This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft File: abZsbpoUxv13P6Md-YILM5aVLi4.mft (raw, json) Hash identifier: 5BRyapKPWehM9sOW6OB4U9iAWCyu4TwtAdfOG6ZEFsg= Subject key identifier: 39:5B:C8:E1:E3:CB:35:F4:8B:80:96:36:4E:23:EA:71:E4:78:8B:26 Authority key identifier: 69:B6:6C:6E:9A:14:C6:FD:77:3F:A3:1D:F9:82:0B:33:96:95:2E:2E Certificate issuer: /CN=69b66c6e9a14c6fd773fa31df9820b3396952e2e Certificate serial: 019AF3F7D740DF912792EA7C112235D0644E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abZsbpoUxv13P6Md-YILM5aVLi4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft Manifest number: 052E Signing time: Sat 06 Dec 2025 14:01:36 +0000 Manifest this update: Sat 06 Dec 2025 14:01:36 +0000 Manifest next update: Sun 07 Dec 2025 14:01:36 +0000 Files and hashes: 1: abZsbpoUxv13P6Md-YILM5aVLi4.crl (hash: uIa/BQaLL8Gztfx2V/hdHqRC5878oprKu0MZe/EqfgU=) 2: sBZyctgvNvtriFhe8m6CbBJ7dYg.roa (hash: JowCeeluxMSod/7/LxTDdw9H9SvUld/0RlKOgZZipFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.crl rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft rsync://rpki.ripe.net/repository/DEFAULT/abZsbpoUxv13P6Md-YILM5aVLi4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:d7:40:df:91:27:92:ea:7c:11:22:35:d0:64:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69b66c6e9a14c6fd773fa31df9820b3396952e2e Validity Not Before: Dec 6 14:01:36 2025 GMT Not After : Dec 7 14:01:36 2025 GMT Subject: CN=395bc8e1e3cb35f48b8096364e23ea71e4788b26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:12:72:ba:04:bc:9c:d7:08:95:e9:ff:b9:f7: 80:f9:07:b8:52:a4:f9:ea:fb:92:07:3a:73:a1:bb: 71:e6:5b:3b:14:70:3c:6a:2d:ca:01:39:a7:d1:c8: 5f:db:03:85:4a:1b:ab:1e:df:b8:e9:9a:7f:ef:88: d8:8d:22:62:71:25:0e:e0:8b:be:17:9d:54:56:bf: d8:27:84:3e:05:35:9e:a6:9c:76:27:e3:d0:12:53: 2c:c8:59:05:cd:96:86:8b:0c:78:83:8d:54:02:2b: 87:af:03:50:c7:b0:63:b1:30:ad:23:f5:4e:fd:6b: 40:1a:96:b5:dc:00:b3:3f:95:d6:1a:b4:4b:fa:1f: d9:70:e0:ea:aa:40:d8:c8:8d:61:89:1e:f0:48:e9: f4:9d:37:3f:a0:51:b0:78:06:d1:b0:50:82:06:b3: 30:35:5c:ba:9a:c8:e9:b0:0d:58:1a:44:9e:d2:fe: 9b:0d:6e:25:d5:c6:08:c1:26:81:1d:7e:fa:37:8b: 5c:d9:cc:f3:f8:f4:c6:ef:f7:ff:68:e6:c1:b4:bd: 19:82:43:43:eb:a4:73:a4:b1:89:40:4d:ad:22:ab: af:02:30:34:ef:e8:68:05:05:c5:20:8b:25:e6:7e: b6:44:82:d6:7b:45:9d:cb:15:e9:d2:42:76:3c:42: c0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:5B:C8:E1:E3:CB:35:F4:8B:80:96:36:4E:23:EA:71:E4:78:8B:26 X509v3 Authority Key Identifier: keyid:69:B6:6C:6E:9A:14:C6:FD:77:3F:A3:1D:F9:82:0B:33:96:95:2E:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abZsbpoUxv13P6Md-YILM5aVLi4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:98:61:ce:c5:0b:e6:c9:d4:02:75:ff:91:00:12:68:fb:32: 7c:a2:2d:0b:ed:81:f1:90:11:1e:95:84:0b:48:24:ed:63:0c: 6a:2b:87:b1:e5:68:54:3a:d4:b5:b4:01:ea:e7:88:3d:18:64: 9d:23:9d:c8:ea:98:ad:bc:7c:92:bc:03:52:c1:c8:e4:1e:ac: 62:ad:b3:b3:3e:39:06:a3:41:8b:e6:02:81:0a:da:ba:7e:da: b7:1e:da:5d:dd:12:c8:7e:56:a8:a6:69:85:29:ea:f1:55:bf: c1:93:40:b5:1d:11:2d:14:3a:d6:d4:c9:ba:d1:61:1f:5e:5e: 9c:2e:ea:f3:01:21:7f:40:8f:38:ee:e3:36:bc:00:71:cc:7b: 21:5f:5b:db:1e:fd:61:5b:13:74:ba:b8:ab:24:57:8f:14:90: bf:7a:19:75:50:13:3e:a9:b4:95:cd:10:f4:cb:6c:b2:e6:51: d1:37:25:11:63:dc:12:14:55:2c:9d:26:9b:7d:c8:d4:26:85: d0:07:c4:9b:29:73:c4:fe:45:ad:2d:2f:fd:38:f6:fa:6f:a0: 16:06:3f:73:76:29:3d:bd:64:50:17:c2:d0:35:d7:03:c1:34: 78:2a:71:b7:36:fb:18:b4:a4:c5:87:f0:3c:79:15:74:39:9e: f5:f8:ac:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz99dA35Enkup8ESI10GROMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5YjY2YzZlOWExNGM2ZmQ3NzNmYTMxZGY5ODIwYjMzOTY5 NTJlMmUwHhcNMjUxMjA2MTQwMTM2WhcNMjUxMjA3MTQwMTM2WjAzMTEwLwYDVQQD EygzOTViYzhlMWUzY2IzNWY0OGI4MDk2MzY0ZTIzZWE3MWU0Nzg4YjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBJyugS8nNcIlen/ufeA+Qe4UqT5 6vuSBzpzobtx5ls7FHA8ai3KATmn0chf2wOFShurHt+46Zp/74jYjSJicSUO4Iu+ F51UVr/YJ4Q+BTWeppx2J+PQElMsyFkFzZaGiwx4g41UAiuHrwNQx7BjsTCtI/VO /WtAGpa13ACzP5XWGrRL+h/ZcODqqkDYyI1hiR7wSOn0nTc/oFGweAbRsFCCBrMw NVy6msjpsA1YGkSe0v6bDW4l1cYIwSaBHX76N4tc2czz+PTG7/f/aObBtL0ZgkND 66RzpLGJQE2tIquvAjA07+hoBQXFIIsl5n62RILWe0WdyxXp0kJ2PELAnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDlbyOHjyzX0i4CWNk4j6nHkeIsmMB8GA1UdIwQY MBaAFGm2bG6aFMb9dz+jHfmCCzOWlS4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWJac2Jwb1V4djEzUDZNZC1ZSUxNNWFWTGk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85ZGU3MGQtNzQyNS00YzA3LWE4MGYt NDJkYzgyY2NhMTkyLzEvYWJac2Jwb1V4djEzUDZNZC1ZSUxNNWFWTGk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85ZGU3MGQtNzQyNS00YzA3LWE4MGYtNDJkYzgyY2NhMTky LzEvYWJac2Jwb1V4djEzUDZNZC1ZSUxNNWFWTGk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAJhhzsUL 5snUAnX/kQASaPsyfKItC+2B8ZARHpWEC0gk7WMMaiuHseVoVDrUtbQB6ueIPRhk nSOdyOqYrbx8krwDUsHI5B6sYq2zsz45BqNBi+YCgQraun7atx7aXd0SyH5WqKZp hSnq8VW/wZNAtR0RLRQ61tTJutFhH15enC7q8wEhf0CPOO7jNrwAccx7IV9b2x79 YVsTdLq4qyRXjxSQv3oZdVATPqm0lc0Q9MtssuZR0TclEWPcEhRVLJ0mm33I1CaF 0AfEmylzxP5FrS0v/Tj2+m+gFgY/c3YpPb1kUBfC0DXXA8E0eCpxtzb7GLSkxYfw PHkVdDme9fisNA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:50:20 2025 by rpki-client