This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft File: rbNlrPb5GEmXB92hPwM-LNYRAwg.mft (raw, json) Hash identifier: p9iq7nr4lvidJ7eCNgQxLAVEtAyeCRsV1PIUfAihf6g= Subject key identifier: 26:C4:DC:45:63:BC:B8:EA:8B:80:C6:AF:31:D6:97:D3:42:07:D0:65 Authority key identifier: AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08 Certificate issuer: /CN=adb365acf6f918499707dda13f033e2cd6110308 Certificate serial: 019AF12D51F78A461E60E5E7B85C1586E782 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 01:01:10 +0000 Manifest this update: Sat 06 Dec 2025 01:01:10 +0000 Manifest next update: Sun 07 Dec 2025 01:01:10 +0000 Files and hashes: 1: rbNlrPb5GEmXB92hPwM-LNYRAwg.crl (hash: BC7H74MMqYOfzk/XhhIfFl9+Om20ZPecYPi3quUuzjI=) 2: zexQv7MMnSMTcRcSk7PaXdu5bh4.roa (hash: VAN/TauThH6QEZkrRALg6rnqCv24/be16q83SWwAfVw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:51:f7:8a:46:1e:60:e5:e7:b8:5c:15:86:e7:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adb365acf6f918499707dda13f033e2cd6110308 Validity Not Before: Dec 6 01:01:10 2025 GMT Not After : Dec 7 01:01:10 2025 GMT Subject: CN=26c4dc4563bcb8ea8b80c6af31d697d34207d065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9e:df:63:66:56:91:a6:3c:f8:38:b0:08:10: 4d:d7:cb:30:5c:90:23:64:d0:77:da:d2:07:c5:6d: 4d:06:2e:5f:41:5e:2b:0b:ae:83:34:01:2a:c8:8e: 3e:46:5b:77:c6:6f:d1:a2:0a:b0:7c:16:d4:d3:8a: 83:21:26:fc:5a:06:01:ae:8d:36:fd:74:78:54:20: 71:eb:7a:57:37:8c:d0:7a:46:41:e1:aa:38:1d:13: a0:ce:f8:c7:04:a0:13:2e:8c:6c:75:b3:6d:49:4b: fc:73:bd:70:db:dd:3a:0c:df:df:c5:b2:f5:f2:d9: 27:c6:26:c7:f5:a6:a2:55:86:06:9d:5c:a2:ad:1c: d1:73:6a:f3:45:05:00:91:a6:66:28:e6:fa:36:c7: 29:ce:3d:ed:4f:6d:e8:04:9e:8c:84:39:85:b4:0f: 6e:67:2c:58:02:8d:7d:62:28:ce:ed:aa:9f:6a:94: 7f:1b:a7:ce:c6:14:3b:65:68:a2:90:e8:f8:37:93: 5e:17:00:07:95:ee:02:a3:e9:70:cb:e0:09:81:00: 85:5e:81:07:21:89:90:72:38:d1:c6:64:94:33:fb: 4a:a2:c7:10:77:c0:dc:0a:6c:37:f7:6c:80:6c:09: 6f:7f:f8:53:a8:4f:be:ec:b4:25:94:28:e9:1b:09: 68:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:C4:DC:45:63:BC:B8:EA:8B:80:C6:AF:31:D6:97:D3:42:07:D0:65 X509v3 Authority Key Identifier: keyid:AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:b1:19:4d:d7:40:42:45:30:e3:0b:31:5d:cb:69:3c:1e:1b: cc:f8:3b:97:59:93:3a:a4:07:23:24:99:60:df:ea:54:aa:31: fd:e1:55:df:b3:25:f5:97:42:ca:e8:dc:36:14:c5:80:d9:f9: 74:c1:54:8c:6c:df:4e:86:5e:96:eb:47:2a:45:0a:9b:71:77: 8b:6b:22:8b:86:d5:58:91:1b:1c:0e:b3:08:0f:81:bc:e3:b1: 9f:6d:3f:4e:fd:28:d8:80:3d:09:73:3e:af:4c:92:cb:2b:d9: ba:23:b7:4a:9a:6e:a7:72:97:0c:d1:a7:9c:00:8e:fb:8e:c3: aa:25:15:d2:a5:d9:54:af:40:a1:44:c6:a7:7d:8c:18:cf:64: 9e:34:95:04:47:92:af:32:54:75:b2:5b:2d:26:57:a1:00:e4: 94:de:64:52:0b:c9:d5:8f:4d:da:26:ae:7c:9a:a0:22:02:d8: 9c:c1:fc:c2:40:df:fa:d2:ab:08:83:0c:64:7a:f8:c3:ef:de: 52:83:c7:9d:2a:ae:74:3b:0d:fd:07:c8:1a:45:7e:5f:d8:28: 92:c1:ea:90:a2:c5:fc:eb:14:6e:58:04:4a:d2:a9:e4:e7:b1: 12:e2:67:3b:a1:11:39:24:c2:e7:87:f7:00:49:96:c4:d9:fe: 71:9f:c4:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLVH3ikYeYOXnuFwVhueCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYjM2NWFjZjZmOTE4NDk5NzA3ZGRhMTNmMDMzZTJjZDYx MTAzMDgwHhcNMjUxMjA2MDEwMTEwWhcNMjUxMjA3MDEwMTEwWjAzMTEwLwYDVQQD EygyNmM0ZGM0NTYzYmNiOGVhOGI4MGM2YWYzMWQ2OTdkMzQyMDdkMDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3J7fY2ZWkaY8+DiwCBBN18swXJAj ZNB32tIHxW1NBi5fQV4rC66DNAEqyI4+Rlt3xm/RogqwfBbU04qDISb8WgYBro02 /XR4VCBx63pXN4zQekZB4ao4HROgzvjHBKATLoxsdbNtSUv8c71w2906DN/fxbL1 8tknxibH9aaiVYYGnVyirRzRc2rzRQUAkaZmKOb6Nscpzj3tT23oBJ6MhDmFtA9u ZyxYAo19YijO7aqfapR/G6fOxhQ7ZWiikOj4N5NeFwAHle4Co+lwy+AJgQCFXoEH IYmQcjjRxmSUM/tKoscQd8DcCmw392yAbAlvf/hTqE++7LQllCjpGwlo4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCbE3EVjvLjqi4DGrzHWl9NCB9BlMB8GA1UdIwQY MBaAFK2zZaz2+RhJlwfdoT8DPizWEQMIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmJObHJQYjVHRW1YQjkyaFB3TS1MTllSQXdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hNjgzODctODYxYS00YjkzLWEzZmMt YWRhZGQ2Mjk1ODIyLzEvcmJObHJQYjVHRW1YQjkyaFB3TS1MTllSQXdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9hNjgzODctODYxYS00YjkzLWEzZmMtYWRhZGQ2Mjk1ODIy LzEvcmJObHJQYjVHRW1YQjkyaFB3TS1MTllSQXdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUbEZTddA QkUw4wsxXctpPB4bzPg7l1mTOqQHIySZYN/qVKox/eFV37Ml9ZdCyujcNhTFgNn5 dMFUjGzfToZelutHKkUKm3F3i2sii4bVWJEbHA6zCA+BvOOxn20/Tv0o2IA9CXM+ r0ySyyvZuiO3Sppup3KXDNGnnACO+47DqiUV0qXZVK9AoUTGp32MGM9knjSVBEeS rzJUdbJbLSZXoQDklN5kUgvJ1Y9N2iaufJqgIgLYnMH8wkDf+tKrCIMMZHr4w+/e UoPHnSqudDsN/QfIGkV+X9goksHqkKLF/OsUblgEStKp5OexEuJnO6EROSTC54f3 AEmWxNn+cZ/EvQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:08:46 2025 by rpki-client