This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft File: AbP6KriQG0FeEIOIcsY9nwzhNq0.mft (raw, json) Hash identifier: vFXSAajn+oSQ7qQmqe9uwYFO12ffS0+QSTvQmigADNo= Subject key identifier: 77:91:4D:58:CD:EE:ED:72:2F:61:72:B8:47:07:2C:B2:BB:83:B0:61 Authority key identifier: 01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD Certificate issuer: /CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad Certificate serial: 019B53E1CBD0ABC6C704945A42143CD72155 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft Manifest number: 1795 Signing time: Thu 25 Dec 2025 05:01:05 +0000 Manifest this update: Thu 25 Dec 2025 05:01:05 +0000 Manifest next update: Fri 26 Dec 2025 05:01:05 +0000 Files and hashes: 1: 0hK3wBSxWrzCK9XVRCjqAk7iR3E.roa (hash: Mgc0oHHsHOO9ITKbdZfi4fNvcPC7tfyysZUz/pdAbRc=) 2: AbP6KriQG0FeEIOIcsY9nwzhNq0.crl (hash: +wJpP6ZWoosiWgfTFBSxq+kCn6kFMajvJzuV73bRSto=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:e1:cb:d0:ab:c6:c7:04:94:5a:42:14:3c:d7:21:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad Validity Not Before: Dec 25 05:01:05 2025 GMT Not After : Dec 26 05:01:05 2025 GMT Subject: CN=77914d58cdeeed722f6172b847072cb2bb83b061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6e:be:a1:ab:96:cb:11:e4:d1:e3:79:63:01: 16:c4:c8:bb:5c:7d:d6:9a:de:be:ef:a2:bf:17:51: 9b:cb:4f:f0:0c:a8:8b:ab:e1:41:10:24:f5:eb:e9: 02:cb:a2:25:09:82:65:56:81:a1:3c:40:4c:88:50: e0:ea:86:25:5c:39:62:1d:59:c5:98:13:9f:01:65: c7:c5:a8:6a:70:d7:33:35:71:10:b9:52:43:92:17: 05:d4:48:6d:d4:98:21:71:a8:9a:1a:83:79:b7:5c: de:ee:40:3b:fa:20:45:ed:12:02:9d:0c:6d:1f:88: b3:c7:c8:31:85:7a:b5:c1:f3:59:5e:ea:58:75:6f: cd:1a:3e:63:98:86:89:95:dc:6a:a1:3a:04:78:3c: 86:89:de:fc:fc:1e:fa:dd:f1:6a:18:6a:c6:3f:62: fc:f8:71:36:cd:a0:9a:9d:24:3b:08:b4:8a:52:ad: 37:b4:ad:5b:06:b5:5c:86:b6:6d:37:a6:c5:7b:47: b9:6e:24:31:86:7d:bf:a4:63:6c:2d:80:d2:a5:a8: 2d:88:5f:4a:ba:3b:45:2e:59:05:bd:b2:71:2b:72: d6:bc:a1:09:f5:0e:20:e9:7d:da:de:03:9c:06:25: 7a:b8:a7:be:69:b5:92:fe:41:ea:a3:eb:17:41:d2: 1f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:91:4D:58:CD:EE:ED:72:2F:61:72:B8:47:07:2C:B2:BB:83:B0:61 X509v3 Authority Key Identifier: keyid:01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:7f:a7:64:43:8d:eb:af:bf:01:5f:53:75:c4:93:e4:c1:08: a7:41:12:94:46:a6:b0:b9:df:9c:4b:e0:45:79:60:1d:83:b7: 