This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft File: rbNlrPb5GEmXB92hPwM-LNYRAwg.mft (raw, json) Hash identifier: 3Bd3UxTPWEBjihxqrSa7WeQW1Eegcyz5lSmcpfLtNUA= Subject key identifier: D7:B8:F5:0F:D1:C7:44:DE:2C:99:17:4A:0C:46:C2:63:F9:10:E3:52 Authority key identifier: AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08 Certificate issuer: /CN=adb365acf6f918499707dda13f033e2cd6110308 Certificate serial: 019B19BC0272BDDAF4B2625BF2373866C180 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft Manifest number: 1778 Signing time: Sat 13 Dec 2025 22:01:50 +0000 Manifest this update: Sat 13 Dec 2025 22:01:50 +0000 Manifest next update: Sun 14 Dec 2025 22:01:50 +0000 Files and hashes: 1: rbNlrPb5GEmXB92hPwM-LNYRAwg.crl (hash: DLJfSFF8Kba5jbELIMc4pk6DEil555wXLnJGgN0YUj0=) 2: zexQv7MMnSMTcRcSk7PaXdu5bh4.roa (hash: VAN/TauThH6QEZkrRALg6rnqCv24/be16q83SWwAfVw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bc:02:72:bd:da:f4:b2:62:5b:f2:37:38:66:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adb365acf6f918499707dda13f033e2cd6110308 Validity Not Before: Dec 13 22:01:50 2025 GMT Not After : Dec 14 22:01:50 2025 GMT Subject: CN=d7b8f50fd1c744de2c99174a0c46c263f910e352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8e:20:2b:f4:fb:61:6f:28:a4:7d:05:bc:6c: 97:28:cf:08:90:dd:64:61:47:12:21:4a:8d:d1:1f: 48:50:58:e7:3a:4f:84:10:cb:92:90:9a:a6:6c:34: 88:6b:19:75:dd:15:0b:d5:fe:92:8c:89:48:eb:e3: e8:94:7b:3f:7d:1b:71:27:8c:2e:a1:70:e2:d7:95: 20:18:b3:84:1c:a0:2d:bf:7c:02:24:96:5d:2d:d6: da:80:f6:72:d7:d1:94:ec:f1:08:f3:a2:5d:b8:de: 9b:59:0e:2e:86:c8:5e:79:40:06:89:9f:b0:f5:6f: 72:e4:0f:df:21:5b:7a:06:2d:9f:75:37:8c:dc:0f: 25:7a:84:76:e3:58:1a:51:a6:25:08:9c:42:e1:ff: 7b:e2:5f:8d:57:b8:ea:73:76:1f:d3:ca:fc:ef:0b: b5:03:74:fc:25:f7:03:c6:92:0a:43:56:50:8b:d3: c8:71:11:8f:65:f6:fe:b7:bc:85:b2:60:64:17:a8: 0a:c8:c5:bc:e7:00:5a:27:94:b2:fa:eb:82:6b:b1: 7c:c7:38:99:4f:89:13:00:02:c0:97:6b:9e:c9:34: e1:a4:54:98:86:88:20:2a:79:57:a3:e3:97:a6:c4: 4c:66:e3:e0:b1:47:67:a7:ee:ce:1a:30:ab:c0:36: a5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:B8:F5:0F:D1:C7:44:DE:2C:99:17:4A:0C:46:C2:63:F9:10:E3:52 X509v3 Authority Key Identifier: keyid:AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:43:79:65:f6:dc:e4:ec:45:ba:69:69:07:58:45:30:38:8b: 1b:5a:5e:d6:aa:2e:82:e5:9c:f5:92:39:56:29:97:c5:ee:8c: