This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft File: rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft (raw, json) Hash identifier: hoSvWWdO8bVtbIGZpd1s8ulaCLiCvDJiZjTN9Skiocg= Subject key identifier: CD:B9:70:34:25:D8:49:ED:87:5F:34:5D:25:FC:A4:8B:C8:E5:F8:55 Authority key identifier: AD:BB:86:DD:76:DD:3C:1F:7B:40:C9:16:3F:75:25:7B:E6:D0:EE:F5 Certificate issuer: /CN=adbb86dd76dd3c1f7b40c9163f75257be6d0eef5 Certificate serial: 019AF2ADA3C2B30163FDB8E851FF00F200A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft Manifest number: 07E3 Signing time: Sat 06 Dec 2025 08:00:56 +0000 Manifest this update: Sat 06 Dec 2025 08:00:56 +0000 Manifest next update: Sun 07 Dec 2025 08:00:56 +0000 Files and hashes: 1: rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl (hash: ynyhbfUK+IuGzf0sxdP/tvGfZNYX1H1GBpOTrddWhqg=) 2: w4hN4EJQ_3vBdUHqQ3XyJaL8bkA.roa (hash: 4EUB26NuRxe0K3o15R6cS+9ryAyEDIc2bJyCFTz2HoA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:a3:c2:b3:01:63:fd:b8:e8:51:ff:00:f2:00:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adbb86dd76dd3c1f7b40c9163f75257be6d0eef5 Validity Not Before: Dec 6 08:00:56 2025 GMT Not After : Dec 7 08:00:56 2025 GMT Subject: CN=cdb9703425d849ed875f345d25fca48bc8e5f855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cf:5b:09:b2:ca:2c:a9:42:4c:74:0b:1a:fc: 66:56:a2:ca:49:c8:df:e3:03:b4:3c:cb:57:61:75: d9:21:5e:02:d8:42:d7:0c:53:0e:60:04:25:7d:1c: 50:78:04:64:d3:a8:ba:8c:e3:5c:da:68:96:d8:ff: d6:1f:c4:76:63:81:01:10:a9:71:5d:08:a4:a8:e2: b8:7b:13:ff:33:5a:1e:34:29:a7:2f:77:85:d7:b4: 64:2d:f9:11:d4:e7:70:f5:f2:31:f6:e0:e3:87:7e: 8d:29:f6:b5:a5:a6:e6:41:60:0a:f8:89:3e:1c:a8: f7:ad:da:ee:12:7c:b9:b8:c0:0e:00:58:63:c5:e0: 50:a1:b7:cb:08:61:26:e6:e1:75:55:8a:58:4d:41: 29:ca:8b:65:c3:07:9a:45:11:18:18:fc:b4:ea:2e: cd:3d:a2:38:e1:8a:6d:e1:6a:c4:ea:1a:1d:4b:5a: 85:ea:ab:25:05:87:84:00:b4:ab:65:3f:9c:20:1b: d1:42:2d:6a:da:02:cd:4b:c4:87:c5:82:d4:fa:cd: 7e:82:02:b6:11:1a:f8:09:a1:ed:42:19:8a:48:f2: dc:6e:1f:e4:dd:01:eb:40:11:14:6d:ac:19:fa:4f: d1:0e:5f:0c:81:0a:72:ac:90:8e:e9:a8:62:5f:85: 1a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B9:70:34:25:D8:49:ED:87:5F:34:5D:25:FC:A4:8B:C8:E5:F8:55 X509v3 Authority Key Identifier: keyid:AD:BB:86:DD:76:DD:3C:1F:7B:40:C9:16:3F:75:25:7B:E6:D0:EE:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:91:cc:90:c8:89:36:16:a2:1d:33:34:3a:30:80:3b:93:ef: