This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft File: rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft (raw, json) Hash identifier: tM1apH1+/9+8Ul0c41t0jlZ0uOvZ+D8Szna9CwIMtFk= Subject key identifier: A8:12:EF:2C:67:A9:E8:23:9F:1F:1C:48:4B:23:8B:E0:58:49:F0:4B Authority key identifier: AD:BB:86:DD:76:DD:3C:1F:7B:40:C9:16:3F:75:25:7B:E6:D0:EE:F5 Certificate issuer: /CN=adbb86dd76dd3c1f7b40c9163f75257be6d0eef5 Certificate serial: 019B3268386571DE321D993A1ACAAB79F012 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft Manifest number: 0804 Signing time: Thu 18 Dec 2025 17:00:49 +0000 Manifest this update: Thu 18 Dec 2025 17:00:49 +0000 Manifest next update: Fri 19 Dec 2025 17:00:49 +0000 Files and hashes: 1: rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl (hash: ESgQioS/clqREII05ukkqUiofG2sXf0DJPrgc3zAHN4=) 2: w4hN4EJQ_3vBdUHqQ3XyJaL8bkA.roa (hash: 4EUB26NuRxe0K3o15R6cS+9ryAyEDIc2bJyCFTz2HoA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:38:65:71:de:32:1d:99:3a:1a:ca:ab:79:f0:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adbb86dd76dd3c1f7b40c9163f75257be6d0eef5 Validity Not Before: Dec 18 17:00:49 2025 GMT Not After : Dec 19 17:00:49 2025 GMT Subject: CN=a812ef2c67a9e8239f1f1c484b238be05849f04b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:29:08:85:22:27:ba:18:9e:f4:d4:b3:4a:cb: 50:eb:37:af:81:6d:6e:23:7b:8f:9b:c6:5f:06:9e: de:fe:e2:67:19:44:2d:d1:cc:48:42:68:b7:be:98: 68:6a:76:d2:68:f0:ab:d9:53:bc:a8:6d:bf:48:0a: e0:26:1b:2d:75:14:d8:4b:26:1f:0e:50:8a:ac:b4: e2:78:55:9e:92:b8:a3:b0:44:62:55:ec:9a:c8:67: b1:49:4b:4c:83:06:63:37:7c:7d:a7:7a:61:3e:f3: 8f:ea:48:d6:8a:df:b0:aa:5e:dc:99:7c:4b:68:ed: 5f:c7:7d:8c:7c:d4:9d:3a:75:11:5c:62:92:eb:2f: e6:52:e2:65:f4:79:e2:c9:71:af:8f:16:eb:fd:b6: 64:da:17:3a:e6:0c:61:c7:38:43:34:54:d0:af:b3: 12:90:71:34:b3:6d:ac:0c:4a:ca:77:92:d7:f5:f8: 4d:64:2a:13:5e:30:19:fe:6a:0d:db:b2:28:c3:16: b9:5c:3d:dc:7b:63:5a:bd:fe:aa:2d:f7:fb:0c:d3: 61:94:3a:d1:ca:1b:90:4f:47:92:c2:8a:f0:58:8d: 84:18:3b:83:49:3b:77:c4:58:69:2e:7f:af:71:36: d0:4d:c7:d8:2c:a3:67:c3:4d:da:73:f0:d0:5c:32: 54:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:12:EF:2C:67:A9:E8:23:9F:1F:1C:48:4B:23:8B:E0:58:49:F0:4B X509v3 Authority Key Identifier: keyid:AD:BB:86:DD:76:DD:3C:1F:7B:40:C9:16:3F:75:25:7B:E6:D0:EE:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:5d:8d:d0:50:99:f9:e2:06:76:9a:67:ea:0d:4e:44:f9:00: 