This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft File: 28FEzhVO7p27NWLOTNMigzhkEzM.mft (raw, json) Hash identifier: MtsM4G6nXSVeQuRISkJq4h2X6XOiBpLwYDyUMKtotJk= Subject key identifier: 94:2E:A2:A0:6D:EB:78:53:A0:8F:32:81:8C:A7:23:5F:56:15:B8:F9 Authority key identifier: DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33 Certificate issuer: /CN=dbc144ce154eee9dbb3562ce4cd3228338641333 Certificate serial: 019B1A2978B0F3EE2C0AC25A49D9F6E81CE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft Manifest number: 1761 Signing time: Sun 14 Dec 2025 00:01:23 +0000 Manifest this update: Sun 14 Dec 2025 00:01:23 +0000 Manifest next update: Mon 15 Dec 2025 00:01:23 +0000 Files and hashes: 1: 28FEzhVO7p27NWLOTNMigzhkEzM.crl (hash: EAn1MefnCqPnSGqOOR0iY8Zno+XOmQ+LZwls4KNn5J0=) 2: GYQEfAUHW7dZgctfSOEiK9IcuBg.roa (hash: Km85w7FHDGWwEv7yzqhkKLXi+TpyoQCcyxITiEoHCDY=) 3: VK2lkpPJSWNvcFm_VI7rxrLDgwg.roa (hash: OVrxxsaCYNK3a6LSw5LlCrrYQ6BsGkALeDXQ/cBmiLI=) 4: neolYGdLKpBXHmNej6CjSGJo33s.roa (hash: rdeL6tzNKDLvJGPaZiOq6jxc0q10y5ECjhYex4TDkLo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:29:78:b0:f3:ee:2c:0a:c2:5a:49:d9:f6:e8:1c:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbc144ce154eee9dbb3562ce4cd3228338641333 Validity Not Before: Dec 14 00:01:23 2025 GMT Not After : Dec 15 00:01:23 2025 GMT Subject: CN=942ea2a06deb7853a08f32818ca7235f5615b8f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bc:d0:e1:bb:d2:59:15:2c:62:4a:9f:40:1c: 96:7e:b1:a4:b3:8b:4c:ea:e2:82:f1:38:1b:71:46: 57:c6:ff:c9:7b:f5:7f:b7:ec:cc:83:59:f9:20:5e: 7e:71:74:43:b7:04:4e:2e:2f:75:cf:a0:ea:eb:7e: d5:60:4b:69:5f:2f:11:d8:e3:6b:55:d0:c3:ea:73: b2:71:47:59:ff:05:d9:cd:01:18:d6:e5:ba:1a:f0: 9e:4e:b2:75:1c:7f:f9:b3:a5:1c:3d:2f:03:b4:f8: 0f:75:e9:c8:a8:ff:54:9e:5b:db:4d:61:a9:c1:a7: b6:87:54:1e:f3:1c:4a:96:dc:b6:1a:9b:89:68:b8: bc:b1:82:a7:73:7b:97:ae:57:8f:80:24:d8:1d:3f: 47:cc:c1:c6:45:63:85:f3:74:16:71:55:01:c3:2d: 05:af:18:b5:82:06:79:8f:d8:9b:84:ef:3a:2b:25: 6e:e4:13:18:57:5d:da:c5:fc:fb:c1:84:7d:22:32: ff:c2:32:eb:f6:a3:ea:4b:1a:55:1c:9f:0c:7c:8d: 63:71:95:88:71:d7:66:8c:e0:fc:08:ac:7b:6b:c8: d4:9c:7e:a2:5f:43:ba:b1:c1:b5:ae:c2:16:69:7c: a0:ca:ca:32:39:3b:48:4d:c2:06:41:21:eb:d4:f8: 33:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:2E:A2:A0:6D:EB:78:53:A0:8F:32:81:8C:A7:23:5F:56:15:B8:F9 X509v3 Authority Key Identifier: keyid:DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:0a:13:85:59:d3:cd:f6:db:87:1f:e3:e9:9a:4b:0c:5b:9b: 