This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft File: xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft (raw, json) Hash identifier: 3aYrrJ00p4u5HTtBsfP+hmZHBW40ZlcUi/fn8ADnZYY= Subject key identifier: 85:1D:A5:1F:2D:DE:3E:79:FE:36:3E:02:16:9E:4F:54:28:5D:9D:81 Authority key identifier: C4:06:EA:8D:5D:70:54:EF:89:97:E6:29:2E:3B:04:4B:09:3A:27:C6 Certificate issuer: /CN=c406ea8d5d7054ef8997e6292e3b044b093a27c6 Certificate serial: 019AF12D39C1A08FE0D59B6FCC7CB877E503 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft Manifest number: 01EF Signing time: Sat 06 Dec 2025 01:01:04 +0000 Manifest this update: Sat 06 Dec 2025 01:01:04 +0000 Manifest next update: Sun 07 Dec 2025 01:01:04 +0000 Files and hashes: 1: NGw8ktOj6OOwsyhqpmQcxVz3HFU.roa (hash: Z7YWYHXxapOgTQP+VOKpEFoycxd68wL+FS31DhS3NVc=) 2: xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl (hash: YdeRDKEbVOdqL/dpknpBWPkKGvEPneMmjHM/2Brztww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:39:c1:a0:8f:e0:d5:9b:6f:cc:7c:b8:77:e5:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c406ea8d5d7054ef8997e6292e3b044b093a27c6 Validity Not Before: Dec 6 01:01:04 2025 GMT Not After : Dec 7 01:01:04 2025 GMT Subject: CN=851da51f2dde3e79fe363e02169e4f54285d9d81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:17:c7:d7:9e:30:81:12:6f:b2:98:04:6f:ce: ea:4f:dc:95:8e:b7:f1:02:0c:74:16:5a:86:43:d7: 09:2c:a8:d6:95:a5:fb:9a:a1:fc:85:64:02:2e:05: cb:e8:ec:c7:06:fe:9a:bf:2a:5c:fa:cd:11:01:a6: c9:1d:88:f9:64:26:a7:e9:ee:b5:80:cb:2c:47:cf: 97:d5:43:65:3f:81:0f:50:9d:04:03:64:b2:c8:a6: 6c:cd:a7:bf:f6:a4:c8:0a:66:5e:1a:cf:72:a4:ca: 41:4a:c8:77:c2:7d:be:b8:d8:cf:60:2f:99:61:94: ca:bc:64:65:9c:6d:f4:1d:fa:eb:1c:dd:f9:5a:19: 78:60:dd:d3:97:bf:08:b3:df:07:2f:0e:2d:f9:22: 1d:d2:50:2c:87:b3:20:50:32:6f:5f:5c:ca:42:eb: 15:57:98:06:cd:c1:02:bd:9f:2b:4b:d1:b2:75:48: 6f:5d:a1:c9:2b:9e:33:de:50:26:b7:21:a8:a0:30: 98:df:87:dd:5b:65:8a:3d:12:9f:e9:21:91:db:8c: 4e:22:e3:74:c3:26:c3:51:d2:91:5c:5a:cd:09:9f: 6a:bf:0d:ba:1e:66:6d:b2:30:0f:b5:a9:b1:1d:7b: f6:ec:e5:bd:d7:bb:15:ac:20:93:07:13:ae:06:78: 03:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:1D:A5:1F:2D:DE:3E:79:FE:36:3E:02:16:9E:4F:54:28:5D:9D:81 X509v3 Authority Key Identifier: keyid:C4:06:EA:8D:5D:70:54:EF:89:97:E6:29:2E:3B:04:4B:09:3A:27:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:45:d2:65:4e:21:94:41:12:54:72:c8:35:b5:21:e2:e6:85: 