This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft File: rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft (raw, json) Hash identifier: IN0cfoUEpKonXKk5GmYGemrZqLSC1zy0HeQ/efJLX6E= Subject key identifier: 46:1A:81:AD:16:8F:9F:7C:53:AC:F3:F5:D3:3A:90:4D:45:D9:80:B7 Authority key identifier: AD:BB:86:DD:76:DD:3C:1F:7B:40:C9:16:3F:75:25:7B:E6:D0:EE:F5 Certificate issuer: /CN=adbb86dd76dd3c1f7b40c9163f75257be6d0eef5 Certificate serial: 019B210735DB944D79F6ABB6690AFEAD75A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft Manifest number: 07FB Signing time: Mon 15 Dec 2025 08:01:19 +0000 Manifest this update: Mon 15 Dec 2025 08:01:19 +0000 Manifest next update: Tue 16 Dec 2025 08:01:19 +0000 Files and hashes: 1: rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl (hash: 4DW97IDIX/45+WXXR7q/jNQ2DtHm60rE5m8qf2ojcc4=) 2: w4hN4EJQ_3vBdUHqQ3XyJaL8bkA.roa (hash: 4EUB26NuRxe0K3o15R6cS+9ryAyEDIc2bJyCFTz2HoA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:07:35:db:94:4d:79:f6:ab:b6:69:0a:fe:ad:75:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adbb86dd76dd3c1f7b40c9163f75257be6d0eef5 Validity Not Before: Dec 15 08:01:19 2025 GMT Not After : Dec 16 08:01:19 2025 GMT Subject: CN=461a81ad168f9f7c53acf3f5d33a904d45d980b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:20:15:d5:3a:21:29:03:8e:47:48:6b:5a:3d: 3f:92:2b:cb:9b:37:d1:f7:79:fc:40:67:2b:5a:2b: fd:67:fb:53:6e:05:e4:d1:6b:87:88:ca:d3:7b:ab: 62:98:3e:27:b6:5f:50:30:85:9c:a8:e9:98:8c:0c: 5c:b2:0b:23:26:af:bd:5f:45:a2:0d:fd:37:44:e8: b0:67:27:95:95:bc:66:53:09:01:8a:ff:92:4a:99: 82:9c:83:7b:49:e5:7b:87:ad:49:e2:88:16:9a:27: ad:13:33:59:3f:f4:89:fc:19:44:75:88:f4:d3:b4: 56:22:2f:c2:45:c4:51:3a:9a:0f:a4:73:8a:f4:4f: 79:de:53:1a:ab:8f:31:7e:6d:6a:8c:e5:36:a4:06: d2:41:fa:59:0e:29:a2:b6:f0:32:8f:9c:ff:7c:fa: c8:4a:9c:26:59:7e:1e:9f:8b:2d:8b:65:49:c4:e1: 08:21:0e:ed:03:15:a7:b9:6e:a2:b9:99:8d:2e:b2: 2b:cf:67:42:ce:c0:57:7c:30:09:b3:46:c3:58:6d: 73:a7:ce:36:5b:fa:c6:db:56:a0:bc:97:86:04:0d: 19:43:6c:98:0b:60:d4:b3:2a:b6:34:a9:90:22:bb: aa:34:2b:19:9b:89:15:0e:d9:93:ce:99:22:e5:9a: 4e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:1A:81:AD:16:8F:9F:7C:53:AC:F3:F5:D3:3A:90:4D:45:D9:80:B7 X509v3 Authority Key Identifier: keyid:AD:BB:86:DD:76:DD:3C:1F:7B:40:C9:16:3F:75:25:7B:E6:D0:EE:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:01:95:4e:2d:f3:21:42:b1:11:b2:be:99:65:b5:3b:e7:f1: 