98:a5:ec:df:36:a1:25:b5:0d:43:4c:82:09:f9:a4:62:51:4e: c2:64:a1:d4:10:da:88:96:59:ec:64:62:3c:84:bd:a2:49:ba: 41:2b:10:b3:40:3e:a9:da:70:79:4c:dd:df:77:ee:16:9a:2d: 71:72:1e:aa:b5:79:b5:bc:21:5f:b4:25:7c:30:20:17:0e:b4: 65:b4:fe:73:c9:53:d2:dd:db:1a:9a:06:72:b6:c7:93:25:45: 8d:bc:ab:ed:56:9e:52:3e:4b:80:f1:eb:f6:1f:53:49:2d:a0: 97:ee:72:00:92:f0:33:f6:b3:c9:fd:d4:80:55:90:dd:c8:fc: aa:71:15:d6:ce:d4:3a:36:f0:e4:7d:ed:6f:25:cf:a3:ab:30: 43:4c:e8:fe:8b:cb:b9:7a:d3:e6:58:a2:97:60:98:f7:24:7a: 7b:6f:00:52:b0:ea:45:29:b7:3f:74:be:80:c7:c7:b1:fc:fc: 74:dd:da:e7:6f:10:8a:22:f2:fc:16:b2:f2:d8:4c:8c:1d:e0: 99:ed:52:4c:84:28:de:4f:53:27:1a:c3:7a:30:14:71:47:de: dc:0e:ba:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtT4cvQq8bHBJRaQhQ81yFVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxYjNmYTJhYjg5MDFiNDE1ZTEwODM4ODcyYzYzZDlmMGNl MTM2YWQwHhcNMjUxMjI1MDUwMTA1WhcNMjUxMjI2MDUwMTA1WjAzMTEwLwYDVQQD Eyg3NzkxNGQ1OGNkZWVlZDcyMmY2MTcyYjg0NzA3MmNiMmJiODNiMDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG6+oauWyxHk0eN5YwEWxMi7XH3W mt6+76K/F1Gby0/wDKiLq+FBECT16+kCy6IlCYJlVoGhPEBMiFDg6oYlXDliHVnF mBOfAWXHxahqcNczNXEQuVJDkhcF1Eht1JghcaiaGoN5t1ze7kA7+iBF7RICnQxt H4izx8gxhXq1wfNZXupYdW/NGj5jmIaJldxqoToEeDyGid78/B763fFqGGrGP2L8 +HE2zaCanSQ7CLSKUq03tK1bBrVchrZtN6bFe0e5biQxhn2/pGNsLYDSpagtiF9K ujtFLlkFvbJxK3LWvKEJ9Q4g6X3a3gOcBiV6uKe+abWS/kHqo+sXQdIfzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHeRTVjN7u1yL2FyuEcHLLK7g7BhMB8GA1UdIwQY MBaAFAGz+iq4kBtBXhCDiHLGPZ8M4TatMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWJQNktyaVFHMEZlRUlPSWNzWTlud3poTnEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS80MmJkYTYtYTVkYS00NzFiLWEzYmYt ODFlY2I0OTBmYjg2LzEvQWJQNktyaVFHMEZlRUlPSWNzWTlud3poTnEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS80MmJkYTYtYTVkYS00NzFiLWEzYmYtODFlY2I0OTBmYjg2 LzEvQWJQNktyaVFHMEZlRUlPSWNzWTlud3poTnEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAan+nZEON 66+/AV9TdcST5MEIp0ESlEamsLnfnEvgRXlgHYO3mKXs3zahJbUNQ0yCCfmkYlFO wmSh1BDaiJZZ7GRiPIS9okm6QSsQs0A+qdpweUzd33fuFpotcXIeqrV5tbwhX7Ql fDAgFw60ZbT+c8lT0t3bGpoGcrbHkyVFjbyr7VaeUj5LgPHr9h9TSS2gl+5yAJLw M/azyf3UgFWQ3cj8qnEV1s7UOjbw5H3tbyXPo6swQ0zo/ovLuXrT5liil2CY9yR6 e28AUrDqRSm3P3S+gMfHsfz8dN3a528QiiLy/Bay8thMjB3gme1STIQo3k9TJxrD ejAUcUfe3A66LQ== -----END CERTIFICATE-----Generated at Thu Dec 25 13:05:35 2025 by rpki-client