This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft File: 28wruvPg1DQqAU-LcPhzzumoysU.mft (raw, json) Hash identifier: DHVGoNnTZ6I0K169HJJhxnjtxgqv7CWlW6uH+dUH3qc= Subject key identifier: CA:D0:42:8F:4D:77:32:36:DD:BF:67:5E:A6:95:FC:6F:0F:C8:25:AD Authority key identifier: DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5 Certificate issuer: /CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5 Certificate serial: 019AF3F7BC4149D9A34F9123EA3078817746 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 14:01:30 +0000 Manifest this update: Sat 06 Dec 2025 14:01:30 +0000 Manifest next update: Sun 07 Dec 2025 14:01:30 +0000 Files and hashes: 1: 28wruvPg1DQqAU-LcPhzzumoysU.crl (hash: 1BXf+UniunWS0RxgARoiY7ZdycbzHyO9XKuEePct9cg=) 2: ZNhnjqldcw87nCml3io59xsOVUM.roa (hash: 0msjn5hZBlC+2WfO0lF8oeX6XpNIJpBSDgBeVQssg6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:bc:41:49:d9:a3:4f:91:23:ea:30:78:81:77:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5 Validity Not Before: Dec 6 14:01:30 2025 GMT Not After : Dec 7 14:01:30 2025 GMT Subject: CN=cad0428f4d773236ddbf675ea695fc6f0fc825ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:65:96:1f:4d:fb:1c:d4:13:42:b5:7e:74:03: bb:0d:f4:66:09:39:1b:3b:14:ea:9b:4f:87:0d:7d: 43:55:72:0b:38:50:e2:1f:fe:70:40:63:f3:64:8b: 53:e1:b1:ca:ab:e5:15:0a:7c:33:68:d1:68:9d:21: d1:55:ae:e5:74:97:17:fc:2f:b3:04:51:b0:ce:fc: 3d:35:36:84:43:15:8d:af:1a:0d:00:e2:61:35:17: e1:ad:a7:29:5d:72:43:bc:0d:2b:56:81:90:52:cc: d6:e0:8a:29:7a:dc:7b:03:8a:7d:d4:bd:d5:94:89: 65:0f:37:54:24:02:23:e1:21:d7:ee:7b:7d:e4:6a: 7b:6e:53:0d:c4:78:86:71:dc:97:54:b0:6d:e1:ba: 75:f4:8b:fa:de:23:4a:3c:f3:58:ea:d7:c2:c5:20: 5e:6a:84:e3:c2:4e:27:5e:78:a8:df:22:11:e4:16: c9:62:c5:f1:50:88:40:1f:f7:b3:05:10:93:e2:59: 9a:3c:cb:52:dc:57:a0:d8:a3:71:78:4e:e4:99:42: 19:bf:61:cb:0e:6d:b9:9d:8b:31:f1:f4:d5:45:9d: cf:fc:b9:4b:31:82:8f:0b:0d:ea:89:90:33:e5:cf: 7a:83:a6:3d:6a:a8:cc:e7:a6:11:b4:3c:82:6f:39: 55:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D0:42:8F:4D:77:32:36:DD:BF:67:5E:A6:95:FC:6F:0F:C8:25:AD X509v3 Authority Key Identifier: keyid:DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:00:11:92:8e:98:b0:d2:54:ad:2a:7a:41:18:de:ba:95:ff: 5d:f7:0f:c9:fb:10:fc:c4:54:1c:a5:23:82:9a:3f:46:7a:77: ab:24:6b:d2:ab:65:f6:3e:3e:2c:a6:60:9b:30:6a:6e:54:29: 