This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft File: 28wruvPg1DQqAU-LcPhzzumoysU.mft (raw, json) Hash identifier: JpRfYBtVYDlUcSjUzKFjl+ClunZEpBBbGqs4B9goGKQ= Subject key identifier: 62:FC:4F:61:7A:73:50:22:F9:87:7E:68:77:78:8F:0B:16:03:4C:28 Authority key identifier: DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5 Certificate issuer: /CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5 Certificate serial: 019B397D6603FC0FBC68E557067E5C4EDFD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 02:01:18 +0000 Manifest this update: Sat 20 Dec 2025 02:01:18 +0000 Manifest next update: Sun 21 Dec 2025 02:01:18 +0000 Files and hashes: 1: 28wruvPg1DQqAU-LcPhzzumoysU.crl (hash: gkCEM1XreEtS4oxD5Hj7EYa7fugtmzxSGCAbC7OmIWo=) 2: ZNhnjqldcw87nCml3io59xsOVUM.roa (hash: 0msjn5hZBlC+2WfO0lF8oeX6XpNIJpBSDgBeVQssg6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:66:03:fc:0f:bc:68:e5:57:06:7e:5c:4e:df:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5 Validity Not Before: Dec 20 02:01:18 2025 GMT Not After : Dec 21 02:01:18 2025 GMT Subject: CN=62fc4f617a735022f9877e6877788f0b16034c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f9:75:24:a8:26:f9:aa:8b:0b:c4:e3:fd:90: 1c:46:c2:54:71:18:2c:21:03:c9:38:89:ad:b3:cf: cd:b2:7c:b8:ed:9e:28:0a:e7:90:e0:c8:71:8f:63: ce:cc:87:aa:15:b2:cc:c4:88:7a:6c:4d:6c:a2:ac: bc:44:11:f5:9a:40:d4:27:62:37:dd:5f:84:f0:fd: fe:6e:ba:de:5a:4f:1f:af:60:86:4b:92:8d:c3:4f: f7:5e:36:6b:ed:aa:f9:a0:56:7c:69:06:f8:69:c9: c0:22:0b:7e:c6:75:55:04:ab:83:98:24:1f:c1:fc: 2e:ea:d3:38:d4:69:a9:8b:25:ca:8f:d0:45:c7:b4: c9:54:fa:cf:37:d0:a7:84:4f:2d:eb:af:2e:5b:cf: cc:e2:12:3a:3e:71:62:42:6b:1b:d6:fd:8f:7b:89: b2:c3:bd:07:46:5a:7b:d9:ef:ee:5e:71:8a:da:95: da:e0:f5:78:9e:3d:96:34:1f:4e:13:e4:10:d7:34: db:3e:2d:81:1d:1c:9a:30:75:3d:b8:cd:74:9c:7f: af:e7:d1:41:a1:8a:a4:36:eb:3a:a3:46:b0:7d:e9: 08:cc:42:71:92:19:ba:4b:c7:64:e7:d3:fa:8a:8d: c4:e0:64:7f:eb:d9:fb:ce:9c:4f:cd:f2:18:44:07: c8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:FC:4F:61:7A:73:50:22:F9:87:7E:68:77:78:8F:0B:16:03:4C:28 X509v3 Authority Key Identifier: keyid:DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:0f:83:ab:1c:63:18:6d:a3:ac:95:47:ac:5e:a4:36:27:52: 70:d4:84:49:bb:cd:85:be:7f:9a:ec:f3:a2:2b:d1:51:73:af: b9:b2:79:4a:68:50:26:4a:68:16:7a:5f:fb:2f:d1:f1:26:68: 