This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f237fc-4421-45fd-ad48-fc27e4fd26e8/1/rbxC2eQutyb4mwpU4tK2dclLx_Q.mft File: rbxC2eQutyb4mwpU4tK2dclLx_Q.mft (raw, json) Hash identifier: eg69tNRQBdxS940NykwEK4UUq4N1CxZgnNA168UaAtI= Subject key identifier: 32:35:74:B4:5A:F9:54:29:33:31:C9:8F:98:DB:EC:AD:11:18:7A:34 Authority key identifier: AD:BC:42:D9:E4:2E:B7:26:F8:9B:0A:54:E2:D2:B6:75:C9:4B:C7:F4 Certificate issuer: /CN=adbc42d9e42eb726f89b0a54e2d2b675c94bc7f4 Certificate serial: 019AF3F7B6004BC1D567FE773DB9C4AFF637 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbxC2eQutyb4mwpU4tK2dclLx_Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f237fc-4421-45fd-ad48-fc27e4fd26e8/1/rbxC2eQutyb4mwpU4tK2dclLx_Q.mft Manifest number: 0117 Signing time: Sat 06 Dec 2025 14:01:28 +0000 Manifest this update: Sat 06 Dec 2025 14:01:28 +0000 Manifest next update: Sun 07 Dec 2025 14:01:28 +0000 Files and hashes: 1: rbxC2eQutyb4mwpU4tK2dclLx_Q.crl (hash: 88OnDlfaEUiHm/8tWzwzqp7EV+M6sfi4DKTlp/X84Rs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f237fc-4421-45fd-ad48-fc27e4fd26e8/1/rbxC2eQutyb4mwpU4tK2dclLx_Q.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/f237fc-4421-45fd-ad48-fc27e4fd26e8/1/rbxC2eQutyb4mwpU4tK2dclLx_Q.mft rsync://rpki.ripe.net/repository/DEFAULT/rbxC2eQutyb4mwpU4tK2dclLx_Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:b6:00:4b:c1:d5:67:fe:77:3d:b9:c4:af:f6:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adbc42d9e42eb726f89b0a54e2d2b675c94bc7f4 Validity Not Before: Dec 6 14:01:28 2025 GMT Not After : Dec 7 14:01:28 2025 GMT Subject: CN=323574b45af954293331c98f98dbecad11187a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d6:d9:15:1f:be:a0:cd:02:8f:cf:e8:80:41: b9:0f:ed:a2:9a:95:1a:b8:66:d0:33:af:3c:5d:66: 7a:ae:ad:2b:e7:df:9e:b4:9b:67:a2:95:32:1d:48: ed:58:15:1d:2d:6f:44:db:a1:75:b0:d2:2c:9f:99: 75:47:c8:01:3f:3c:93:79:05:0d:54:5b:7e:e2:4d: 7d:c5:4b:fa:c0:62:d2:cf:1f:3a:16:81:f2:18:ff: fb:b0:19:01:b7:66:90:17:b7:36:34:0e:a9:54:75: 1c:a6:cf:d8:3c:bf:77:97:51:d8:12:f9:95:34:75: a2:b4:5c:4a:17:49:13:11:bc:52:3b:80:e1:de:16: 5d:16:21:af:09:91:ee:6e:aa:74:d5:54:f6:5f:2b: 3a:b5:3d:44:b6:75:49:23:1f:8a:9e:fe:23:a7:0d: 29:e8:38:86:68:af:9a:0e:ea:e9:56:59:04:58:bf: 27:1e:21:41:f3:09:0f:61:17:70:41:73:9f:35:a9: 8e:e5:81:95:10:54:c9:bf:45:e3:4e:f8:24:35:84: cb:1c:82:a3:57:29:97:23:da:75:07:ca:20:60:17: 02:a4:45:24:f5:a5:4a:92:a9:af:ab:f2:25:23:08: af:4a:f7:b7:b6:5c:ce:27:b0:54:0a:be:18:13:e7: 5b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:35:74:B4:5A:F9:54:29:33:31:C9:8F:98:DB:EC:AD:11:18:7A:34 X509v3 Authority Key Identifier: keyid:AD:BC:42:D9:E4:2E:B7:26:F8:9B:0A:54:E2:D2:B6:75:C9:4B:C7:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbxC2eQutyb4mwpU4tK2dclLx_Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f237fc-4421-45fd-ad48-fc27e4fd26e8/1/rbxC2eQutyb4mwpU4tK2dclLx_Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f237fc-4421-45fd-ad48-fc27e4fd26e8/1/rbxC2eQutyb4mwpU4tK2dclLx_Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:92:5d:07:82:2b:b4:98:39:66:a7:58:8b:e7:c5:ef:bd:03: e6:c2:25:d8:77:f7:ad:31:73:15:b3:7f:b5:74:a7:9c:f0:04: 23:e2:0c:af:a2:f5:a3:18:03:36:84:95:b3:38:87:bf:9f:3f: 8d:0e:1f:6d:ba:d1:ef:e3:ab:74:88:f2:93:89:53:ce:68:22: c3:e1:a8:cc:07:51:a5:40:db:8d:02:f4:85:56:70:0c:8b:4d: 43:c7:64:dc:14:ef:cb:36:9e:c0:0b:17:1e:0c:aa:a1:e5:4c: 5e:af:70:d4:8f:f8:c1:c2:4c:32:da:c1:3d:0f:76:9b:15:bb: 59:51:8d:ed:d9:b4:63:32:14:48:e0:c4:19:43:78:d6:ed:d1: a8:99:ed:8f:2d:b0:03:b0:e8:5c:eb:3d:85:26:bc:96:1b:28: 19:88:35:16:9c:8f:91:f7:9c:eb:6f:c5:c8:5d:b0:46:77:70: f8:61:81:76:42:d7:f3:fa:49:ee:4e:eb:c9:b0:d6:b6:6d:d2: 69:7b:74:80:01:10:eb:f0:8b:87:8d:f3:68:3d:37:fa:c8:cb: 09:fd:90:2f:0f:40:e1:53:63:3b:be:f8:d0:89:67:11:0b:e7: ec:24:df:3b:83:27:58:33:0e:a1:19:3b:da:3a:48:95:39:33: 56:37:c5:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz97YAS8HVZ/53PbnEr/Y3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYmM0MmQ5ZTQyZWI3MjZmODliMGE1NGUyZDJiNjc1Yzk0 YmM3ZjQwHhcNMjUxMjA2MTQwMTI4WhcNMjUxMjA3MTQwMTI4WjAzMTEwLwYDVQQD EygzMjM1NzRiNDVhZjk1NDI5MzMzMWM5OGY5OGRiZWNhZDExMTg3YTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNbZFR++oM0Cj8/ogEG5D+2impUa uGbQM688XWZ6rq0r59+etJtnopUyHUjtWBUdLW9E26F1sNIsn5l1R8gBPzyTeQUN VFt+4k19xUv6wGLSzx86FoHyGP/7sBkBt2aQF7c2NA6pVHUcps/YPL93l1HYEvmV NHWitFxKF0kTEbxSO4Dh3hZdFiGvCZHubqp01VT2Xys6tT1EtnVJIx+Knv4jpw0p 6DiGaK+aDurpVlkEWL8nHiFB8wkPYRdwQXOfNamO5YGVEFTJv0XjTvgkNYTLHIKj VymXI9p1B8ogYBcCpEUk9aVKkqmvq/IlIwivSve3tlzOJ7BUCr4YE+dbywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDI1dLRa+VQpMzHJj5jb7K0RGHo0MB8GA1UdIwQY MBaAFK28QtnkLrcm+JsKVOLStnXJS8f0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmJ4QzJlUXV0eWI0bXdwVTR0SzJkY2xMeF9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9mMjM3ZmMtNDQyMS00NWZkLWFkNDgt ZmMyN2U0ZmQyNmU4LzEvcmJ4QzJlUXV0eWI0bXdwVTR0SzJkY2xMeF9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9mMjM3ZmMtNDQyMS00NWZkLWFkNDgtZmMyN2U0ZmQyNmU4 LzEvcmJ4QzJlUXV0eWI0bXdwVTR0SzJkY2xMeF9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKpJdB4Ir tJg5ZqdYi+fF770D5sIl2Hf3rTFzFbN/tXSnnPAEI+IMr6L1oxgDNoSVsziHv58/ jQ4fbbrR7+OrdIjyk4lTzmgiw+GozAdRpUDbjQL0hVZwDItNQ8dk3BTvyzaewAsX HgyqoeVMXq9w1I/4wcJMMtrBPQ92mxW7WVGN7dm0YzIUSODEGUN41u3RqJntjy2w A7DoXOs9hSa8lhsoGYg1FpyPkfec62/FyF2wRndw+GGBdkLX8/pJ7k7rybDWtm3S aXt0gAEQ6/CLh43zaD03+sjLCf2QLw9A4VNjO7740IlnEQvn7CTfO4MnWDMOoRk7 2jpIlTkzVjfFWA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:41:05 2025 by rpki-client