This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft File: 28rKr4rBOpZKs9Rhk1hByOHJO4A.mft (raw, json) Hash identifier: pcX+imUWSkz+C4E/6/yOucC8OwPPhqQHbB5b2DlsjtM= Subject key identifier: 6F:11:54:83:36:7E:FB:48:A1:4B:36:13:87:E3:4C:0D:DF:F4:C8:48 Authority key identifier: DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80 Certificate issuer: /CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80 Certificate serial: 019B2364D0239391DDD1CEA07B80969D6201 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft Manifest number: 177C Signing time: Mon 15 Dec 2025 19:02:47 +0000 Manifest this update: Mon 15 Dec 2025 19:02:47 +0000 Manifest next update: Tue 16 Dec 2025 19:02:47 +0000 Files and hashes: 1: 28rKr4rBOpZKs9Rhk1hByOHJO4A.crl (hash: TAUJckybNISaUG+tw9VtxWHPv4KggrEpp1mhI2gpTbA=) 2: UxM6DupfvrTiE9Ym5QgQzISnMNk.roa (hash: RfjYqd31h9TXarIc1kWDtlc68P4m+jSBxb+HHdHsfRc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:64:d0:23:93:91:dd:d1:ce:a0:7b:80:96:9d:62:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80 Validity Not Before: Dec 15 19:02:47 2025 GMT Not After : Dec 16 19:02:47 2025 GMT Subject: CN=6f115483367efb48a14b361387e34c0ddff4c848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:00:d4:14:4a:00:7c:c0:d0:f8:6b:80:10:be: ad:9d:91:0f:5a:cd:37:cb:d8:03:e0:f2:67:b7:a3: 1d:d7:a4:1e:ee:ef:74:06:a2:ed:42:c7:31:bf:79: 88:92:b9:04:2c:0e:0e:9b:a7:2b:f1:3a:63:bc:a1: 6b:b1:da:52:c4:3c:1b:56:23:14:e1:2f:66:8d:c1: dd:2c:c0:5a:1b:2d:7e:73:9a:7e:59:93:80:23:8e: 1a:b0:39:ea:a2:76:49:ba:7d:7b:81:6b:cf:b3:81: e9:65:89:1a:df:74:da:88:68:3d:75:70:bb:50:c3: 5b:ba:28:88:ce:68:a9:cf:0b:9d:55:87:a1:7a:eb: bd:57:33:40:38:f9:56:c1:ad:ac:5c:36:07:e1:c3: d8:f6:5f:e1:67:66:85:55:3d:c5:a4:98:b8:bf:70: c5:70:61:9e:77:ce:05:63:42:5c:a7:a0:ad:74:2d: d3:ea:3a:3e:4d:41:f7:03:38:c8:ef:2f:b1:5a:fd: 7b:72:1d:a6:e6:5d:f6:3c:ba:c9:da:17:e9:15:b3: 18:39:15:81:4f:35:99:fb:80:58:9c:bd:94:93:0d: a0:bd:7b:54:82:34:29:cf:a5:5a:17:d4:b8:a5:46: d5:8c:0d:28:0c:e0:45:ae:ae:94:80:50:e9:a5:98: 85:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:11:54:83:36:7E:FB:48:A1:4B:36:13:87:E3:4C:0D:DF:F4:C8:48 X509v3 Authority Key Identifier: keyid:DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:bd:94:f0:69:27:91:15:75:20:1b:ca:fd:af:e5:8d:f0:ea: 75:e3:b9:d6:68:57:1e:56:e9:14:b7:a0:55:f8:42:12:6a:eb: