This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft File: KAabTsBHxsLYCkmS5CKLMXzIsgw.mft (raw, json) Hash identifier: k42yQRgolygFLe2Y6L1A/KsHnpfG2PaxlG1oFcigxZk= Subject key identifier: C0:E7:DD:62:41:4E:12:CB:20:75:DD:B1:00:41:DF:8B:3E:55:11:FC Authority key identifier: 28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C Certificate issuer: /CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c Certificate serial: 019B495E14BA1208FF08A26B7C6211921D9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft Manifest number: 109D Signing time: Tue 23 Dec 2025 04:01:00 +0000 Manifest this update: Tue 23 Dec 2025 04:01:00 +0000 Manifest next update: Wed 24 Dec 2025 04:01:00 +0000 Files and hashes: 1: KAabTsBHxsLYCkmS5CKLMXzIsgw.crl (hash: JlKaJDZYmvzv2w3rh6aMUPtugtimjTcI1Ozzed9ECoE=) 2: z5t3MUctHGLyNYnasAsmy7myIE0.roa (hash: mO/iLAoYiC6aPBgVm4fsRrMygy6NYm/K/6/lkuaPce4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 04:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:5e:14:ba:12:08:ff:08:a2:6b:7c:62:11:92:1d:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c Validity Not Before: Dec 23 04:01:00 2025 GMT Not After : Dec 24 04:01:00 2025 GMT Subject: CN=c0e7dd62414e12cb2075ddb10041df8b3e5511fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3d:c7:8a:36:3f:f2:c9:93:41:d6:44:f1:80: a5:98:aa:0e:13:57:96:05:98:cb:bd:95:ee:a6:57: 26:94:e8:6a:20:ff:06:4a:5f:f6:1a:88:60:5c:25: c3:67:1d:da:06:64:89:03:08:39:78:cd:35:aa:0c: 7d:37:3e:62:8a:5a:91:f6:4c:90:26:79:c1:89:b3: fc:6f:2c:38:37:73:79:00:97:96:c9:29:f3:34:7c: 41:ae:98:f9:d3:b7:c7:ad:b4:eb:85:7e:cf:c6:c1: f0:1a:58:ed:93:13:27:42:68:87:1b:ce:7d:f4:7c: 0b:c7:9c:fa:0e:8a:41:ce:7b:6a:71:05:59:ea:f9: 0f:33:de:27:56:ae:46:a0:96:ea:ed:f0:bd:3a:0b: 29:1e:24:c4:f9:3c:42:89:e4:e2:2b:c2:a1:6c:ad: 36:90:d2:35:ea:ac:b4:86:27:f9:64:c7:ef:e2:7d: 16:e8:09:54:3c:82:a9:7b:9f:87:ef:d2:3e:c7:2c: a6:8b:bb:b5:36:03:2a:c8:bc:4d:d1:03:df:90:e0: d2:c1:6d:44:af:8f:ff:b5:05:c3:cf:e9:27:ab:30: 6e:39:ed:af:22:33:22:7c:a5:d0:a7:ac:e9:d5:b2: e1:1c:7b:d0:e0:17:60:ae:dc:f9:c3:1f:96:59:c1: 42:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E7:DD:62:41:4E:12:CB:20:75:DD:B1:00:41:DF:8B:3E:55:11:FC X509v3 Authority Key Identifier: keyid:28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:8d:44:9e:0d:f2:59:e7:86:71:6a:6a:d2:f2:e4:d8:40:85: b0:da:75:cd:fc:4d:57:27:e0:60:b6:96:f6:92:1a:4e:6d:66: