This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft File: C28enwlQ5POcnF_uP4aKJOs2HvE.mft (raw, json) Hash identifier: MaCdhKq27SVjh817T3y4GCEfb5LIaViiZfW3e901mek= Subject key identifier: A8:36:56:BF:4F:01:F1:20:DF:33:FA:B4:AD:F8:91:AC:88:D5:7C:7E Authority key identifier: 0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1 Certificate issuer: /CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1 Certificate serial: 019B2D78D17B4441B470CF8E6A25B8A2FAF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft Manifest number: 0A15 Signing time: Wed 17 Dec 2025 18:00:51 +0000 Manifest this update: Wed 17 Dec 2025 18:00:51 +0000 Manifest next update: Thu 18 Dec 2025 18:00:51 +0000 Files and hashes: 1: 9T-K1Qm3b8gpXgz9zJRHreyTvgM.roa (hash: dWSzFCZcssBKJcBODdxFw6oV27vvhXKSqLYxiGBOtGQ=) 2: C28enwlQ5POcnF_uP4aKJOs2HvE.crl (hash: 6Djg4slz2oCUoEM+g9k1cgNlW64jHhWyJCIUKKIi3/0=) 3: hEhkAm4wvhKI8lm4TouQ913BI64.roa (hash: QBQPmns85EKoDttpiWLYZhYuUsat9iVL0D6w2NFPGj8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 18:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:78:d1:7b:44:41:b4:70:cf:8e:6a:25:b8:a2:fa:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1 Validity Not Before: Dec 17 18:00:51 2025 GMT Not After : Dec 18 18:00:51 2025 GMT Subject: CN=a83656bf4f01f120df33fab4adf891ac88d57c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:02:27:13:68:d6:9d:8b:34:33:16:3d:67:66: 7d:11:02:04:01:41:f0:5b:7c:ea:b0:d9:0d:46:72: 7f:ac:2d:4b:34:99:26:f4:45:bd:01:76:62:f3:46: 71:78:3c:3e:fe:9b:61:f0:3c:1c:de:0f:09:f4:b6: 55:11:19:1a:8a:8e:8e:40:35:90:22:5d:de:00:37: 6a:10:32:8f:c8:b6:db:df:1a:00:26:94:6d:2e:65: 2a:78:5e:7d:43:e0:43:d8:a3:4b:5d:03:4e:2f:b7: cc:13:c4:47:13:e2:a5:e1:2c:4b:6c:e0:64:45:f1: 35:e8:bb:55:29:36:3b:de:ec:fc:cc:6c:57:62:36: 76:d6:cc:f6:de:da:05:1c:f7:5c:17:56:97:c8:e7: 40:27:e1:f1:4a:16:e3:c4:6c:53:1a:93:20:d3:b5: 42:18:40:25:ba:a4:ce:d9:06:ca:93:4b:15:89:56: c2:7c:ff:bb:b0:9d:ac:ec:11:37:cc:6e:3a:15:e7: 01:f8:6a:0c:06:a3:98:ce:85:99:f2:77:3a:eb:91: 4a:ee:55:72:e4:4d:4f:5e:7b:33:e4:2d:04:39:93: 67:52:c0:cb:69:fb:a6:c8:19:e1:3d:ec:8a:4b:b1: 4c:1e:0c:11:16:53:7a:98:0a:c0:31:fb:e6:bc:1c: a9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:36:56:BF:4F:01:F1:20:DF:33:FA:B4:AD:F8:91:AC:88:D5:7C:7E X509v3 Authority Key Identifier: keyid:0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:65:94:51:5c:ca:cf:8b:42:10:66:03:8c:a4:7e:3c:01:db: ab:9a:cb:2a:65:2f:10:0c:89:ea:1a:66:9a:08:3b:9e:a3:c1: ad:34:00:66:2c:61:4c:bd:73:c2:0e:d7:ca:12:73:65:d8:9a: a5:a5:79:48:d8:1f:b6:96:a7:13:f8:e4:67:d8:94:cf:9e:43: 1d:84:fc:f1:d7:b4:ca:52:23:4c:5a:2e:25:1f:ef:24:cd:d3: c0:d1:92:f7:a4:03:70:4e:57:2c:50:ef:58:b7:94:ff:d1:45: 93:a0:f7:36:52:a2:79:bb:82:3d:af:cc:3b:91:75:ee:77:dd: 69:c8:7b:c5:bf:fd:36:42:77:70:66:56:10:45:26:85:b7:f3: 9e:24:f0:a3:10:fe:9b:2b:55:ee:3b:d6:37:02:87:84:69:69: 92:8b:26:34:b3:45:d0:96:ce:d7:67:72:77:3e:2b:a1:a7:38: b0:5c:c0:8f:35:dc:72:ad:fe:ff:02:c8:61:0c:06:e7:d6:fc: ad:5f:0d:7f:c7:36:63:39:5e:ba:d6:ed:05:8a:b0:24:67:16: 6e:39:3e:04:8f:f0:8c:f1:40:71:55:e7:35:5a:0a:6d:b1:e7: f3:c0:e0:6d:f6:37:ed:3a:2a:78:01:38:8d:06:82:89:c9:e6: 29:f9:c9:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsteNF7REG0cM+OaiW4ovrxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNmYxZTlmMDk1MGU0ZjM5YzljNWZlZTNmODY4YTI0ZWIz NjFlZjEwHhcNMjUxMjE3MTgwMDUxWhcNMjUxMjE4MTgwMDUxWjAzMTEwLwYDVQQD EyhhODM2NTZiZjRmMDFmMTIwZGYzM2ZhYjRhZGY4OTFhYzg4ZDU3YzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgInE2jWnYs0MxY9Z2Z9EQIEAUHw W3zqsNkNRnJ/rC1LNJkm9EW9AXZi80ZxeDw+/pth8Dwc3g8J9LZVERkaio6OQDWQ Il3eADdqEDKPyLbb3xoAJpRtLmUqeF59Q+BD2KNLXQNOL7fME8RHE+Kl4SxLbOBk RfE16LtVKTY73uz8zGxXYjZ21sz23toFHPdcF1aXyOdAJ+HxShbjxGxTGpMg07VC GEAluqTO2QbKk0sViVbCfP+7sJ2s7BE3zG46FecB+GoMBqOYzoWZ8nc665FK7lVy 5E1PXnsz5C0EOZNnUsDLafumyBnhPeyKS7FMHgwRFlN6mArAMfvmvBypbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKg2Vr9PAfEg3zP6tK34kayI1Xx+MB8GA1UdIwQY MBaAFAtvHp8JUOTznJxf7j+GiiTrNh7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzI4ZW53bFE1UE9jbkZfdVA0YUtKT3MySHZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lNjliZDMtMjE1ZS00NDIyLTkxNzAt MDgxYmNiYWM0ZGFmLzEvQzI4ZW53bFE1UE9jbkZfdVA0YUtKT3MySHZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lNjliZDMtMjE1ZS00NDIyLTkxNzAtMDgxYmNiYWM0ZGFm LzEvQzI4ZW53bFE1UE9jbkZfdVA0YUtKT3MySHZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKWWUUVzK z4tCEGYDjKR+PAHbq5rLKmUvEAyJ6hpmmgg7nqPBrTQAZixhTL1zwg7XyhJzZdia paV5SNgftpanE/jkZ9iUz55DHYT88de0ylIjTFouJR/vJM3TwNGS96QDcE5XLFDv WLeU/9FFk6D3NlKiebuCPa/MO5F17nfdach7xb/9NkJ3cGZWEEUmhbfzniTwoxD+ mytV7jvWNwKHhGlpkosmNLNF0JbO12dydz4roac4sFzAjzXccq3+/wLIYQwG59b8 rV8Nf8c2YzleutbtBYqwJGcWbjk+BI/wjPFAcVXnNVoKbbHn88DgbfY37ToqeAE4 jQaCicnmKfnJQw== -----END CERTIFICATE-----Generated at Wed Dec 17 22:13:13 2025 by rpki-client