This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft File: 28sc89PzzcNCb7SfCgwz3ATIaBw.mft (raw, json) Hash identifier: 1VOnb+yTQrJVB3it7Y44CpbiASD041E8rfavV1qFpUw= Subject key identifier: 36:38:61:39:69:0C:01:02:13:46:52:E8:25:B5:E9:F3:5E:C9:67:65 Authority key identifier: DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C Certificate issuer: /CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c Certificate serial: 019B410019C50B77067509C23FB778D57D57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft Manifest number: 1120 Signing time: Sun 21 Dec 2025 13:01:24 +0000 Manifest this update: Sun 21 Dec 2025 13:01:24 +0000 Manifest next update: Mon 22 Dec 2025 13:01:24 +0000 Files and hashes: 1: 28sc89PzzcNCb7SfCgwz3ATIaBw.crl (hash: Lg0lw0nVSpS8EyC5bqIecrIxGzj0kECkghRHkDYwXO0=) 2: I5ms-9-HDQyJVXC11lx_-uEpynE.roa (hash: +pNOsJjPZEu3zURh4NPSrLLV4Ki6TCXOgrQW5jhS4rs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:00:19:c5:0b:77:06:75:09:c2:3f:b7:78:d5:7d:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c Validity Not Before: Dec 21 13:01:24 2025 GMT Not After : Dec 22 13:01:24 2025 GMT Subject: CN=36386139690c0102134652e825b5e9f35ec96765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ca:01:cb:1e:6a:3e:c7:a6:7d:4b:5e:44:f2: 85:28:d5:2b:21:f6:c4:7a:77:71:3d:42:e7:18:14: 05:cd:17:d6:66:23:84:8e:e7:b5:98:45:78:81:e5: 9f:df:15:22:0e:37:93:52:bf:8d:c7:b6:54:03:4a: 4d:c1:5c:08:a4:76:3b:99:37:a6:b9:f2:87:f6:95: 5f:93:92:97:fa:e1:f1:2a:53:97:78:d0:05:44:2d: d2:68:8d:89:0a:e9:a1:7c:2c:b1:33:7f:fa:f1:2a: 0f:9c:6c:7a:b3:e5:ca:e6:5d:f3:14:b6:3c:64:46: 62:2e:3a:1a:9e:b8:23:d9:07:24:16:8e:53:37:f9: 83:b1:85:09:5c:69:61:8b:d5:ab:ba:f9:9f:7f:62: 20:c7:42:43:25:ad:d6:41:d3:15:ae:6d:05:07:12: 3f:12:e3:fa:b7:ba:e1:0c:54:5f:3b:13:05:b3:90: 42:5b:6a:6e:cb:f3:6d:09:66:8e:9c:9e:0c:bc:5a: 27:28:5c:16:23:24:56:5c:b6:40:87:41:28:67:ed: 53:85:74:d0:97:04:c0:71:2b:00:e0:c2:f2:df:54: 65:67:91:4e:d3:3e:45:8f:78:8b:d1:0a:e3:07:35: 34:32:6a:ec:4c:68:b4:c3:0d:50:28:bd:be:16:f7: 21:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:38:61:39:69:0C:01:02:13:46:52:E8:25:B5:E9:F3:5E:C9:67:65 X509v3 Authority Key Identifier: keyid:DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:89:51:d8:77:e8:08:75:e6:20:73:4f:f8:07:8c:d5:91:26: 2b:9b:d0:89:5f:04:2f:88:46:70:1c:ad:cd:57:0f:0c:69:68: a7:4b:66:49:37:8b:21:e7:a5:3a:03:27:00:ad:cf:2c:42:48: 29:2a:d0:b2:68:9b:53:bd:9f:0b:6b:76:29:1a:4f:13:b7:d9: 99:da:74:38:a9:e8:21:c2:24:9a:63:ff:8c:2e:81:57:0c:01: d2:ac:d4:dc:98:2f:66:00:25:85:d7:0f:2c:9c:42:94:a9:91: d2:a7:81:38:8f:cc:62:17:d8:22:4f:08:4d:76:34:84:18:af: c9:75:11:82:2c:d4:92:bd:dd:5d:4e:a3:95:93:92:f7:f1:56: b7:ee:55:69:9d:71:a1:d9:0a:b0:0c:eb:51:1a:28:30:b8:76: c4:87:43:b7:59:c2:25:a7:1d:d5:03:1b:f2:eb:93:22:18:3d: 97:33:7e:fb:71:34:2a:9b:0d:7c:8f:4e:ec:75:92:09:7d:d8: 74:46:be:a0:23:04:5b:a5:00:22:25:1e:91:f5:9b:66:66:f3: fe:02:05:5b:80:13:24:e2:01:d0:2c:1e:72:75:f2:08:e4:ce: f3:6e:5f:09:74:57:4c:e8:f8:87:f2:98:c8:1a:a7:7f:2f:4b: fd:09:ef:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBABnFC3cGdQnCP7d41X1XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiY2IxY2YzZDNmM2NkYzM0MjZmYjQ5ZjBhMGMzM2RjMDRj ODY4MWMwHhcNMjUxMjIxMTMwMTI0WhcNMjUxMjIyMTMwMTI0WjAzMTEwLwYDVQQD EygzNjM4NjEzOTY5MGMwMTAyMTM0NjUyZTgyNWI1ZTlmMzVlYzk2NzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssoByx5qPsemfUteRPKFKNUrIfbE endxPULnGBQFzRfWZiOEjue1mEV4geWf3xUiDjeTUr+Nx7ZUA0pNwVwIpHY7mTem ufKH9pVfk5KX+uHxKlOXeNAFRC3SaI2JCumhfCyxM3/68SoPnGx6s+XK5l3zFLY8 ZEZiLjoanrgj2QckFo5TN/mDsYUJXGlhi9Wruvmff2Igx0JDJa3WQdMVrm0FBxI/ EuP6t7rhDFRfOxMFs5BCW2puy/NtCWaOnJ4MvFonKFwWIyRWXLZAh0EoZ+1ThXTQ lwTAcSsA4MLy31RlZ5FO0z5Fj3iL0QrjBzU0MmrsTGi0ww1QKL2+FvchUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDY4YTlpDAECE0ZS6CW16fNeyWdlMB8GA1UdIwQY MBaAFNvLHPPT883DQm+0nwoMM9wEyGgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjhzYzg5UHp6Y05DYjdTZkNnd3ozQVRJYUJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9hNDA4ZmItNWM4MC00ZGNhLTg0Mjgt NzM2NjliYTYzZjdjLzEvMjhzYzg5UHp6Y05DYjdTZkNnd3ozQVRJYUJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9hNDA4ZmItNWM4MC00ZGNhLTg0MjgtNzM2NjliYTYzZjdj LzEvMjhzYzg5UHp6Y05DYjdTZkNnd3ozQVRJYUJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVYlR2Hfo CHXmIHNP+AeM1ZEmK5vQiV8EL4hGcBytzVcPDGlop0tmSTeLIeelOgMnAK3PLEJI KSrQsmibU72fC2t2KRpPE7fZmdp0OKnoIcIkmmP/jC6BVwwB0qzU3JgvZgAlhdcP LJxClKmR0qeBOI/MYhfYIk8ITXY0hBivyXURgizUkr3dXU6jlZOS9/FWt+5VaZ1x odkKsAzrURooMLh2xIdDt1nCJacd1QMb8uuTIhg9lzN++3E0KpsNfI9O7HWSCX3Y dEa+oCMEW6UAIiUekfWbZmbz/gIFW4ATJOIB0CwecnXyCOTO825fCXRXTOj4h/KY yBqnfy9L/Qnv9A== -----END CERTIFICATE-----Generated at Sun Dec 21 20:54:00 2025 by rpki-client