This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft File: AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft (raw, json) Hash identifier: TVC3ypJOThVbgtArBfda1+/D0cVwInvZj1Bf8c3efNs= Subject key identifier: CD:69:C9:E9:FD:38:C6:85:84:50:14:51:36:41:B0:55:A3:C4:A7:E4 Authority key identifier: 01:BA:CC:CB:74:C7:7B:D5:FD:2A:BE:A3:E6:12:D8:81:EA:B7:33:56 Certificate issuer: /CN=01bacccb74c77bd5fd2abea3e612d881eab73356 Certificate serial: 019B39EAD81EC9BAF3FF50C905131CC58511 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 04:00:50 +0000 Manifest this update: Sat 20 Dec 2025 04:00:50 +0000 Manifest next update: Sun 21 Dec 2025 04:00:50 +0000 Files and hashes: 1: AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl (hash: uBs/bHgC5AFbo5b+yyfF2+pqWQLuN2y/iJe59Uu8w9o=) 2: K1Ne1nVDXTkowzkdUM3CXdE4E6A.roa (hash: yQEUlbKzH3JK4cDR8vmY0Ufn57XLcgJT+5SEVNFl3Yo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:d8:1e:c9:ba:f3:ff:50:c9:05:13:1c:c5:85:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01bacccb74c77bd5fd2abea3e612d881eab73356 Validity Not Before: Dec 20 04:00:50 2025 GMT Not After : Dec 21 04:00:50 2025 GMT Subject: CN=cd69c9e9fd38c685845014513641b055a3c4a7e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:48:4a:ee:5a:b1:fd:a9:7a:e4:cd:4a:5d:6f: fe:d2:00:0a:91:1c:b7:3c:2b:d8:56:71:50:21:47: 2b:d0:88:3b:d8:1c:3a:6e:f9:bf:0d:9f:61:3f:21: e6:7b:45:07:67:e2:4e:53:94:7a:98:56:92:58:05: de:b1:4c:60:a8:8c:17:0a:f5:76:b5:fa:e8:25:9f: 2f:b7:fe:39:4b:4f:41:35:b8:0b:37:ab:13:76:00: a9:6c:bc:86:f9:78:46:c9:21:81:51:7b:18:5b:f7: b5:93:e5:c2:50:bb:12:7f:6c:e4:62:0b:49:34:cd: 3c:ac:92:75:71:f6:93:87:d2:41:16:05:91:a7:48: 1c:f9:14:4b:73:0c:78:16:44:f2:be:ea:b3:62:ba: af:76:4e:a3:71:ca:d6:e8:47:17:65:ad:3c:7b:7e: 4a:30:e4:0d:0f:1c:8f:f8:8c:2a:54:3c:b6:07:a3: b7:e2:b9:06:19:42:f0:c8:69:dd:69:e0:39:63:1b: cd:63:46:cd:db:9a:f7:4f:2b:d5:89:7a:1e:c5:b6: a3:0d:64:92:32:22:22:4e:7c:2f:a5:9c:ff:62:3d: 63:cc:b3:4d:7a:d6:b6:87:35:cb:39:de:7a:4f:0e: 85:79:aa:6c:bc:e2:4a:d2:39:1a:14:85:9a:1f:70: 1a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:69:C9:E9:FD:38:C6:85:84:50:14:51:36:41:B0:55:A3:C4:A7:E4 X509v3 Authority Key Identifier: keyid:01:BA:CC:CB:74:C7:7B:D5:FD:2A:BE:A3:E6:12:D8:81:EA:B7:33:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:28:94:2e:b2:aa:39:fd:d2:5e:c1:a2:1c:85:32:51:48:d5: 