This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft File: 28sc89PzzcNCb7SfCgwz3ATIaBw.mft (raw, json) Hash identifier: s857nCK6d4HQ3VTPsZrlyj+wzke9kS3eOVmYjPXE8S8= Subject key identifier: 74:E4:0E:A7:40:12:CE:0F:CE:46:F9:33:E9:E2:24:E8:A9:0C:59:6A Authority key identifier: DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C Certificate issuer: /CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c Certificate serial: 019B1E3CE4FA93B26B2CE14D159A1C87DD58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft Manifest number: 110E Signing time: Sun 14 Dec 2025 19:01:05 +0000 Manifest this update: Sun 14 Dec 2025 19:01:05 +0000 Manifest next update: Mon 15 Dec 2025 19:01:05 +0000 Files and hashes: 1: 28sc89PzzcNCb7SfCgwz3ATIaBw.crl (hash: B0YCwkR4TmnP9K3QKm6Urc6txdnm+9TIuInAUpyv0XI=) 2: I5ms-9-HDQyJVXC11lx_-uEpynE.roa (hash: +pNOsJjPZEu3zURh4NPSrLLV4Ki6TCXOgrQW5jhS4rs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 19:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:3c:e4:fa:93:b2:6b:2c:e1:4d:15:9a:1c:87:dd:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c Validity Not Before: Dec 14 19:01:05 2025 GMT Not After : Dec 15 19:01:05 2025 GMT Subject: CN=74e40ea74012ce0fce46f933e9e224e8a90c596a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:52:91:f5:9d:21:5c:fc:92:29:5d:84:a1:b1: f4:c2:9a:61:b3:34:56:bc:b3:72:2f:7b:a8:4b:b3: dc:93:3e:9e:96:d7:49:e6:7e:99:93:e3:96:99:66: c3:a5:26:95:14:b4:11:a9:65:47:51:74:78:82:63: 57:ce:2e:8b:bc:f1:a9:9a:8f:0b:78:e3:b2:53:e7: 6f:a2:28:c4:0b:56:5b:d9:8a:7b:a3:af:ea:1e:1d: 1f:93:46:00:b1:f1:d2:ee:bc:82:80:23:5a:be:77: 92:25:6d:3a:e6:d1:07:97:44:a6:c6:2c:fe:a8:64: 8b:87:c0:32:15:01:62:9e:2e:6f:c5:c7:8e:1f:ef: 50:72:2b:91:6d:6f:10:30:d0:1d:aa:ac:5f:ba:3a: d7:0a:16:97:67:81:d3:c3:be:3c:ff:78:50:9a:f2: 9c:78:a9:74:a8:d1:a4:2b:53:32:91:bf:f3:00:b7: b1:cb:09:1d:a0:46:bb:bc:4f:06:42:f7:40:32:fa: 26:f7:cc:f8:4a:84:c5:45:da:1a:a3:c3:ae:ab:0a: cc:33:6b:54:5d:84:02:26:63:f3:62:66:9b:d7:62: de:7d:cc:90:f8:00:fa:12:0b:24:7b:ce:57:4e:cf: fb:4e:c9:79:a0:ab:e6:8b:7a:95:07:a8:f8:5f:8a: 54:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E4:0E:A7:40:12:CE:0F:CE:46:F9:33:E9:E2:24:E8:A9:0C:59:6A X509v3 Authority Key Identifier: keyid:DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:5b:3b:d0:5b:b7:ba:4d:d5:a6:73:0c:8b:64:eb:6a:dc:1b: fb:4e:ee:f9:d7:ef:40:71:a2:7c:94:46:10:84:78:6e:e6:6f: