This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft File: 28wruvPg1DQqAU-LcPhzzumoysU.mft (raw, json) Hash identifier: M2kQH5+GF5lCDMECg/SECr0Cj9urJyOMgmVrXpCtL2k= Subject key identifier: A6:60:DB:B2:C2:77:F5:F3:61:69:C8:06:59:D6:2E:25:D5:61:B7:0C Authority key identifier: DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5 Certificate issuer: /CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5 Certificate serial: 019B1A97740ED34851B9BD33F57101EBE177 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft Manifest number: 1776 Signing time: Sun 14 Dec 2025 02:01:31 +0000 Manifest this update: Sun 14 Dec 2025 02:01:31 +0000 Manifest next update: Mon 15 Dec 2025 02:01:31 +0000 Files and hashes: 1: 28wruvPg1DQqAU-LcPhzzumoysU.crl (hash: dAkYeeGICvG40CIoDESwDi0LlvoSP08OpVuVGrsvLwc=) 2: ZNhnjqldcw87nCml3io59xsOVUM.roa (hash: 0msjn5hZBlC+2WfO0lF8oeX6XpNIJpBSDgBeVQssg6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:97:74:0e:d3:48:51:b9:bd:33:f5:71:01:eb:e1:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5 Validity Not Before: Dec 14 02:01:31 2025 GMT Not After : Dec 15 02:01:31 2025 GMT Subject: CN=a660dbb2c277f5f36169c80659d62e25d561b70c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3d:81:b9:d0:cb:a2:b4:23:1a:08:e9:8b:b1: 45:c6:e5:60:78:9e:9c:87:d7:45:d2:84:6b:a3:d4: 7a:41:be:28:e5:60:f9:5b:db:d7:78:6a:ee:e4:c3: b3:ce:1b:51:a1:e0:95:82:50:12:fb:d6:cb:ba:23: 6e:ed:ff:e9:67:bb:2f:07:73:67:91:c1:65:29:19: d6:df:d7:e1:98:49:47:c1:5a:85:d3:9d:9d:ab:8c: ea:48:f0:82:1b:7e:31:10:1a:94:c8:a3:9c:53:39: af:0e:bd:01:fc:5f:1b:18:50:34:f7:a0:69:2b:0c: c6:81:9f:0a:e7:7f:73:76:2c:11:16:d7:4c:54:11: dc:49:59:ce:83:20:3b:3b:a4:0f:41:d0:c6:47:b5: 7e:26:d3:0f:4f:1f:79:06:b0:e4:7b:dc:2c:cc:7b: ec:e5:f0:54:93:eb:f3:4d:27:84:26:97:5c:84:4b: 35:b7:04:46:fd:fc:60:e7:51:eb:7d:44:8e:c5:1b: 6c:cc:d9:ec:57:f1:8c:17:31:fb:7b:1e:a6:68:e3: 06:99:b6:d5:aa:0a:ca:b9:cd:37:9b:a8:d1:08:52: ac:bd:b7:6f:c1:bf:8a:d9:12:8d:30:3e:fe:7c:e8: 81:f6:2a:b8:ee:91:99:ef:44:7b:b6:dc:76:dd:55: bc:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:60:DB:B2:C2:77:F5:F3:61:69:C8:06:59:D6:2E:25:D5:61:B7:0C X509v3 Authority Key Identifier: keyid:DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:f1:7c:5a:38:00:44:55:9b:31:ee:27:fa:8a:9c:21:90:4d: 59:2c:70:1a:2c:35:20:f4:7c:fd:ab:5e:ac:72:a1:2c:a4:20: 