This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft File: rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft (raw, json) Hash identifier: 4WtyYK9ZtSTgZRSAOdCr+BAf5X5ajaUUmbaARQvQrF8= Subject key identifier: 36:BD:1D:07:49:F9:D6:4A:07:0F:52:BD:F6:50:07:AC:CD:6A:A8:C3 Authority key identifier: AD:BC:5F:77:21:A4:AC:CB:96:35:DE:17:5B:BC:6D:31:E1:7C:9A:8D Certificate issuer: /CN=adbc5f7721a4accb9635de175bbc6d31e17c9a8d Certificate serial: 019AF2AD82837E74315360F4A41BE25E790D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft Manifest number: 0E8A Signing time: Sat 06 Dec 2025 08:00:48 +0000 Manifest this update: Sat 06 Dec 2025 08:00:48 +0000 Manifest next update: Sun 07 Dec 2025 08:00:48 +0000 Files and hashes: 1: CDUJExHuCJVPUownDG0KoC95j6g.roa (hash: ec1LWrgiCmmzqFwlIQnZ7qEB99QoLDe3mTnBITPZ9Fo=) 2: rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl (hash: NXTtg5zpxKv2Qibzhn4h62NfGM1Mt7XncYt7lAxWlGk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:82:83:7e:74:31:53:60:f4:a4:1b:e2:5e:79:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adbc5f7721a4accb9635de175bbc6d31e17c9a8d Validity Not Before: Dec 6 08:00:48 2025 GMT Not After : Dec 7 08:00:48 2025 GMT Subject: CN=36bd1d0749f9d64a070f52bdf65007accd6aa8c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:24:8e:cd:8b:20:1c:f4:83:3f:b7:7d:a1:fd: 95:a8:fc:22:8c:8d:28:6b:1c:f3:0c:4f:7e:de:66: 2a:5d:a8:b7:cf:76:84:07:c7:8d:b5:fa:06:43:02: 74:ce:8c:cd:f3:cb:39:fb:83:94:ac:d4:a2:b3:0c: b3:75:4b:70:c6:15:9e:b1:43:c4:b0:da:6f:78:73: c8:41:7b:b5:14:47:2c:d7:f2:6a:9e:ac:3f:8b:ff: 48:2f:7a:4d:5f:f8:7f:69:b1:4e:47:88:e5:54:c6: b1:41:9d:34:a8:c0:86:74:01:f3:c7:dc:f6:43:1e: 0d:8b:12:e5:5c:46:2e:b8:26:64:40:0c:5e:44:1b: 8a:af:c6:c6:be:1a:b4:37:4a:fe:c2:a5:50:e5:f6: 92:64:77:03:e2:02:49:3e:69:0b:56:e9:e0:80:bb: 3e:8c:d0:f2:be:87:6e:f7:a6:e1:2d:0f:71:ec:46: 8e:2a:38:0c:db:5f:ce:e0:99:00:6e:01:33:2e:79: 6a:ef:cd:d5:f4:01:68:64:42:42:1a:57:8f:00:e0: 1b:30:a3:c2:7f:ea:72:3b:6e:0c:cd:bd:c8:7c:c6: 00:29:51:b4:30:da:ef:5c:c4:1a:9e:7d:eb:36:ce: 9e:fe:34:40:76:83:48:09:fa:4f:af:9d:3b:0c:d1: ef:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:BD:1D:07:49:F9:D6:4A:07:0F:52:BD:F6:50:07:AC:CD:6A:A8:C3 X509v3 Authority Key Identifier: keyid:AD:BC:5F:77:21:A4:AC:CB:96:35:DE:17:5B:BC:6D:31:E1:7C:9A:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:f7:71:ae:1b:23:e0:05:8b:f5:a1:64:7e:82:27:dc:b3:7e: 