This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft File: AbP6KriQG0FeEIOIcsY9nwzhNq0.mft (raw, json) Hash identifier: efRWEiVjKpw4T9hPOXWWvf2juezWzcT312V/NB9qDg8= Subject key identifier: 05:63:9C:82:F0:D7:71:3A:EF:F2:61:16:55:F3:A1:68:B7:F9:03:F9 Authority key identifier: 01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD Certificate issuer: /CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad Certificate serial: 019B3CB565682E89A052AEBDB0B7E1D644F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 17:01:19 +0000 Manifest this update: Sat 20 Dec 2025 17:01:19 +0000 Manifest next update: Sun 21 Dec 2025 17:01:19 +0000 Files and hashes: 1: 0hK3wBSxWrzCK9XVRCjqAk7iR3E.roa (hash: Mgc0oHHsHOO9ITKbdZfi4fNvcPC7tfyysZUz/pdAbRc=) 2: AbP6KriQG0FeEIOIcsY9nwzhNq0.crl (hash: jIPKnOypNEW78H4fU2zdwGFwDW6KLJ/iAIQye6d33dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 17:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:65:68:2e:89:a0:52:ae:bd:b0:b7:e1:d6:44:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad Validity Not Before: Dec 20 17:01:19 2025 GMT Not After : Dec 21 17:01:19 2025 GMT Subject: CN=05639c82f0d7713aeff2611655f3a168b7f903f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7e:a9:21:7b:94:fc:d3:c1:83:8a:47:ef:f7: bf:b0:bb:ec:3a:cf:87:5a:c7:fe:f9:91:af:3a:87: ac:3e:79:d2:5c:ff:55:a3:02:cb:62:dd:ee:99:6f: 40:e0:b6:ad:78:96:ed:59:54:f7:0b:84:8d:87:31: c4:fa:a7:a0:92:9f:db:3a:f9:38:78:26:0f:f7:e3: 89:ad:fd:b7:c0:57:93:ba:75:19:e5:f5:a7:32:03: 41:ae:6e:5f:fd:81:d2:c1:04:c3:46:37:05:75:b7: e7:7a:e8:26:fd:e7:d8:07:66:96:e1:a7:19:66:99: c3:08:12:01:3b:8d:2f:38:9f:5b:87:cf:d2:89:5e: f5:b6:32:4d:fe:d4:e4:87:85:8b:65:8f:c4:55:86: 17:c1:9d:eb:80:2a:6d:de:6c:4b:c1:11:8e:19:fc: 82:da:68:5b:5d:55:fe:49:c0:b2:5e:59:65:83:90: b8:27:c3:2b:cc:0c:5a:93:98:a7:4a:d3:b9:22:50: 6d:a9:22:bd:8e:26:a1:54:ff:b1:35:f3:8f:11:26: 96:d6:56:ef:cb:9a:c2:6b:16:0f:c4:09:4b:02:3e: 4b:b4:5f:0c:6f:91:52:ff:93:88:00:a5:b6:f1:74: 30:fa:15:12:92:33:51:06:e5:1e:82:29:4c:17:36: 35:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:63:9C:82:F0:D7:71:3A:EF:F2:61:16:55:F3:A1:68:B7:F9:03:F9 X509v3 Authority Key Identifier: keyid:01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:e8:8b:c6:10:e2:f2:72:0b:65:33:a8:b1:4d:4d:d7:b1:bc: 14:cc:e4:e1:bb:a8:38:a2:f5:bd:26:96:7b:75:e5:c9:dc:ad: