This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft File: ABFADVSPohr4GaDG4j53pgEutek.mft (raw, json) Hash identifier: Q/X0urJQH7ErIZdnkzvLyv9uKrUU9PysOwC8IKkyRlQ= Subject key identifier: 84:48:DD:F3:E1:F0:C0:23:64:E3:E2:AD:58:6B:DC:32:5E:03:C8:8D Authority key identifier: 00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9 Certificate issuer: /CN=0011400d548fa21af819a0c6e23e77a6012eb5e9 Certificate serial: 019B40C8EE52D9961AC1197B06BD65CDF1B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft Manifest number: 171E Signing time: Sun 21 Dec 2025 12:01:08 +0000 Manifest this update: Sun 21 Dec 2025 12:01:08 +0000 Manifest next update: Mon 22 Dec 2025 12:01:08 +0000 Files and hashes: 1: 1-4u4Dw9kw9Y9CEi6GTjA8RhiXyk.roa (hash: Kdt5sjduBNPRdliFvzUojjEC7aaeGnPMG73opbmbK+Q=) 2: ABFADVSPohr4GaDG4j53pgEutek.crl (hash: wF+TG9REFL7FZ6JlQda3J+b53qyRKGfrssLn/g9KsQg=) 3: nFTNuRdL8Z-Wdwlm8A1gxGSf2iE.roa (hash: Be/+xAPsxrgz7pa9P1aEcP7attPVHrGgMu7I83eiMD8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:ee:52:d9:96:1a:c1:19:7b:06:bd:65:cd:f1:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0011400d548fa21af819a0c6e23e77a6012eb5e9 Validity Not Before: Dec 21 12:01:08 2025 GMT Not After : Dec 22 12:01:08 2025 GMT Subject: CN=8448ddf3e1f0c02364e3e2ad586bdc325e03c88d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:98:1a:aa:ab:cf:2d:55:83:75:36:07:ff:4e: 31:08:92:c2:7e:1d:38:85:09:96:b3:b9:77:7f:d4: ae:96:96:f3:c2:fe:b5:f6:0b:bf:01:60:c0:0e:2b: 22:bd:55:25:22:f3:65:17:53:6f:fe:bf:6d:a7:44: ef:24:7e:2f:47:d6:2c:d9:47:9b:b3:3c:4f:88:0d: 29:e4:96:c8:53:8c:de:92:93:8e:ab:5c:57:0a:5f: e7:0a:ac:f6:32:bb:85:a2:d0:22:a0:bc:62:f7:a1: df:04:40:ec:08:91:96:c2:d1:09:53:0f:bd:f6:65: 41:98:9d:b9:47:a6:32:7d:54:f8:f9:d4:fd:94:0d: 50:28:0f:88:2c:e2:74:09:fd:67:bf:68:7e:c1:78: 0d:e2:c5:a2:04:69:28:19:89:c5:cd:47:4e:c2:53: 5c:6d:12:91:dd:89:31:ce:d6:1b:5b:e6:5d:10:c1: b5:7c:1f:af:59:d1:f5:4f:e8:fd:33:61:06:ec:00: ff:53:5e:8c:3c:0e:68:d0:9d:40:35:2e:2f:7d:76: 84:3c:d9:ea:7a:36:2b:6d:75:cd:ec:ec:fb:9f:cc: 4a:7d:cd:00:e5:08:29:77:bf:f4:b2:e1:cb:c7:55: 9b:71:d9:69:c4:1c:f5:ce:9b:01:4f:5c:a0:fe:9b: da:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:48:DD:F3:E1:F0:C0:23:64:E3:E2:AD:58:6B:DC:32:5E:03:C8:8D X509v3 Authority Key Identifier: keyid:00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:e9:99:21:3f:f8:ec:21:98:29:08:1b:17:cf:f8:44:8d:3c: d5:49:e3:8c:e5:7b:bd:de:50:32:6c:8c:e0:25:a2:0d:73:e3: c5:1b:8f:a6:9d:44:30:46:ad:8e:63:e2:22:00:cf:c1:3f:2e: fc:a4:eb:b0:34:bd:88:08:86:42:cf:8e:b5:29:2c:ae:cb:6a: 09:7b:19:50:f4:16:e6:1a:94:ae:b5:04:ba:24:b4:54:d1:8d: fb:8c:3c:cf:10:57:1b:ad:4e:b5:b6:c8:6b:91:30:41:93:10: f7:53:47:27:67:ab:5d:0c:0e:07:02:75:c3:66:a6:67:33:50: 8b:44:2b:6c:03:81:8b:27:ab:d4:12:ff:b2:d7:67:6b:01:78: 42:fc:0a:00:7d:da:8b:eb:32:9c:ab:fa:77:98:38:89:d8:2c: d8:4c:a4:49:03:45:67:8d:bf:57:3b:28:95:08:4b:4d:01:48: cd:6f:f6:9a:a6:91:9a:72:c5:42:fc:b7:cf:cb:e6:a3:48:72: 19:0a:b0:9e:f3:66:3d:a5:4a:ca:46:a2:29:5c:60:99:46:37: aa:13:9b:73:ab:e9:04:cf:4e:c7:19:06:9f:e1:be:29:03:a0: 50:e8:e7:33:3b:16:77:58:65:50:a7:77:aa:69:f0:79:98:cf: c2:e9:0c:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyO5S2ZYawRl7Br1lzfG2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMTE0MDBkNTQ4ZmEyMWFmODE5YTBjNmUyM2U3N2E2MDEy ZWI1ZTkwHhcNMjUxMjIxMTIwMTA4WhcNMjUxMjIyMTIwMTA4WjAzMTEwLwYDVQQD Eyg4NDQ4ZGRmM2UxZjBjMDIzNjRlM2UyYWQ1ODZiZGMzMjVlMDNjODhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6pgaqqvPLVWDdTYH/04xCJLCfh04 hQmWs7l3f9Sulpbzwv619gu/AWDADisivVUlIvNlF1Nv/r9tp0TvJH4vR9Ys2Ueb szxPiA0p5JbIU4zekpOOq1xXCl/nCqz2MruFotAioLxi96HfBEDsCJGWwtEJUw+9 9mVBmJ25R6YyfVT4+dT9lA1QKA+ILOJ0Cf1nv2h+wXgN4sWiBGkoGYnFzUdOwlNc bRKR3YkxztYbW+ZdEMG1fB+vWdH1T+j9M2EG7AD/U16MPA5o0J1ANS4vfXaEPNnq ejYrbXXN7Oz7n8xKfc0A5Qgpd7/0suHLx1WbcdlpxBz1zpsBT1yg/pva6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIRI3fPh8MAjZOPirVhr3DJeA8iNMB8GA1UdIwQY MBaAFAARQA1Uj6Ia+BmgxuI+d6YBLrXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUJGQURWU1BvaHI0R2FERzRqNTNwZ0V1dGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81MmRhYWItNjgyOS00NWZhLTk2N2Ut MDFmNDYwNmM2NWVjLzEvQUJGQURWU1BvaHI0R2FERzRqNTNwZ0V1dGVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy81MmRhYWItNjgyOS00NWZhLTk2N2UtMDFmNDYwNmM2NWVj LzEvQUJGQURWU1BvaHI0R2FERzRqNTNwZ0V1dGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXumZIT/4 7CGYKQgbF8/4RI081UnjjOV7vd5QMmyM4CWiDXPjxRuPpp1EMEatjmPiIgDPwT8u /KTrsDS9iAiGQs+OtSksrstqCXsZUPQW5hqUrrUEuiS0VNGN+4w8zxBXG61OtbbI a5EwQZMQ91NHJ2erXQwOBwJ1w2amZzNQi0QrbAOBiyer1BL/stdnawF4QvwKAH3a i+synKv6d5g4idgs2EykSQNFZ42/VzsolQhLTQFIzW/2mqaRmnLFQvy3z8vmo0hy GQqwnvNmPaVKykaiKVxgmUY3qhObc6vpBM9OxxkGn+G+KQOgUOjnMzsWd1hlUKd3 qmnweZjPwukM1A== -----END CERTIFICATE-----Generated at Sun Dec 21 13:21:12 2025 by rpki-client