4f:b1:e6:7e:fd:10:fa:9d:05:e5:50:03:19:52:2a:31:6a:90: c0:b7:44:ef:98:3d:5a:9d:93:62:ea:e2:59:31:76:40:d1:42: 60:b5:63:19:f6:61:c7:bc:81:a2:a1:48:4e:3c:07:a7:f7:cb: 02:ff:58:99:1c:0a:ae:1f:4a:31:5c:04:5c:83:74:1d:a4:07: a6:bc:ac:51:9a:5c:b9:91:6f:0e:f5:80:34:1e:31:ce:cf:d2: b4:3a:9f:22:b0:b2:46:9e:d0:ee:aa:df:34:a1:78:ea:6a:a1: 9d:9a:85:18:a0:0b:95:40:be:80:df:11:df:de:fd:0b:65:02: 16:0c:8b:b3:cd:c8:ca:32:c6:4e:54:94:f4:0f:11:28:91:52: d7:62:fe:7a:03:80:c3:23:da:d0:99:1c:1e:d9:14:d0:9e:ac: ff:6d:7c:ad:66:f9:b3:e3:a2:1e:64:83:29:d3:d4:b5:08:58: 4c:f9:70:b8:0a:eb:09:47:ed:00:1f:f2:80:e0:fd:0e:ae:ac: cc:b6:24:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz97xBSdmjT5Ej6jB4gXdGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiY2MyYmJhZjNlMGQ0MzQyYTAxNGY4YjcwZjg3M2NlZTlh OGNhYzUwHhcNMjUxMjA2MTQwMTMwWhcNMjUxMjA3MTQwMTMwWjAzMTEwLwYDVQQD EyhjYWQwNDI4ZjRkNzczMjM2ZGRiZjY3NWVhNjk1ZmM2ZjBmYzgyNWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGWWH037HNQTQrV+dAO7DfRmCTkb OxTqm0+HDX1DVXILOFDiH/5wQGPzZItT4bHKq+UVCnwzaNFonSHRVa7ldJcX/C+z BFGwzvw9NTaEQxWNrxoNAOJhNRfhracpXXJDvA0rVoGQUszW4Iopetx7A4p91L3V lIllDzdUJAIj4SHX7nt95Gp7blMNxHiGcdyXVLBt4bp19Iv63iNKPPNY6tfCxSBe aoTjwk4nXnio3yIR5BbJYsXxUIhAH/ezBRCT4lmaPMtS3Feg2KNxeE7kmUIZv2HL Dm25nYsx8fTVRZ3P/LlLMYKPCw3qiZAz5c96g6Y9aqjM56YRtDyCbzlVawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMrQQo9NdzI23b9nXqaV/G8PyCWtMB8GA1UdIwQY MBaAFNvMK7rz4NQ0KgFPi3D4c87pqMrFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjh3cnV2UGcxRFFxQVUtTGNQaHp6dW1veXNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC80MTRlZjQtNGMxZi00MjU2LTg4Yzkt ZjRkNWU4NGFjMWRkLzEvMjh3cnV2UGcxRFFxQVUtTGNQaHp6dW1veXNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC80MTRlZjQtNGMxZi00MjU2LTg4YzktZjRkNWU4NGFjMWRk LzEvMjh3cnV2UGcxRFFxQVUtTGNQaHp6dW1veXNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdAARko6Y sNJUrSp6QRjeupX/XfcPyfsQ/MRUHKUjgpo/Rnp3qyRr0qtl9j4+LKZgmzBqblQp T7Hmfv0Q+p0F5VADGVIqMWqQwLdE75g9Wp2TYuriWTF2QNFCYLVjGfZhx7yBoqFI TjwHp/fLAv9YmRwKrh9KMVwEXIN0HaQHprysUZpcuZFvDvWANB4xzs/StDqfIrCy Rp7Q7qrfNKF46mqhnZqFGKALlUC+gN8R3979C2UCFgyLs83IyjLGTlSU9A8RKJFS 12L+egOAwyPa0JkcHtkU0J6s/218rWb5s+OiHmSDKdPUtQhYTPlwuArrCUftAB/y gOD9Dq6szLYk+A== -----END CERTIFICATE-----Generated at Sat Dec 6 15:40:15 2025 by rpki-client