This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft File: abAZJ6Ghd9QmEiHZRihRSlJaluA.mft (raw, json) Hash identifier: s0UBRvrItdhBY51cw1pb9vGngyzBcpiJudYZl+tWT9E= Subject key identifier: 6D:50:13:87:78:A6:95:81:30:02:E1:2A:74:E2:20:16:75:5C:35:3F Authority key identifier: 69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0 Certificate issuer: /CN=69b01927a1a177d4261221d94628514a525a96e0 Certificate serial: 019B428027EB0151C37D9FAB3E338CD8D5EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft Manifest number: 0BC6 Signing time: Sun 21 Dec 2025 20:00:53 +0000 Manifest this update: Sun 21 Dec 2025 20:00:53 +0000 Manifest next update: Mon 22 Dec 2025 20:00:53 +0000 Files and hashes: 1: A0vsL2z_xaeExEMFhErE3dgWYuI.roa (hash: GFluxTgPqxFYWQe8ASr2AzVuLwmCDibJdLSINZzoxsw=) 2: abAZJ6Ghd9QmEiHZRihRSlJaluA.crl (hash: mBqteOy2KqgSQSmErepeGKO9z+ARiYE4mRtrT3WaVJg=) 3: uDu_9P9n8eoGu8X-iDdUh-TfwAY.roa (hash: SstG8OSmlbUZo2JnDI9jEdpMEQNgUKMYMBzo75QnAgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:27:eb:01:51:c3:7d:9f:ab:3e:33:8c:d8:d5:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69b01927a1a177d4261221d94628514a525a96e0 Validity Not Before: Dec 21 20:00:53 2025 GMT Not After : Dec 22 20:00:53 2025 GMT Subject: CN=6d50138778a695813002e12a74e22016755c353f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:33:87:60:c9:d9:6d:6e:1f:24:ef:b3:ba:4b: c1:88:cc:18:34:a2:cb:30:76:5f:b8:1d:33:b4:1d: 81:20:06:5f:f5:1f:c7:f6:01:81:4b:04:b9:0c:2c: 00:a8:04:42:5c:4c:54:53:bd:30:4f:f8:b0:14:bb: 92:5f:f3:0c:b4:70:97:3d:f2:ef:1d:c2:a5:2a:fb: 23:31:57:33:a7:6a:a9:35:49:4f:fc:34:3f:b7:e3: 16:49:c0:fa:43:fc:b8:94:3f:91:42:2d:15:58:c5: 47:5a:1a:52:ba:cc:81:13:6f:3d:16:de:bb:5f:14: 3f:8a:4a:56:4a:d1:f0:71:ce:1f:8a:66:0d:25:69: 42:61:fc:b2:58:0e:fe:ea:ae:b5:1a:a6:1f:47:6a: 6d:48:e8:de:bb:68:c7:04:15:43:97:0d:81:42:8e: 49:b9:1a:90:20:c7:b9:ed:84:02:98:e4:0d:0a:1a: 49:f5:7d:4b:c9:0d:3a:f4:2d:27:f0:20:b4:cc:f5: 47:64:58:36:81:77:00:1a:e0:c4:f6:d5:67:b8:7d: b9:30:c5:ec:b6:f9:81:ee:eb:07:f1:ca:02:04:00: d0:b4:16:bb:35:bd:cb:37:bc:c3:af:37:be:21:bb: e4:3c:6c:32:67:8d:d5:33:e9:c3:f2:8c:25:32:65: 21:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:50:13:87:78:A6:95:81:30:02:E1:2A:74:E2:20:16:75:5C:35:3F X509v3 Authority Key Identifier: keyid:69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:0b:9c:07:3f:82:32:89:d8:fa:08:56:d2:c8:f4:dc:27:91: 