This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft File: 28wruvPg1DQqAU-LcPhzzumoysU.mft (raw, json) Hash identifier: eXOYj7c629WLwj118KsuhPdmHGdk0k6HWb0Ca/OV+wQ= Subject key identifier: F3:6C:4D:97:9C:E2:62:10:46:C7:F7:AA:58:15:4F:53:4D:51:E3:73 Authority key identifier: DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5 Certificate issuer: /CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5 Certificate serial: 019B717E0D73B54C0EE1804925D3564E5790 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft Manifest number: 17A3 Signing time: Tue 30 Dec 2025 23:00:44 +0000 Manifest this update: Tue 30 Dec 2025 23:00:44 +0000 Manifest next update: Wed 31 Dec 2025 23:00:44 +0000 Files and hashes: 1: 28wruvPg1DQqAU-LcPhzzumoysU.crl (hash: xDzY+4o4HuHX/yvz0B+lK9k8ZRhfkEIg70/x+7AtKKg=) 2: ZNhnjqldcw87nCml3io59xsOVUM.roa (hash: 0msjn5hZBlC+2WfO0lF8oeX6XpNIJpBSDgBeVQssg6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:7e:0d:73:b5:4c:0e:e1:80:49:25:d3:56:4e:57:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5 Validity Not Before: Dec 30 23:00:44 2025 GMT Not After : Dec 31 23:00:44 2025 GMT Subject: CN=f36c4d979ce2621046c7f7aa58154f534d51e373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1c:ef:04:29:cb:34:2d:15:1c:89:3a:d8:a0: c5:af:20:5f:d3:90:43:8a:83:6a:9f:93:86:95:6e: 4a:e3:a3:19:e4:e4:63:4a:e6:39:af:88:45:50:e7: 16:ee:53:04:e2:b3:02:ad:70:3e:61:85:3d:e2:b7: 48:55:a9:8e:21:7c:01:69:a7:c2:74:99:75:e1:d7: 3d:af:8f:e3:c4:9d:bf:23:2e:b3:9a:39:b1:33:25: 2c:3f:a9:6f:6e:57:d1:d8:4c:e8:f6:94:f2:e2:d6: 59:23:59:78:6f:64:d7:7f:3d:b3:96:2b:dd:e2:21: d2:b5:e1:ba:87:a7:a5:c0:47:91:0d:e7:3b:c2:eb: 97:5e:43:5c:0b:b3:1d:21:59:34:e8:b1:fb:b0:d4: ed:f4:7a:9f:0a:01:b5:75:28:89:42:71:ea:b7:31: 89:42:49:cf:d9:c4:b9:66:03:10:21:2d:36:1f:02: 17:8e:6e:18:f0:11:55:71:9b:f6:62:c5:27:da:4d: 78:ea:b4:99:16:e2:cc:90:42:77:2a:ba:22:04:7a: 87:90:3c:62:80:9b:5f:c7:58:81:95:1e:46:72:b0: 6d:32:96:7a:e6:ea:8f:af:88:47:1d:5c:9e:cf:27: 3e:de:c1:c7:71:ff:b5:b0:e1:68:db:92:67:9c:fa: 1c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:6C:4D:97:9C:E2:62:10:46:C7:F7:AA:58:15:4F:53:4D:51:E3:73 X509v3 Authority Key Identifier: keyid:DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:2e:cb:d6:be:45:53:6e:0b:2e:c7:0d:9b:0e:20:f6:46:ee: 19:fb:80:bb:de:f9:ca:ab:cb:c4:71:3a:27:bf:09:c6:6b:ef: b7:43:a0:77:49:5b:11:43:a1:5a:ed:a8:08:39:a4:82:dd:c6: 13:79:4c:b7:f5:15:45:9f:0b:a4:46:4c:d2:02:f7:24:81:69: be:d9:52:15:9f:d9:f7:46:d6:fb:36:71:ae:23:61:ab:c6:00: 6f:c6:e8:d4:e5:37:cc:d9:84:45:cc:57:8d:81:16:34:dc:44: 4d:fc:b1:cb:8a:d8:21:a3:5e:c2:0b:a7:00:94:a7:a4:5a:5a: 64:a7:a8:e7:d8:a7:df:59:f8:f3:ae:0c:12:fb:ce:c4:29:f0: eb:70:b6:c1:a9:d1:79:bb:7e:e9:62:46:85:fd:27:75:06:f9: 40:f2:90:7e:be:14:64:96:1b:5b:14:20:18:a9:d6:c3:0b:17: 99:de:97:0f:26:30:93:58:25:db:ed:c8:43:91:98:87:69:97: f1:e0:06:d0:6c:5e:53:a9:e7:8e:fe:93:b6:11:3e:ec:17:2e: c1:a8:b2:74:d4:9a:65:7d:86:04:8a:09:b3:e7:0f:19:6b:74: 15:d5:23:25:15:5b:36:de:dd:2e:70:e1:99:28:a8:48:30:8d: 04:25:ff:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxfg1ztUwO4YBJJdNWTleQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiY2MyYmJhZjNlMGQ0MzQyYTAxNGY4YjcwZjg3M2NlZTlh OGNhYzUwHhcNMjUxMjMwMjMwMDQ0WhcNMjUxMjMxMjMwMDQ0WjAzMTEwLwYDVQQD EyhmMzZjNGQ5NzljZTI2MjEwNDZjN2Y3YWE1ODE1NGY1MzRkNTFlMzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRzvBCnLNC0VHIk62KDFryBf05BD ioNqn5OGlW5K46MZ5ORjSuY5r4hFUOcW7lME4rMCrXA+YYU94rdIVamOIXwBaafC dJl14dc9r4/jxJ2/Iy6zmjmxMyUsP6lvblfR2Ezo9pTy4tZZI1l4b2TXfz2zlivd 4iHSteG6h6elwEeRDec7wuuXXkNcC7MdIVk06LH7sNTt9HqfCgG1dSiJQnHqtzGJ QknP2cS5ZgMQIS02HwIXjm4Y8BFVcZv2YsUn2k146rSZFuLMkEJ3KroiBHqHkDxi gJtfx1iBlR5GcrBtMpZ65uqPr4hHHVyezyc+3sHHcf+1sOFo25JnnPoccQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPNsTZec4mIQRsf3qlgVT1NNUeNzMB8GA1UdIwQY MBaAFNvMK7rz4NQ0KgFPi3D4c87pqMrFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjh3cnV2UGcxRFFxQVUtTGNQaHp6dW1veXNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC80MTRlZjQtNGMxZi00MjU2LTg4Yzkt ZjRkNWU4NGFjMWRkLzEvMjh3cnV2UGcxRFFxQVUtTGNQaHp6dW1veXNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC80MTRlZjQtNGMxZi00MjU2LTg4YzktZjRkNWU4NGFjMWRk LzEvMjh3cnV2UGcxRFFxQVUtTGNQaHp6dW1veXNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgS7L1r5F U24LLscNmw4g9kbuGfuAu975yqvLxHE6J78Jxmvvt0Ogd0lbEUOhWu2oCDmkgt3G E3lMt/UVRZ8LpEZM0gL3JIFpvtlSFZ/Z90bW+zZxriNhq8YAb8bo1OU3zNmERcxX jYEWNNxETfyxy4rYIaNewgunAJSnpFpaZKeo59in31n4864MEvvOxCnw63C2wanR ebt+6WJGhf0ndQb5QPKQfr4UZJYbWxQgGKnWwwsXmd6XDyYwk1gl2+3IQ5GYh2mX 8eAG0GxeU6nnjv6TthE+7BcuwaiydNSaZX2GBIoJs+cPGWt0FdUjJRVbNt7dLnDh mSioSDCNBCX/DA== -----END CERTIFICATE-----Generated at Wed Dec 31 08:03:16 2025 by rpki-client