This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft File: ABCrc5F2m18sVOM8i1p9-fN6M6g.mft (raw, json) Hash identifier: 4+8DWW4gWcMldy0s1rfHT90kev8MONz1mmnSeLrzRSk= Subject key identifier: 41:5F:EC:8E:9C:AA:B1:26:81:3D:5A:A2:7B:AB:25:47:C9:12:83:CB Authority key identifier: 00:10:AB:73:91:76:9B:5F:2C:54:E3:3C:8B:5A:7D:F9:F3:7A:33:A8 Certificate issuer: /CN=0010ab7391769b5f2c54e33c8b5a7df9f37a33a8 Certificate serial: 019B4DE173759E2852CA64EF275E6CFDAF0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABCrc5F2m18sVOM8i1p9-fN6M6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft Manifest number: 1793 Signing time: Wed 24 Dec 2025 01:02:59 +0000 Manifest this update: Wed 24 Dec 2025 01:02:59 +0000 Manifest next update: Thu 25 Dec 2025 01:02:59 +0000 Files and hashes: 1: ABCrc5F2m18sVOM8i1p9-fN6M6g.crl (hash: CWTyI6dkBFmMpIEKbsgLnpdQz8Qin83u0U9mz/RZ3xk=) 2: bucOkPeZ9hgmXR-Cim7gffbbCvY.roa (hash: izYXDRbk9TNl9PM3HDiVbSwwP9wF9slECQZLPrOfqi0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft rsync://rpki.ripe.net/repository/DEFAULT/ABCrc5F2m18sVOM8i1p9-fN6M6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e1:73:75:9e:28:52:ca:64:ef:27:5e:6c:fd:af:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0010ab7391769b5f2c54e33c8b5a7df9f37a33a8 Validity Not Before: Dec 24 01:02:59 2025 GMT Not After : Dec 25 01:02:59 2025 GMT Subject: CN=415fec8e9caab126813d5aa27bab2547c91283cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:83:db:5a:7b:11:d6:8f:91:32:aa:7d:a1:79: d3:6e:7b:29:95:c4:09:06:dc:e8:d8:2b:ca:2f:b3: d1:69:f0:29:f0:1d:bc:0a:cd:ef:90:eb:03:24:cb: c0:b9:24:57:f4:ed:0f:c9:ca:45:36:ec:6f:a9:05: b4:c3:9f:ed:60:2f:f3:ad:80:3a:44:4d:d3:56:59: 0a:5f:6e:ab:40:d6:84:a4:7f:1a:8d:68:95:75:5e: 2a:22:d1:6d:e3:7b:7a:34:4b:68:fd:cb:d4:e2:ac: c9:2c:33:fd:46:b6:24:56:cc:07:f9:6e:71:b9:ed: a2:02:94:01:15:b1:fc:82:e3:df:9a:aa:b5:70:3b: cd:10:f4:8c:0a:45:da:93:d8:17:34:f7:54:df:66: 64:57:ce:ac:07:00:ce:8c:5f:b1:4f:fa:2b:cf:00: 79:68:ab:5a:1c:2f:19:9e:76:21:e5:6d:28:b7:d0: 07:73:24:3e:b0:40:a4:5d:76:fd:49:31:0f:66:4f: 2d:d2:a8:be:c8:41:cc:7a:79:18:e5:c5:9d:2d:a3: f3:98:ca:ab:3f:a2:56:db:b9:ca:b4:70:e7:e2:89: 15:6e:8b:50:a3:0d:ac:3f:cc:34:ce:4a:bf:89:28: 14:41:51:ab:2d:c5:01:a3:d0:27:28:13:30:71:5a: 32:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:5F:EC:8E:9C:AA:B1:26:81:3D:5A:A2:7B:AB:25:47:C9:12:83:CB X509v3 Authority Key Identifier: keyid:00:10:AB:73:91:76:9B:5F:2C:54:E3:3C:8B:5A:7D:F9:F3:7A:33:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABCrc5F2m18sVOM8i1p9-fN6M6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:64:c8:15:a7:79:7a:5f:30:42:aa:07:6f:a1:04:06:a2:f6: 5b:b9:4a:4b:31:04:51:44:94:1c:ea:92:f2:b3:6e:fd:4a:07: b3:93:32:7d:14:48:6d:79:9d:dc:34:08:49:dc:aa:4a:58:76: 39:4b:bf:de:8f:e5:f0:aa:64:89:42:28:47:0e:77:4e:99:0b: 96:ea:76:2e:a8:cc:97:43:ed:a4:ad:0f:24:23:92:02:05:e6: 30:c0:c1:0f:dc:ba:4d:f9:81:ca:25:c5:a4:f8:52:cc:a8:35: f8:1f:9a:74:b8:86:78:83:3d:d6:e7:6d:d2:97:55:99:79:e9: 68:4d:e0:8a:c1:f5:10:73:6f:5d:d1:46:f4:da:66:e3:f6:97: 48:22:99:09:8c:b8:5e:3b:63:70:b4:54:ef:ec:d4:f2:63:a4: 68:49:7a:de:49:51:79:4a:97:a8:cf:fc:a4:1a:68:4b:0e:39: 75:d1:64:3c:b6:a5:88:24:c9:44:fa:1b:37:6f:76:f5:ba:bc: 9a:28:0a:50:5f:d8:22:43:60:33:bf:71:21:e5:4c:81:12:2e: 92:8a:21:0c:02:7d:55:44:e7:b7:72:29:5a:46:12:d5:af:bc: 1a:32:f6:9b:d2:a4:23:81:4c:ff:14:77:8e:3b:1a:8c:44:42: 1d:0a:cf:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4XN1nihSymTvJ15s/a8KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMTBhYjczOTE3NjliNWYyYzU0ZTMzYzhiNWE3ZGY5ZjM3 YTMzYTgwHhcNMjUxMjI0MDEwMjU5WhcNMjUxMjI1MDEwMjU5WjAzMTEwLwYDVQQD Eyg0MTVmZWM4ZTljYWFiMTI2ODEzZDVhYTI3YmFiMjU0N2M5MTI4M2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYPbWnsR1o+RMqp9oXnTbnsplcQJ Btzo2CvKL7PRafAp8B28Cs3vkOsDJMvAuSRX9O0PycpFNuxvqQW0w5/tYC/zrYA6 RE3TVlkKX26rQNaEpH8ajWiVdV4qItFt43t6NEto/cvU4qzJLDP9RrYkVswH+W5x ue2iApQBFbH8guPfmqq1cDvNEPSMCkXak9gXNPdU32ZkV86sBwDOjF+xT/orzwB5 aKtaHC8ZnnYh5W0ot9AHcyQ+sECkXXb9STEPZk8t0qi+yEHMenkY5cWdLaPzmMqr P6JW27nKtHDn4okVbotQow2sP8w0zkq/iSgUQVGrLcUBo9AnKBMwcVoyqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFf7I6cqrEmgT1aonurJUfJEoPLMB8GA1UdIwQY MBaAFAAQq3ORdptfLFTjPItaffnzejOoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUJDcmM1RjJtMThzVk9NOGkxcDktZk42TTZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9jMjJmNjEtMTMzYy00ZDBjLTg4Y2Yt YTE1NWUzZjlkNTI5LzEvQUJDcmM1RjJtMThzVk9NOGkxcDktZk42TTZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9jMjJmNjEtMTMzYy00ZDBjLTg4Y2YtYTE1NWUzZjlkNTI5 LzEvQUJDcmM1RjJtMThzVk9NOGkxcDktZk42TTZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHmTIFad5 el8wQqoHb6EEBqL2W7lKSzEEUUSUHOqS8rNu/UoHs5MyfRRIbXmd3DQISdyqSlh2 OUu/3o/l8KpkiUIoRw53TpkLlup2LqjMl0PtpK0PJCOSAgXmMMDBD9y6TfmByiXF pPhSzKg1+B+adLiGeIM91udt0pdVmXnpaE3gisH1EHNvXdFG9Npm4/aXSCKZCYy4 XjtjcLRU7+zU8mOkaEl63klReUqXqM/8pBpoSw45ddFkPLaliCTJRPobN2929bq8 migKUF/YIkNgM79xIeVMgRIukoohDAJ9VUTnt3IpWkYS1a+8GjL2m9KkI4FM/xR3 jjsajERCHQrPog== -----END CERTIFICATE-----Generated at Wed Dec 24 08:48:30 2025 by rpki-client