This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft File: 28eECSDRxwn_KZrtNoLCP7Qydn0.mft (raw, json) Hash identifier: d9rbMI5bqRlB8hRcqvqQbUh+5rswmD3RpZB3h8CqbRQ= Subject key identifier: A1:2A:42:5E:51:01:DB:C6:EA:D2:EA:18:ED:FC:98:75:2C:DE:12:F9 Authority key identifier: DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D Certificate issuer: /CN=dbc7840920d1c709ff299aed3682c23fb432767d Certificate serial: 019B394629148E62BCFFBE9059F8E7228A92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft Manifest number: 13D4 Signing time: Sat 20 Dec 2025 01:00:57 +0000 Manifest this update: Sat 20 Dec 2025 01:00:57 +0000 Manifest next update: Sun 21 Dec 2025 01:00:57 +0000 Files and hashes: 1: 28eECSDRxwn_KZrtNoLCP7Qydn0.crl (hash: 89d4t7i9nr/XqnETMfnKpauOn7sF8mFwk/BEerQgy5c=) 2: e_UFXyqaeTvL3E6lukMB0WgwTVE.roa (hash: OXE+evWhqp6U3n1wOYbBBjgTwYv/71GDxDwJtwclFB8=) 3: lZ-AOq7_6QtP_M2_NSdFkS5kWDw.roa (hash: QIlc9W3HH3Xuxs2UHApl1aj37iKKZQTLV1xjUXcHjZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:29:14:8e:62:bc:ff:be:90:59:f8:e7:22:8a:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbc7840920d1c709ff299aed3682c23fb432767d Validity Not Before: Dec 20 01:00:57 2025 GMT Not After : Dec 21 01:00:57 2025 GMT Subject: CN=a12a425e5101dbc6ead2ea18edfc98752cde12f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a1:4f:2e:4f:95:53:74:14:11:87:5d:bb:fc: 3a:f8:4c:6a:8b:44:43:d1:60:fa:51:ff:dc:0a:dd: 82:ac:7e:ca:b2:3c:42:32:19:79:bb:48:1e:78:0e: cf:aa:a9:a9:f5:b1:fe:63:0a:c4:8c:e4:1c:67:0f: 8a:cc:8e:31:f5:7a:72:d5:d4:a0:29:e8:e9:ce:67: af:22:7e:de:e4:6c:1a:e8:65:5c:18:ab:c4:f3:36: 8f:2e:66:de:82:89:7d:83:06:b1:c2:f9:02:4d:09: 96:58:c3:57:6b:e2:90:f2:00:5f:86:9b:49:67:40: 48:52:ff:c0:9e:da:7c:73:bc:4d:57:21:66:d6:84: ed:5b:22:84:89:47:77:b6:0a:cc:a5:8b:13:e8:cc: ce:c3:39:0f:90:4e:ba:1f:be:ce:13:ed:eb:86:0b: e7:61:93:b1:95:98:6f:b6:6d:a2:41:25:7d:d8:23: af:2e:c8:c7:df:8c:7e:eb:b3:e6:2c:5a:ed:4c:a0: 9c:d9:5a:50:c6:fc:d4:0c:12:66:44:db:a0:a9:d8: ed:26:bf:91:0a:e8:c5:ed:1e:c6:b5:84:dc:9b:a1: fa:4e:d5:8a:37:c9:64:30:e6:69:8b:b7:54:b6:71: fa:ba:e9:a6:51:d7:5f:fd:6c:d8:e0:55:18:7b:d7: b0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:2A:42:5E:51:01:DB:C6:EA:D2:EA:18:ED:FC:98:75:2C:DE:12:F9 X509v3 Authority Key Identifier: keyid:DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:e3:61:bb:1c:c0:81:8b:a7:6a:fd:d9:47:a7:5a:8e:3a:83: 