This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft File: RABxct-fwtSi3bupNM68nwKG08o.mft (raw, json) Hash identifier: 3fJnpEY6n5dYzifl8l7AUtszvFO7e//KTj0kCJP7gNk= Subject key identifier: D6:1C:DB:A2:5F:98:AE:30:CA:50:41:C1:DB:3C:3D:14:CF:60:6F:7D Authority key identifier: 44:00:71:72:DF:9F:C2:D4:A2:DD:BB:A9:34:CE:BC:9F:02:86:D3:CA Certificate issuer: /CN=44007172df9fc2d4a2ddbba934cebc9f0286d3ca Certificate serial: 019B4F28F37F06D3FB636003B549A7D022BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft Manifest number: 1796 Signing time: Wed 24 Dec 2025 07:00:42 +0000 Manifest this update: Wed 24 Dec 2025 07:00:42 +0000 Manifest next update: Thu 25 Dec 2025 07:00:42 +0000 Files and hashes: 1: 480p7BIjIK-B7q3fhqVH-c9jWtM.roa (hash: Oq3bjkZh6ACA9+Ey6L0eW4PFiYEb6oJn3R3aG4qJpMs=) 2: 7MVokHTUjOR_Ula_qOVzOSXNEdU.roa (hash: iVCuhBUobzj667bcusQ2j4zXO5PCfzjmGuh6mK8Lkeo=) 3: GYuIoE-jlXSckwk_qSK_aV7UB4Q.roa (hash: sORKouCrelcQgpTPPPbZDvGrSxjdHNUzrheoRMHaMrw=) 4: RABxct-fwtSi3bupNM68nwKG08o.crl (hash: qWHjxaGCwLdXuqDmCafeE2FD2igxKUHXkTLTSVDL6qk=) 5: aa2j5wVm0c-lQnZ_s16QHGRxbVU.roa (hash: 2qdz/uEuQTzsIMdeNOG9LQdnTQSy4fa2A5Rp2WG5LzI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 07:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:28:f3:7f:06:d3:fb:63:60:03:b5:49:a7:d0:22:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44007172df9fc2d4a2ddbba934cebc9f0286d3ca Validity Not Before: Dec 24 07:00:42 2025 GMT Not After : Dec 25 07:00:42 2025 GMT Subject: CN=d61cdba25f98ae30ca5041c1db3c3d14cf606f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:32:74:a7:bc:76:86:63:e4:05:ea:27:6c:8b: 39:e4:91:6e:6f:ac:55:6e:3c:da:7f:9b:d0:ab:bd: fc:17:c5:2a:f7:f0:9f:57:2f:94:69:90:38:a1:ea: 9d:52:8f:0c:01:09:48:f4:c1:8f:2f:37:03:02:9e: 79:e9:9e:0b:b7:d8:8a:13:07:fb:1e:2e:9d:30:9e: b5:98:1b:b0:66:90:c6:0d:34:cd:03:39:0e:65:4d: 40:e1:23:34:7f:85:b1:eb:3c:01:48:9f:b9:35:cc: 83:55:07:83:5b:4c:60:0f:93:a0:37:fe:2d:45:ab: d4:2f:9c:18:6d:61:55:83:f6:fa:81:d3:18:23:29: e0:a1:3c:75:7b:44:5c:54:b6:27:39:15:ef:f3:a8: 86:65:00:d8:45:d1:db:79:4d:1a:29:63:d1:58:0f: 6c:95:af:44:ce:a4:90:d1:ef:50:07:7b:c0:95:26: e4:7a:e5:ea:d8:00:dd:da:04:ba:b4:1a:65:81:15: 43:71:86:f9:62:f1:50:8c:f7:19:75:5a:7f:81:77: b9:da:1f:b0:0f:0e:55:66:cb:f5:58:04:0f:8c:90: cd:c1:2f:9b:04:d4:1e:74:ec:56:77:f6:e5:ae:d5: 08:1e:eb:61:4c:d8:38:52:a5:e8:e6:71:06:e7:24: db:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:1C:DB:A2:5F:98:AE:30:CA:50:41:C1:DB:3C:3D:14:CF:60:6F:7D X509v3 Authority Key Identifier: keyid:44:00:71:72:DF:9F:C2:D4:A2:DD:BB:A9:34:CE:BC:9F:02:86:D3:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:31:77:70:0b:f3:ae:15:2a:d6:48:10:cc:b0:e2:4a:07:10: 58:c1:dd:a4:5a:e9:85:17:f8:4d:27:fa:1f:a2:f9:ed:48:75: 86:11:d0:ab:62:fb:62:59:12:27:95:d7:eb:d5:7f:18:73:97: 8a:bc:46:3d:ac:50:e1:d3:07:3c:c5:ad:81:15:f3:9b:6b:16: 54:51:3e:94:33:5e:f1:a0:1f:22:22:08:93:32:54:32:4c:b0: 32:d4:56:87:12:63:33:9f:09:41:50:4f:f8:3f:7c:77:3e:f1: f8:9b:3a:7c:54:05:fd:b4:45:49:a8:d5:9c:37:f6:71:14:96: 6e:13:f4:d7:6e:3a:8e:0c:8e:62:70:30:51:e7:dc:0b:24:ec: 69:7c:37:3c:6f:04:a6:d9:bb:e9:6a:77:56:0e:f2:d1:d2:3c: 21:86:e9:0f:b9:90:0d:10:57:16:95:4c:21:46:03:31:fb:d8: 74:2c:2b:31:3a:64:94:0c:23:9f:b5:84:38:ff:fb:2d:a2:b3: da:53:ad:67:b0:a2:2e:35:a6:94:dd:f2:25:5c:d7:31:1b:8d: 22:ed:ef:d8:3d:b4:29:86:5f:bb:dc:ce:f1:14:ad:04:14:23: d1:17:37:48:f9:1b:74:fe:f3:01:c9:ad:54:36:3f:ae:a5:79: 64:9b:28:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPKPN/BtP7Y2ADtUmn0CK6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0MDA3MTcyZGY5ZmMyZDRhMmRkYmJhOTM0Y2ViYzlmMDI4 NmQzY2EwHhcNMjUxMjI0MDcwMDQyWhcNMjUxMjI1MDcwMDQyWjAzMTEwLwYDVQQD EyhkNjFjZGJhMjVmOThhZTMwY2E1MDQxYzFkYjNjM2QxNGNmNjA2ZjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjJ0p7x2hmPkBeonbIs55JFub6xV bjzaf5vQq738F8Uq9/CfVy+UaZA4oeqdUo8MAQlI9MGPLzcDAp556Z4Lt9iKEwf7 Hi6dMJ61mBuwZpDGDTTNAzkOZU1A4SM0f4Wx6zwBSJ+5NcyDVQeDW0xgD5OgN/4t RavUL5wYbWFVg/b6gdMYIyngoTx1e0RcVLYnORXv86iGZQDYRdHbeU0aKWPRWA9s la9EzqSQ0e9QB3vAlSbkeuXq2ADd2gS6tBplgRVDcYb5YvFQjPcZdVp/gXe52h+w Dw5VZsv1WAQPjJDNwS+bBNQedOxWd/blrtUIHuthTNg4UqXo5nEG5yTb7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNYc26JfmK4wylBBwds8PRTPYG99MB8GA1UdIwQY MBaAFEQAcXLfn8LUot27qTTOvJ8ChtPKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkFCeGN0LWZ3dFNpM2J1cE5NNjhud0tHMDhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS85NDVkYmQtMmZiNy00ZGQxLTk2YTYt MDU4NWRlNGQ0ZWU3LzEvUkFCeGN0LWZ3dFNpM2J1cE5NNjhud0tHMDhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS85NDVkYmQtMmZiNy00ZGQxLTk2YTYtMDU4NWRlNGQ0ZWU3 LzEvUkFCeGN0LWZ3dFNpM2J1cE5NNjhud0tHMDhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhjF3cAvz rhUq1kgQzLDiSgcQWMHdpFrphRf4TSf6H6L57Uh1hhHQq2L7YlkSJ5XX69V/GHOX irxGPaxQ4dMHPMWtgRXzm2sWVFE+lDNe8aAfIiIIkzJUMkywMtRWhxJjM58JQVBP +D98dz7x+Js6fFQF/bRFSajVnDf2cRSWbhP01246jgyOYnAwUefcCyTsaXw3PG8E ptm76Wp3Vg7y0dI8IYbpD7mQDRBXFpVMIUYDMfvYdCwrMTpklAwjn7WEOP/7LaKz 2lOtZ7CiLjWmlN3yJVzXMRuNIu3v2D20KYZfu9zO8RStBBQj0Rc3SPkbdP7zAcmt VDY/rqV5ZJsoyQ== -----END CERTIFICATE-----Generated at Wed Dec 24 13:37:21 2025 by rpki-client