This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft File: 28L_akYQUNSPP9sLUThxVLXWzQ4.mft (raw, json) Hash identifier: ioJY+QNYZbCozwFZS7UPSal2EDofbyjOqCOaXVt3QFc= Subject key identifier: 64:84:04:81:3E:20:D7:59:C8:E8:7A:AA:7E:39:44:5D:B0:EE:1D:6C Authority key identifier: DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E Certificate issuer: /CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e Certificate serial: 019AF0BF6B57D77D7715E498ED3B953615D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft Manifest number: 1634 Signing time: Fri 05 Dec 2025 23:01:07 +0000 Manifest this update: Fri 05 Dec 2025 23:01:07 +0000 Manifest next update: Sat 06 Dec 2025 23:01:07 +0000 Files and hashes: 1: 28L_akYQUNSPP9sLUThxVLXWzQ4.crl (hash: NMWAKwPiYXI2LDGzTVqrHwUixwbcXXtwhav3cmr4/w0=) 2: T3Ru90D-BjnOYASJ0pSS8ZwD4JU.roa (hash: kFL7hemcmIQ9FqEJFvwP/YJ8WsXzPFKUwSwoKc7Tbgc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:6b:57:d7:7d:77:15:e4:98:ed:3b:95:36:15:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e Validity Not Before: Dec 5 23:01:07 2025 GMT Not After : Dec 6 23:01:07 2025 GMT Subject: CN=648404813e20d759c8e87aaa7e39445db0ee1d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:15:14:28:5e:e4:d0:69:10:7e:79:26:9b:15: 1b:83:ff:77:dd:c1:a2:4e:76:90:db:04:7a:e6:68: 42:07:bc:97:34:7e:8b:44:25:80:be:bb:f1:55:1f: 80:fb:2c:9a:a9:b2:60:b7:c6:b7:eb:b1:40:e2:14: a5:14:40:e2:22:ec:cb:7c:0f:7b:a1:01:f9:a4:28: 47:64:67:a3:bd:03:dd:3b:3d:55:7a:aa:90:cd:df: 14:bb:e5:ab:2f:cf:1b:26:ae:95:f2:1a:c8:5d:e4: 84:e4:98:47:4c:60:3d:37:53:29:a4:f1:44:c2:57: 6d:c1:b1:8d:bf:a6:c9:7a:fe:c7:4b:b6:8f:37:6a: 45:46:de:fa:32:56:a2:9d:78:77:cf:e5:fb:15:9c: 40:82:e1:68:63:c4:53:9d:24:2a:83:28:67:92:87: 9b:d5:9b:84:a2:cb:af:71:1f:e0:9a:2b:dd:a7:53: a1:86:a2:7f:3f:29:f1:43:8b:0d:eb:95:d2:eb:94: 47:9d:d2:6d:56:79:8b:96:2c:cf:1e:c1:3b:f4:3a: 30:22:72:57:d2:ec:4b:6a:a5:21:0a:13:01:9a:fd: 4f:0e:54:72:9c:6c:6c:ca:e2:b9:6a:9f:d5:d2:4d: 3a:b0:26:d9:8f:f0:5f:2f:fb:63:73:20:cd:4b:91: 07:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:84:04:81:3E:20:D7:59:C8:E8:7A:AA:7E:39:44:5D:B0:EE:1D:6C X509v3 Authority Key Identifier: keyid:DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:42:6d:57:4f:ab:38:4b:2b:13:3a:f0:6e:f2:58:b5:f3:0e: 5a:63:79:94:d3:6e:7f:cc:59:b7:8c:a5:1e:8c:a0:09:d6:e6: 