01:89:0e:24:8a:13:02:f0:bf:66:59:9c:39:d9:e3:c8:e8:1b: 49:fa:cd:ba:4e:0b:67:29:82:f1:85:4e:f6:c9:11:df:59:3d: 32:dd:59:6d:c6:df:9e:ce:1b:36:f8:a1:03:0e:90:6a:9a:00: a8:90:63:05:af:7c:a7:e5:14:13:99:d4:0f:fb:ff:14:a7:f9: 32:a5:a4:83:1a:d3:2c:80:12:97:af:fa:77:47:2b:32:e8:de: 78:8c:8e:e4:54:bb:73:05:f2:aa:72:95:07:cb:1e:e0:63:c0: fd:c3:82:94:35:a1:5f:a5:46:80:50:db:82:2c:62:50:dd:e1: e0:af:73:50:51:6f:89:60:06:b6:a3:a4:04:a3:b1:fb:ec:0f: 12:4f:c3:89:11:c4:b8:ac:08:ef:b6:f7:0c:7f:a7:4a:bc:12: f9:20:cb:c8:af:a4:0c:c1:da:f3:4b:50:03:c4:4e:7e:5b:32: 40:5c:5a:35:ab:4c:85:b8:ed:97:6b:8e:e4:d7:1f:c6:62:9d: 93:1e:7c:04:7a:fb:bb:ad:bc:2c:fd:1f:21:bb:6d:24:57:73: 86:b4:d5:22:86:3b:a1:36:65:bd:3e:ca:cf:21:1d:83:35:49: 9e:43:b9:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgCfrAVHDfZ+rPjOM2NXvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5YjAxOTI3YTFhMTc3ZDQyNjEyMjFkOTQ2Mjg1MTRhNTI1 YTk2ZTAwHhcNMjUxMjIxMjAwMDUzWhcNMjUxMjIyMjAwMDUzWjAzMTEwLwYDVQQD Eyg2ZDUwMTM4Nzc4YTY5NTgxMzAwMmUxMmE3NGUyMjAxNjc1NWMzNTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7DOHYMnZbW4fJO+zukvBiMwYNKLL MHZfuB0ztB2BIAZf9R/H9gGBSwS5DCwAqARCXExUU70wT/iwFLuSX/MMtHCXPfLv HcKlKvsjMVczp2qpNUlP/DQ/t+MWScD6Q/y4lD+RQi0VWMVHWhpSusyBE289Ft67 XxQ/ikpWStHwcc4fimYNJWlCYfyyWA7+6q61GqYfR2ptSOjeu2jHBBVDlw2BQo5J uRqQIMe57YQCmOQNChpJ9X1LyQ069C0n8CC0zPVHZFg2gXcAGuDE9tVnuH25MMXs tvmB7usH8coCBADQtBa7Nb3LN7zDrze+IbvkPGwyZ43VM+nD8owlMmUhdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG1QE4d4ppWBMALhKnTiIBZ1XDU/MB8GA1UdIwQY MBaAFGmwGSehoXfUJhIh2UYoUUpSWpbgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWJBWko2R2hkOVFtRWlIWlJpaFJTbEphbHVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8zMjhlYjMtNTYwMy00OTU1LWFhOTIt MjI1MmJjY2ZkYmY5LzEvYWJBWko2R2hkOVFtRWlIWlJpaFJTbEphbHVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8zMjhlYjMtNTYwMy00OTU1LWFhOTItMjI1MmJjY2ZkYmY5 LzEvYWJBWko2R2hkOVFtRWlIWlJpaFJTbEphbHVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAAucBz+C MonY+ghW0sj03CeRAYkOJIoTAvC/ZlmcOdnjyOgbSfrNuk4LZymC8YVO9skR31k9 Mt1Zbcbfns4bNvihAw6QapoAqJBjBa98p+UUE5nUD/v/FKf5MqWkgxrTLIASl6/6 d0crMujeeIyO5FS7cwXyqnKVB8se4GPA/cOClDWhX6VGgFDbgixiUN3h4K9zUFFv iWAGtqOkBKOx++wPEk/DiRHEuKwI77b3DH+nSrwS+SDLyK+kDMHa80tQA8ROflsy QFxaNatMhbjtl2uO5NcfxmKdkx58BHr7u628LP0fIbttJFdzhrTVIoY7oTZlvT7K zyEdgzVJnkO5UQ== -----END CERTIFICATE-----Generated at Mon Dec 22 02:52:42 2025 by rpki-client