This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft File: AbP6KriQG0FeEIOIcsY9nwzhNq0.mft (raw, json) Hash identifier: 03JUE0ilmz6XLrxLhYUmnNLQjTaR27l9YYLetZDRW/I= Subject key identifier: EC:73:51:72:B8:D0:8B:25:6E:1E:D1:F9:A5:02:ED:B2:D2:8B:77:E8 Authority key identifier: 01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD Certificate issuer: /CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad Certificate serial: 019B691FA26A8C700377DEFCCAC10BDBE656 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft Manifest number: 17A0 Signing time: Mon 29 Dec 2025 08:00:39 +0000 Manifest this update: Mon 29 Dec 2025 08:00:39 +0000 Manifest next update: Tue 30 Dec 2025 08:00:39 +0000 Files and hashes: 1: 0hK3wBSxWrzCK9XVRCjqAk7iR3E.roa (hash: Mgc0oHHsHOO9ITKbdZfi4fNvcPC7tfyysZUz/pdAbRc=) 2: AbP6KriQG0FeEIOIcsY9nwzhNq0.crl (hash: vxHoB7EkvNHzukXlbTVPyKLmhIKoEHgeinqLek6X3cg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 08:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:1f:a2:6a:8c:70:03:77:de:fc:ca:c1:0b:db:e6:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad Validity Not Before: Dec 29 08:00:39 2025 GMT Not After : Dec 30 08:00:39 2025 GMT Subject: CN=ec735172b8d08b256e1ed1f9a502edb2d28b77e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b5:c7:bb:c2:dc:6e:28:b4:b8:88:b1:3e:2e: a0:86:28:bc:90:8c:36:dc:5f:59:a8:74:fb:14:fa: 43:2e:ef:f8:58:e6:5d:a6:b1:43:ca:f6:11:90:6e: 88:06:33:45:4c:ea:5b:94:03:dd:b9:45:d7:03:11: 8a:80:2f:a2:7e:1c:ee:dd:b9:9a:a2:55:6f:b1:03: 95:b9:c6:a0:e0:79:91:35:7c:8c:4c:5e:71:0b:08: b6:8d:74:51:fc:a5:17:de:8a:27:d9:26:e2:ad:42: 49:13:ae:96:84:97:95:c9:2d:6d:8b:a3:aa:03:09: fb:0a:b2:44:52:cf:71:81:06:50:ca:18:66:cd:a0: ea:25:68:bf:b9:08:2e:7a:88:64:1e:4a:3c:b8:c0: 89:2c:a1:b5:15:d9:b1:56:51:72:7d:44:69:0a:b9: 4e:3e:50:90:fa:93:38:7e:d3:45:7d:67:da:03:7c: 41:a0:c9:9c:b4:4f:09:0c:a9:77:c3:f3:89:42:76: a9:9a:82:52:d7:3f:33:4f:06:a6:c0:66:a6:d6:d8: 51:70:3f:4d:4e:54:4b:ad:e9:d4:2d:6b:0c:91:55: ab:45:c4:30:24:6c:59:05:3e:0f:50:d6:e4:0f:3a: ce:65:d3:e0:0a:29:83:a0:7b:fe:44:8c:f3:8f:5a: 6d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:73:51:72:B8:D0:8B:25:6E:1E:D1:F9:A5:02:ED:B2:D2:8B:77:E8 X509v3 Authority Key Identifier: keyid:01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:15:42:00:f9:04:fa:7e:83:7e:a2:9a:55:eb:2f:7c:4e:9c: 33:e5:87:a1:4b:c2:74:7f:d5:e4:8b:10:a1:0d:c6:5f:ee:59: cb:e3:31:c8:c3:e6:2e:fe:f3:ac:c0:d4:52:2c:32:44:05:17: 0f:95:9b:ff:bc:76:ec:69:60:d7:8b:ab:70:fe:cf:ed:b3:d9: 44:62:a2:63:18:df:5d:27:bb:81:91:b6:90:2f:5f:9f:1b:35: d9:9c:80:67:b2:63:7a:80:3a:cf:01:2c:50:cc:b7:03:69:97: 5b:58:71:74:2a:da:f1:c4:81:b1:ef:db:0d:26:3f:a8:c9:0e: bb:00:bc:a2:77:34:3b:4c:c2:bc:03:03:50:62:5b:42:76:7b: fa:8b:b7:ea:7e:c9:dc:e9:75:32:a3:69:0a:9b:ea:d0:a1:6c: cf:ca:89:5a:52:99:58:b1:da:32:00:25:5c:00:6a:93:06:5a: 72:de:47:c8:c6:f2:c4:21:6a:e9:f0:98:d5:fe:fb:f1:65:64: 15:7f:7c:1a:e3:38:91:74:a7:7d:55:d5:08:09:7e:19:3d:93: 1b:12:21:33:ed:53:34:b3:60:d5:2f:80:64:7b:95:ed:9c:09: 4b:25:4b:0b:64:12:46:06:b1:34:e0:6a:1e:ae:9b:f0:38:f8: a1:78:72:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpH6JqjHADd978ysEL2+ZWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxYjNmYTJhYjg5MDFiNDE1ZTEwODM4ODcyYzYzZDlmMGNl MTM2YWQwHhcNMjUxMjI5MDgwMDM5WhcNMjUxMjMwMDgwMDM5WjAzMTEwLwYDVQQD EyhlYzczNTE3MmI4ZDA4YjI1NmUxZWQxZjlhNTAyZWRiMmQyOGI3N2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLXHu8Lcbii0uIixPi6ghii8kIw2 3F9ZqHT7FPpDLu/4WOZdprFDyvYRkG6IBjNFTOpblAPduUXXAxGKgC+ifhzu3bma olVvsQOVucag4HmRNXyMTF5xCwi2jXRR/KUX3oon2SbirUJJE66WhJeVyS1ti6Oq Awn7CrJEUs9xgQZQyhhmzaDqJWi/uQgueohkHko8uMCJLKG1FdmxVlFyfURpCrlO PlCQ+pM4ftNFfWfaA3xBoMmctE8JDKl3w/OJQnapmoJS1z8zTwamwGam1thRcD9N TlRLrenULWsMkVWrRcQwJGxZBT4PUNbkDzrOZdPgCimDoHv+RIzzj1ptXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOxzUXK40Islbh7R+aUC7bLSi3foMB8GA1UdIwQY MBaAFAGz+iq4kBtBXhCDiHLGPZ8M4TatMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWJQNktyaVFHMEZlRUlPSWNzWTlud3poTnEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS80MmJkYTYtYTVkYS00NzFiLWEzYmYt ODFlY2I0OTBmYjg2LzEvQWJQNktyaVFHMEZlRUlPSWNzWTlud3poTnEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS80MmJkYTYtYTVkYS00NzFiLWEzYmYtODFlY2I0OTBmYjg2 LzEvQWJQNktyaVFHMEZlRUlPSWNzWTlud3poTnEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPBVCAPkE +n6DfqKaVesvfE6cM+WHoUvCdH/V5IsQoQ3GX+5Zy+MxyMPmLv7zrMDUUiwyRAUX D5Wb/7x27Glg14urcP7P7bPZRGKiYxjfXSe7gZG2kC9fnxs12ZyAZ7JjeoA6zwEs UMy3A2mXW1hxdCra8cSBse/bDSY/qMkOuwC8onc0O0zCvAMDUGJbQnZ7+ou36n7J 3Ol1MqNpCpvq0KFsz8qJWlKZWLHaMgAlXABqkwZact5HyMbyxCFq6fCY1f778WVk FX98GuM4kXSnfVXVCAl+GT2TGxIhM+1TNLNg1S+AZHuV7ZwJSyVLC2QSRgaxNOBq Hq6b8Dj4oXhy8A== -----END CERTIFICATE-----Generated at Mon Dec 29 16:18:45 2025 by rpki-client