This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft File: RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft (raw, json) Hash identifier: zWocw+kOuJSB9ByLnw4LFPqmj135zqy6eo3eEfT+JSM= Subject key identifier: F8:E4:08:D9:09:49:8D:34:56:C9:02:11:E3:F8:5A:A4:F2:0B:9D:91 Authority key identifier: 44:10:D2:8A:92:74:F9:DF:10:65:B7:F6:2F:8B:89:97:73:9C:04:7D Certificate issuer: /CN=4410d28a9274f9df1065b7f62f8b8997739c047d Certificate serial: 019AF2AE03FE0B8F18B1A86484603F5AC0CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBDSipJ0-d8QZbf2L4uJl3OcBH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft Manifest number: 04D1 Signing time: Sat 06 Dec 2025 08:01:21 +0000 Manifest this update: Sat 06 Dec 2025 08:01:21 +0000 Manifest next update: Sun 07 Dec 2025 08:01:21 +0000 Files and hashes: 1: RBDSipJ0-d8QZbf2L4uJl3OcBH0.crl (hash: ev+8+qpSMpkLycsTkLWVGdDITS4sjJlPgWz6veRDhis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft rsync://rpki.ripe.net/repository/DEFAULT/RBDSipJ0-d8QZbf2L4uJl3OcBH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ae:03:fe:0b:8f:18:b1:a8:64:84:60:3f:5a:c0:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4410d28a9274f9df1065b7f62f8b8997739c047d Validity Not Before: Dec 6 08:01:21 2025 GMT Not After : Dec 7 08:01:21 2025 GMT Subject: CN=f8e408d909498d3456c90211e3f85aa4f20b9d91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b5:af:36:f9:4c:32:4b:90:e0:82:8e:a2:0b: fa:da:2f:62:81:1b:33:12:dc:c0:81:19:c4:1c:a6: 25:31:74:3e:58:61:cc:f4:ad:ff:a3:25:66:18:58: da:2a:10:33:8f:f1:a3:2c:d8:55:f9:90:a2:22:b0: fe:16:3c:ec:a3:68:49:e9:26:d3:2f:2d:75:d5:1e: 39:9c:2a:1c:f1:13:f5:46:09:ff:b3:d9:53:cd:c7: 81:2b:9e:b1:dc:2e:5f:15:95:03:bf:bc:3f:bb:ac: 5d:9f:f1:77:c5:9b:12:55:45:6e:0d:f4:8b:f2:a9: 72:7b:aa:8e:68:99:ad:e4:99:96:71:09:6e:d2:50: b8:23:8a:5b:23:ad:61:d2:74:5a:69:4b:b1:3c:03: a4:3d:99:37:61:54:cd:d6:b9:ba:9f:7c:26:1b:96: 74:27:9d:cf:a1:65:41:87:99:23:9d:fd:04:ea:1b: 62:6d:9f:53:13:42:29:2b:25:f7:aa:4f:d3:34:1d: 78:96:1d:45:d4:ac:17:a1:62:03:f3:e7:fa:ef:0d: 3d:34:b9:51:75:df:64:1a:2d:20:78:2f:2d:bd:28: 62:b9:c6:ca:df:db:fc:e3:ba:d4:7e:d8:36:0a:22: 89:f4:5d:d3:99:2a:1c:39:c9:f9:a3:b1:cd:1b:51: 9c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E4:08:D9:09:49:8D:34:56:C9:02:11:E3:F8:5A:A4:F2:0B:9D:91 X509v3 Authority Key Identifier: keyid:44:10:D2:8A:92:74:F9:DF:10:65:B7:F6:2F:8B:89:97:73:9C:04:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBDSipJ0-d8QZbf2L4uJl3OcBH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:88:42:00:d6:2b:9a:ca:53:b9:56:0d:f8:c5:d9:7d:ae:8b: f8:04:8a:ee:ed:00:37:61:11:ee:79:59:85:e7:7a:6d:68:6f: 84:e6:24:71:87:c4:9b:f0:7c:2e:6e:84:9e:9c:df:95:c5:16: dd:a1:71:fc:aa:71:11:a8:de:98:f7:7f:64:b3:f7:16:e4:14: 68:d1:ae:36:6f:48:9f:20:a0:2b:5b:b1:2f:1c:9e:29:91:60: fa:60:8b:93:da:64:12:f2:15:a1:02:be:ba:a5:e1:d5:02:32: 00:e2:09:de:b3:74:b1:5f:48:e6:f5:c3:04:7e:f9:e3:40:6e: 9e:dd:b8:c4:f9:66:7f:a5:03:04:7b:df:c4:4d:9c:8d:0f:5d: 30:90:5b:1f:cf:2d:ca:1f:71:cd:8d:6d:ac:bc:08:d0:57:26: c1:e0:4f:d3:ae:ec:e0:47:18:bc:d8:aa:dd:39:54:e3:3f:d3: d8:b3:2a:04:26:a4:c3:35:cc:c8:fb:1d:04:37:ce:6d:67:f8: d2:ce:ce:a4:90:9d:0b:1b:a0:78:03:56:cb:94:af:93:37:57: 69:bc:6e:ff:95:d4:b0:94:f1:66:b4:d1:3d:dc:bf:0b:bd:39: 16:90:04:6c:6d:8d:4b:4c:b1:7c:aa:13:15:98:c0:09:77:4e: 8b:da:74:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrgP+C48YsahkhGA/WsDNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0MTBkMjhhOTI3NGY5ZGYxMDY1YjdmNjJmOGI4OTk3NzM5 YzA0N2QwHhcNMjUxMjA2MDgwMTIxWhcNMjUxMjA3MDgwMTIxWjAzMTEwLwYDVQQD EyhmOGU0MDhkOTA5NDk4ZDM0NTZjOTAyMTFlM2Y4NWFhNGYyMGI5ZDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rWvNvlMMkuQ4IKOogv62i9igRsz EtzAgRnEHKYlMXQ+WGHM9K3/oyVmGFjaKhAzj/GjLNhV+ZCiIrD+Fjzso2hJ6SbT Ly111R45nCoc8RP1Rgn/s9lTzceBK56x3C5fFZUDv7w/u6xdn/F3xZsSVUVuDfSL 8qlye6qOaJmt5JmWcQlu0lC4I4pbI61h0nRaaUuxPAOkPZk3YVTN1rm6n3wmG5Z0 J53PoWVBh5kjnf0E6htibZ9TE0IpKyX3qk/TNB14lh1F1KwXoWID8+f67w09NLlR dd9kGi0geC8tvShiucbK39v847rUftg2CiKJ9F3TmSocOcn5o7HNG1GcUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPjkCNkJSY00VskCEeP4WqTyC52RMB8GA1UdIwQY MBaAFEQQ0oqSdPnfEGW39i+LiZdznAR9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkJEU2lwSjAtZDhRWmJmMkw0dUpsM09jQkgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8zM2FhMmYtYzQwOS00YzcwLWFlMGUt OTA3ODM4YjU3MjVmLzEvUkJEU2lwSjAtZDhRWmJmMkw0dUpsM09jQkgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi8zM2FhMmYtYzQwOS00YzcwLWFlMGUtOTA3ODM4YjU3MjVm LzEvUkJEU2lwSjAtZDhRWmJmMkw0dUpsM09jQkgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD4hCANYr mspTuVYN+MXZfa6L+ASK7u0AN2ER7nlZhed6bWhvhOYkcYfEm/B8Lm6EnpzflcUW 3aFx/KpxEajemPd/ZLP3FuQUaNGuNm9InyCgK1uxLxyeKZFg+mCLk9pkEvIVoQK+ uqXh1QIyAOIJ3rN0sV9I5vXDBH7540Bunt24xPlmf6UDBHvfxE2cjQ9dMJBbH88t yh9xzY1trLwI0FcmweBP067s4EcYvNiq3TlU4z/T2LMqBCakwzXMyPsdBDfObWf4 0s7OpJCdCxugeANWy5SvkzdXabxu/5XUsJTxZrTRPdy/C705FpAEbG2NS0yxfKoT FZjACXdOi9p0Zg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:47:02 2025 by rpki-client