This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft File: KAabTsBHxsLYCkmS5CKLMXzIsgw.mft (raw, json) Hash identifier: Ibt0LVl4djpud6wNuyAoWmQALaW8lcGMsJiRAHNwMdk= Subject key identifier: B2:72:98:A1:A4:37:E7:A4:C5:1F:5C:2D:91:0D:82:3F:B9:EE:06:6E Authority key identifier: 28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C Certificate issuer: /CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c Certificate serial: 019AF8421E296149B2891B0D201A87FBFE4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft Manifest number: 1073 Signing time: Sun 07 Dec 2025 10:01:13 +0000 Manifest this update: Sun 07 Dec 2025 10:01:13 +0000 Manifest next update: Mon 08 Dec 2025 10:01:13 +0000 Files and hashes: 1: KAabTsBHxsLYCkmS5CKLMXzIsgw.crl (hash: d9xqWUYB5RAQn08Q1dsC5zqglWBblthjZF90mgf+o2o=) 2: z5t3MUctHGLyNYnasAsmy7myIE0.roa (hash: mO/iLAoYiC6aPBgVm4fsRrMygy6NYm/K/6/lkuaPce4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:42:1e:29:61:49:b2:89:1b:0d:20:1a:87:fb:fe:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c Validity Not Before: Dec 7 10:01:13 2025 GMT Not After : Dec 8 10:01:13 2025 GMT Subject: CN=b27298a1a437e7a4c51f5c2d910d823fb9ee066e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:80:64:d4:eb:7f:fc:9b:f9:41:fe:d9:d8:4e: 90:28:4a:28:7c:b9:3b:26:f5:20:f5:26:58:11:40: 23:eb:d8:17:61:f7:03:98:a3:e2:47:b9:5a:c9:b7: 62:e4:c5:03:b1:29:59:1d:d2:4b:9c:9a:c5:c7:9c: 59:b1:48:67:06:16:01:b4:3c:1d:7a:e3:d9:1c:85: 8b:a5:11:b2:a2:0e:95:6f:30:8f:10:12:24:06:50: de:36:89:d0:5c:a5:9e:95:16:ff:0b:e8:6f:7e:d5: 7c:52:e6:50:7a:f4:22:d6:4e:40:d4:3c:8a:6a:a7: 48:0a:3a:72:77:0c:72:43:d7:26:a6:c3:7a:68:23: 2e:28:2d:bf:f4:2c:33:2b:88:44:46:3a:f7:cb:cd: df:41:50:49:06:14:e9:93:c2:1f:dc:60:1d:85:64: b5:1d:55:59:56:3e:0a:1a:b6:57:e4:cb:22:dd:33: ef:a0:92:04:d7:f2:e9:9b:78:9e:90:84:80:ae:0e: e7:fc:bd:ff:29:46:b9:4f:5d:3e:22:99:63:fe:65: 9f:39:0c:64:18:35:cf:b0:3d:99:aa:95:7f:e9:44: 54:9b:05:47:b8:7f:87:37:18:31:6c:10:08:1f:4f: c0:e3:2d:6c:31:47:45:7e:70:a6:81:2a:f2:ff:b8: ad:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:72:98:A1:A4:37:E7:A4:C5:1F:5C:2D:91:0D:82:3F:B9:EE:06:6E X509v3 Authority Key Identifier: keyid:28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:24:95:e8:28:4d:0a:5a:5a:a6:6b:b1:24:63:f9:8a:dd:1c: 90:6c:a3:8f:90:ef:52:18:24:74:de:83:5e:8c:70:ec:9b:50: ae:ad:62:6d:9f:2f:17:4d:ed:c6:c4:35:7c:f1:db:6b:5a:e1: 35:6a:6f:97:f7:bb:05:bc:d1:50:53:0b:46:57:70:13:eb:8f: a3:07:53:73:c2:7e:35:f5:c8:70:df:89:0f:96:a7:55:58:89: b2:9d:fa:b4:cd:ad:62:22:12:7d:bf:bd:1e:69:0b:1b:23:c7: d3:94:b4:1b:74:8b:b2:f2:26:8f:6e:a3:79:49:9f:29:d7:41: 46:83:43:91:63:30:27:12:51:b0:9a:84:fd:e6:0e:90:3e:50: 25:b9:bc:b5:82:84:af:cd:01:41:d5:d0:b3:6d:5d:6c:2f:1a: 4e:6f:be:6d:65:02:8f:bc:b0:11:9c:fe:1c:cc:e6:96:32:e4: 0f:7c:7f:3d:82:22:1a:6f:2d:c6:a4:5d:f1:76:fc:0d:3d:cc: c1:f3:1c:a5:75:32:74:b1:2b:75:a1:65:2e:9a:36:c0:85:4d: 09:79:d4:a4:d8:cf:aa:00:4b:01:c5:13:5c:50:10:2d:59:97: f4:00:49:c6:58:13:27:c0:43:01:e0:66:70:cc:1c:71:bf:7e: 7f:6d:2e:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr4Qh4pYUmyiRsNIBqH+/5PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MDY5YjRlYzA0N2M2YzJkODBhNDk5MmU0MjI4YjMxN2Nj OGIyMGMwHhcNMjUxMjA3MTAwMTEzWhcNMjUxMjA4MTAwMTEzWjAzMTEwLwYDVQQD EyhiMjcyOThhMWE0MzdlN2E0YzUxZjVjMmQ5MTBkODIzZmI5ZWUwNjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIBk1Ot//Jv5Qf7Z2E6QKEoofLk7 JvUg9SZYEUAj69gXYfcDmKPiR7laybdi5MUDsSlZHdJLnJrFx5xZsUhnBhYBtDwd euPZHIWLpRGyog6VbzCPEBIkBlDeNonQXKWelRb/C+hvftV8UuZQevQi1k5A1DyK aqdICjpydwxyQ9cmpsN6aCMuKC2/9CwzK4hERjr3y83fQVBJBhTpk8If3GAdhWS1 HVVZVj4KGrZX5Msi3TPvoJIE1/Lpm3iekISArg7n/L3/KUa5T10+Iplj/mWfOQxk GDXPsD2ZqpV/6URUmwVHuH+HNxgxbBAIH0/A4y1sMUdFfnCmgSry/7itjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJymKGkN+ekxR9cLZENgj+57gZuMB8GA1UdIwQY MBaAFCgGm07AR8bC2ApJkuQiizF8yLIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0FhYlRzQkh4c0xZQ2ttUzVDS0xNWHpJc2d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wMjQ1NTQtN2FhNi00YzlmLWE0ODct ZGY3YjQ1YmU0NmM3LzEvS0FhYlRzQkh4c0xZQ2ttUzVDS0xNWHpJc2d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8wMjQ1NTQtN2FhNi00YzlmLWE0ODctZGY3YjQ1YmU0NmM3 LzEvS0FhYlRzQkh4c0xZQ2ttUzVDS0xNWHpJc2d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuiSV6ChN ClpapmuxJGP5it0ckGyjj5DvUhgkdN6DXoxw7JtQrq1ibZ8vF03txsQ1fPHba1rh NWpvl/e7BbzRUFMLRldwE+uPowdTc8J+NfXIcN+JD5anVViJsp36tM2tYiISfb+9 HmkLGyPH05S0G3SLsvImj26jeUmfKddBRoNDkWMwJxJRsJqE/eYOkD5QJbm8tYKE r80BQdXQs21dbC8aTm++bWUCj7ywEZz+HMzmljLkD3x/PYIiGm8txqRd8Xb8DT3M wfMcpXUydLErdaFlLpo2wIVNCXnUpNjPqgBLAcUTXFAQLVmX9ABJxlgTJ8BDAeBm cMwccb9+f20uXQ== -----END CERTIFICATE-----Generated at Sun Dec 7 18:34:54 2025 by rpki-client