This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft File: abfzv44Ke1kKD_qhycCsWAoLEZ4.mft (raw, json) Hash identifier: /p/g87F92X4g0vbcoPbCGs+hzbKLDRHMiSDfMrmqueA= Subject key identifier: 1C:D4:CB:F0:6C:E9:21:62:9C:89:0F:DD:A5:E0:01:F7:45:D3:7D:FF Authority key identifier: 69:B7:F3:BF:8E:0A:7B:59:0A:0F:FA:A1:C9:C0:AC:58:0A:0B:11:9E Certificate issuer: /CN=69b7f3bf8e0a7b590a0ffaa1c9c0ac580a0b119e Certificate serial: 019AF577FEFD3D439725EDB0A34E7DC62E4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abfzv44Ke1kKD_qhycCsWAoLEZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft Manifest number: 8E Signing time: Sat 06 Dec 2025 21:01:13 +0000 Manifest this update: Sat 06 Dec 2025 21:01:13 +0000 Manifest next update: Sun 07 Dec 2025 21:01:13 +0000 Files and hashes: 1: R7q2gktvFsNXXsx_b10S5ynAXaw.roa (hash: +bf2vfop1BjTPFaIwsRZHC/bhXQwlqn19Fh+mJR9npc=) 2: abfzv44Ke1kKD_qhycCsWAoLEZ4.crl (hash: Ay2ezwUGthr59NTVUNr0pJ1A39j9daf84tycXto+mws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/abfzv44Ke1kKD_qhycCsWAoLEZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:fe:fd:3d:43:97:25:ed:b0:a3:4e:7d:c6:2e:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69b7f3bf8e0a7b590a0ffaa1c9c0ac580a0b119e Validity Not Before: Dec 6 21:01:13 2025 GMT Not After : Dec 7 21:01:13 2025 GMT Subject: CN=1cd4cbf06ce921629c890fdda5e001f745d37dff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8e:66:af:64:0a:c8:34:e7:55:5a:87:8b:8e: fb:e0:c5:54:f1:28:05:9f:cb:18:1b:76:64:07:84: a2:63:e9:91:59:db:9c:15:08:b2:30:81:c7:31:37: da:e3:13:ff:80:5e:25:dc:75:d9:01:4b:43:8b:68: 95:cc:68:e4:eb:7f:33:b7:0b:4f:77:36:83:27:99: 11:d6:88:9b:89:e1:82:07:f6:e8:5a:1b:51:4d:2e: a7:9e:87:26:52:c3:5a:84:d3:85:70:d4:b3:3c:ff: ee:05:20:ee:02:a2:9e:4d:10:96:13:90:17:87:33: ef:4d:f2:32:f3:68:91:89:79:23:ad:65:f0:21:a8: b5:9d:16:36:94:54:f8:91:97:ae:d2:7a:d2:05:fc: 6f:66:4d:28:4e:53:43:cd:6e:4a:fe:af:fd:59:7f: 8a:c8:5b:c5:2b:bd:97:09:29:1b:da:38:85:d4:ee: 05:85:cf:ab:42:27:2b:39:81:aa:67:e6:74:3a:7a: 19:ca:03:0c:cd:9e:1e:58:19:b6:42:36:33:85:bf: cd:5c:a3:1c:21:32:eb:d7:69:d1:48:4f:10:ff:7e: 9f:bd:71:c7:36:af:87:26:99:af:61:5c:1d:36:7a: 15:2e:70:31:cb:a6:80:a9:fd:7d:20:2b:0c:30:92: 7b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D4:CB:F0:6C:E9:21:62:9C:89:0F:DD:A5:E0:01:F7:45:D3:7D:FF X509v3 Authority Key Identifier: keyid:69:B7:F3:BF:8E:0A:7B:59:0A:0F:FA:A1:C9:C0:AC:58:0A:0B:11:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abfzv44Ke1kKD_qhycCsWAoLEZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:c2:70:3b:66:48:0e:b2:c0:9c:f1:a9:49:d0:b5:9b:61:91: 