94:4a:81:23:29:07:fc:42:91:c3:08:c5:8a:bb:99:63:d1:18: 85:71:c4:05:b8:25:bf:6d:89:1b:3c:9f:6b:da:ae:a9:7a:a5: 99:b6:af:2f:56:c9:f0:9b:32:66:d7:18:3a:9f:0b:9b:9b:2c: a1:20:97:4c:ba:bc:a0:a1:d0:be:c8:2b:a1:e8:89:7f:77:b3: 79:16:4a:d9:d0:4c:66:f3:56:f7:82:33:02:6e:81:28:9c:83: 0a:bd:a9:2e:d6:68:e4:36:ab:3d:66:ba:40:dd:a9:a8:3b:d5: a9:da:d6:50:dc:8b:44:72:e9:f1:bf:3e:d2:3e:a6:26:b3:9e: 7a:61:78:b4:f6:cb:be:34:75:59:d3:9d:cd:e7:22:c8:31:cd: 0a:34:58:d0:3b:a9:cd:6f:a7:a8:c6:ee:cf:56:17:d0:54:4c: 26:6c:e1:b7:3e:f5:71:54:88:b9:57:5d:93:bf:87:33:be:6c: 39:9f:d1:29:b5:f6:0b:67:a2:cf:81:50:15:0b:7d:68:d4:dd: f7:42:88:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fWYD/A+8aOVXBn5cTt/SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiY2MyYmJhZjNlMGQ0MzQyYTAxNGY4YjcwZjg3M2NlZTlh OGNhYzUwHhcNMjUxMjIwMDIwMTE4WhcNMjUxMjIxMDIwMTE4WjAzMTEwLwYDVQQD Eyg2MmZjNGY2MTdhNzM1MDIyZjk4NzdlNjg3Nzc4OGYwYjE2MDM0YzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPl1JKgm+aqLC8Tj/ZAcRsJUcRgs IQPJOImts8/Nsny47Z4oCueQ4Mhxj2POzIeqFbLMxIh6bE1soqy8RBH1mkDUJ2I3 3V+E8P3+brreWk8fr2CGS5KNw0/3XjZr7ar5oFZ8aQb4acnAIgt+xnVVBKuDmCQf wfwu6tM41GmpiyXKj9BFx7TJVPrPN9CnhE8t668uW8/M4hI6PnFiQmsb1v2Pe4my w70HRlp72e/uXnGK2pXa4PV4nj2WNB9OE+QQ1zTbPi2BHRyaMHU9uM10nH+v59FB oYqkNus6o0awfekIzEJxkhm6S8dk59P6io3E4GR/69n7zpxPzfIYRAfIDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGL8T2F6c1Ai+Yd+aHd4jwsWA0woMB8GA1UdIwQY MBaAFNvMK7rz4NQ0KgFPi3D4c87pqMrFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjh3cnV2UGcxRFFxQVUtTGNQaHp6dW1veXNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC80MTRlZjQtNGMxZi00MjU2LTg4Yzkt ZjRkNWU4NGFjMWRkLzEvMjh3cnV2UGcxRFFxQVUtTGNQaHp6dW1veXNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC80MTRlZjQtNGMxZi00MjU2LTg4YzktZjRkNWU4NGFjMWRk LzEvMjh3cnV2UGcxRFFxQVUtTGNQaHp6dW1veXNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdQ+Dqxxj GG2jrJVHrF6kNidScNSESbvNhb5/muzzoivRUXOvubJ5SmhQJkpoFnpf+y/R8SZo lEqBIykH/EKRwwjFiruZY9EYhXHEBbglv22JGzyfa9quqXqlmbavL1bJ8JsyZtcY Op8Lm5ssoSCXTLq8oKHQvsgroeiJf3ezeRZK2dBMZvNW94IzAm6BKJyDCr2pLtZo 5DarPWa6QN2pqDvVqdrWUNyLRHLp8b8+0j6mJrOeemF4tPbLvjR1WdOdzeciyDHN CjRY0DupzW+nqMbuz1YX0FRMJmzhtz71cVSIuVddk7+HM75sOZ/RKbX2C2eiz4FQ FQt9aNTd90KI1w== -----END CERTIFICATE-----Generated at Sat Dec 20 09:11:02 2025 by rpki-client