This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft File: AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft (raw, json) Hash identifier: Ul/m6pBIbD4dEUf5SMqcAPrRo4Eyan5pQobvrkMwveU= Subject key identifier: 15:A4:DF:8F:C1:3B:9C:64:4F:28:D4:EF:B6:23:0B:85:9D:99:C9:52 Authority key identifier: 01:BA:E5:09:DF:7E:C5:24:D4:F7:50:FF:80:92:74:AB:00:64:93:22 Certificate issuer: /CN=01bae509df7ec524d4f750ff809274ab00649322 Certificate serial: 019B3AC678C5A07D60318B5DDAEB05B0152D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft Manifest number: 11FA Signing time: Sat 20 Dec 2025 08:00:44 +0000 Manifest this update: Sat 20 Dec 2025 08:00:44 +0000 Manifest next update: Sun 21 Dec 2025 08:00:44 +0000 Files and hashes: 1: AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl (hash: wKIs7S2M/aVoq49U6+XkXOTfqVHNkG/aXWbxQf4H+9k=) 2: r9ivPCH7B-EIjmvOeGIsU1bVmJw.roa (hash: ZoMymQkL6qzTxWYBfF5BxJb7oUgkp1cRchZsdJ96SAk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:78:c5:a0:7d:60:31:8b:5d:da:eb:05:b0:15:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01bae509df7ec524d4f750ff809274ab00649322 Validity Not Before: Dec 20 08:00:44 2025 GMT Not After : Dec 21 08:00:44 2025 GMT Subject: CN=15a4df8fc13b9c644f28d4efb6230b859d99c952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d6:66:9e:b1:ee:8e:0c:8d:a1:ac:62:79:b5: 96:ac:30:50:c7:c0:46:7a:b0:e8:31:d2:c2:5c:99: 84:26:2b:59:10:af:49:5c:a0:b2:69:90:15:38:00: aa:b5:5a:ed:23:d4:73:d3:d2:4c:41:1d:2c:c3:61: 05:43:1c:c0:5b:f8:73:9a:11:9e:5b:08:ce:2d:96: a3:06:a2:92:a6:d8:54:5f:06:2a:87:82:9d:66:94: 5c:5a:ae:c4:18:83:21:6d:5f:4a:07:f6:82:c4:a6: 29:d4:c1:bb:68:a4:46:10:77:68:c8:ad:7d:75:b7: 2c:e6:e8:79:c5:66:10:ec:8c:89:a4:19:6d:4f:50: f8:6d:0f:e5:9a:03:f9:cf:56:50:dd:7b:4c:18:07: 7e:72:34:5f:0d:7b:f1:6c:c6:89:79:c1:b8:96:01: 2d:30:ec:94:0c:8e:c4:77:76:e1:59:35:13:9f:16: c5:65:90:0b:df:c6:b3:df:f3:dd:67:96:87:42:b2: c0:bc:64:61:96:98:4c:b8:c7:59:4d:6d:56:b5:bb: 2e:93:51:92:a8:04:0e:2b:a6:76:58:56:0b:0e:9c: b3:93:89:e1:34:f3:8f:0e:04:fd:82:24:8c:13:69: df:b8:e0:cb:fd:3c:92:9c:ae:17:5f:f0:1f:82:92: f3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A4:DF:8F:C1:3B:9C:64:4F:28:D4:EF:B6:23:0B:85:9D:99:C9:52 X509v3 Authority Key Identifier: keyid:01:BA:E5:09:DF:7E:C5:24:D4:F7:50:FF:80:92:74:AB:00:64:93:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:65:d2:b5:fd:00:9f:fc:f0:bb:62:dc:a0:68:44:38:cf:12: 