f9:81:0c:e6:1d:c5:d0:68:5c:ca:4e:29:18:17:45:1e:57:81: a1:d3:40:5a:99:7c:70:a5:8d:5e:79:78:dc:52:c7:51:02:be: 73:73:28:ea:d9:40:9d:07:b2:15:0e:a4:c1:5e:f5:3a:41:ea: 43:0a:74:33:12:e3:d4:7c:c8:d0:e6:29:8f:8d:15:39:15:a8: b5:2a:3f:b2:57:6b:ec:5e:d6:fc:99:9b:8a:77:9e:97:2c:40: 1b:08:89:d4:bf:40:d8:99:c1:8d:77:80:ce:7b:66:06:2b:78: 05:c3:0f:5f:df:e0:ad:a9:04:8c:16:3d:f3:73:db:fb:49:d2: 72:a5:07:57:e2:c2:99:f7:da:93:ee:8a:23:bc:ac:89:7a:10: 6e:a1:a4:91:54:04:22:08:13:5a:c7:ab:eb:f2:b4:c4:ff:ef: 14:a1:5f:9d:c6:04:4b:e9:d2:7d:25:65:cd:17:2b:1d:56:c1: ea:2c:1d:26:a1:1f:fb:b5:ab:d8:8d:5a:85:f3:c3:e7:18:47: 22:7b:e1:0d:90:97:8e:31:3b:3d:14:c8:65:f4:e7:ac:99:aa: 2f:ea:8c:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tWVoLomgUq69sLfh1kTwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxYjNmYTJhYjg5MDFiNDE1ZTEwODM4ODcyYzYzZDlmMGNl MTM2YWQwHhcNMjUxMjIwMTcwMTE5WhcNMjUxMjIxMTcwMTE5WjAzMTEwLwYDVQQD EygwNTYzOWM4MmYwZDc3MTNhZWZmMjYxMTY1NWYzYTE2OGI3ZjkwM2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH6pIXuU/NPBg4pH7/e/sLvsOs+H Wsf++ZGvOoesPnnSXP9VowLLYt3umW9A4LateJbtWVT3C4SNhzHE+qegkp/bOvk4 eCYP9+OJrf23wFeTunUZ5fWnMgNBrm5f/YHSwQTDRjcFdbfneugm/efYB2aW4acZ ZpnDCBIBO40vOJ9bh8/SiV71tjJN/tTkh4WLZY/EVYYXwZ3rgCpt3mxLwRGOGfyC 2mhbXVX+ScCyXlllg5C4J8MrzAxak5inStO5IlBtqSK9jiahVP+xNfOPESaW1lbv y5rCaxYPxAlLAj5LtF8Mb5FS/5OIAKW28XQw+hUSkjNRBuUegilMFzY15wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAVjnILw13E67/JhFlXzoWi3+QP5MB8GA1UdIwQY MBaAFAGz+iq4kBtBXhCDiHLGPZ8M4TatMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWJQNktyaVFHMEZlRUlPSWNzWTlud3poTnEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS80MmJkYTYtYTVkYS00NzFiLWEzYmYt ODFlY2I0OTBmYjg2LzEvQWJQNktyaVFHMEZlRUlPSWNzWTlud3poTnEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS80MmJkYTYtYTVkYS00NzFiLWEzYmYtODFlY2I0OTBmYjg2 LzEvQWJQNktyaVFHMEZlRUlPSWNzWTlud3poTnEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtuiLxhDi 8nILZTOosU1N17G8FMzk4buoOKL1vSaWe3Xlydyt+YEM5h3F0Ghcyk4pGBdFHleB odNAWpl8cKWNXnl43FLHUQK+c3Mo6tlAnQeyFQ6kwV71OkHqQwp0MxLj1HzI0OYp j40VORWotSo/sldr7F7W/JmbineelyxAGwiJ1L9A2JnBjXeAzntmBit4BcMPX9/g rakEjBY983Pb+0nScqUHV+LCmffak+6KI7ysiXoQbqGkkVQEIggTWser6/K0xP/v FKFfncYES+nSfSVlzRcrHVbB6iwdJqEf+7Wr2I1ahfPD5xhHInvhDZCXjjE7PRTI ZfTnrJmqL+qMjQ== -----END CERTIFICATE-----Generated at Sun Dec 21 03:04:04 2025 by rpki-client