fb:3c:e3:3b:d5:bc:21:2b:80:91:e2:67:53:a8:dc:49:58:fc: b3:39:52:78:05:4d:c7:8d:79:92:65:37:4f:5d:7e:67:7e:fb: 29:1d:a7:1f:33:bd:59:20:09:6d:83:3a:50:a6:19:60:69:36: 7d:89:7e:54:1a:cd:44:18:73:37:03:70:1a:dd:ed:5f:a0:4a: ec:c3:b7:7e:22:08:f5:5f:e2:34:96:3a:15:ad:37:30:60:15: 6a:bb:a8:5f:5f:1c:94:72:e7:d9:0b:da:83:82:02:fc:aa:98: 3d:32:fe:00:1b:bc:4b:2c:a2:d1:2a:f6:ec:80:c9:5f:ce:fb: 28:ed:66:8c:60:6f:66:00:b8:1a:68:57:86:65:f3:85:5c:a2: 83:02:a9:67:6c:31:cf:06:73:46:82:8e:f4:6c:a5:f5:45:99: 08:d5:53:84:b1:08:75:d5:90:11:5d:f2:4f:1a:56:14:5b:79: 2c:9d:d5:ce:6e:bc:fb:f1:b8:93:36:0f:ca:07:e9:27:ef:da: c3:ab:ca:c0:1f:58:df:31:f1:12:6d:e4:4e:39:86:4f:00:4e: 0a:16:9c:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJXhS6Egj/CKJrfGIRkh2dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MDY5YjRlYzA0N2M2YzJkODBhNDk5MmU0MjI4YjMxN2Nj OGIyMGMwHhcNMjUxMjIzMDQwMTAwWhcNMjUxMjI0MDQwMTAwWjAzMTEwLwYDVQQD EyhjMGU3ZGQ2MjQxNGUxMmNiMjA3NWRkYjEwMDQxZGY4YjNlNTUxMWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz3HijY/8smTQdZE8YClmKoOE1eW BZjLvZXuplcmlOhqIP8GSl/2GohgXCXDZx3aBmSJAwg5eM01qgx9Nz5iilqR9kyQ JnnBibP8byw4N3N5AJeWySnzNHxBrpj507fHrbTrhX7PxsHwGljtkxMnQmiHG859 9HwLx5z6DopBzntqcQVZ6vkPM94nVq5GoJbq7fC9OgspHiTE+TxCieTiK8KhbK02 kNI16qy0hif5ZMfv4n0W6AlUPIKpe5+H79I+xyymi7u1NgMqyLxN0QPfkODSwW1E r4//tQXDz+knqzBuOe2vIjMifKXQp6zp1bLhHHvQ4Bdgrtz5wx+WWcFC9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMDn3WJBThLLIHXdsQBB34s+VRH8MB8GA1UdIwQY MBaAFCgGm07AR8bC2ApJkuQiizF8yLIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0FhYlRzQkh4c0xZQ2ttUzVDS0xNWHpJc2d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wMjQ1NTQtN2FhNi00YzlmLWE0ODct ZGY3YjQ1YmU0NmM3LzEvS0FhYlRzQkh4c0xZQ2ttUzVDS0xNWHpJc2d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8wMjQ1NTQtN2FhNi00YzlmLWE0ODctZGY3YjQ1YmU0NmM3 LzEvS0FhYlRzQkh4c0xZQ2ttUzVDS0xNWHpJc2d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlY1Eng3y WeeGcWpq0vLk2ECFsNp1zfxNVyfgYLaW9pIaTm1m+zzjO9W8ISuAkeJnU6jcSVj8 szlSeAVNx415kmU3T11+Z377KR2nHzO9WSAJbYM6UKYZYGk2fYl+VBrNRBhzNwNw Gt3tX6BK7MO3fiII9V/iNJY6Fa03MGAVaruoX18clHLn2Qvag4IC/KqYPTL+ABu8 Syyi0Sr27IDJX877KO1mjGBvZgC4GmhXhmXzhVyigwKpZ2wxzwZzRoKO9Gyl9UWZ CNVThLEIddWQEV3yTxpWFFt5LJ3Vzm68+/G4kzYPygfpJ+/aw6vKwB9Y3zHxEm3k TjmGTwBOChac7g== -----END CERTIFICATE-----Generated at Tue Dec 23 10:46:52 2025 by rpki-client