22:8b:1c:ee:01:46:6b:ad:d2:0c:84:24:01:22:67:f3:a2:79: c0:51:d8:1b:cd:44:c9:d6:92:cc:a7:84:8c:dc:8e:0a:d9:8d: b4:db:7b:00:89:68:24:dd:6f:9a:11:2b:55:06:0a:8a:79:53: 53:02:86:0a:b6:41:12:65:7c:c8:d1:a4:68:c7:50:6a:0d:47: 15:a9:55:f4:c7:54:2b:24:83:c4:45:d0:cc:1d:22:f4:95:61: 1d:00:e1:46:e2:44:60:bb:47:51:65:e3:09:84:35:ee:82:b6: d6:33:91:bd:e9:0b:13:91:0e:5c:01:51:e7:22:fe:b0:ec:11: 4e:41:30:36:78:d0:82:c2:ff:ef:5f:20:84:8b:18:3f:86:ba: ac:7c:8a:76:9a:c7:e2:4c:82:0b:7d:d4:be:5a:11:d1:e9:d5: cd:8f:88:a2:99:61:64:f0:cd:0b:b0:99:c2:f8:76:86:49:65: 34:a3:03:cd:a4:ca:3f:21:73:71:10:3e:09:c8:89:3e:69:07: 7e:c2:9c:5b:47:ff:23:d6:54:74:44:ac:59:c1:6d:19:d7:93: ff:07:6e:05:17:65:c7:a5:c6:69:a9:b0:05:fc:f3:76:11:59: e6:1d:28:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKXiw8+4sCsJaSdn26BzoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiYzE0NGNlMTU0ZWVlOWRiYjM1NjJjZTRjZDMyMjgzMzg2 NDEzMzMwHhcNMjUxMjE0MDAwMTIzWhcNMjUxMjE1MDAwMTIzWjAzMTEwLwYDVQQD Eyg5NDJlYTJhMDZkZWI3ODUzYTA4ZjMyODE4Y2E3MjM1ZjU2MTViOGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7zQ4bvSWRUsYkqfQByWfrGks4tM 6uKC8TgbcUZXxv/Je/V/t+zMg1n5IF5+cXRDtwROLi91z6Dq637VYEtpXy8R2ONr VdDD6nOycUdZ/wXZzQEY1uW6GvCeTrJ1HH/5s6UcPS8DtPgPdenIqP9UnlvbTWGp wae2h1Qe8xxKlty2GpuJaLi8sYKnc3uXrlePgCTYHT9HzMHGRWOF83QWcVUBwy0F rxi1ggZ5j9ibhO86KyVu5BMYV13axfz7wYR9IjL/wjLr9qPqSxpVHJ8MfI1jcZWI cddmjOD8CKx7a8jUnH6iX0O6scG1rsIWaXygysoyOTtITcIGQSHr1PgzDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJQuoqBt63hToI8ygYynI19WFbj5MB8GA1UdIwQY MBaAFNvBRM4VTu6duzVizkzTIoM4ZBMzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjhGRXpoVk83cDI3TldMT1ROTWlnemhrRXpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9hMjJjZmEtMDFmMy00ZjEyLWI2ZmQt NDg5NGY4OGJlZGRjLzEvMjhGRXpoVk83cDI3TldMT1ROTWlnemhrRXpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9hMjJjZmEtMDFmMy00ZjEyLWI2ZmQtNDg5NGY4OGJlZGRj LzEvMjhGRXpoVk83cDI3TldMT1ROTWlnemhrRXpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALgoThVnT zfbbhx/j6ZpLDFubIosc7gFGa63SDIQkASJn86J5wFHYG81EydaSzKeEjNyOCtmN tNt7AIloJN1vmhErVQYKinlTUwKGCrZBEmV8yNGkaMdQag1HFalV9MdUKySDxEXQ zB0i9JVhHQDhRuJEYLtHUWXjCYQ17oK21jORvekLE5EOXAFR5yL+sOwRTkEwNnjQ gsL/718ghIsYP4a6rHyKdprH4kyCC33UvloR0enVzY+IoplhZPDNC7CZwvh2hkll NKMDzaTKPyFzcRA+CciJPmkHfsKcW0f/I9ZUdESsWcFtGdeT/wduBRdlx6XGaamw BfzzdhFZ5h0oHg== -----END CERTIFICATE-----Generated at Sun Dec 14 08:43:34 2025 by rpki-client