45:80:ca:cc:9d:bc:c1:47:f1:15:07:89:1b:21:a6:1a:00:f7: f0:33:4b:64:9d:cb:26:99:76:59:8d:2b:c4:d2:31:95:46:4e: 58:bd:46:a0:98:ba:6a:91:2d:b1:c6:78:81:a3:ca:3c:fa:2e: 99:ec:00:5b:6a:c7:59:08:c9:0d:05:f7:26:45:bb:86:7e:32: 74:68:82:4a:2c:21:69:8d:a4:a8:4b:6b:f2:1d:85:47:90:28: 8e:53:12:71:8a:8c:a0:cb:93:3c:8c:ef:c5:d0:f9:ad:e6:64: 0a:35:ec:b9:b3:e5:54:03:6b:43:f1:1e:c9:7d:ce:cd:03:fa: 89:83:0b:dc:c9:0a:08:b3:85:f0:a7:4a:81:1a:a6:06:58:dc: 90:8c:e5:96:b7:70:ca:1a:82:f6:03:23:64:12:d4:79:45:56: 00:53:dd:cb:58:56:ab:ac:d3:21:82:57:63:ef:06:5f:01:2c: bb:92:ea:4d:f1:94:a6:e6:26:38:60:24:98:5e:ea:1d:2f:b6: ec:63:5a:31:67:32:b7:1d:13:12:73:17:11:87:09:db:ff:c4: c5:e7:5d:8d:ec:9b:0d:24:ba:1e:6a:20:31:1b:c5:c6:b1:d3: f7:2b:d5:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshBzXblE159qu2aQr+rXWhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYmI4NmRkNzZkZDNjMWY3YjQwYzkxNjNmNzUyNTdiZTZk MGVlZjUwHhcNMjUxMjE1MDgwMTE5WhcNMjUxMjE2MDgwMTE5WjAzMTEwLwYDVQQD Eyg0NjFhODFhZDE2OGY5ZjdjNTNhY2YzZjVkMzNhOTA0ZDQ1ZDk4MGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yAV1TohKQOOR0hrWj0/kivLmzfR 93n8QGcrWiv9Z/tTbgXk0WuHiMrTe6timD4ntl9QMIWcqOmYjAxcsgsjJq+9X0Wi Df03ROiwZyeVlbxmUwkBiv+SSpmCnIN7SeV7h61J4ogWmietEzNZP/SJ/BlEdYj0 07RWIi/CRcRROpoPpHOK9E953lMaq48xfm1qjOU2pAbSQfpZDimitvAyj5z/fPrI SpwmWX4en4sti2VJxOEIIQ7tAxWnuW6iuZmNLrIrz2dCzsBXfDAJs0bDWG1zp842 W/rG21agvJeGBA0ZQ2yYC2DUsyq2NKmQIruqNCsZm4kVDtmTzpki5ZpOBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEYaga0Wj598U6zz9dM6kE1F2YC3MB8GA1UdIwQY MBaAFK27ht123Twfe0DJFj91JXvm0O71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmJ1RzNYYmRQQjk3UU1rV1AzVWxlLWJRN3ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9iZjhkMTMtNzlmMC00M2VhLTgyZDgt OWNjNjk1OWZmM2U5LzEvcmJ1RzNYYmRQQjk3UU1rV1AzVWxlLWJRN3ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9iZjhkMTMtNzlmMC00M2VhLTgyZDgtOWNjNjk1OWZmM2U5 LzEvcmJ1RzNYYmRQQjk3UU1rV1AzVWxlLWJRN3ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApAGVTi3z IUKxEbK+mWW1O+fxRYDKzJ28wUfxFQeJGyGmGgD38DNLZJ3LJpl2WY0rxNIxlUZO WL1GoJi6apEtscZ4gaPKPPoumewAW2rHWQjJDQX3JkW7hn4ydGiCSiwhaY2kqEtr 8h2FR5AojlMScYqMoMuTPIzvxdD5reZkCjXsubPlVANrQ/EeyX3OzQP6iYML3MkK CLOF8KdKgRqmBljckIzllrdwyhqC9gMjZBLUeUVWAFPdy1hWq6zTIYJXY+8GXwEs u5LqTfGUpuYmOGAkmF7qHS+27GNaMWcytx0TEnMXEYcJ2//ExeddjeybDSS6Hmog MRvFxrHT9yvVNA== -----END CERTIFICATE-----Generated at Mon Dec 15 16:56:40 2025 by rpki-client