This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft File: 28L_akYQUNSPP9sLUThxVLXWzQ4.mft (raw, json) Hash identifier: DQhaDyAKcuw4Wb5hWqUF9cfphSqYaACPvwmGR6vjVQo= Subject key identifier: 21:EB:3C:0B:B6:49:07:6D:60:F3:67:C6:16:9A:24:72:21:55:A4:47 Authority key identifier: DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E Certificate issuer: /CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e Certificate serial: 019B3DFE51251752F1FE2A1DDD46EA9E7C3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft Manifest number: 165C Signing time: Sat 20 Dec 2025 23:00:35 +0000 Manifest this update: Sat 20 Dec 2025 23:00:35 +0000 Manifest next update: Sun 21 Dec 2025 23:00:35 +0000 Files and hashes: 1: 28L_akYQUNSPP9sLUThxVLXWzQ4.crl (hash: tqDbgeK/gYJvbdRPHpLZcEK5ajiH+fTdqVhndFFEyRI=) 2: T3Ru90D-BjnOYASJ0pSS8ZwD4JU.roa (hash: kFL7hemcmIQ9FqEJFvwP/YJ8WsXzPFKUwSwoKc7Tbgc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:51:25:17:52:f1:fe:2a:1d:dd:46:ea:9e:7c:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e Validity Not Before: Dec 20 23:00:35 2025 GMT Not After : Dec 21 23:00:35 2025 GMT Subject: CN=21eb3c0bb649076d60f367c6169a24722155a447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cc:0e:d1:cf:be:3e:a0:2d:2c:89:d8:cd:16: cf:37:ed:e2:81:ad:e3:f4:19:ee:75:7e:46:f4:40: ab:2d:c9:38:ed:01:1c:35:d2:83:f4:f7:6a:a4:6a: d6:3f:fa:16:13:47:f7:e5:8a:b3:83:b5:b3:52:6c: 2e:b2:b8:df:9d:a0:03:1b:c1:bc:67:f6:ef:d7:31: b4:82:2f:80:70:0a:81:1c:f5:64:89:db:76:be:dc: b7:10:19:c4:01:90:77:f5:16:fa:7b:54:7e:d3:7d: 52:22:b0:c9:34:fc:2c:fd:81:9a:97:65:ea:cc:b7: d7:c3:13:a7:be:0e:a8:9b:6c:af:de:11:90:9c:d9: c3:a2:f6:d9:26:c0:86:30:83:33:5c:fe:cb:49:7e: 29:3c:c5:93:9f:e9:d0:33:44:6a:4d:bc:19:c2:b8: 79:37:b3:ec:5f:5b:a3:7c:55:88:4e:33:eb:e6:10: a4:83:ca:b6:84:7e:85:91:bb:4d:28:81:74:05:54: 16:0a:d4:ef:ae:b8:b6:fd:28:ec:79:d4:68:84:73: b4:f9:89:02:6b:35:84:2c:16:32:e4:e7:e6:55:d3: 5d:45:0b:e4:43:94:5d:f1:50:de:75:a3:f2:59:2f: 27:e9:75:28:25:ef:e3:80:0a:d5:49:05:e7:10:eb: 85:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:EB:3C:0B:B6:49:07:6D:60:F3:67:C6:16:9A:24:72:21:55:A4:47 X509v3 Authority Key Identifier: keyid:DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:a9:2b:37:e3:3c:10:d5:eb:b0:31:19:3a:7d:46:dd:0d:4c: 8a:7d:bd:4f:ef:ee:44:67:67:c8:da:89:0b:70:a3:a1:54:30: 