This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft File: 28wruvPg1DQqAU-LcPhzzumoysU.mft (raw, json) Hash identifier: OQIoSKgJcx+6Za49xvlyVGdETaRzgTwFvZppzrZil7A= Subject key identifier: 63:EC:C0:C5:D4:7D:9B:8E:18:D3:62:6D:BC:A3:B9:DF:98:56:52:AC Authority key identifier: DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5 Certificate issuer: /CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5 Certificate serial: 019B4136F8749D1A0B8F902C77BE07F39E73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 14:01:20 +0000 Manifest this update: Sun 21 Dec 2025 14:01:20 +0000 Manifest next update: Mon 22 Dec 2025 14:01:20 +0000 Files and hashes: 1: 28wruvPg1DQqAU-LcPhzzumoysU.crl (hash: 0hIxorNvloTqWIJumRJbsVPSTM3G4ce9+hhPGrCxH30=) 2: ZNhnjqldcw87nCml3io59xsOVUM.roa (hash: 0msjn5hZBlC+2WfO0lF8oeX6XpNIJpBSDgBeVQssg6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:f8:74:9d:1a:0b:8f:90:2c:77:be:07:f3:9e:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5 Validity Not Before: Dec 21 14:01:20 2025 GMT Not After : Dec 22 14:01:20 2025 GMT Subject: CN=63ecc0c5d47d9b8e18d3626dbca3b9df985652ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:87:92:7d:ed:5f:87:2c:bb:85:35:b5:8d:84: 93:71:6d:9d:76:2f:59:c9:c7:7d:c1:5b:e9:a7:0c: db:22:bc:cf:d2:e4:05:08:ae:4b:19:c9:44:88:96: 89:f9:c9:b7:66:bb:ce:da:86:2a:01:62:db:ef:2b: 83:4c:a3:8b:27:4d:7a:07:a6:71:89:6a:37:69:58: 39:f1:25:e8:ac:02:eb:dc:90:a7:53:bd:d6:3b:e1: 08:2b:cd:d1:36:c5:fd:44:bf:6d:7e:b1:39:b7:cf: 5d:40:4c:6a:f6:a0:a3:ab:4c:06:4f:61:d6:a5:97: aa:29:8c:e9:7a:0c:21:b6:ce:62:55:43:e4:a8:f7: 86:67:c0:1e:0a:2c:9b:2a:ef:d0:c2:9a:92:a0:9e: 5d:77:c7:b9:31:a9:b8:85:41:b6:b5:d3:51:01:5d: 2f:b9:47:17:28:08:03:d5:c7:d0:3c:9e:a2:90:dc: 0b:22:ba:d0:f3:6f:e5:96:7d:f5:c2:1f:48:12:bc: 9f:fe:fd:3c:ed:b9:a6:0a:11:bb:25:16:02:7f:c9: 04:99:fb:28:59:db:7a:68:a6:51:52:3c:c7:e5:47: db:e0:cb:7b:bb:49:12:cd:00:ca:8e:37:38:ec:be: 8f:79:c5:5b:fd:b5:f7:6c:d2:5c:8a:d1:5c:f2:9f: e6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:EC:C0:C5:D4:7D:9B:8E:18:D3:62:6D:BC:A3:B9:DF:98:56:52:AC X509v3 Authority Key Identifier: keyid:DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:c2:67:83:56:95:20:b3:88:09:ae:39:2e:2e:a8:51:b3:03: 9d:2d:6b:fa:42:13:a8:b4:2b:87:ad:cb:cd:3a:f0:48:10:76: d9:e6:bb:60:26:28:a2:64:3e:6c:f4:b4:b8:4c:03:60:cd:a6: 