This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft File: rbNlrPb5GEmXB92hPwM-LNYRAwg.mft (raw, json) Hash identifier: xRGLSIgN+926kkKZuk/JiTbkNI2AaC1xu5ltCg1+vrI= Subject key identifier: FF:50:5C:C2:8E:B0:14:45:A1:91:65:AB:EB:66:E8:35:4B:3A:6D:62 Authority key identifier: AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08 Certificate issuer: /CN=adb365acf6f918499707dda13f033e2cd6110308 Certificate serial: 019B48147A412028FB1A69A77F3653F3B9B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft Manifest number: 1790 Signing time: Mon 22 Dec 2025 22:01:00 +0000 Manifest this update: Mon 22 Dec 2025 22:01:00 +0000 Manifest next update: Tue 23 Dec 2025 22:01:00 +0000 Files and hashes: 1: rbNlrPb5GEmXB92hPwM-LNYRAwg.crl (hash: gBpUap7i0f6LuW/jXOMJlVDqMPBFxoeMVQuCGcb6Wy4=) 2: zexQv7MMnSMTcRcSk7PaXdu5bh4.roa (hash: VAN/TauThH6QEZkrRALg6rnqCv24/be16q83SWwAfVw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:14:7a:41:20:28:fb:1a:69:a7:7f:36:53:f3:b9:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adb365acf6f918499707dda13f033e2cd6110308 Validity Not Before: Dec 22 22:01:00 2025 GMT Not After : Dec 23 22:01:00 2025 GMT Subject: CN=ff505cc28eb01445a19165abeb66e8354b3a6d62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:23:76:df:36:8d:32:a3:ff:5c:2d:57:22:19: 72:7d:fb:38:8a:39:dd:3a:5f:60:5d:11:c2:74:cb: 7d:38:75:5e:61:00:a6:58:36:b4:f2:5a:91:05:cc: 5a:e9:b2:4a:cb:76:ee:b1:1d:a3:8b:70:2a:53:1e: b7:9f:ff:80:f7:66:06:d2:ef:1c:03:b9:2f:e2:d1: d7:2e:9c:11:50:da:5e:fa:56:5a:8d:70:a7:e7:60: 58:03:20:8c:b4:0c:6a:0f:f7:c8:cc:94:78:06:7b: 05:b5:58:e3:51:a1:54:e5:0a:5d:57:15:8a:ae:f0: 0e:de:c2:77:ee:6a:69:f5:cc:52:53:75:20:df:d5: 05:c8:8a:cb:ab:5e:b7:eb:60:a5:ce:4c:7a:3c:37: 9b:c6:59:4b:3e:82:9d:54:e5:f5:a5:9a:d2:91:9f: 8c:76:6b:5c:81:5c:4b:4d:f7:6c:6a:64:a7:3f:29: e0:68:7f:4a:89:53:55:17:65:91:13:a7:ab:6a:85: e6:15:55:b5:63:50:db:15:dc:a4:fc:01:7f:96:82: 04:86:e4:ce:1a:66:3d:91:69:6e:7a:24:35:a0:84: c6:0d:fb:05:91:62:e7:a4:4e:74:50:ad:a8:42:74: d1:e9:9c:f9:b0:b0:30:7c:9f:38:5e:9a:14:c7:7c: 2a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:50:5C:C2:8E:B0:14:45:A1:91:65:AB:EB:66:E8:35:4B:3A:6D:62 X509v3 Authority Key Identifier: keyid:AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e4:57:a3:33:53:f7:f4:c5:cf:ed:48:77:0c:d3:0f:c2:5f:d1: d9:d1:b4:6a:2e:84:15:db:6b:cd:ab:2b:51:36:8c:45:c8:c1: 