This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft File: 28FEzhVO7p27NWLOTNMigzhkEzM.mft (raw, json) Hash identifier: yrfUwhsrOXPuSLF5cslmvJKrq/Nb3OzdJj4wkmfr85k= Subject key identifier: 48:02:1E:51:37:45:1B:9E:69:80:89:11:DB:AB:D0:F1:4E:24:DB:17 Authority key identifier: DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33 Certificate issuer: /CN=dbc144ce154eee9dbb3562ce4cd3228338641333 Certificate serial: 019AF57802D11665B7A99AF24C131444FCE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft Manifest number: 174E Signing time: Sat 06 Dec 2025 21:01:14 +0000 Manifest this update: Sat 06 Dec 2025 21:01:14 +0000 Manifest next update: Sun 07 Dec 2025 21:01:14 +0000 Files and hashes: 1: 28FEzhVO7p27NWLOTNMigzhkEzM.crl (hash: VDN3Kp22JZiJSjhH2GoexWVJB7efMHO3IemHKj/sPWQ=) 2: GYQEfAUHW7dZgctfSOEiK9IcuBg.roa (hash: Km85w7FHDGWwEv7yzqhkKLXi+TpyoQCcyxITiEoHCDY=) 3: VK2lkpPJSWNvcFm_VI7rxrLDgwg.roa (hash: OVrxxsaCYNK3a6LSw5LlCrrYQ6BsGkALeDXQ/cBmiLI=) 4: neolYGdLKpBXHmNej6CjSGJo33s.roa (hash: rdeL6tzNKDLvJGPaZiOq6jxc0q10y5ECjhYex4TDkLo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:02:d1:16:65:b7:a9:9a:f2:4c:13:14:44:fc:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbc144ce154eee9dbb3562ce4cd3228338641333 Validity Not Before: Dec 6 21:01:14 2025 GMT Not After : Dec 7 21:01:14 2025 GMT Subject: CN=48021e5137451b9e69808911dbabd0f14e24db17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2d:17:b5:38:b5:c3:c2:78:da:c9:2d:f9:6e: 47:c0:03:c4:cf:31:ac:cf:33:eb:83:39:f1:02:47: 17:51:e5:60:5c:94:3a:80:57:78:a3:7d:ad:44:c6: 28:54:98:af:b6:c5:36:cc:70:00:2a:e1:43:78:7d: 14:e0:a5:fb:e8:44:c4:20:60:ca:da:0e:72:5b:6b: bc:10:80:be:57:29:95:63:9e:0e:49:98:bd:a5:24: e6:58:42:6c:8a:08:1c:7f:81:ad:2d:4a:f6:ea:90: e3:fb:e6:dd:15:94:31:fb:06:cf:55:df:bc:8a:e0: 8e:db:9f:ee:e9:09:d6:10:0d:83:e2:06:46:44:ab: a4:cc:43:63:92:1d:01:b9:a1:3b:99:3c:e9:90:9d: af:4e:72:46:99:9a:12:5c:b2:b5:c0:dd:6b:47:54: 4c:59:c9:17:47:de:8d:0c:1e:e0:40:79:44:6b:2b: 8a:24:1f:36:0a:72:e2:b2:a2:0a:fc:78:73:75:4c: e7:16:f0:2c:55:0e:4f:39:4c:6e:99:45:c3:f5:a1: 6e:af:db:4b:08:19:7c:10:4c:af:c3:8b:0c:8f:4f: 1f:72:1b:02:d0:03:ff:0c:44:da:98:bf:3c:65:89: 26:56:ba:74:3a:1d:80:47:44:e7:15:12:3d:00:ce: b6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:02:1E:51:37:45:1B:9E:69:80:89:11:DB:AB:D0:F1:4E:24:DB:17 X509v3 Authority Key Identifier: keyid:DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:1a:02:fc:0d:5a:27:93:2b:bc:95:6b:3e:35:4a:c9:a8:90: 