91:53:0e:cc:99:80:ac:7c:52:87:9e:47:c9:5b:18:9e:cf:60: 0f:28:9d:98:7e:17:54:08:dc:02:f1:b7:cc:1e:f7:a8:ee:50: f8:7d:7d:ec:a2:cb:a1:9b:9f:2a:ba:f9:3b:27:59:4c:1c:bb: 82:54:1d:8a:8e:7c:e3:13:5b:82:5e:0a:53:c5:6c:7f:11:0f: 74:df:18:b4:77:aa:78:ec:c3:8b:16:fe:20:53:c7:d4:27:17: 34:77:46:5f:74:a9:1d:83:dd:63:27:7c:53:55:bb:30:75:b1: 2d:f3:9b:52:b7:c6:5b:60:ac:16:78:3a:52:a0:49:af:86:78: 20:30:45:e0:5d:92:d1:bc:2e:75:47:77:22:55:cd:b0:b7:e1: 32:33:55:b8:9d:d6:29:8f:90:52:05:ba:f4:23:11:60:d5:02: c9:b9:81:12:d9:41:49:be:ee:38:4f:f5:10:40:5e:4e:90:c6: d0:5b:c4:44:18:b8:41:96:cd:f4:20:15:06:a8:6f:5e:79:59: ed:f5:71:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNvh0nRoLj5Asd74H855zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiY2MyYmJhZjNlMGQ0MzQyYTAxNGY4YjcwZjg3M2NlZTlh OGNhYzUwHhcNMjUxMjIxMTQwMTIwWhcNMjUxMjIyMTQwMTIwWjAzMTEwLwYDVQQD Eyg2M2VjYzBjNWQ0N2Q5YjhlMThkMzYyNmRiY2EzYjlkZjk4NTY1MmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIeSfe1fhyy7hTW1jYSTcW2ddi9Z ycd9wVvppwzbIrzP0uQFCK5LGclEiJaJ+cm3ZrvO2oYqAWLb7yuDTKOLJ016B6Zx iWo3aVg58SXorALr3JCnU73WO+EIK83RNsX9RL9tfrE5t89dQExq9qCjq0wGT2HW pZeqKYzpegwhts5iVUPkqPeGZ8AeCiybKu/QwpqSoJ5dd8e5Mam4hUG2tdNRAV0v uUcXKAgD1cfQPJ6ikNwLIrrQ82/lln31wh9IEryf/v087bmmChG7JRYCf8kEmfso Wdt6aKZRUjzH5Ufb4Mt7u0kSzQDKjjc47L6PecVb/bX3bNJcitFc8p/mowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGPswMXUfZuOGNNibbyjud+YVlKsMB8GA1UdIwQY MBaAFNvMK7rz4NQ0KgFPi3D4c87pqMrFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjh3cnV2UGcxRFFxQVUtTGNQaHp6dW1veXNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC80MTRlZjQtNGMxZi00MjU2LTg4Yzkt ZjRkNWU4NGFjMWRkLzEvMjh3cnV2UGcxRFFxQVUtTGNQaHp6dW1veXNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC80MTRlZjQtNGMxZi00MjU2LTg4YzktZjRkNWU4NGFjMWRk LzEvMjh3cnV2UGcxRFFxQVUtTGNQaHp6dW1veXNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAesJng1aV ILOICa45Li6oUbMDnS1r+kITqLQrh63LzTrwSBB22ea7YCYoomQ+bPS0uEwDYM2m kVMOzJmArHxSh55HyVsYns9gDyidmH4XVAjcAvG3zB73qO5Q+H197KLLoZufKrr5 OydZTBy7glQdio584xNbgl4KU8VsfxEPdN8YtHeqeOzDixb+IFPH1CcXNHdGX3Sp HYPdYyd8U1W7MHWxLfObUrfGW2CsFng6UqBJr4Z4IDBF4F2S0bwudUd3IlXNsLfh MjNVuJ3WKY+QUgW69CMRYNUCybmBEtlBSb7uOE/1EEBeTpDG0FvERBi4QZbN9CAV BqhvXnlZ7fVxnA== -----END CERTIFICATE-----Generated at Sun Dec 21 21:29:00 2025 by rpki-client