This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft File: aBzk2Zuo67kaeUq_y90VveCcmfg.mft (raw, json) Hash identifier: J51Eyddd0GEreMHI4u1mJoMi0hsXDRBKeH/05P2taIU= Subject key identifier: 9D:B3:49:7F:F2:E8:11:A5:63:DC:C1:03:2A:39:25:38:7A:7D:C1:1A Authority key identifier: 68:1C:E4:D9:9B:A8:EB:B9:1A:79:4A:BF:CB:DD:15:BD:E0:9C:99:F8 Certificate issuer: /CN=681ce4d99ba8ebb91a794abfcbdd15bde09c99f8 Certificate serial: 019B3C7E6284EDD004B1CA7180872C0D3D00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft Manifest number: 1795 Signing time: Sat 20 Dec 2025 16:01:14 +0000 Manifest this update: Sat 20 Dec 2025 16:01:14 +0000 Manifest next update: Sun 21 Dec 2025 16:01:14 +0000 Files and hashes: 1: PK7BcrFS0l5bnlZ0HAf0zsv4dRI.roa (hash: X0DXQ3bBNCzCj3LUePAQk7Zy5NXqPrKEOx5dW7kBo5M=) 2: aBzk2Zuo67kaeUq_y90VveCcmfg.crl (hash: g03/91id314GGpSkCHCshANE+pBhJ/pEtFzDWzZuiNw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:62:84:ed:d0:04:b1:ca:71:80:87:2c:0d:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=681ce4d99ba8ebb91a794abfcbdd15bde09c99f8 Validity Not Before: Dec 20 16:01:14 2025 GMT Not After : Dec 21 16:01:14 2025 GMT Subject: CN=9db3497ff2e811a563dcc1032a3925387a7dc11a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fc:67:2f:85:68:5c:cf:f9:78:8b:88:19:99: d0:c7:2b:8d:c5:f3:35:17:7f:9e:d0:16:87:cd:33: 9b:4a:19:37:5f:f5:1b:8b:2b:33:fc:29:46:a1:a9: 91:7a:c6:0a:ce:31:c0:d5:21:51:f4:8c:00:be:5a: 64:a6:37:81:d8:65:63:5d:3a:12:44:81:c3:8c:77: c8:41:04:43:98:58:a9:bc:6a:29:1a:4a:3f:d3:a4: 3a:b9:81:a2:8d:de:48:47:fa:4a:34:59:d5:3b:9b: 46:02:6a:58:93:ba:ad:87:54:d4:5c:0d:0b:17:79: 5e:e3:c5:67:ac:26:d9:c2:59:c7:16:8a:a3:82:3b: ff:fa:2f:ae:36:46:3c:86:35:d8:12:4e:db:9f:a3: 61:1c:dc:9a:ae:b2:02:ea:f9:48:2a:de:37:65:6c: 58:9d:ac:a7:e8:04:bc:f8:c4:9e:44:2f:01:a3:08: 29:b5:dc:68:ff:5b:34:c1:16:01:7c:fa:3b:44:6f: 06:db:be:9f:f0:c0:94:69:b1:22:28:98:c7:6a:ab: d3:1b:db:65:9d:4d:b6:f5:30:ae:68:73:a9:21:6c: e3:3a:56:e5:93:fa:e2:23:3e:75:40:6c:78:9e:87: 12:7c:6a:9d:77:c9:9e:d7:d4:b0:54:4d:85:52:7f: 93:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B3:49:7F:F2:E8:11:A5:63:DC:C1:03:2A:39:25:38:7A:7D:C1:1A X509v3 Authority Key Identifier: keyid:68:1C:E4:D9:9B:A8:EB:B9:1A:79:4A:BF:CB:DD:15:BD:E0:9C:99:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:b5:9d:a4:2c:72:5d:31:99:87:1e:e6:85:38:bc:c4:17:d5: 