This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/ABPKmgrnGxDSnboMs-yrXxDfUXk.mft File: ABPKmgrnGxDSnboMs-yrXxDfUXk.mft (raw, json) Hash identifier: bL/eApRus2g4y8aUBiFNWllY7NHY02z1I7byombYm7A= Subject key identifier: 20:5A:6D:C6:71:F1:43:F8:DA:57:3E:17:C4:33:CD:FE:09:07:A5:85 Authority key identifier: 00:13:CA:9A:0A:E7:1B:10:D2:9D:BA:0C:B3:EC:AB:5F:10:DF:51:79 Certificate issuer: /CN=0013ca9a0ae71b10d29dba0cb3ecab5f10df5179 Certificate serial: 019ADA01509623B63C3E70B62270A229CFE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABPKmgrnGxDSnboMs-yrXxDfUXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/ABPKmgrnGxDSnboMs-yrXxDfUXk.mft Manifest number: 0E30 Signing time: Mon 01 Dec 2025 13:01:50 +0000 Manifest this update: Mon 01 Dec 2025 13:01:50 +0000 Manifest next update: Tue 02 Dec 2025 13:01:50 +0000 Files and hashes: 1: ABPKmgrnGxDSnboMs-yrXxDfUXk.crl (hash: 7Le6ToekFq2mFif6RL2NPoIMPCwtZFe9RLhmbCq/IRM=) 2: KOmHsYTT8dHL3QRmpI2yEaWq1H0.roa (hash: lw5VEiyghZjGPBV+Cuu9js4RXnD7F0lqD5TiyyWbpk8=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:da:01:50:96:23:b6:3c:3e:70:b6:22:70:a2:29:cf:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0013ca9a0ae71b10d29dba0cb3ecab5f10df5179 Validity Not Before: Dec 1 13:01:50 2025 GMT Not After : Dec 2 13:01:50 2025 GMT Subject: CN=205a6dc671f143f8da573e17c433cdfe0907a585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b1:ed:30:3a:8a:81:3b:ff:af:36:4a:ca:e0: 4a:87:52:b6:f0:a3:03:33:50:75:6b:ce:9f:c0:a1: df:96:3c:8a:ee:4e:82:82:91:67:9a:47:78:78:28: 55:2d:79:63:44:4f:2e:c3:11:70:fe:43:8a:d7:e1: cf:40:44:e5:71:44:50:2b:9e:26:22:ab:fb:26:50: 49:04:dd:eb:96:2a:9d:c5:de:de:51:cf:16:02:d9: 46:89:8b:2d:88:aa:00:ef:99:58:ef:1c:c9:1c:d4: 9b:ed:5a:e2:68:ae:c1:df:ab:10:c8:c3:ca:eb:1a: c9:2c:73:bb:82:87:a0:66:2d:6c:33:2d:91:90:a1: 76:15:46:b5:32:75:9c:f8:ef:8b:31:ea:be:c3:84: 16:27:8c:8e:59:86:aa:9f:4d:12:82:0e:68:86:04: ec:6c:aa:bb:a3:16:ab:fa:17:ca:90:2e:84:92:9b: d9:bc:25:cc:a7:cc:00:c4:4b:91:72:d2:8b:14:fa: d7:0e:bd:90:15:a3:fd:91:32:20:59:59:35:db:38: e8:77:91:d0:62:2c:97:a3:10:3b:56:8e:1f:8c:cd: 8e:2f:f8:b1:87:79:44:4a:2a:32:0e:52:32:df:87: 2d:3d:4b:a4:d1:95:49:10:60:a9:ba:6b:ee:71:47: cd:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:5A:6D:C6:71:F1:43:F8:DA:57:3E:17:C4:33:CD:FE:09:07:A5:85 X509v3 Authority Key Identifier: keyid:00:13:CA:9A:0A:E7:1B:10:D2:9D:BA:0C:B3:EC:AB:5F:10:DF:51:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABPKmgrnGxDSnboMs-yrXxDfUXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/ABPKmgrnGxDSnboMs-yrXxDfUXk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/ABPKmgrnGxDSnboMs-yrXxDfUXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:2e:67:65:a8:e3:79:dc:d9:b5:6f:99:1e:db:52:c5:7e:08: d4:7c:44:5f:b0:fd:65:8c:fc:69:c1:20:e9:28:25:d0:70:ce: 4e:95:3e:18:95:d5:4d:b6:cb:98:62:9a:02:b0:87:ab:18:64: 76:32:1d:be:e1:1e:be:24:f5:0c:4c:97:a7:d4:2f:55:f0:36: 7d:25:ed:8f:38:9f:9d:10:98:2f:1e:01:31:81:1b:f5:41:19: d3:ab:69:01:5f:1f:1d:ce:12:4e:e8:40:2c:1b:26:83:e1:9e: 33:6f:da:eb:54:09:34:72:e5:52:e5:7c:88:ee:c0:93:2e:54: 5b:83:ab:4e:1f:d3:f3:fa:92:81:10:d8:07:e7:ef:1b:05:04: f9:db:ae:7f:4c:98:75:b6:75:d4:2d:a1:74:36:15:cf:1d:40: ec:c2:e3:4f:2b:6f:2b:63:4e:b7:a3:81:b9:8d:7f:8d:cf:07: de:cc:4d:b9:9f:41:c1:b8:56:29:3a:cd:a8:c1:69:1d:a3:61: a4:6b:7d:d9:85:ea:57:2b:d9:ea:92:70:22:c7:f6:d9:37:28: f1:95:ca:c8:d4:0b:ec:6f:3d:33:83:2b:b9:e8:5d:c6:b1:cf: 35:a5:e3:fe:2f:50:2f:da:a0:bb:94:7b:4c:66:a8:49:c7:2d: 1f:9d:ca:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZraAVCWI7Y8PnC2InCiKc/oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMTNjYTlhMGFlNzFiMTBkMjlkYmEwY2IzZWNhYjVmMTBk ZjUxNzkwHhcNMjUxMjAxMTMwMTUwWhcNMjUxMjAyMTMwMTUwWjAzMTEwLwYDVQQD EygyMDVhNmRjNjcxZjE0M2Y4ZGE1NzNlMTdjNDMzY2RmZTA5MDdhNTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbHtMDqKgTv/rzZKyuBKh1K28KMD M1B1a86fwKHfljyK7k6CgpFnmkd4eChVLXljRE8uwxFw/kOK1+HPQETlcURQK54m Iqv7JlBJBN3rliqdxd7eUc8WAtlGiYstiKoA75lY7xzJHNSb7VriaK7B36sQyMPK 6xrJLHO7goegZi1sMy2RkKF2FUa1MnWc+O+LMeq+w4QWJ4yOWYaqn00Sgg5ohgTs bKq7oxar+hfKkC6EkpvZvCXMp8wAxEuRctKLFPrXDr2QFaP9kTIgWVk12zjod5HQ YiyXoxA7Vo4fjM2OL/ixh3lESioyDlIy34ctPUuk0ZVJEGCpumvucUfNUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBabcZx8UP42lc+F8Qzzf4JB6WFMB8GA1UdIwQY MBaAFAATypoK5xsQ0p26DLPsq18Q31F5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUJQS21ncm5HeERTbmJvTXMteXJYeERmVVhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi83YmRhZmItNDk1MS00M2IzLWFlZjAt YjU0MzhiOTJjOTliLzEvQUJQS21ncm5HeERTbmJvTXMteXJYeERmVVhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi83YmRhZmItNDk1MS00M2IzLWFlZjAtYjU0MzhiOTJjOTli LzEvQUJQS21ncm5HeERTbmJvTXMteXJYeERmVVhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZy5nZajj edzZtW+ZHttSxX4I1HxEX7D9ZYz8acEg6Sgl0HDOTpU+GJXVTbbLmGKaArCHqxhk djIdvuEeviT1DEyXp9QvVfA2fSXtjzifnRCYLx4BMYEb9UEZ06tpAV8fHc4STuhA LBsmg+GeM2/a61QJNHLlUuV8iO7Aky5UW4OrTh/T8/qSgRDYB+fvGwUE+duuf0yY dbZ11C2hdDYVzx1A7MLjTytvK2NOt6OBuY1/jc8H3sxNuZ9BwbhWKTrNqMFpHaNh pGt92YXqVyvZ6pJwIsf22Tco8ZXKyNQL7G89M4MruehdxrHPNaXj/i9QL9qgu5R7 TGaoScctH53KGg== -----END CERTIFICATE-----Generated at Tue Dec 16 20:52:06 2025 by rpki-client