9e:e4:64:33:a8:10:74:4e:b9:67:56:40:9f:57:c5:5d:82:19: 0d:97:ee:78:d6:cc:3c:7d:f3:1f:ef:1a:9b:3d:9c:4c:96:89: 50:44:6f:5f:05:e5:8a:f6:52:c3:1f:8d:87:8d:5a:f9:01:63: d5:1e:6c:e3:5e:f0:ed:70:c8:06:6c:a3:7f:5c:e0:22:a7:7f: b2:94:25:41:0f:57:61:a5:59:c4:bb:0f:4b:fc:97:ec:db:3d: b7:7a:22:e3:82:ca:62:29:e6:bb:86:0a:2e:6b:a4:e0:83:65: 19:6f:96:b1:a9:68:e1:d7:9f:4d:dd:d4:0b:91:93:51:fd:05: 5b:04:1b:f5:f8:b1:26:bb:5b:63:b1:19:92:86:f5:29:ee:81: 3c:12:bb:c7:3e:b3:1c:48:38:cf:0c:34:33:73:25:c3:31:7d: 09:9d:e0:de:9c:24:44:53:9b:64:43:50:20:d4:f9:98:a5:31: 2d:f5:a4:5b:aa:a9:8b:a5:3f:7f:17:af:ae:5d:3a:41:ea:03: 02:22:96:ee:56:7e:b8:0e:d9:94:2c:85:4f:13:57:b2:38:c3: 7a:44:ab:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv2tX1313FeSY7TuVNhXZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiYzJmZjZhNDYxMDUwZDQ4ZjNmZGIwYjUxMzg3MTU0YjVk NmNkMGUwHhcNMjUxMjA1MjMwMTA3WhcNMjUxMjA2MjMwMTA3WjAzMTEwLwYDVQQD Eyg2NDg0MDQ4MTNlMjBkNzU5YzhlODdhYWE3ZTM5NDQ1ZGIwZWUxZDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhUUKF7k0GkQfnkmmxUbg/933cGi TnaQ2wR65mhCB7yXNH6LRCWAvrvxVR+A+yyaqbJgt8a367FA4hSlFEDiIuzLfA97 oQH5pChHZGejvQPdOz1VeqqQzd8Uu+WrL88bJq6V8hrIXeSE5JhHTGA9N1MppPFE wldtwbGNv6bJev7HS7aPN2pFRt76MlainXh3z+X7FZxAguFoY8RTnSQqgyhnkoeb 1ZuEosuvcR/gmivdp1OhhqJ/PynxQ4sN65XS65RHndJtVnmLlizPHsE79DowInJX 0uxLaqUhChMBmv1PDlRynGxsyuK5ap/V0k06sCbZj/BfL/tjcyDNS5EHywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGSEBIE+INdZyOh6qn45RF2w7h1sMB8GA1UdIwQY MBaAFNvC/2pGEFDUjz/bC1E4cVS11s0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjhMX2FrWVFVTlNQUDlzTFVUaHhWTFhXelE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84MzRmOWQtNTViNy00NTViLTk2YmIt OWNjY2I3ZWYzYjViLzEvMjhMX2FrWVFVTlNQUDlzTFVUaHhWTFhXelE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi84MzRmOWQtNTViNy00NTViLTk2YmItOWNjY2I3ZWYzYjVi LzEvMjhMX2FrWVFVTlNQUDlzTFVUaHhWTFhXelE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOkJtV0+r OEsrEzrwbvJYtfMOWmN5lNNuf8xZt4ylHoygCdbmnuRkM6gQdE65Z1ZAn1fFXYIZ DZfueNbMPH3zH+8amz2cTJaJUERvXwXlivZSwx+Nh41a+QFj1R5s417w7XDIBmyj f1zgIqd/spQlQQ9XYaVZxLsPS/yX7Ns9t3oi44LKYinmu4YKLmuk4INlGW+Wsalo 4defTd3UC5GTUf0FWwQb9fixJrtbY7EZkob1Ke6BPBK7xz6zHEg4zww0M3MlwzF9 CZ3g3pwkRFObZENQINT5mKUxLfWkW6qpi6U/fxevrl06QeoDAiKW7lZ+uA7ZlCyF TxNXsjjDekSrDg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:23 2025 by rpki-client