This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft File: 28eECSDRxwn_KZrtNoLCP7Qydn0.mft (raw, json) Hash identifier: 5VekCaT92J+eelViNfob/4X5UMU0B5yc+IRIK1uEssA= Subject key identifier: FD:C4:74:63:39:B1:DC:39:53:59:9A:87:7C:2A:A8:4C:98:AC:3F:2C Authority key identifier: DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D Certificate issuer: /CN=dbc7840920d1c709ff299aed3682c23fb432767d Certificate serial: 019AF1D243022A23F89898361E6B87738A71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft Manifest number: 13AF Signing time: Sat 06 Dec 2025 04:01:20 +0000 Manifest this update: Sat 06 Dec 2025 04:01:20 +0000 Manifest next update: Sun 07 Dec 2025 04:01:20 +0000 Files and hashes: 1: 28eECSDRxwn_KZrtNoLCP7Qydn0.crl (hash: sVGHQUThloq4TSqdXe2Ow1UkxopAyfpRqrJeRPpUn+Q=) 2: e_UFXyqaeTvL3E6lukMB0WgwTVE.roa (hash: OXE+evWhqp6U3n1wOYbBBjgTwYv/71GDxDwJtwclFB8=) 3: lZ-AOq7_6QtP_M2_NSdFkS5kWDw.roa (hash: QIlc9W3HH3Xuxs2UHApl1aj37iKKZQTLV1xjUXcHjZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:43:02:2a:23:f8:98:98:36:1e:6b:87:73:8a:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbc7840920d1c709ff299aed3682c23fb432767d Validity Not Before: Dec 6 04:01:20 2025 GMT Not After : Dec 7 04:01:20 2025 GMT Subject: CN=fdc4746339b1dc3953599a877c2aa84c98ac3f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:99:3d:d1:51:b7:09:b8:0f:be:c4:72:0d:48: 92:d5:10:2e:b6:bd:c6:ae:2c:34:c4:82:c4:fc:4d: 18:6a:cd:42:02:a4:ee:20:da:65:a8:bd:13:b9:21: 96:de:a1:85:2c:8d:5d:3d:cb:f1:71:0c:f0:87:02: 62:64:f8:a6:41:70:d1:39:64:ae:70:d0:ef:8e:e7: ca:f8:20:46:0a:21:b0:ff:0c:01:55:4f:31:a1:5c: eb:37:a6:ae:fa:17:ff:8c:76:6e:27:69:5f:58:85: 6b:ed:3f:8f:83:63:79:97:cc:25:d6:45:64:1a:62: 9f:8a:f5:17:a4:a0:a4:40:6a:37:86:72:d0:4e:03: 55:34:07:da:fd:aa:b6:02:1c:46:4a:00:3f:97:0f: 77:5e:7b:56:30:b1:a8:66:0c:b1:e8:d8:60:0d:64: 5f:1d:4d:05:70:71:3c:d8:8a:8c:d3:fd:44:5f:d8: c9:4b:5a:72:d3:05:f7:42:c6:81:60:9e:41:0c:1e: 11:39:d1:e9:22:57:30:ef:b8:02:16:ea:28:4c:7d: ed:11:32:7a:c6:61:bb:a7:5b:91:08:be:50:b9:58: 6d:4b:e3:a8:cc:0d:d3:51:c9:65:8a:76:2a:8d:a1: b6:24:1f:fd:a3:5b:d4:fb:4e:00:bc:32:0c:8d:9c: 47:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C4:74:63:39:B1:DC:39:53:59:9A:87:7C:2A:A8:4C:98:AC:3F:2C X509v3 Authority Key Identifier: keyid:DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:72:4c:c7:47:b7:a1:fb:bb:b3:fa:99:67:96:25:42:2f:7e: 