d6:5b:ca:3c:76:92:79:10:48:c0:0a:45:7c:45:d9:4d:60:c4: 75:95:8c:1a:79:cb:95:8f:a0:7d:85:70:81:6b:7d:46:17:32: cc:87:55:16:5f:a3:d5:58:7c:b3:26:68:c9:51:ee:b9:99:af: 95:4e:c5:5f:11:f5:40:ce:3e:3b:a0:c7:be:37:8b:8e:87:df: 01:d3:09:f8:5c:54:03:34:85:85:ad:3c:8e:45:16:9a:9f:2e: b2:6d:2d:ed:ea:ba:15:6d:ed:16:00:d6:6e:b2:be:cd:a0:06: 3b:80:ed:6b:83:7a:ea:cb:39:83:0d:35:73:9a:65:b4:6a:b9: b8:ac:d4:b5:b4:f6:aa:2c:f9:46:cc:17:50:a4:b3:0e:e9:27: 68:e3:d6:d4:3d:4e:53:b0:1a:a9:59:13:d7:64:03:14:b4:81: a3:58:eb:03:43:ea:7b:22:14:0e:98:ed:a1:96:07:2e:b7:cd: e1:a5:b9:1e:d0:5f:c2:90:e0:4a:d3:d5:1f:1d:d2:08:8c:f1: 63:5c:b5:df:c6:73:07:1b:11:b9:77:63:30:d7:be:30:b6:f0: 95:5e:3e:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjZNAjk5Hd0c6ge4CWnWIBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiY2FjYWFmOGFjMTNhOTY0YWIzZDQ2MTkzNTg0MWM4ZTFj OTNiODAwHhcNMjUxMjE1MTkwMjQ3WhcNMjUxMjE2MTkwMjQ3WjAzMTEwLwYDVQQD Eyg2ZjExNTQ4MzM2N2VmYjQ4YTE0YjM2MTM4N2UzNGMwZGRmZjRjODQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvADUFEoAfMDQ+GuAEL6tnZEPWs03 y9gD4PJnt6Md16Qe7u90BqLtQscxv3mIkrkELA4Om6cr8TpjvKFrsdpSxDwbViMU 4S9mjcHdLMBaGy1+c5p+WZOAI44asDnqonZJun17gWvPs4HpZYka33TaiGg9dXC7 UMNbuiiIzmipzwudVYeheuu9VzNAOPlWwa2sXDYH4cPY9l/hZ2aFVT3FpJi4v3DF cGGed84FY0Jcp6CtdC3T6jo+TUH3AzjI7y+xWv17ch2m5l32PLrJ2hfpFbMYORWB TzWZ+4BYnL2Ukw2gvXtUgjQpz6VaF9S4pUbVjA0oDOBFrq6UgFDppZiFywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG8RVIM2fvtIoUs2E4fjTA3f9MhIMB8GA1UdIwQY MBaAFNvKyq+KwTqWSrPUYZNYQcjhyTuAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjhyS3I0ckJPcFpLczlSaGsxaEJ5T0hKTzRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy81NzM3YjAtYmIyNC00ZTkyLWIxOWQt NWU2NWM3ZDYxYjllLzEvMjhyS3I0ckJPcFpLczlSaGsxaEJ5T0hKTzRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy81NzM3YjAtYmIyNC00ZTkyLWIxOWQtNWU2NWM3ZDYxYjll LzEvMjhyS3I0ckJPcFpLczlSaGsxaEJ5T0hKTzRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKL2U8Gkn kRV1IBvK/a/ljfDqdeO51mhXHlbpFLegVfhCEmrr1lvKPHaSeRBIwApFfEXZTWDE dZWMGnnLlY+gfYVwgWt9RhcyzIdVFl+j1Vh8syZoyVHuuZmvlU7FXxH1QM4+O6DH vjeLjoffAdMJ+FxUAzSFha08jkUWmp8usm0t7eq6FW3tFgDWbrK+zaAGO4Dta4N6 6ss5gw01c5pltGq5uKzUtbT2qiz5RswXUKSzDuknaOPW1D1OU7AaqVkT12QDFLSB o1jrA0PqeyIUDpjtoZYHLrfN4aW5HtBfwpDgStPVHx3SCIzxY1y138ZzBxsRuXdj MNe+MLbwlV4+zA== -----END CERTIFICATE-----Generated at Mon Dec 15 21:51:13 2025 by rpki-client