7a:0e:ff:76:03:67:64:51:30:02:76:af:73:36:40:02:49:6f: e4:7b:78:92:5a:73:6f:85:41:cc:04:72:18:ba:eb:53:bc:ab: cc:c5:7a:88:2f:a1:3e:f5:44:8a:cc:cf:a7:fc:73:0d:73:1f: e2:b5:5e:19:48:2b:a4:a3:11:e1:81:f2:79:aa:60:bc:56:cd: a8:e7:e9:f5:69:fd:9c:5c:64:cc:ee:9c:10:eb:56:89:38:75: 88:57:cf:e1:1e:e9:93:a6:7c:ff:c5:bc:3d:47:7a:68:ee:98: 4a:c0:e4:a3:a0:3f:21:53:bd:24:f3:26:0a:9f:91:ca:04:60: 06:b5:14:e4:51:d5:c6:21:70:b5:fa:bc:2b:63:f4:0f:a3:0e: a6:e8:1b:5e:27:ae:11:a5:3a:a1:22:75:ea:ec:8c:39:7d:0d: 65:b5:21:da:27:f9:36:86:94:f4:42:0f:e5:41:05:9d:00:cb: ba:6e:a5:22:7b:36:2f:57:25:c2:b4:16:0b:ec:7f:26:3e:70: 56:dc:4b:32:ad:bf:b3:9a:90:51:43:20:d6:90:4c:88:42:e8: c9:89:ef:4b:af:30:fd:2a:ad:e3:18:b3:3e:a7:b3:ad:92:11: c6:e6:5f:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLTnBoI/g1ZtvzHy4d+UDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MDZlYThkNWQ3MDU0ZWY4OTk3ZTYyOTJlM2IwNDRiMDkz YTI3YzYwHhcNMjUxMjA2MDEwMTA0WhcNMjUxMjA3MDEwMTA0WjAzMTEwLwYDVQQD Eyg4NTFkYTUxZjJkZGUzZTc5ZmUzNjNlMDIxNjllNGY1NDI4NWQ5ZDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxfH154wgRJvspgEb87qT9yVjrfx Agx0FlqGQ9cJLKjWlaX7mqH8hWQCLgXL6OzHBv6avypc+s0RAabJHYj5ZCan6e61 gMssR8+X1UNlP4EPUJ0EA2SyyKZszae/9qTICmZeGs9ypMpBSsh3wn2+uNjPYC+Z YZTKvGRlnG30HfrrHN35Whl4YN3Tl78Is98HLw4t+SId0lAsh7MgUDJvX1zKQusV V5gGzcECvZ8rS9GydUhvXaHJK54z3lAmtyGooDCY34fdW2WKPRKf6SGR24xOIuN0 wybDUdKRXFrNCZ9qvw26HmZtsjAPtamxHXv27OW917sVrCCTBxOuBngDcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUdpR8t3j55/jY+AhaeT1QoXZ2BMB8GA1UdIwQY MBaAFMQG6o1dcFTviZfmKS47BEsJOifGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEFicWpWMXdWTy1KbC1ZcExqc0VTd2s2SjhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iMWIyNmMtMmI3Yy00MTE3LWIyMzUt OGIzMDFiYWMzMGM5LzEveEFicWpWMXdWTy1KbC1ZcExqc0VTd2s2SjhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iMWIyNmMtMmI3Yy00MTE3LWIyMzUtOGIzMDFiYWMzMGM5 LzEveEFicWpWMXdWTy1KbC1ZcExqc0VTd2s2SjhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU0XSZU4h lEESVHLINbUh4uaFeg7/dgNnZFEwAnavczZAAklv5Ht4klpzb4VBzARyGLrrU7yr zMV6iC+hPvVEiszPp/xzDXMf4rVeGUgrpKMR4YHyeapgvFbNqOfp9Wn9nFxkzO6c EOtWiTh1iFfP4R7pk6Z8/8W8PUd6aO6YSsDko6A/IVO9JPMmCp+RygRgBrUU5FHV xiFwtfq8K2P0D6MOpugbXieuEaU6oSJ16uyMOX0NZbUh2if5NoaU9EIP5UEFnQDL um6lIns2L1clwrQWC+x/Jj5wVtxLMq2/s5qQUUMg1pBMiELoyYnvS68w/Sqt4xiz PqezrZIRxuZfCQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:32 2025 by rpki-client