6d:a7:24:7b:f3:36:ec:33:f3:d0:5c:95:c3:fb:ee:ca:b6:09: c0:3a:ef:d5:ce:b3:c3:18:bd:a2:66:a1:c7:bd:a2:47:86:e8: c4:39:25:d3:0f:3d:9a:68:b6:e9:0e:8d:e2:e0:56:b8:34:eb: a9:c2:23:db:88:b6:7b:26:09:75:07:f9:b2:00:29:fb:4f:3d: cf:f3:d2:f5:db:3e:7c:e4:19:99:3f:ac:a8:28:ec:b0:dc:db: 9f:cc:c9:d4:18:4a:e2:a2:7f:f3:53:2b:c7:c8:20:9f:c9:71: 6f:85:b8:dd:6e:fe:4f:14:43:71:0f:88:b7:86:07:7c:d6:66: e2:3e:72:3e:da:6b:be:5b:b1:e5:64:c6:81:89:0b:f9:ac:a4: 96:8f:12:4f:35:d2:35:c6:9c:16:fd:18:3f:3f:c6:9d:0f:24: 77:0b:77:aa:c0:ed:15:01:96:0f:0d:22:e6:3f:95:b3:81:06: ad:fa:43:0f:8c:80:aa:39:6a:33:38:3d:18:db:4f:be:33:80: b0:51:ec:57:2a:41:1e:ee:69:6f:11:b3:8b:58:d4:8c:34:99: ca:cb:64:d0:16:65:8a:69:92:32:be:70:c9:51:08:e2:94:47: 55:42:2a:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eALRFmW3qZryTBMURPzgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiYzE0NGNlMTU0ZWVlOWRiYjM1NjJjZTRjZDMyMjgzMzg2 NDEzMzMwHhcNMjUxMjA2MjEwMTE0WhcNMjUxMjA3MjEwMTE0WjAzMTEwLwYDVQQD Eyg0ODAyMWU1MTM3NDUxYjllNjk4MDg5MTFkYmFiZDBmMTRlMjRkYjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxS0XtTi1w8J42skt+W5HwAPEzzGs zzPrgznxAkcXUeVgXJQ6gFd4o32tRMYoVJivtsU2zHAAKuFDeH0U4KX76ETEIGDK 2g5yW2u8EIC+VymVY54OSZi9pSTmWEJsiggcf4GtLUr26pDj++bdFZQx+wbPVd+8 iuCO25/u6QnWEA2D4gZGRKukzENjkh0BuaE7mTzpkJ2vTnJGmZoSXLK1wN1rR1RM WckXR96NDB7gQHlEayuKJB82CnLisqIK/HhzdUznFvAsVQ5POUxumUXD9aFur9tL CBl8EEyvw4sMj08fchsC0AP/DETamL88ZYkmVrp0Oh2AR0TnFRI9AM621wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEgCHlE3RRueaYCJEdur0PFOJNsXMB8GA1UdIwQY MBaAFNvBRM4VTu6duzVizkzTIoM4ZBMzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjhGRXpoVk83cDI3TldMT1ROTWlnemhrRXpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9hMjJjZmEtMDFmMy00ZjEyLWI2ZmQt NDg5NGY4OGJlZGRjLzEvMjhGRXpoVk83cDI3TldMT1ROTWlnemhrRXpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9hMjJjZmEtMDFmMy00ZjEyLWI2ZmQtNDg5NGY4OGJlZGRj LzEvMjhGRXpoVk83cDI3TldMT1ROTWlnemhrRXpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqhoC/A1a J5MrvJVrPjVKyaiQbacke/M27DPz0FyVw/vuyrYJwDrv1c6zwxi9omahx72iR4bo xDkl0w89mmi26Q6N4uBWuDTrqcIj24i2eyYJdQf5sgAp+089z/PS9ds+fOQZmT+s qCjssNzbn8zJ1BhK4qJ/81Mrx8ggn8lxb4W43W7+TxRDcQ+It4YHfNZm4j5yPtpr vlux5WTGgYkL+ayklo8STzXSNcacFv0YPz/GnQ8kdwt3qsDtFQGWDw0i5j+Vs4EG rfpDD4yAqjlqMzg9GNtPvjOAsFHsVypBHu5pbxGzi1jUjDSZystk0BZlimmSMr5w yVEI4pRHVUIqKA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:17:29 2025 by rpki-client