0c:0c:44:05:27:45:63:17:c4:77:1b:6b:dc:ec:8d:1a:32:80: d2:e1:52:b6:7e:af:f4:54:8c:44:a2:22:92:c1:ad:a0:59:c9: 01:01:e6:73:79:8c:a7:f5:76:05:f6:13:0c:27:ce:23:a1:2a: 43:a6:60:29:0f:0f:af:bb:7a:0f:25:84:73:72:a1:50:86:85: f9:94:58:bd:83:fa:d2:84:20:e5:1c:7c:aa:e3:80:9b:c8:ec: f9:ff:6c:dc:86:6f:02:97:5a:45:e4:6f:0a:3a:5f:4c:c8:53: a1:ca:6c:1b:42:fc:df:a3:0e:37:98:80:8d:69:fb:89:7d:9f: 1f:29:ca:55:34:9f:eb:fa:c4:ab:a5:ae:76:36:9f:a8:5c:54: 95:aa:c6:aa:22:f9:b4:07:e1:58:f0:27:74:d7:7e:43:ad:05: 10:98:cd:55:c6:80:ab:ff:01:98:b0:cb:fd:70:f3:80:06:e7: 0f:95:9d:38:fc:d1:45:bc:2d:b8:8b:78:c1:12:ae:82:8a:9d: 3f:c8:4e:8e:44:e3:05:d1:7c:96:43:15:cd:02:0b:d0:3c:a1: 77:1e:29:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsal3QO00hRub0z9XEB6+F3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiY2MyYmJhZjNlMGQ0MzQyYTAxNGY4YjcwZjg3M2NlZTlh OGNhYzUwHhcNMjUxMjE0MDIwMTMxWhcNMjUxMjE1MDIwMTMxWjAzMTEwLwYDVQQD EyhhNjYwZGJiMmMyNzdmNWYzNjE2OWM4MDY1OWQ2MmUyNWQ1NjFiNzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz2BudDLorQjGgjpi7FFxuVgeJ6c h9dF0oRro9R6Qb4o5WD5W9vXeGru5MOzzhtRoeCVglAS+9bLuiNu7f/pZ7svB3Nn kcFlKRnW39fhmElHwVqF052dq4zqSPCCG34xEBqUyKOcUzmvDr0B/F8bGFA096Bp KwzGgZ8K539zdiwRFtdMVBHcSVnOgyA7O6QPQdDGR7V+JtMPTx95BrDke9wszHvs 5fBUk+vzTSeEJpdchEs1twRG/fxg51HrfUSOxRtszNnsV/GMFzH7ex6maOMGmbbV qgrKuc03m6jRCFKsvbdvwb+K2RKNMD7+fOiB9iq47pGZ70R7ttx23VW8owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZg27LCd/XzYWnIBlnWLiXVYbcMMB8GA1UdIwQY MBaAFNvMK7rz4NQ0KgFPi3D4c87pqMrFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjh3cnV2UGcxRFFxQVUtTGNQaHp6dW1veXNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC80MTRlZjQtNGMxZi00MjU2LTg4Yzkt ZjRkNWU4NGFjMWRkLzEvMjh3cnV2UGcxRFFxQVUtTGNQaHp6dW1veXNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC80MTRlZjQtNGMxZi00MjU2LTg4YzktZjRkNWU4NGFjMWRk LzEvMjh3cnV2UGcxRFFxQVUtTGNQaHp6dW1veXNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALPF8WjgA RFWbMe4n+oqcIZBNWSxwGiw1IPR8/aterHKhLKQgDAxEBSdFYxfEdxtr3OyNGjKA 0uFStn6v9FSMRKIiksGtoFnJAQHmc3mMp/V2BfYTDCfOI6EqQ6ZgKQ8Pr7t6DyWE c3KhUIaF+ZRYvYP60oQg5Rx8quOAm8js+f9s3IZvApdaReRvCjpfTMhTocpsG0L8 36MON5iAjWn7iX2fHynKVTSf6/rEq6WudjafqFxUlarGqiL5tAfhWPAndNd+Q60F EJjNVcaAq/8BmLDL/XDzgAbnD5WdOPzRRbwtuIt4wRKugoqdP8hOjkTjBdF8lkMV zQIL0Dyhdx4pHw== -----END CERTIFICATE-----Generated at Sun Dec 14 11:50:59 2025 by rpki-client