This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft File: 1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft (raw, json) Hash identifier: 84vyW3FNFclovMGVMrzYBAWR9f4a2VQCqRWM6DaNawg= Subject key identifier: 24:31:87:D8:CD:89:94:00:D5:DE:32:9C:F6:F3:6D:BC:67:4E:70:77 Authority key identifier: F8:06:EC:9C:F1:DE:AB:F9:D6:CD:5F:88:91:BB:82:D5:6F:91:D6:78 Certificate issuer: /CN=f806ec9cf1deabf9d6cd5f8891bb82d56f91d678 Certificate serial: 019AF50A9A83FFE8ABD1FDDF3DB9DD8486DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft Manifest number: 14A6 Signing time: Sat 06 Dec 2025 19:01:43 +0000 Manifest this update: Sat 06 Dec 2025 19:01:43 +0000 Manifest next update: Sun 07 Dec 2025 19:01:43 +0000 Files and hashes: 1: 1-AbsnPHeq_nWzV-IkbuC1W-R1ng.crl (hash: AXtXU6O1NGh2nj3KkqtngtUmo9lGALYkK8LVNIQ/VjI=) 2: 4WNYU3DPTpnOXIdy-DcRolCswoU.roa (hash: lJMeZdxIdcMT6oAlo0ZhGiaOSgJa2FyIZlyPkCXNXeU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft rsync://rpki.ripe.net/repository/DEFAULT/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:9a:83:ff:e8:ab:d1:fd:df:3d:b9:dd:84:86:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f806ec9cf1deabf9d6cd5f8891bb82d56f91d678 Validity Not Before: Dec 6 19:01:43 2025 GMT Not After : Dec 7 19:01:43 2025 GMT Subject: CN=243187d8cd899400d5de329cf6f36dbc674e7077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f2:12:0e:12:b0:26:7f:50:17:aa:ed:d0:30: d8:45:c8:20:03:9c:2c:17:9d:f3:a2:24:8c:2b:56: b8:15:89:9f:37:6c:83:88:05:75:f4:ac:1e:76:16: 4e:a6:83:97:09:bc:34:dd:1b:ab:a9:d2:85:de:59: 6e:15:63:a4:94:b5:79:53:02:6d:c0:a0:21:1d:be: ca:f0:31:7f:df:9f:dc:65:3a:ec:b8:16:c7:d8:ca: ee:c3:0a:53:ac:49:43:5e:c4:d5:12:6b:3e:dc:a8: 63:7d:c3:b6:cb:b8:fe:d8:94:67:5c:45:cf:9e:d9: c3:86:47:38:a2:43:c5:ea:d5:8d:b2:09:a9:1b:5e: b3:f2:c4:41:b2:41:08:6e:49:16:36:66:ea:62:c7: 92:6b:fc:37:d8:89:74:ff:52:3e:f2:a8:60:0e:5b: 24:19:88:09:2d:70:dc:44:3e:b1:2b:f4:a0:e2:3f: 96:f1:6b:f2:68:0d:df:75:5b:8f:eb:bd:3f:6d:3e: 91:c6:d0:24:5f:89:5a:04:a9:93:0c:7f:84:35:53: 97:c4:61:3d:aa:88:28:6e:ce:98:e3:2b:e5:8e:b1: aa:dc:25:e2:92:8c:64:38:47:e5:15:d9:d1:95:4d: 24:c0:28:48:fc:22:d0:9c:8a:55:20:14:e7:41:d9: de:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:31:87:D8:CD:89:94:00:D5:DE:32:9C:F6:F3:6D:BC:67:4E:70:77 X509v3 Authority Key Identifier: keyid:F8:06:EC:9C:F1:DE:AB:F9:D6:CD:5F:88:91:BB:82:D5:6F:91:D6:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:0e:24:77:4e:1b:59:51:19:0e:35:40:a3:f5:e5:77:77:1a: c3:0a:b2:42:7f:b2:98:54:c8:49:9f:a4:ad:fe:c8:5b:77:2c: db:86:7d:c1:f0:72:57:de:9b:70:55:81:25:c8:34:ca:05:2a: bb:6e:59:a1:9d:24:36:7d:77:f1:03:b5:01:00:b8:3f:14:19: dc:40:f4:13:69:26:bf:c6:0d:91:e7:1c:b6:07:e0:98:28:ce: c4:b5:20:da:0d:13:df:40:27:ec:f2:43:eb:4e:90:08:3e:1f: 66:de:c3:57:1b:48:f4:eb:15:9a:b7:fe:d1:76:98:e4:13:4d: e7:5c:b6:6f:cc:1e:d0:d0:e4:c2:03:6c:3f:71:1d:4a:ab:fe: ae:c3:0e:02:8e:82:8d:bd:f9:58:9d:04:7e:31:c2:b6:48:45: 22:65:a8:b4:77:e7:79:dd:cb:ec:86:e4:c0:e5:45:e6:0f:9b: c5:9a:fd:7d:62:26:74:b5:bf:87:84:1e:4c:36:fd:98:4d:ad: 6f:b3:54:fb:41:1b:7f:1a:d1:4d:17:a7:67:33:36:18:c4:6d: 12:fe:cb:ab:a5:81:69:94:a5:5e:d3:f6:6d:a8:01:9d:ec:89: d3:8c:34:7f:9d:51:22:64:a8:db:4d:6d:59:e4:48:2c:b6:33: 50:2f:8e:cc -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr1CpqD/+ir0f3fPbndhIbcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MDZlYzljZjFkZWFiZjlkNmNkNWY4ODkxYmI4MmQ1NmY5 MWQ2NzgwHhcNMjUxMjA2MTkwMTQzWhcNMjUxMjA3MTkwMTQzWjAzMTEwLwYDVQQD EygyNDMxODdkOGNkODk5NDAwZDVkZTMyOWNmNmYzNmRiYzY3NGU3MDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fISDhKwJn9QF6rt0DDYRcggA5ws F53zoiSMK1a4FYmfN2yDiAV19KwedhZOpoOXCbw03RurqdKF3lluFWOklLV5UwJt wKAhHb7K8DF/35/cZTrsuBbH2MruwwpTrElDXsTVEms+3KhjfcO2y7j+2JRnXEXP ntnDhkc4okPF6tWNsgmpG16z8sRBskEIbkkWNmbqYseSa/w32Il0/1I+8qhgDlsk GYgJLXDcRD6xK/Sg4j+W8WvyaA3fdVuP670/bT6RxtAkX4laBKmTDH+ENVOXxGE9 qogobs6Y4yvljrGq3CXikoxkOEflFdnRlU0kwChI/CLQnIpVIBTnQdne9wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFCQxh9jNiZQA1d4ynPbzbbxnTnB3MB8GA1UdIwQY MBaAFPgG7Jzx3qv51s1fiJG7gtVvkdZ4MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1BYnNuUEhlcV9uV3pWLUlrYnVDMVctUjFuZy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvNDQwNGY1LWUxMGMtNDE5MC05Mjcw LWFjMGE4NGEyN2Q1My8xLzEtQWJzblBIZXFfbld6Vi1Ja2J1QzFXLVIxbmcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzBhLzQ0MDRmNS1lMTBjLTQxOTAtOTI3MC1hYzBhODRhMjdk NTMvMS8xLUFic25QSGVxX25XelYtSWtidUMxVy1SMW5nLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANQ4k d04bWVEZDjVAo/Xld3cawwqyQn+ymFTISZ+krf7IW3cs24Z9wfByV96bcFWBJcg0 ygUqu25ZoZ0kNn138QO1AQC4PxQZ3ED0E2kmv8YNkecctgfgmCjOxLUg2g0T30An 7PJD606QCD4fZt7DVxtI9OsVmrf+0XaY5BNN51y2b8we0NDkwgNsP3EdSqv+rsMO Ao6Cjb35WJ0EfjHCtkhFImWotHfned3L7IbkwOVF5g+bxZr9fWImdLW/h4QeTDb9 mE2tb7NU+0EbfxrRTRenZzM2GMRtEv7Lq6WBaZSlXtP2bagBneyJ04w0f51RImSo 201tWeRILLYzUC+OzA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:56:40 2025 by rpki-client