22:38:59:44:b6:34:1d:a9:c5:3e:ea:c6:25:ca:1f:28:08:47: 0a:89:c0:cf:b4:59:88:c1:98:3b:60:58:c7:70:e7:37:c1:19: 9c:2d:67:f6:6d:2d:53:3a:35:ea:bf:79:94:64:b5:11:3f:a7: b4:0a:92:b5:43:9f:76:ab:5e:84:3c:e4:68:95:c3:d6:95:87: 95:71:4c:85:8c:29:3f:fa:75:d3:83:ba:3a:f8:88:87:fc:9d: ba:80:de:c6:1c:77:97:71:f0:3c:08:d1:98:4d:96:9c:32:b4: d2:bf:c8:7e:e3:30:e2:34:c6:c1:89:cc:cc:66:fe:e1:74:e8: ff:6b:f5:fe:08:b9:01:c2:dc:d1:d4:1d:c3:de:a7:30:7b:50: 2b:fd:64:1f:e1:22:d8:62:b6:06:6b:98:ae:2f:42:ba:70:5c: bc:e3:ac:60:5f:2c:41:99:9b:c9:3e:f9:fd:7e:2a:6e:5b:c4: 64:d0:8a:62:c6:54:6d:a6:86:d0:6a:8b:4b:ed:38:de:7d:12: 4c:80:d8:ed:f3:55:74:cc:cb:28:81:0a:d6:3a:48:02:c4:3d: fd:fc:6e:0d:fc:58:a5:70:1e:72:37:c3:51:19:77:59:40:6f: 76:8e:8f:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RikUjmK8/76QWfjnIoqSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiYzc4NDA5MjBkMWM3MDlmZjI5OWFlZDM2ODJjMjNmYjQz Mjc2N2QwHhcNMjUxMjIwMDEwMDU3WhcNMjUxMjIxMDEwMDU3WjAzMTEwLwYDVQQD EyhhMTJhNDI1ZTUxMDFkYmM2ZWFkMmVhMThlZGZjOTg3NTJjZGUxMmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKFPLk+VU3QUEYddu/w6+Exqi0RD 0WD6Uf/cCt2CrH7KsjxCMhl5u0geeA7Pqqmp9bH+YwrEjOQcZw+KzI4x9Xpy1dSg KejpzmevIn7e5Gwa6GVcGKvE8zaPLmbegol9gwaxwvkCTQmWWMNXa+KQ8gBfhptJ Z0BIUv/Antp8c7xNVyFm1oTtWyKEiUd3tgrMpYsT6MzOwzkPkE66H77OE+3rhgvn YZOxlZhvtm2iQSV92COvLsjH34x+67PmLFrtTKCc2VpQxvzUDBJmRNugqdjtJr+R CujF7R7GtYTcm6H6TtWKN8lkMOZpi7dUtnH6uummUddf/WzY4FUYe9ewJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEqQl5RAdvG6tLqGO38mHUs3hL5MB8GA1UdIwQY MBaAFNvHhAkg0ccJ/yma7TaCwj+0MnZ9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjhlRUNTRFJ4d25fS1pydE5vTENQN1F5ZG4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC85NTIxZTEtNzYxMC00ZDQzLTg2ODMt NTFiZTJmOTYwOGJjLzEvMjhlRUNTRFJ4d25fS1pydE5vTENQN1F5ZG4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC85NTIxZTEtNzYxMC00ZDQzLTg2ODMtNTFiZTJmOTYwOGJj LzEvMjhlRUNTRFJ4d25fS1pydE5vTENQN1F5ZG4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATuNhuxzA gYunav3ZR6dajjqDIjhZRLY0HanFPurGJcofKAhHConAz7RZiMGYO2BYx3DnN8EZ nC1n9m0tUzo16r95lGS1ET+ntAqStUOfdqtehDzkaJXD1pWHlXFMhYwpP/p104O6 OviIh/yduoDexhx3l3HwPAjRmE2WnDK00r/IfuMw4jTGwYnMzGb+4XTo/2v1/gi5 AcLc0dQdw96nMHtQK/1kH+Ei2GK2BmuYri9CunBcvOOsYF8sQZmbyT75/X4qblvE ZNCKYsZUbaaG0GqLS+043n0STIDY7fNVdMzLKIEK1jpIAsQ9/fxuDfxYpXAecjfD URl3WUBvdo6PHQ== -----END CERTIFICATE-----Generated at Sat Dec 20 10:02:09 2025 by rpki-client