d8:d3:84:0e:1f:37:ac:dd:63:5b:b0:e7:38:d4:bc:b3:dd:a9: 0f:01:c9:3e:62:aa:08:92:3c:9a:56:5a:8d:39:7d:65:b5:f0: d3:48:2a:5d:f2:62:be:d9:cb:7b:da:63:30:a8:62:a5:ac:11: d7:97:28:88:ff:4f:7f:1d:12:67:ae:c5:53:b5:5d:8e:e5:d7: bd:30:2b:57:29:3a:c4:de:66:c1:65:01:56:f7:3e:1e:5f:7a: c1:b4:ee:eb:b5:46:f5:1f:de:72:4d:a0:ee:1e:59:85:22:2a: 47:83:7e:03:d1:15:7d:20:4e:59:61:a0:0f:17:7d:f0:18:56: eb:a7:31:bf:a9:27:a7:ce:28:df:5b:44:2b:03:d7:82:42:79: d0:54:0f:1a:8b:35:91:ee:2d:f8:84:85:a1:d2:f6:e7:b7:fb: 2c:ec:89:e0:86:bf:49:33:00:c1:fe:6a:52:db:3a:a0:d8:3c: b0:e4:a4:e1:b9:e8:1a:26:89:fa:ad:19:b6:76:ea:86:9d:45: 1e:0f:25:85:9c:03:19:b2:24:50:a7:09:1b:60:89:bc:92:f5: af:72:07:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZvAJyvdr0smJb8jc4ZsGAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYjM2NWFjZjZmOTE4NDk5NzA3ZGRhMTNmMDMzZTJjZDYx MTAzMDgwHhcNMjUxMjEzMjIwMTUwWhcNMjUxMjE0MjIwMTUwWjAzMTEwLwYDVQQD EyhkN2I4ZjUwZmQxYzc0NGRlMmM5OTE3NGEwYzQ2YzI2M2Y5MTBlMzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm44gK/T7YW8opH0FvGyXKM8IkN1k YUcSIUqN0R9IUFjnOk+EEMuSkJqmbDSIaxl13RUL1f6SjIlI6+PolHs/fRtxJ4wu oXDi15UgGLOEHKAtv3wCJJZdLdbagPZy19GU7PEI86JduN6bWQ4uhsheeUAGiZ+w 9W9y5A/fIVt6Bi2fdTeM3A8leoR241gaUaYlCJxC4f974l+NV7jqc3Yf08r87wu1 A3T8JfcDxpIKQ1ZQi9PIcRGPZfb+t7yFsmBkF6gKyMW85wBaJ5Sy+uuCa7F8xziZ T4kTAALAl2ueyTThpFSYhoggKnlXo+OXpsRMZuPgsUdnp+7OGjCrwDalbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNe49Q/Rx0TeLJkXSgxGwmP5EONSMB8GA1UdIwQY MBaAFK2zZaz2+RhJlwfdoT8DPizWEQMIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmJObHJQYjVHRW1YQjkyaFB3TS1MTllSQXdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hNjgzODctODYxYS00YjkzLWEzZmMt YWRhZGQ2Mjk1ODIyLzEvcmJObHJQYjVHRW1YQjkyaFB3TS1MTllSQXdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9hNjgzODctODYxYS00YjkzLWEzZmMtYWRhZGQ2Mjk1ODIy LzEvcmJObHJQYjVHRW1YQjkyaFB3TS1MTllSQXdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQUN5Zfbc 5OxFumlpB1hFMDiLG1pe1qouguWc9ZI5VimXxe6M2NOEDh83rN1jW7DnONS8s92p DwHJPmKqCJI8mlZajTl9ZbXw00gqXfJivtnLe9pjMKhipawR15coiP9Pfx0SZ67F U7VdjuXXvTArVyk6xN5mwWUBVvc+Hl96wbTu67VG9R/eck2g7h5ZhSIqR4N+A9EV fSBOWWGgDxd98BhW66cxv6knp84o31tEKwPXgkJ50FQPGos1ke4t+ISFodL257f7 LOyJ4Ia/STMAwf5qUts6oNg8sOSk4bnoGiaJ+q0Ztnbqhp1FHg8lhZwDGbIkUKcJ G2CJvJL1r3IHBQ== -----END CERTIFICATE-----Generated at Sun Dec 14 01:05:59 2025 by rpki-client