOHJO4A.crl (hash: ptLx3ojV/n2yu98qZLrOEoz6gVkbGxgIUFRCDTfqNq8=) 2: UxM6DupfvrTiE9Ym5QgQzISnMNk.roa (hash: RfjYqd31h9TXarIc1kWDtlc68P4m+jSBxb+HHdHsfRc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:ac:4a:65:38:85:e6:f7:14:d1:05:76:ed:d3:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80 Validity Not Before: Dec 20 16:02:38 2025 GMT Not After : Dec 21 16:02:38 2025 GMT Subject: CN=2c833dfec262e3741c796df2684344fd32d2d4e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5f:91:55:bb:42:b0:bc:b3:93:14:3b:26:07: 2e:f0:3d:a6:cd:9b:7e:0d:37:67:d0:27:a1:5a:96: f8:5a:74:3a:52:c9:53:74:7b:48:e6:06:16:58:6d: 8b:fd:39:8f:cd:7a:ea:ea:70:f0:d2:37:34:13:87: 7e:af:54:89:00:aa:37:c2:3a:c3:85:86:8c:f1:47: 16:31:6b:9f:13:6c:6d:36:8d:cb:17:3b:69:e1:00: 15:45:71:3f:39:fb:99:45:6c:40:55:78:f1:f4:2b: 12:f5:c2:24:9b:c5:b4:a2:6e:e3:be:9d:ac:87:de: a8:1e:2f:1c:bd:32:17:24:f2:c4:37:85:6e:62:1d: 40:67:eb:40:d6:c5:66:4f:02:a2:e7:15:a1:81:ab: 46:e5:2a:ef:f3:3a:b8:79:5c:39:1f:33:95:0e:86: 55:01:cd:b2:1d:a7:a0:a2:78:36:a8:72:38:ad:2d: 35:c1:d4:87:18:14:05:3d:cc:cb:d2:7b:57:11:aa: 81:0f:f9:b5:e7:cd:b2:10:9b:6f:db:34:b1:af:f4: dd:81:86:74:cd:12:94:f8:fb:49:60:96:da:53:57: c4:4b:c9:56:31:1a:8a:92:6b:d0:e4:97:21:f8:23: 02:0f:d5:8b:13:bb:d1:20:78:ea:51:e9:f1:b9:e5: e0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:83:3D:FE:C2:62:E3:74:1C:79:6D:F2:68:43:44:FD:32:D2:D4:E5 X509v3 Authority Key Identifier: keyid:DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:25:8e:b5:0d:f5:d4:9d:3b:fb:85:d0:c5:c7:c2:6d:bc:d2: ff:b0:a5:59:fb:c7:2e:c5:ee:1b:0b:3c:b4:e5:b4:98:f7:11: 45:66:e2:de:43:89:ad:7c:02:7e:ae:72:39:05:07:94:c6:5c: 49:de:6a:e0:2c:3c:b2:22:c1:9d:19:93:c2:e6:b5:90:6c:c4: 77:a2:c7:c9:4b:22:41:c7:7e:b7:39:87:06:ea:73:6f:ee:03: f5:9d:0f:1d:85:8f:99:d8:e1:e4:47:c4:b3:6e:3c:9a:d7:20: 47:7f:4e:4d:2a:ce:e7:38:ca:ae:2b:47:d4:32:7c:32:07:29: e0:7a:5e:92:71:8c:1e:60:a5:3a:0d:b6:2e:9b:1a:fa:07:23: 2a:ca:be:55:92:68:3e:2b:2e:46:44:81:0f:31:4b:a2:19:53: 0f:5a:56:d3:a2:fe:c3:13:00:85:68:4e:c0:b3:00:88:3a:81: cb:95:17:7c:dc:44:94:a2:29:8c:8d:6f:a8:12:54:04:78:c3: d0:53:56:17:6a:22:dd:d8:53:8f:6d:ae:c9:88:5e:c5:44:d9: 76:dd:84:f5:f8:1d:57:6c:4b:b2:ae:99:c7:b5:16:4f:18:72: 52:9e:f7:0d:f8:de:17:7f:4a:b0:de:a7:fc:84:81:55:36:3d: 21:c8:65:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f6xKZTiF5vcU0QV27dNtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiY2FjYWFmOGFjMTNhOTY0YWIzZDQ2MTkzNTg0MWM4ZTFj OTNiODAwHhcNMjUxMjIwMTYwMjM4WhcNMjUxMjIxMTYwMjM4WjAzMTEwLwYDVQQD EygyYzgzM2RmZWMyNjJlMzc0MWM3OTZkZjI2ODQzNDRmZDMyZDJkNGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV+RVbtCsLyzkxQ7Jgcu8D2mzZt+ DTdn0CehWpb4WnQ6UslTdHtI5gYWWG2L/TmPzXrq6nDw0jc0E4d+r1SJAKo3wjrD hYaM8UcWMWufE2xtNo3LFztp4QAVRXE/OfuZRWxAVXjx9CsS9cIkm8W0om7jvp2s h96oHi8cvTIXJPLEN4VuYh1AZ+tA1sVmTwKi5xWhgatG5Srv8zq4eVw5HzOVDoZV Ac2yHaegong2qHI4rS01wdSHGBQFPczL0ntXEaqBD/m1582yEJtv2zSxr/TdgYZ0 zRKU+PtJYJbaU1fES8lWMRqKkmvQ5Jch+CMCD9WLE7vRIHjqUenxueXgvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCyDPf7CYuN0HHlt8mhDRP0y0tTlMB8GA1UdIwQY MBaAFNvKyq+KwTqWSrPUYZNYQcjhyTuAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjhyS3I0ckJPcFpLczlSaGsxaEJ5T0hKTzRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy81NzM3YjAtYmIyNC00ZTkyLWIxOWQt NWU2NWM3ZDYxYjllLzEvMjhyS3I0ckJPcFpLczlSaGsxaEJ5T0hKTzRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy81NzM3YjAtYmIyNC00ZTkyLWIxOWQtNWU2NWM3ZDYxYjll LzEvMjhyS3I0ckJPcFpLczlSaGsxaEJ5T0hKTzRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfiWOtQ31 1J07+4XQxcfCbbzS/7ClWfvHLsXuGws8tOW0mPcRRWbi3kOJrXwCfq5yOQUHlMZc Sd5q4Cw8siLBnRmTwua1kGzEd6LHyUsiQcd+tzmHBupzb+4D9Z0PHYWPmdjh5EfE s248mtcgR39OTSrO5zjKritH1DJ8Mgcp4HpeknGMHmClOg22Lpsa+gcjKsq+VZJo PisuRkSBDzFLohlTD1pW06L+wxMAhWhOwLMAiDqBy5UXfNxElKIpjI1vqBJUBHjD 0FNWF2oi3dhTj22uyYhexUTZdt2E9fgdV2xLsq6Zx7UWTxhyUp73DfjeF39KsN6n /ISBVTY9IchlHw== -----END CERTIFICATE-----Generated at Sun Dec 21 01:42:34 2025 by rpki-client