0b:a4:c8:56:22:62:26:78:58:94:12:8f:75:12:1c:4e:65:59: bf:bb:c6:c5:a7:93:a2:31:f5:63:15:34:3e:71:2b:ba:33:e5: e8:20:19:a6:77:d7:52:6e:f0:58:25:e5:54:86:43:09:31:10: 79:20:9a:49:3d:82:bb:0a:86:a6:f1:21:e5:7d:46:f3:54:bb: 25:75:84:58:43:9e:6d:a8:10:5e:04:7c:82:da:e7:80:08:59: a2:cf:9c:f5:34:95:2b:eb:a7:88:48:09:62:73:39:ae:c9:1a: 4a:7b:ab:f3:3f:1b:31:6e:34:7a:de:fe:76:e4:c9:31:ef:40: 94:63:65:b1:35:d0:2d:f8:94:ba:e3:7e:7d:46:22:69:7e:73: 44:d6:ce:41:0a:55:cd:d9:d7:e2:66:a7:09:b4:10:9b:23:c3: ad:6f:93:e9:15:13:81:14:06:24:24:4d:90:d6:43:a7:fc:40: 81:bd:6a:6c:37:14:df:0b:34:df:34:ca:25:e1:6a:6c:2f:13: 13:d3:2f:63:3d:8e:3f:40:6e:db:86:41:79:94:98:66:ee:c1: ff:e1:34:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/lElF1Lx/iod3Ubqnnw6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiYzJmZjZhNDYxMDUwZDQ4ZjNmZGIwYjUxMzg3MTU0YjVk NmNkMGUwHhcNMjUxMjIwMjMwMDM1WhcNMjUxMjIxMjMwMDM1WjAzMTEwLwYDVQQD EygyMWViM2MwYmI2NDkwNzZkNjBmMzY3YzYxNjlhMjQ3MjIxNTVhNDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuswO0c++PqAtLInYzRbPN+3iga3j 9BnudX5G9ECrLck47QEcNdKD9PdqpGrWP/oWE0f35Yqzg7WzUmwusrjfnaADG8G8 Z/bv1zG0gi+AcAqBHPVkidt2vty3EBnEAZB39Rb6e1R+031SIrDJNPws/YGal2Xq zLfXwxOnvg6om2yv3hGQnNnDovbZJsCGMIMzXP7LSX4pPMWTn+nQM0RqTbwZwrh5 N7PsX1ujfFWITjPr5hCkg8q2hH6FkbtNKIF0BVQWCtTvrri2/SjsedRohHO0+YkC azWELBYy5OfmVdNdRQvkQ5Rd8VDedaPyWS8n6XUoJe/jgArVSQXnEOuFtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCHrPAu2SQdtYPNnxhaaJHIhVaRHMB8GA1UdIwQY MBaAFNvC/2pGEFDUjz/bC1E4cVS11s0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjhMX2FrWVFVTlNQUDlzTFVUaHhWTFhXelE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84MzRmOWQtNTViNy00NTViLTk2YmIt OWNjY2I3ZWYzYjViLzEvMjhMX2FrWVFVTlNQUDlzTFVUaHhWTFhXelE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi84MzRmOWQtNTViNy00NTViLTk2YmItOWNjY2I3ZWYzYjVi LzEvMjhMX2FrWVFVTlNQUDlzTFVUaHhWTFhXelE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoakrN+M8 ENXrsDEZOn1G3Q1Min29T+/uRGdnyNqJC3CjoVQwC6TIViJiJnhYlBKPdRIcTmVZ v7vGxaeTojH1YxU0PnErujPl6CAZpnfXUm7wWCXlVIZDCTEQeSCaST2CuwqGpvEh 5X1G81S7JXWEWEOebagQXgR8gtrngAhZos+c9TSVK+uniEgJYnM5rskaSnur8z8b MW40et7+duTJMe9AlGNlsTXQLfiUuuN+fUYiaX5zRNbOQQpVzdnX4manCbQQmyPD rW+T6RUTgRQGJCRNkNZDp/xAgb1qbDcU3ws03zTKJeFqbC8TE9MvYz2OP0Bu24ZB eZSYZu7B/+E0MQ== -----END CERTIFICATE-----Generated at Sun Dec 21 03:04:40 2025 by rpki-client