06:29:56:87:0b:8a:d0:f0:3e:72:ee:8f:37:c3:17:e9:f2:6e: 2e:4f:4f:20:74:02:91:f2:87:89:7a:35:b5:74:8b:7d:64:4d: 2c:42:be:28:e1:45:31:d8:0f:65:2b:9f:70:44:c4:79:3d:fa: 4d:63:73:b8:c3:b9:5b:f4:0d:50:7e:bb:f1:b0:9d:e6:bb:48: b4:47:3c:f9:49:2f:5e:2b:df:77:ed:f6:83:96:ae:38:0a:cc: df:1c:bf:6f:46:08:4c:7b:c2:71:97:b2:cf:4b:03:63:08:b2: 38:ec:ec:8f:27:4b:b6:e2:8a:5f:12:ac:74:db:10:71:46:f1: dd:0a:2c:7c:cc:f7:2a:fb:62:fd:9f:84:9c:d8:a3:6c:37:2f: b8:29:1b:a5:ad:b9:84:cd:41:97:c2:ea:3b:48:c3:49:0f:98: f8:87:52:8a:9c:72:64:7e:ef:01:2b:3d:cd:24:bf:cd:01:1c: 25:26:43:b4:41:d5:51:9b:c6:97:c0:ba:9a:55:73:66:d3:bd: 7e:b7:41:6b:14:1f:4d:5b:c7:ea:00:8f:46:92:69:4d:a8:db: 52:0e:69:0e:a8:49:5e:66:1d:3f:dd:9a:3c:dd:7f:92:c0:43: 2f:9b:d6:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0kMCKiP4mJg2HmuHc4pxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiYzc4NDA5MjBkMWM3MDlmZjI5OWFlZDM2ODJjMjNmYjQz Mjc2N2QwHhcNMjUxMjA2MDQwMTIwWhcNMjUxMjA3MDQwMTIwWjAzMTEwLwYDVQQD EyhmZGM0NzQ2MzM5YjFkYzM5NTM1OTlhODc3YzJhYTg0Yzk4YWMzZjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5k90VG3CbgPvsRyDUiS1RAutr3G riw0xILE/E0Yas1CAqTuINplqL0TuSGW3qGFLI1dPcvxcQzwhwJiZPimQXDROWSu cNDvjufK+CBGCiGw/wwBVU8xoVzrN6au+hf/jHZuJ2lfWIVr7T+Pg2N5l8wl1kVk GmKfivUXpKCkQGo3hnLQTgNVNAfa/aq2AhxGSgA/lw93XntWMLGoZgyx6NhgDWRf HU0FcHE82IqM0/1EX9jJS1py0wX3QsaBYJ5BDB4ROdHpIlcw77gCFuooTH3tETJ6 xmG7p1uRCL5QuVhtS+OozA3TUcllinYqjaG2JB/9o1vU+04AvDIMjZxHawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP3EdGM5sdw5U1mah3wqqEyYrD8sMB8GA1UdIwQY MBaAFNvHhAkg0ccJ/yma7TaCwj+0MnZ9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjhlRUNTRFJ4d25fS1pydE5vTENQN1F5ZG4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC85NTIxZTEtNzYxMC00ZDQzLTg2ODMt NTFiZTJmOTYwOGJjLzEvMjhlRUNTRFJ4d25fS1pydE5vTENQN1F5ZG4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC85NTIxZTEtNzYxMC00ZDQzLTg2ODMtNTFiZTJmOTYwOGJj LzEvMjhlRUNTRFJ4d25fS1pydE5vTENQN1F5ZG4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdHJMx0e3 ofu7s/qZZ5YlQi9+BilWhwuK0PA+cu6PN8MX6fJuLk9PIHQCkfKHiXo1tXSLfWRN LEK+KOFFMdgPZSufcETEeT36TWNzuMO5W/QNUH678bCd5rtItEc8+UkvXivfd+32 g5auOArM3xy/b0YITHvCcZeyz0sDYwiyOOzsjydLtuKKXxKsdNsQcUbx3QosfMz3 Kvti/Z+EnNijbDcvuCkbpa25hM1Bl8LqO0jDSQ+Y+IdSipxyZH7vASs9zSS/zQEc JSZDtEHVUZvGl8C6mlVzZtO9frdBaxQfTVvH6gCPRpJpTajbUg5pDqhJXmYdP92a PN1/ksBDL5vWFg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:35:17 2025 by rpki-client