80:af:ca:81:9c:b3:5a:eb:a6:de:1a:51:f1:39:1d:65:a1:c8: 52:4f:cf:be:44:2b:59:c9:f6:95:6f:e5:0e:31:92:18:f5:30: 0b:3e:b4:38:72:ba:24:b5:9e:ad:5a:11:22:54:36:65:e9:88: e5:f1:6b:92:c7:fa:51:92:6c:b5:6c:ee:83:1e:b7:52:e2:35: d0:fc:cd:d6:64:36:78:55:eb:2c:a7:22:9b:d2:4a:d6:e9:f7: 14:0c:67:2c:d5:c9:9b:a2:f4:26:39:c3:a0:17:d0:25:46:3f: 46:fe:bd:68:cf:a6:84:51:12:f0:37:f8:fa:c1:9a:1e:fe:55: 3b:e8:1c:11:76:26:de:09:da:64:32:bf:9b:34:20:e2:34:07: 77:a1:4e:1a:1d:36:ab:98:b6:63:1c:ca:1d:67:51:91:56:66: 4a:b2:61:cb:c8:10:01:66:c3:f6:5f:d6:d8:a4:3f:63:d6:44: 70:62:bf:61:f2:07:14:e3:00:3d:d2:7e:00:53:de:be:93:ae: aa:c8:45:a2:e2:b2:36:5e:e9:29:7a:64:0c:a3:62:e5:39:0f: a6:f4:13:3a:6c:b8:b5:86:c1:3f:6e:e1:bc:c4:d4:bd:7a:16: 19:37:7d:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d/79PUOXJe2wo059xi5PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5YjdmM2JmOGUwYTdiNTkwYTBmZmFhMWM5YzBhYzU4MGEw YjExOWUwHhcNMjUxMjA2MjEwMTEzWhcNMjUxMjA3MjEwMTEzWjAzMTEwLwYDVQQD EygxY2Q0Y2JmMDZjZTkyMTYyOWM4OTBmZGRhNWUwMDFmNzQ1ZDM3ZGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAro5mr2QKyDTnVVqHi4774MVU8SgF n8sYG3ZkB4SiY+mRWducFQiyMIHHMTfa4xP/gF4l3HXZAUtDi2iVzGjk638ztwtP dzaDJ5kR1oibieGCB/boWhtRTS6nnocmUsNahNOFcNSzPP/uBSDuAqKeTRCWE5AX hzPvTfIy82iRiXkjrWXwIai1nRY2lFT4kZeu0nrSBfxvZk0oTlNDzW5K/q/9WX+K yFvFK72XCSkb2jiF1O4Fhc+rQicrOYGqZ+Z0OnoZygMMzZ4eWBm2QjYzhb/NXKMc ITLr12nRSE8Q/36fvXHHNq+HJpmvYVwdNnoVLnAxy6aAqf19ICsMMJJ7ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBzUy/Bs6SFinIkP3aXgAfdF033/MB8GA1UdIwQY MBaAFGm387+OCntZCg/6ocnArFgKCxGeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWJmenY0NEtlMWtLRF9xaHljQ3NXQW9MRVo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8xNmQ4NWYtODViNS00MmUzLWFkOWYt ZWVjMDVmNDlhYzg2LzEvYWJmenY0NEtlMWtLRF9xaHljQ3NXQW9MRVo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8xNmQ4NWYtODViNS00MmUzLWFkOWYtZWVjMDVmNDlhYzg2 LzEvYWJmenY0NEtlMWtLRF9xaHljQ3NXQW9MRVo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAacJwO2ZI DrLAnPGpSdC1m2GRgK/KgZyzWuum3hpR8TkdZaHIUk/PvkQrWcn2lW/lDjGSGPUw Cz60OHK6JLWerVoRIlQ2ZemI5fFrksf6UZJstWzugx63UuI10PzN1mQ2eFXrLKci m9JK1un3FAxnLNXJm6L0JjnDoBfQJUY/Rv69aM+mhFES8Df4+sGaHv5VO+gcEXYm 3gnaZDK/mzQg4jQHd6FOGh02q5i2YxzKHWdRkVZmSrJhy8gQAWbD9l/W2KQ/Y9ZE cGK/YfIHFOMAPdJ+AFPevpOuqshFouKyNl7pKXpkDKNi5TkPpvQTOmy4tYbBP27h vMTUvXoWGTd9hg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:07:48 2025 by rpki-client