This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft File: abfzv44Ke1kKD_qhycCsWAoLEZ4.mft (raw, json) Hash identifier: HHUCZcYnlfTpZ2Ua6oXGjd6gBLGfH5RA+Wcuy9FmqTM= Subject key identifier: DC:7B:ED:54:40:80:DF:8E:CA:14:8C:02:6A:A1:CA:D7:36:D1:F8:12 Authority key identifier: 69:B7:F3:BF:8E:0A:7B:59:0A:0F:FA:A1:C9:C0:AC:58:0A:0B:11:9E Certificate issuer: /CN=69b7f3bf8e0a7b590a0ffaa1c9c0ac580a0b119e Certificate serial: 019B40C90B5A17FA825B4C1A75033C69394C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abfzv44Ke1kKD_qhycCsWAoLEZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft Manifest number: B5 Signing time: Sun 21 Dec 2025 12:01:15 +0000 Manifest this update: Sun 21 Dec 2025 12:01:15 +0000 Manifest next update: Mon 22 Dec 2025 12:01:15 +0000 Files and hashes: 1: R7q2gktvFsNXXsx_b10S5ynAXaw.roa (hash: +bf2vfop1BjTPFaIwsRZHC/bhXQwlqn19Fh+mJR9npc=) 2: abfzv44Ke1kKD_qhycCsWAoLEZ4.crl (hash: Z432FkIkBKOVuRc/ufp9nHUTt7qsQpJHR1T5cayfqWU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/abfzv44Ke1kKD_qhycCsWAoLEZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c9:0b:5a:17:fa:82:5b:4c:1a:75:03:3c:69:39:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69b7f3bf8e0a7b590a0ffaa1c9c0ac580a0b119e Validity Not Before: Dec 21 12:01:15 2025 GMT Not After : Dec 22 12:01:15 2025 GMT Subject: CN=dc7bed544080df8eca148c026aa1cad736d1f812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c8:e9:04:50:f5:ab:d4:80:62:74:01:f3:fe: 5a:81:85:d2:fc:db:58:af:22:b5:89:68:69:81:9f: a3:38:e8:07:fc:46:e5:e5:f0:47:43:70:91:89:85: 2b:d1:cc:4e:a8:8d:60:2b:bb:87:c9:2e:45:10:2d: 37:ee:e5:68:40:49:e8:ef:8d:a7:ac:36:4d:3f:b4: 1a:6b:6a:7d:e7:ee:89:f0:3a:f1:85:1c:2e:f3:ac: 61:36:d4:e2:ba:41:1d:f5:5f:df:31:de:00:cf:f4: 04:ba:78:2b:ce:c2:fb:5c:10:52:6f:e5:19:29:e2: 7f:1b:1e:ea:85:57:ce:d7:d2:84:d3:87:64:e9:33: 0d:ae:87:f7:b0:03:41:7e:9a:56:3e:9d:0b:48:7d: 0d:e4:7c:16:cd:2a:5b:b2:b6:4e:34:68:bd:2a:9e: 2f:ef:3a:5b:0b:15:cf:6e:87:3f:cb:0a:06:10:5b: 72:4b:3e:0c:a3:43:cb:57:1b:cd:40:a3:ce:9f:04: 31:3c:87:d5:1a:64:7e:ea:d2:1b:38:02:e4:de:77: 71:89:d1:41:2f:c4:c3:80:72:ca:1f:cf:64:7e:16: 40:8d:11:51:c0:67:25:ee:33:a3:93:de:6c:93:de: 49:30:eb:e0:23:bc:84:28:58:09:7b:4a:d0:ab:2f: 91:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:7B:ED:54:40:80:DF:8E:CA:14:8C:02:6A:A1:CA:D7:36:D1:F8:12 X509v3 Authority Key Identifier: keyid:69:B7:F3:BF:8E:0A:7B:59:0A:0F:FA:A1:C9:C0:AC:58:0A:0B:11:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abfzv44Ke1kKD_qhycCsWAoLEZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:ea:2a:6b:15:3f:c9:9b:70:f2:6b:8e:c4:d3:ca:f9:b6:9c: 