This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft File: aBYXGz-RsdELBEWYf2EUKKvxPho.mft (raw, json) Hash identifier: 6DYgGQ4Bs14VeUDqkugim7hZzpFHUr08nl1bUIVXKUo= Subject key identifier: 66:46:7A:62:02:0A:21:22:B9:B3:95:15:56:DC:8D:4D:E3:30:29:39 Authority key identifier: 68:16:17:1B:3F:91:B1:D1:0B:04:45:98:7F:61:14:28:AB:F1:3E:1A Certificate issuer: /CN=6816171b3f91b1d10b0445987f611428abf13e1a Certificate serial: 019B3CB521C8478DE3E2709C819A320F5DB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft Manifest number: 026D Signing time: Sat 20 Dec 2025 17:01:02 +0000 Manifest this update: Sat 20 Dec 2025 17:01:02 +0000 Manifest next update: Sun 21 Dec 2025 17:01:02 +0000 Files and hashes: 1: aBYXGz-RsdELBEWYf2EUKKvxPho.crl (hash: n3Du0IDsq3rivB0/2KmoFDIKP4fHbneER/fq+cRo/KY=) 2: ctE-xjtRaK2N_xv7jPgdr16mAqk.roa (hash: 6dqptnwwlw4mSqTSZoD2O9lUv3DCB5Cf6H1piQtg/m0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:21:c8:47:8d:e3:e2:70:9c:81:9a:32:0f:5d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6816171b3f91b1d10b0445987f611428abf13e1a Validity Not Before: Dec 20 17:01:02 2025 GMT Not After : Dec 21 17:01:02 2025 GMT Subject: CN=66467a62020a2122b9b3951556dc8d4de3302939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:52:44:02:0d:b0:1f:89:2a:b4:7a:09:40:e7: 9c:c4:16:52:ae:23:72:eb:3e:2d:f9:7a:41:05:f1: fd:17:30:5f:01:c8:95:63:ad:04:7a:0e:f1:b8:4c: a7:91:d2:93:4a:08:dc:0c:f1:e7:67:0d:9c:bd:eb: ff:16:d4:1d:de:36:74:51:27:d2:45:6b:9e:a0:02: 5a:a5:d3:f0:b5:d4:b3:d4:01:bf:3c:75:48:d2:5f: 50:7e:97:b7:e1:01:e2:6a:78:c7:c3:04:c2:8c:e4: 62:c8:bb:ba:67:f1:73:a3:69:ac:4d:12:c2:c5:0c: 2c:bc:46:dd:a8:bc:2a:33:4b:70:0c:bc:fe:f3:4b: f3:ec:ec:7c:62:9a:8e:b2:53:c3:c5:1b:09:16:23: 2e:56:af:9c:79:a8:36:b7:bc:5c:a5:95:e2:73:bf: 2b:5b:25:c6:ee:72:5e:2d:3b:a8:c9:5a:88:7c:74: 6f:08:22:d1:8d:45:f9:1f:52:c3:ae:0b:ba:ce:56: 38:1c:2f:b3:59:c0:54:02:a6:c9:49:4e:e4:1a:a8: 16:72:18:15:86:56:b6:7f:d1:fd:98:1f:e0:17:3b: 99:1d:7a:30:e5:f6:a0:9b:a3:a6:13:50:e4:4b:be: d6:8c:c1:86:15:82:15:53:81:e3:db:c1:94:e9:de: 5e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:46:7A:62:02:0A:21:22:B9:B3:95:15:56:DC:8D:4D:E3:30:29:39 X509v3 Authority Key Identifier: keyid:68:16:17:1B:3F:91:B1:D1:0B:04:45:98:7F:61:14:28:AB:F1:3E:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:dd:61:a5:3b:bd:29:24:4f:11:4f:8d:d8:31:03:6d:40:61: bc:91:d6:2a:f5:9c:3a:4c:2d:dd:08:5e:ca:27:24:dc:9d:42: 5e:70:9a:14:ab:f1:ac:65:e1:1d:c3:e8:eb:35:b5:78:ae:ad: 09:21:7d:ab:9d:b0:72:de:70:54:f6:83:40:51:79:34:20:6c: 6c:ba:13:f3:94:e7:b5:a6:67:21:4a:ba:9e:f3:93:98:70:f3: ac:fd:d4:e4:63:51:c8:27:cf:92:5a:a8:32:2d:ad:c2:18:8d: 3c:5d:43:66:b8:47:a5:c0:33:fd:22:5c:85:7d:0d:04:d5:9e: bf:57:e7:ed:fa:94:d8:9c:6f:64:cf:e9:e7:f4:f8:f2:f2:f6: 95:46:83:72:a0:7b:56:97:4d:c8:3d:bf:7f:f4:c0:06:69:72: 4d:81:1e:10:97:f4:ab:89:0f:b0:8f:28:e8:93:2a:d9:32:0d: 50:6b:a3:bc:12:59:6e:bc:52:07:5e:7c:7c:78:22:05:e7:2a: 02:35:61:1c:65:8a:3a:7e:64:5d:4b:51:62:bc:ac:65:e2:14: 27:a6:38:b0:32:e2:c8:9e:fd:46:1d:98:bd:a5:ff:a7:af:ec: 87:5e:75:51:63:8a:4d:b7:0c:7b:2e:e9:1c:b1:c0:0d:05:83: cc:d1:54:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tSHIR43j4nCcgZoyD12wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MTYxNzFiM2Y5MWIxZDEwYjA0NDU5ODdmNjExNDI4YWJm MTNlMWEwHhcNMjUxMjIwMTcwMTAyWhcNMjUxMjIxMTcwMTAyWjAzMTEwLwYDVQQD Eyg2NjQ2N2E2MjAyMGEyMTIyYjliMzk1MTU1NmRjOGQ0ZGUzMzAyOTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFJEAg2wH4kqtHoJQOecxBZSriNy 6z4t+XpBBfH9FzBfAciVY60Eeg7xuEynkdKTSgjcDPHnZw2cvev/FtQd3jZ0USfS RWueoAJapdPwtdSz1AG/PHVI0l9Qfpe34QHianjHwwTCjORiyLu6Z/Fzo2msTRLC xQwsvEbdqLwqM0twDLz+80vz7Ox8YpqOslPDxRsJFiMuVq+ceag2t7xcpZXic78r WyXG7nJeLTuoyVqIfHRvCCLRjUX5H1LDrgu6zlY4HC+zWcBUAqbJSU7kGqgWchgV hla2f9H9mB/gFzuZHXow5fagm6OmE1DkS77WjMGGFYIVU4Hj28GU6d5eywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGZGemICCiEiubOVFVbcjU3jMCk5MB8GA1UdIwQY MBaAFGgWFxs/kbHRCwRFmH9hFCir8T4aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUJZWEd6LVJzZEVMQkVXWWYyRVVLS3Z4UGhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8yYTUxNTUtMTMzNi00NTA3LTlhM2Yt ZjBhN2UxY2EzYzg1LzEvYUJZWEd6LVJzZEVMQkVXWWYyRVVLS3Z4UGhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8yYTUxNTUtMTMzNi00NTA3LTlhM2YtZjBhN2UxY2EzYzg1 LzEvYUJZWEd6LVJzZEVMQkVXWWYyRVVLS3Z4UGhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmt1hpTu9 KSRPEU+N2DEDbUBhvJHWKvWcOkwt3Qheyick3J1CXnCaFKvxrGXhHcPo6zW1eK6t CSF9q52wct5wVPaDQFF5NCBsbLoT85TntaZnIUq6nvOTmHDzrP3U5GNRyCfPklqo Mi2twhiNPF1DZrhHpcAz/SJchX0NBNWev1fn7fqU2JxvZM/p5/T48vL2lUaDcqB7 VpdNyD2/f/TABmlyTYEeEJf0q4kPsI8o6JMq2TINUGujvBJZbrxSB158fHgiBecq AjVhHGWKOn5kXUtRYrysZeIUJ6Y4sDLiyJ79Rh2YvaX/p6/sh151UWOKTbcMey7p HLHADQWDzNFURA== -----END CERTIFICATE-----Generated at Sat Dec 20 21:32:15 2025 by rpki-client