05:d8:d9:da:b6:d3:67:0d:6c:49:bf:25:f2:b3:41:7b:81:a7: d9:44:1c:16:91:b6:8d:44:8f:da:4f:b5:67:6a:70:85:2d:6b: 0e:30:43:9e:65:8f:bb:22:ef:5d:bb:1c:cb:85:c0:26:9c:2a: f7:1c:22:47:34:a2:fb:df:28:cc:bf:58:87:fb:3f:22:52:13: dc:b1:c4:b1:52:5f:81:b6:c7:50:de:0d:4f:e2:fd:4d:cf:7c: 27:e6:a5:dc:41:0b:1c:88:61:0f:72:19:a8:44:22:34:17:45: 9b:91:71:91:c5:60:a0:e8:56:7c:97:33:a2:1d:c5:0e:a9:88: 4d:b1:5b:4a:a8:43:3c:23:e9:31:cb:a5:dd:c7:73:91:16:1e: 43:33:ce:e0:82:ae:2a:35:c7:08:6c:1b:ba:59:3b:8e:6c:e9: a5:20:ab:0b:51:d7:70:30:a5:26:71:4f:8a:f0:cc:6a:f0:c5: 33:38:c2:ed:ae:9c:21:ea:9f:41:dc:1a:e6:66:17:a0:5d:70: 25:6a:5c:dd:de:0c:20:e9:10:87:0c:73:87:6b:74:48:ad:2c: 5f:71:50:3a:cc:6d:00:88:fa:db:3a:78:a5:7a:35:95:81:6e: 7f:4e:6e:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fmKE7dAEscpxgIcsDT0AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MWNlNGQ5OWJhOGViYjkxYTc5NGFiZmNiZGQxNWJkZTA5 Yzk5ZjgwHhcNMjUxMjIwMTYwMTE0WhcNMjUxMjIxMTYwMTE0WjAzMTEwLwYDVQQD Eyg5ZGIzNDk3ZmYyZTgxMWE1NjNkY2MxMDMyYTM5MjUzODdhN2RjMTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvxnL4VoXM/5eIuIGZnQxyuNxfM1 F3+e0BaHzTObShk3X/Ubiysz/ClGoamResYKzjHA1SFR9IwAvlpkpjeB2GVjXToS RIHDjHfIQQRDmFipvGopGko/06Q6uYGijd5IR/pKNFnVO5tGAmpYk7qth1TUXA0L F3le48VnrCbZwlnHFoqjgjv/+i+uNkY8hjXYEk7bn6NhHNyarrIC6vlIKt43ZWxY nayn6AS8+MSeRC8Bowgptdxo/1s0wRYBfPo7RG8G276f8MCUabEiKJjHaqvTG9tl nU229TCuaHOpIWzjOlblk/riIz51QGx4nocSfGqdd8me19SwVE2FUn+TOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2zSX/y6BGlY9zBAyo5JTh6fcEaMB8GA1UdIwQY MBaAFGgc5NmbqOu5GnlKv8vdFb3gnJn4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUJ6azJadW82N2thZVVxX3k5MFZ2ZUNjbWZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi82YjllZTgtOTI0Yi00YTMxLWE0NjQt OWY5OWMxNDc3ZmJlLzEvYUJ6azJadW82N2thZVVxX3k5MFZ2ZUNjbWZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi82YjllZTgtOTI0Yi00YTMxLWE0NjQtOWY5OWMxNDc3ZmJl LzEvYUJ6azJadW82N2thZVVxX3k5MFZ2ZUNjbWZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu7WdpCxy XTGZhx7mhTi8xBfVBdjZ2rbTZw1sSb8l8rNBe4Gn2UQcFpG2jUSP2k+1Z2pwhS1r DjBDnmWPuyLvXbscy4XAJpwq9xwiRzSi+98ozL9Yh/s/IlIT3LHEsVJfgbbHUN4N T+L9Tc98J+al3EELHIhhD3IZqEQiNBdFm5FxkcVgoOhWfJczoh3FDqmITbFbSqhD PCPpMcul3cdzkRYeQzPO4IKuKjXHCGwbulk7jmzppSCrC1HXcDClJnFPivDMavDF MzjC7a6cIeqfQdwa5mYXoF1wJWpc3d4MIOkQhwxzh2t0SK0sX3FQOsxtAIj62zp4 pXo1lYFuf05ubQ== -----END CERTIFICATE-----Generated at Sun Dec 21 00:01:51 2025 by rpki-client