This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft File: rbNlrPb5GEmXB92hPwM-LNYRAwg.mft (raw, json) Hash identifier: JgdsOwh+vtWTvQBj+YmbZXDHcUrGwucMsi6DG3RiUGg= Subject key identifier: F1:BB:58:A4:D3:21:26:08:82:01:B0:03:AB:66:38:D5:78:25:1E:A1 Authority key identifier: AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08 Certificate issuer: /CN=adb365acf6f918499707dda13f033e2cd6110308 Certificate serial: 019B4BF179268D3D8A3AB443C4EFC2A2AE30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft Manifest number: 1792 Signing time: Tue 23 Dec 2025 16:01:14 +0000 Manifest this update: Tue 23 Dec 2025 16:01:14 +0000 Manifest next update: Wed 24 Dec 2025 16:01:14 +0000 Files and hashes: 1: rbNlrPb5GEmXB92hPwM-LNYRAwg.crl (hash: bULUxO0mEA3r/qqcH8el7/xqr8NkFzw4xl5qfVt4DEM=) 2: zexQv7MMnSMTcRcSk7PaXdu5bh4.roa (hash: VAN/TauThH6QEZkrRALg6rnqCv24/be16q83SWwAfVw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f1:79:26:8d:3d:8a:3a:b4:43:c4:ef:c2:a2:ae:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adb365acf6f918499707dda13f033e2cd6110308 Validity Not Before: Dec 23 16:01:14 2025 GMT Not After : Dec 24 16:01:14 2025 GMT Subject: CN=f1bb58a4d32126088201b003ab6638d578251ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e5:26:fe:32:db:88:12:21:ab:23:ba:06:60: 1b:ea:1c:12:10:fa:2e:7e:c8:32:f2:f8:37:02:ee: dc:eb:69:10:92:52:5a:c6:3c:4b:90:7c:d7:94:83: 1f:30:3c:66:d7:5a:83:5a:de:7a:b8:e4:65:90:79: 36:85:55:35:13:4c:37:80:0a:21:69:31:d1:2b:c3: b8:b0:c6:0d:e7:6e:87:ea:b8:35:4d:42:54:6b:b4: a8:2e:8f:fe:8a:a5:23:e5:59:99:4b:f4:ec:32:41: c4:d4:fe:84:b8:a9:eb:14:a0:e4:f5:fa:aa:13:56: 21:9f:49:4d:17:8e:e0:dd:0e:c9:50:51:a0:83:7c: 7d:c1:6f:84:2a:65:c5:2b:7b:6c:bd:6d:34:73:68: 20:56:45:d9:22:d5:79:7e:b9:0d:3d:68:7b:c6:29: 88:84:55:92:1d:38:5e:27:c5:32:4c:d9:07:d2:3b: c1:de:33:77:63:9e:26:37:1f:3b:cf:5d:01:cf:99: 67:05:25:5e:5e:ab:60:15:15:d8:9e:92:80:bd:9c: a9:97:f9:93:ef:c3:f5:fb:d0:aa:08:a4:0c:c7:56: c5:3c:8b:c0:d7:af:bb:cb:ee:3d:21:6e:94:e7:2e: be:8f:a5:cf:4b:16:ca:84:05:5d:c8:68:be:7e:c2: 6a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:BB:58:A4:D3:21:26:08:82:01:B0:03:AB:66:38:D5:78:25:1E:A1 X509v3 Authority Key Identifier: keyid:AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:c6:32:85:c6:dc:f3:38:ee:fb:33:c2:73:67:14:74:8a:fd: 06:ce:c3:bb:e3:ba:04:c0:25:f9:4c:a0:36:1d:7c:6f:e8:aa: ed:d3:eb:fc:d9:db:3b:6b:f6:7b:4e:f6:68:0a:de:06:22:96: 63:a5:87:bf:81:51:0b:36:de:92:23:ef:96:8f:09:ce:e7:d1: b6:bb:97:16:c3:ca:83:f4:4b:9d:cf:ab:42:28:6e:7d:64:30: ec:78:e9:cb:be:57:8d:a9:62:5e:65:b5:9a:1f:37:1a:89:d4: af:74:d8:10:88:e1:8b:a9:20:48:a1:b7:84:1a:de:70:4c:67: a4:05:6f:77:6f:14:d0:9f:f7:f8:fd:97:2b:7d:c2:bd:09:2b: fd:f5:1a:b8:6f:74:2e:fd:a0:16:44:ba:dc:46:38:e1:18:cb: f5:8a:59:cd:9e:91:88:a0:26:97:00:e7:f6:05:6e:5b:05:99: 4d:20:40:fb:03:39:77:86:25:9a:af:55:bc:29:ef:68:01:e3: 20:69:48:b7:09:7c:2a:b4:55:a6:2e:5d:5b:b4:c5:94:9e:71: 2b:3b:63:f1:e6:8a:bc:33:23:6c:23:a4:d5:82:d7:26:83:40: d0:ff:0a:e6:fe:48:cb:89:cf:55:f9:d5:04:b1:ec:36:3a:3e: 57:14:2c:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8XkmjT2KOrRDxO/Coq4wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYjM2NWFjZjZmOTE4NDk5NzA3ZGRhMTNmMDMzZTJjZDYx MTAzMDgwHhcNMjUxMjIzMTYwMTE0WhcNMjUxMjI0MTYwMTE0WjAzMTEwLwYDVQQD EyhmMWJiNThhNGQzMjEyNjA4ODIwMWIwMDNhYjY2MzhkNTc4MjUxZWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OUm/jLbiBIhqyO6BmAb6hwSEPou fsgy8vg3Au7c62kQklJaxjxLkHzXlIMfMDxm11qDWt56uORlkHk2hVU1E0w3gAoh aTHRK8O4sMYN526H6rg1TUJUa7SoLo/+iqUj5VmZS/TsMkHE1P6EuKnrFKDk9fqq E1Yhn0lNF47g3Q7JUFGgg3x9wW+EKmXFK3tsvW00c2ggVkXZItV5frkNPWh7ximI hFWSHTheJ8UyTNkH0jvB3jN3Y54mNx87z10Bz5lnBSVeXqtgFRXYnpKAvZypl/mT 78P1+9CqCKQMx1bFPIvA16+7y+49IW6U5y6+j6XPSxbKhAVdyGi+fsJqYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPG7WKTTISYIggGwA6tmONV4JR6hMB8GA1UdIwQY MBaAFK2zZaz2+RhJlwfdoT8DPizWEQMIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmJObHJQYjVHRW1YQjkyaFB3TS1MTllSQXdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hNjgzODctODYxYS00YjkzLWEzZmMt YWRhZGQ2Mjk1ODIyLzEvcmJObHJQYjVHRW1YQjkyaFB3TS1MTllSQXdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9hNjgzODctODYxYS00YjkzLWEzZmMtYWRhZGQ2Mjk1ODIy LzEvcmJObHJQYjVHRW1YQjkyaFB3TS1MTllSQXdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAcYyhcbc 8zju+zPCc2cUdIr9Bs7Du+O6BMAl+UygNh18b+iq7dPr/NnbO2v2e072aAreBiKW Y6WHv4FRCzbekiPvlo8JzufRtruXFsPKg/RLnc+rQihufWQw7Hjpy75XjaliXmW1 mh83GonUr3TYEIjhi6kgSKG3hBrecExnpAVvd28U0J/3+P2XK33CvQkr/fUauG90 Lv2gFkS63EY44RjL9YpZzZ6RiKAmlwDn9gVuWwWZTSBA+wM5d4Ylmq9VvCnvaAHj IGlItwl8KrRVpi5dW7TFlJ5xKztj8eaKvDMjbCOk1YLXJoNA0P8K5v5Iy4nPVfnV BLHsNjo+VxQsTw== -----END CERTIFICATE-----Generated at Tue Dec 23 20:36:12 2025 by rpki-client