91:85:a7:8a:a0:90:ae:7b:fb:47:8a:47:4e:d9:68:f9:56:e1: d1:00:dc:6a:e2:d2:af:43:95:22:65:05:88:11:94:db:f8:58: b1:18:b3:47:43:b5:f9:c8:c0:be:ea:91:6f:85:29:7a:71:c9: 5e:f1:60:39:b5:b1:e2:b5:60:0a:ca:4d:d6:dc:24:fb:f9:76: d7:d1:36:24:d4:82:78:37:ea:82:c9:16:0a:64:36:d9:5b:1a: 9a:43:50:e2:ae:97:29:91:75:92:33:78:38:20:f6:11:42:37: cc:88:c0:d2:d3:44:71:f3:02:03:29:31:6b:a3:89:7d:b0:78: 88:03:60:f3:78:d7:2f:77:0d:3d:4d:42:57:1d:cf:49:5b:05: 8c:e2:75:3a:58:49:71:1b:4b:2f:73:71:29:7c:4f:d5:6e:a6: 61:8e:68:61:83:9b:c1:d9:e3:95:31:bb:da:bc:85:68:ad:5c: b4:d4:1a:c6:1a:89:82:51:38:cf:08:3b:58:cd:05:aa:6c:31: 39:14:ba:c8:95:82:1a:33:15:0d:f2:b4:d6:3b:3b:0b:40:16: 1c:15:59:ed:9f:b1:46:06:34:81:fe:da:19:f1:56:95:fc:76: 8d:e8:98:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaDhlcd4yHZk6GsqrefASMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYmI4NmRkNzZkZDNjMWY3YjQwYzkxNjNmNzUyNTdiZTZk MGVlZjUwHhcNMjUxMjE4MTcwMDQ5WhcNMjUxMjE5MTcwMDQ5WjAzMTEwLwYDVQQD EyhhODEyZWYyYzY3YTllODIzOWYxZjFjNDg0YjIzOGJlMDU4NDlmMDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCkIhSInuhie9NSzSstQ6zevgW1u I3uPm8ZfBp7e/uJnGUQt0cxIQmi3vphoanbSaPCr2VO8qG2/SArgJhstdRTYSyYf DlCKrLTieFWekrijsERiVeyayGexSUtMgwZjN3x9p3phPvOP6kjWit+wql7cmXxL aO1fx32MfNSdOnURXGKS6y/mUuJl9HniyXGvjxbr/bZk2hc65gxhxzhDNFTQr7MS kHE0s22sDErKd5LX9fhNZCoTXjAZ/moN27Iowxa5XD3ce2Navf6qLff7DNNhlDrR yhuQT0eSworwWI2EGDuDSTt3xFhpLn+vcTbQTcfYLKNnw03ac/DQXDJUXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKgS7yxnqegjnx8cSEsji+BYSfBLMB8GA1UdIwQY MBaAFK27ht123Twfe0DJFj91JXvm0O71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmJ1RzNYYmRQQjk3UU1rV1AzVWxlLWJRN3ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9iZjhkMTMtNzlmMC00M2VhLTgyZDgt OWNjNjk1OWZmM2U5LzEvcmJ1RzNYYmRQQjk3UU1rV1AzVWxlLWJRN3ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9iZjhkMTMtNzlmMC00M2VhLTgyZDgtOWNjNjk1OWZmM2U5 LzEvcmJ1RzNYYmRQQjk3UU1rV1AzVWxlLWJRN3ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAol2N0FCZ +eIGdppn6g1ORPkAkYWniqCQrnv7R4pHTtlo+Vbh0QDcauLSr0OVImUFiBGU2/hY sRizR0O1+cjAvuqRb4UpenHJXvFgObWx4rVgCspN1twk+/l219E2JNSCeDfqgskW CmQ22VsamkNQ4q6XKZF1kjN4OCD2EUI3zIjA0tNEcfMCAykxa6OJfbB4iANg83jX L3cNPU1CVx3PSVsFjOJ1OlhJcRtLL3NxKXxP1W6mYY5oYYObwdnjlTG72ryFaK1c tNQaxhqJglE4zwg7WM0FqmwxORS6yJWCGjMVDfK01js7C0AWHBVZ7Z+xRgY0gf7a GfFWlfx2jeiYDw== -----END CERTIFICATE-----Generated at Thu Dec 18 22:34:36 2025 by rpki-client