31:d7:0d:46:f4:67:14:f4:d2:10:a4:c4:2d:8d:f6:b7:16:a2: b6:5c:14:0c:b4:d2:27:d6:b4:4a:1b:70:f1:cc:5b:3b:7e:8b: fd:68:87:8b:89:c3:3c:18:d7:24:a3:40:f7:7f:b6:1a:cd:56: 4f:fc:2f:97:18:9f:ca:dd:70:4d:79:77:69:f8:19:23:29:b4: 40:55:bc:df:37:93:29:67:d5:37:5c:eb:66:4b:6a:41:37:c8: ea:f0:0a:b0:0f:36:30:9e:5a:3f:d0:06:4a:22:8e:50:ed:25: 7e:ac:66:6f:91:5e:58:e8:20:b8:91:7c:0e:23:77:89:91:95: f9:05:f4:b7:9d:fb:bd:8c:c4:3e:51:a9:82:5c:c2:0b:ec:93: b2:17:e6:19:cd:3d:a5:b1:25:6c:7b:11:4c:fd:7a:30:cc:1d: fa:a4:a8:64:76:60:e7:9d:08:84:4e:a7:28:04:dd:85:72:d5: 47:18:90:c1:85:3e:0f:bf:14:10:81:d8:ef:6f:80:86:63:4d: 90:82:93:c5:a9:ff:04:14:a3:db:8a:45:db:11:2c:fb:51:f3: 9c:43:d5:3b:d0:83:b4:99:4e:3e:12:bc:a1:9d:0d:b3:95:ac: 94:db:3f:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyQtaF/qCW0wadQM8aTlMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5YjdmM2JmOGUwYTdiNTkwYTBmZmFhMWM5YzBhYzU4MGEw YjExOWUwHhcNMjUxMjIxMTIwMTE1WhcNMjUxMjIyMTIwMTE1WjAzMTEwLwYDVQQD EyhkYzdiZWQ1NDQwODBkZjhlY2ExNDhjMDI2YWExY2FkNzM2ZDFmODEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5sjpBFD1q9SAYnQB8/5agYXS/NtY ryK1iWhpgZ+jOOgH/Ebl5fBHQ3CRiYUr0cxOqI1gK7uHyS5FEC037uVoQEno742n rDZNP7Qaa2p95+6J8DrxhRwu86xhNtTiukEd9V/fMd4Az/QEungrzsL7XBBSb+UZ KeJ/Gx7qhVfO19KE04dk6TMNrof3sANBfppWPp0LSH0N5HwWzSpbsrZONGi9Kp4v 7zpbCxXPboc/ywoGEFtySz4Mo0PLVxvNQKPOnwQxPIfVGmR+6tIbOALk3ndxidFB L8TDgHLKH89kfhZAjRFRwGcl7jOjk95sk95JMOvgI7yEKFgJe0rQqy+RXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNx77VRAgN+OyhSMAmqhytc20fgSMB8GA1UdIwQY MBaAFGm387+OCntZCg/6ocnArFgKCxGeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWJmenY0NEtlMWtLRF9xaHljQ3NXQW9MRVo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8xNmQ4NWYtODViNS00MmUzLWFkOWYt ZWVjMDVmNDlhYzg2LzEvYWJmenY0NEtlMWtLRF9xaHljQ3NXQW9MRVo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8xNmQ4NWYtODViNS00MmUzLWFkOWYtZWVjMDVmNDlhYzg2 LzEvYWJmenY0NEtlMWtLRF9xaHljQ3NXQW9MRVo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZuoqaxU/ yZtw8muOxNPK+bacMdcNRvRnFPTSEKTELY32txaitlwUDLTSJ9a0Shtw8cxbO36L /WiHi4nDPBjXJKNA93+2Gs1WT/wvlxifyt1wTXl3afgZIym0QFW83zeTKWfVN1zr ZktqQTfI6vAKsA82MJ5aP9AGSiKOUO0lfqxmb5FeWOgguJF8DiN3iZGV+QX0t537 vYzEPlGpglzCC+yTshfmGc09pbElbHsRTP16MMwd+qSoZHZg550IhE6nKATdhXLV RxiQwYU+D78UEIHY72+AhmNNkIKTxan/BBSj24pF2xEs+1HznEPVO9CDtJlOPhK8 oZ0Ns5WslNs/nA== -----END CERTIFICATE-----Generated at Sun Dec 21 14:39:07 2025 by rpki-client