fd:dd:87:2d:bf:ff:26:62:96:a7:bf:52:41:0d:36:a5:8d:f6: a1:12:d9:6c:a2:91:f3:54:1f:84:d7:0e:24:8d:67:04:b4:bb: 3a:56:74:15:74:21:5b:02:cd:67:b5:2f:ed:b8:93:7b:af:11: f7:b4:e2:90:fa:b4:13:61:5d:5c:98:58:b5:ab:b3:f8:3f:86: 79:87:29:38:88:3b:c9:14:19:57:7d:58:4c:75:aa:25:c5:47: 24:e3:0f:3a:80:1b:c2:04:78:15:db:11:26:ca:82:28:32:d0: c6:7f:25:a0:67:1d:6f:bf:fd:20:4e:95:1e:3f:f7:78:96:d9: 8b:ef:a8:f9:48:bf:1f:af:ce:f0:51:60:4b:3d:36:51:a9:e3: 76:6e:e8:84:ab:6d:7f:3f:bc:12:a6:d5:4b:9a:5f:82:f2:6d: af:70:6f:4d:8e:e0:dd:5a:59:ad:4e:4c:fc:f3:53:98:7d:0b: 87:e3:dc:cc:32:8c:13:6b:75:14:f3:57:fd:09:e6:40:f6:27: db:16:ff:c2:8d:43:eb:86:02:c8:4a:e5:f7:28:0a:4c:9b:dd: f9:10:ab:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsePOT6k7JrLOFNFZoch91YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiY2IxY2YzZDNmM2NkYzM0MjZmYjQ5ZjBhMGMzM2RjMDRj ODY4MWMwHhcNMjUxMjE0MTkwMTA1WhcNMjUxMjE1MTkwMTA1WjAzMTEwLwYDVQQD Eyg3NGU0MGVhNzQwMTJjZTBmY2U0NmY5MzNlOWUyMjRlOGE5MGM1OTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlKR9Z0hXPySKV2EobH0wpphszRW vLNyL3uoS7Pckz6eltdJ5n6Zk+OWmWbDpSaVFLQRqWVHUXR4gmNXzi6LvPGpmo8L eOOyU+dvoijEC1Zb2Yp7o6/qHh0fk0YAsfHS7ryCgCNavneSJW065tEHl0Smxiz+ qGSLh8AyFQFini5vxceOH+9QciuRbW8QMNAdqqxfujrXChaXZ4HTw748/3hQmvKc eKl0qNGkK1Mykb/zALexywkdoEa7vE8GQvdAMvom98z4SoTFRdoao8OuqwrMM2tU XYQCJmPzYmab12LefcyQ+AD6Egske85XTs/7Tsl5oKvmi3qVB6j4X4pUXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHTkDqdAEs4Pzkb5M+niJOipDFlqMB8GA1UdIwQY MBaAFNvLHPPT883DQm+0nwoMM9wEyGgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjhzYzg5UHp6Y05DYjdTZkNnd3ozQVRJYUJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9hNDA4ZmItNWM4MC00ZGNhLTg0Mjgt NzM2NjliYTYzZjdjLzEvMjhzYzg5UHp6Y05DYjdTZkNnd3ozQVRJYUJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9hNDA4ZmItNWM4MC00ZGNhLTg0MjgtNzM2NjliYTYzZjdj LzEvMjhzYzg5UHp6Y05DYjdTZkNnd3ozQVRJYUJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiFs70Fu3 uk3VpnMMi2Tratwb+07u+dfvQHGifJRGEIR4buZv/d2HLb//JmKWp79SQQ02pY32 oRLZbKKR81QfhNcOJI1nBLS7OlZ0FXQhWwLNZ7Uv7biTe68R97TikPq0E2FdXJhY tauz+D+GeYcpOIg7yRQZV31YTHWqJcVHJOMPOoAbwgR4FdsRJsqCKDLQxn8loGcd b7/9IE6VHj/3eJbZi++o+Ui/H6/O8FFgSz02Uanjdm7ohKttfz+8EqbVS5pfgvJt r3BvTY7g3VpZrU5M/PNTmH0Lh+PczDKME2t1FPNX/QnmQPYn2xb/wo1D64YCyErl 9ygKTJvd+RCryw== -----END CERTIFICATE-----Generated at Mon Dec 15 04:51:44 2025 by rpki-client