8b:04:09:58:5b:df:1a:a7:75:4c:fa:c2:2f:fd:50:9f:66:39: 34:c5:af:24:32:fb:2f:f7:2d:94:93:4b:5e:4f:94:8a:54:29: 60:4c:30:d1:4a:56:c6:bf:d0:24:99:f3:10:b7:ad:20:f4:82: 73:9c:74:98:5d:5c:60:24:d2:48:87:4d:30:9d:57:0f:a2:42: 72:d2:db:31:61:6a:0e:50:0d:27:a5:4b:fb:31:53:39:4a:0f: f9:91:c6:40:25:ef:15:e8:dd:f0:62:12:f4:9d:4c:cc:b9:84: 7d:4c:46:dc:25:37:52:9b:20:f0:55:4e:15:b1:04:c8:e6:e0: 90:a0:50:0d:0f:62:cf:e2:42:99:71:2f:1d:b9:4a:08:63:35: b9:28:bf:3a:b8:1a:89:a3:10:2b:90:8d:f6:de:92:1a:3e:72: c2:8f:83:86:f4:ce:90:22:30:56:4d:29:8f:36:c0:0d:b9:f0: 74:c4:73:61:dd:8a:18:6f:7f:60:e5:67:5f:0e:bb:44:d1:1d: 53:a3:4f:e3:0a:d0:61:8a:00:ea:77:f5:bd:45:65:66:15:d0: 9a:e2:0f:5c:87:9d:f8:b8:88:b0:69:57:dc:65:5a:8a:00:ce: 4d:eb:aa:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56tgeybrz/1DJBRMcxYURMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxYmFjY2NiNzRjNzdiZDVmZDJhYmVhM2U2MTJkODgxZWFi NzMzNTYwHhcNMjUxMjIwMDQwMDUwWhcNMjUxMjIxMDQwMDUwWjAzMTEwLwYDVQQD EyhjZDY5YzllOWZkMzhjNjg1ODQ1MDE0NTEzNjQxYjA1NWEzYzRhN2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEhK7lqx/al65M1KXW/+0gAKkRy3 PCvYVnFQIUcr0Ig72Bw6bvm/DZ9hPyHme0UHZ+JOU5R6mFaSWAXesUxgqIwXCvV2 tfroJZ8vt/45S09BNbgLN6sTdgCpbLyG+XhGySGBUXsYW/e1k+XCULsSf2zkYgtJ NM08rJJ1cfaTh9JBFgWRp0gc+RRLcwx4FkTyvuqzYrqvdk6jccrW6EcXZa08e35K MOQNDxyP+IwqVDy2B6O34rkGGULwyGndaeA5YxvNY0bN25r3TyvViXoexbajDWSS MiIiTnwvpZz/Yj1jzLNNeta2hzXLOd56Tw6FeapsvOJK0jkaFIWaH3Aa+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM1pyen9OMaFhFAUUTZBsFWjxKfkMB8GA1UdIwQY MBaAFAG6zMt0x3vV/Sq+o+YS2IHqtzNWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWJyTXkzVEhlOVg5S3I2ajVoTFlnZXEzTTFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9hMTQ0ZTUtZmNlNi00YTUwLWJkMmEt ODM3NDEwNDFiOGM3LzEvQWJyTXkzVEhlOVg5S3I2ajVoTFlnZXEzTTFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9hMTQ0ZTUtZmNlNi00YTUwLWJkMmEtODM3NDEwNDFiOGM3 LzEvQWJyTXkzVEhlOVg5S3I2ajVoTFlnZXEzTTFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAniiULrKq Of3SXsGiHIUyUUjViwQJWFvfGqd1TPrCL/1Qn2Y5NMWvJDL7L/ctlJNLXk+UilQp YEww0UpWxr/QJJnzELetIPSCc5x0mF1cYCTSSIdNMJ1XD6JCctLbMWFqDlANJ6VL +zFTOUoP+ZHGQCXvFejd8GIS9J1MzLmEfUxG3CU3Upsg8FVOFbEEyObgkKBQDQ9i z+JCmXEvHblKCGM1uSi/OrgaiaMQK5CN9t6SGj5ywo+DhvTOkCIwVk0pjzbADbnw dMRzYd2KGG9/YOVnXw67RNEdU6NP4wrQYYoA6nf1vUVlZhXQmuIPXIed+LiIsGlX 3GVaigDOTeuqEQ== -----END CERTIFICATE-----Generated at Sat Dec 20 06:52:50 2025 by rpki-client