00:53:f5:19:e5:41:ee:ac:bc:90:47:08:84:55:9a:96:e3:9d: 5d:91:51:1d:dd:40:bf:63:94:52:1d:a0:1f:bc:9b:65:8e:91: 98:55:89:07:49:b4:e3:c6:e4:f4:d3:ad:1c:45:da:f8:ea:c1: 5f:93:67:72:29:21:da:6c:dc:3d:93:01:3d:f1:f4:d5:d3:cd: f5:d2:77:59:7b:04:09:68:5a:89:e7:00:87:30:e8:ab:48:40: a9:59:a9:a5:d4:92:b5:33:1e:e1:39:63:89:e5:9a:b7:93:1f: 0c:c5:ee:bf:05:97:18:dc:ff:83:66:e6:fb:65:c7:86:29:fa: 02:10:e9:a2:e4:06:1a:e7:46:bb:10:46:53:f3:45:c7:74:ab: 23:cc:b0:35:ba:a6:b9:42:91:83:e3:1a:66:a5:c2:d7:00:0a: 1a:26:27:b0:83:5e:cc:fb:4c:25:dc:71:28:a3:14:21:97:ae: 0d:b3:8e:db:90:d2:36:41:4a:98:e1:7e:75:da:02:dc:25:68: a5:f6:20:c9:40:e6:28:ac:6a:09:b7:42:f8:b3:0f:b9:e3:f8: c7:8b:6e:76:50:c9:a9:88:58:a9:d3:13:81:9e:5d:16:2c:31: 8e:41:65:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xnjFoH1gMYtd2usFsBUtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxYmFlNTA5ZGY3ZWM1MjRkNGY3NTBmZjgwOTI3NGFiMDA2 NDkzMjIwHhcNMjUxMjIwMDgwMDQ0WhcNMjUxMjIxMDgwMDQ0WjAzMTEwLwYDVQQD EygxNWE0ZGY4ZmMxM2I5YzY0NGYyOGQ0ZWZiNjIzMGI4NTlkOTljOTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9ZmnrHujgyNoaxiebWWrDBQx8BG erDoMdLCXJmEJitZEK9JXKCyaZAVOACqtVrtI9Rz09JMQR0sw2EFQxzAW/hzmhGe WwjOLZajBqKSpthUXwYqh4KdZpRcWq7EGIMhbV9KB/aCxKYp1MG7aKRGEHdoyK19 dbcs5uh5xWYQ7IyJpBltT1D4bQ/lmgP5z1ZQ3XtMGAd+cjRfDXvxbMaJecG4lgEt MOyUDI7Ed3bhWTUTnxbFZZAL38az3/PdZ5aHQrLAvGRhlphMuMdZTW1Wtbsuk1GS qAQOK6Z2WFYLDpyzk4nhNPOPDgT9giSME2nfuODL/TySnK4XX/AfgpLzgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBWk34/BO5xkTyjU77YjC4WdmclSMB8GA1UdIwQY MBaAFAG65QnffsUk1PdQ/4CSdKsAZJMiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWJybENkOS14U1RVOTFEX2dKSjBxd0Jra3lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZmJhYzAtZTdhNS00Yzk1LTg4YjYt ODRhOWVmZWMwZDFiLzEvQWJybENkOS14U1RVOTFEX2dKSjBxd0Jra3lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9hZmJhYzAtZTdhNS00Yzk1LTg4YjYtODRhOWVmZWMwZDFi LzEvQWJybENkOS14U1RVOTFEX2dKSjBxd0Jra3lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo2XStf0A n/zwu2LcoGhEOM8SAFP1GeVB7qy8kEcIhFWaluOdXZFRHd1Av2OUUh2gH7ybZY6R mFWJB0m048bk9NOtHEXa+OrBX5Nncikh2mzcPZMBPfH01dPN9dJ3WXsECWhaiecA hzDoq0hAqVmppdSStTMe4TljieWat5MfDMXuvwWXGNz/g2bm+2XHhin6AhDpouQG GudGuxBGU/NFx3SrI8ywNbqmuUKRg+MaZqXC1wAKGiYnsINezPtMJdxxKKMUIZeu DbOO25DSNkFKmOF+ddoC3CVopfYgyUDmKKxqCbdC+LMPueP4x4tudlDJqYhYqdMT gZ5dFiwxjkFlGw== -----END CERTIFICATE-----Generated at Sat Dec 20 12:15:15 2025 by rpki-client