e1:af:23:bf:cd:8f:cc:49:11:fc:cc:87:05:67:04:0f:5a:10: 70:37:47:16:61:f6:40:0d:3a:25:46:61:a3:57:50:d8:48:c4: 3d:9f:8e:ce:59:cc:9c:fe:63:44:ad:35:b0:f5:a7:1a:2c:3d: 42:92:cc:e8:c3:c2:a3:c2:3f:58:c9:c0:f8:f9:02:02:07:46: 05:cb:e8:5c:ec:46:4a:14:7d:ab:b6:8b:17:7b:5a:d0:15:75: 65:b4:84:fe:5c:73:46:cc:08:ca:19:f5:c2:6d:74:fd:16:13: 52:9a:64:b8:4b:43:90:68:2b:e6:56:73:4b:1f:90:4e:78:c4: a8:81:0f:07:f8:2d:21:8f:9c:b2:bb:18:b1:1e:ce:df:43:f9: 1c:24:40:2b:68:cf:07:ab:91:36:2e:f6:b9:a2:9a:c0:0b:84: 46:ef:98:d8:d5:06:67:35:48:87:1f:97:5f:17:b7:d6:75:00: 28:a2:b8:60:73:c2:6b:cc:d3:75:06:79:4f:e8:53:3f:73:cc: d4:21:6f:6e:b7:fd:29:44:7f:c7:67:fc:a0:14:9f:bc:7b:d0: f4:81:6e:4b:f1:04:fa:62:96:23:4a:3a:a0:52:ad:2e:37:0b: 7d:94:79:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryraPCswFj/bjoUf8A8gCpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYmI4NmRkNzZkZDNjMWY3YjQwYzkxNjNmNzUyNTdiZTZk MGVlZjUwHhcNMjUxMjA2MDgwMDU2WhcNMjUxMjA3MDgwMDU2WjAzMTEwLwYDVQQD EyhjZGI5NzAzNDI1ZDg0OWVkODc1ZjM0NWQyNWZjYTQ4YmM4ZTVmODU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM9bCbLKLKlCTHQLGvxmVqLKScjf 4wO0PMtXYXXZIV4C2ELXDFMOYAQlfRxQeARk06i6jONc2miW2P/WH8R2Y4EBEKlx XQikqOK4exP/M1oeNCmnL3eF17RkLfkR1Odw9fIx9uDjh36NKfa1pabmQWAK+Ik+ HKj3rdruEny5uMAOAFhjxeBQobfLCGEm5uF1VYpYTUEpyotlwweaRREYGPy06i7N PaI44Ypt4WrE6hodS1qF6qslBYeEALSrZT+cIBvRQi1q2gLNS8SHxYLU+s1+ggK2 ERr4CaHtQhmKSPLcbh/k3QHrQBEUbawZ+k/RDl8MgQpyrJCO6ahiX4UaKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM25cDQl2Enth180XSX8pIvI5fhVMB8GA1UdIwQY MBaAFK27ht123Twfe0DJFj91JXvm0O71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmJ1RzNYYmRQQjk3UU1rV1AzVWxlLWJRN3ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9iZjhkMTMtNzlmMC00M2VhLTgyZDgt OWNjNjk1OWZmM2U5LzEvcmJ1RzNYYmRQQjk3UU1rV1AzVWxlLWJRN3ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9iZjhkMTMtNzlmMC00M2VhLTgyZDgtOWNjNjk1OWZmM2U5 LzEvcmJ1RzNYYmRQQjk3UU1rV1AzVWxlLWJRN3ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaZHMkMiJ NhaiHTM0OjCAO5Pv4a8jv82PzEkR/MyHBWcED1oQcDdHFmH2QA06JUZho1dQ2EjE PZ+OzlnMnP5jRK01sPWnGiw9QpLM6MPCo8I/WMnA+PkCAgdGBcvoXOxGShR9q7aL F3ta0BV1ZbSE/lxzRswIyhn1wm10/RYTUppkuEtDkGgr5lZzSx+QTnjEqIEPB/gt IY+csrsYsR7O30P5HCRAK2jPB6uRNi72uaKawAuERu+Y2NUGZzVIhx+XXxe31nUA KKK4YHPCa8zTdQZ5T+hTP3PM1CFvbrf9KUR/x2f8oBSfvHvQ9IFuS/EE+mKWI0o6 oFKtLjcLfZR5cQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:16:42 2025 by rpki-client