06:8a:60:95:d1:d0:6b:0e:f1:c3:87:ee:ab:16:7a:8c:5a:ba: 9b:1a:bb:82:2b:dd:e1:33:5a:51:5d:20:26:f0:05:dc:c5:bf: bc:bc:b5:c0:cd:b8:68:98:f0:48:69:a3:f4:9e:7e:10:6e:a8: c1:3a:11:6f:6d:c0:3f:d1:29:f8:4a:17:c5:bc:b9:52:1c:48: 12:e2:1f:dc:4c:9c:f9:47:29:e3:84:d9:19:39:9a:70:e4:1c: 75:d1:92:2c:72:df:ac:08:30:31:1c:f5:c7:7f:c1:8c:27:35: 2c:eb:70:89:dc:d6:cb:39:3b:19:91:31:48:b0:dd:fa:cd:d4: 7d:20:eb:6a:92:ff:0b:20:f4:cc:0e:b0:f6:3c:39:d5:e9:98: 9f:07:c8:dc:80:c7:a5:03:00:8f:d7:e7:7b:18:95:34:2a:69: 3f:09:53:29:f8:4a:50:6c:27:58:94:3d:66:53:ab:8d:32:c3: 30:34:ae:dd:5d:73:3f:63:3c:30:52:88:dd:4a:df:c2:8e:6b: c9:f5:23:83:9e:34:30:73:95:ab:60:29:67:0d:86:88:f6:bb: 57:8d:f3:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFHpBICj7GmmnfzZT87m0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYjM2NWFjZjZmOTE4NDk5NzA3ZGRhMTNmMDMzZTJjZDYx MTAzMDgwHhcNMjUxMjIyMjIwMTAwWhcNMjUxMjIzMjIwMTAwWjAzMTEwLwYDVQQD EyhmZjUwNWNjMjhlYjAxNDQ1YTE5MTY1YWJlYjY2ZTgzNTRiM2E2ZDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCN23zaNMqP/XC1XIhlyffs4ijnd Ol9gXRHCdMt9OHVeYQCmWDa08lqRBcxa6bJKy3busR2ji3AqUx63n/+A92YG0u8c A7kv4tHXLpwRUNpe+lZajXCn52BYAyCMtAxqD/fIzJR4BnsFtVjjUaFU5QpdVxWK rvAO3sJ37mpp9cxSU3Ug39UFyIrLq16362Clzkx6PDebxllLPoKdVOX1pZrSkZ+M dmtcgVxLTfdsamSnPyngaH9KiVNVF2WRE6eraoXmFVW1Y1DbFdyk/AF/loIEhuTO GmY9kWlueiQ1oITGDfsFkWLnpE50UK2oQnTR6Zz5sLAwfJ84XpoUx3wqgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9QXMKOsBRFoZFlq+tm6DVLOm1iMB8GA1UdIwQY MBaAFK2zZaz2+RhJlwfdoT8DPizWEQMIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmJObHJQYjVHRW1YQjkyaFB3TS1MTllSQXdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hNjgzODctODYxYS00YjkzLWEzZmMt YWRhZGQ2Mjk1ODIyLzEvcmJObHJQYjVHRW1YQjkyaFB3TS1MTllSQXdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9hNjgzODctODYxYS00YjkzLWEzZmMtYWRhZGQ2Mjk1ODIy LzEvcmJObHJQYjVHRW1YQjkyaFB3TS1MTllSQXdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5FejM1P3 9MXP7Uh3DNMPwl/R2dG0ai6EFdtrzasrUTaMRcjBBopgldHQaw7xw4fuqxZ6jFq6 mxq7givd4TNaUV0gJvAF3MW/vLy1wM24aJjwSGmj9J5+EG6owToRb23AP9Ep+EoX xby5UhxIEuIf3Eyc+Ucp44TZGTmacOQcddGSLHLfrAgwMRz1x3/BjCc1LOtwidzW yzk7GZExSLDd+s3UfSDrapL/CyD0zA6w9jw51emYnwfI3IDHpQMAj9fnexiVNCpp PwlTKfhKUGwnWJQ9ZlOrjTLDMDSu3V1zP2M8MFKI3Urfwo5ryfUjg540MHOVq2Ap Zw2GiPa7V43zuw== -----END CERTIFICATE-----Generated at Tue Dec 23 03:19:42 2025 by rpki-client