37:be:a4:88:d9:5f:74:3b:17:47:c1:b0:0e:2d:a4:77:86:86: 75:e1:2e:49:83:5b:89:6e:f5:8a:c6:31:ce:d5:2e:85:f9:b9: 6b:a2:8b:80:16:2e:5e:a7:ee:8e:cc:66:a3:ec:47:72:94:a0: ea:b5:f0:99:0e:f4:8a:48:b5:96:b6:5f:c6:84:51:27:1b:b9: 97:b3:15:3d:e1:47:2b:75:2b:83:a3:bc:5a:e5:b6:43:4a:14: ad:60:33:81:3c:36:f4:9d:a2:42:f9:df:eb:36:3a:56:bb:10: a7:4f:66:57:1c:43:6f:08:25:38:c8:f3:7d:bd:09:2d:87:a8: b7:f6:18:b9:98:5d:56:25:a1:67:22:25:d5:bf:b9:3c:77:89: a6:98:fa:a0:a4:c6:4e:5d:b1:78:99:c8:91:e6:d3:ad:15:e2: e4:5b:a5:6f:06:8a:19:91:1c:c7:a2:80:a3:78:4e:c3:7b:53: 55:40:f7:ca:e3:5f:bd:4b:36:e7:b3:67:11:f9:9a:9d:1d:0d: ba:92:d6:08:d4:5f:86:01:69:d5:1d:a4:09:25:e5:f3:91:ae: 9d:6d:5e:c7:c2:f7:08:59:3a:2d:75:86:07:48:b9:77:f9:93: ef:74:db:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrYKDfnQxU2D0pBviXnkNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYmM1Zjc3MjFhNGFjY2I5NjM1ZGUxNzViYmM2ZDMxZTE3 YzlhOGQwHhcNMjUxMjA2MDgwMDQ4WhcNMjUxMjA3MDgwMDQ4WjAzMTEwLwYDVQQD EygzNmJkMWQwNzQ5ZjlkNjRhMDcwZjUyYmRmNjUwMDdhY2NkNmFhOGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSSOzYsgHPSDP7d9of2VqPwijI0o axzzDE9+3mYqXai3z3aEB8eNtfoGQwJ0zozN88s5+4OUrNSiswyzdUtwxhWesUPE sNpveHPIQXu1FEcs1/Jqnqw/i/9IL3pNX/h/abFOR4jlVMaxQZ00qMCGdAHzx9z2 Qx4NixLlXEYuuCZkQAxeRBuKr8bGvhq0N0r+wqVQ5faSZHcD4gJJPmkLVunggLs+ jNDyvodu96bhLQ9x7EaOKjgM21/O4JkAbgEzLnlq783V9AFoZEJCGlePAOAbMKPC f+pyO24Mzb3IfMYAKVG0MNrvXMQann3rNs6e/jRAdoNICfpPr507DNHvxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDa9HQdJ+dZKBw9SvfZQB6zNaqjDMB8GA1UdIwQY MBaAFK28X3chpKzLljXeF1u8bTHhfJqNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmJ4ZmR5R2tyTXVXTmQ0WFc3eHRNZUY4bW8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9kMDIxZjktYTAwMS00NTJiLWE1ZWUt YWJiZjFmMDc4YWQzLzEvcmJ4ZmR5R2tyTXVXTmQ0WFc3eHRNZUY4bW8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9kMDIxZjktYTAwMS00NTJiLWE1ZWUtYWJiZjFmMDc4YWQz LzEvcmJ4ZmR5R2tyTXVXTmQ0WFc3eHRNZUY4bW8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp/dxrhsj 4AWL9aFkfoIn3LN+N76kiNlfdDsXR8GwDi2kd4aGdeEuSYNbiW71isYxztUuhfm5 a6KLgBYuXqfujsxmo+xHcpSg6rXwmQ70iki1lrZfxoRRJxu5l7MVPeFHK3Urg6O8 WuW2Q0oUrWAzgTw29J2iQvnf6zY6VrsQp09mVxxDbwglOMjzfb0JLYeot/YYuZhd ViWhZyIl1b+5PHeJppj6oKTGTl2xeJnIkebTrRXi5FulbwaKGZEcx6KAo3hOw3tT VUD3yuNfvUs257NnEfmanR0NupLWCNRfhgFp1R2kCSXl85GunW1ex8L3CFk6LXWG B0i5d/mT73TbQQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:04:56 2025 by rpki-client