This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft File: AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft (raw, json) Hash identifier: kTy65PFd35Ba18Hwdx3mJdrFANNRcUT7o17FlQXNF04= Subject key identifier: 43:96:53:7C:33:8C:7F:9E:1A:C3:A9:97:69:E1:96:FE:C2:DE:74:27 Authority key identifier: 01:BA:E5:09:DF:7E:C5:24:D4:F7:50:FF:80:92:74:AB:00:64:93:22 Certificate issuer: /CN=01bae509df7ec524d4f750ff809274ab00649322 Certificate serial: 019AF1643C3EF4C59C9EE1AE65F94B89AE3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft Manifest number: 11D4 Signing time: Sat 06 Dec 2025 02:01:09 +0000 Manifest this update: Sat 06 Dec 2025 02:01:09 +0000 Manifest next update: Sun 07 Dec 2025 02:01:09 +0000 Files and hashes: 1: AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl (hash: hkNK0mhV/Vs/y7rQpF2tBnAM84ZEQAo+g/UEo/i1gNU=) 2: r9ivPCH7B-EIjmvOeGIsU1bVmJw.roa (hash: ZoMymQkL6qzTxWYBfF5BxJb7oUgkp1cRchZsdJ96SAk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:3c:3e:f4:c5:9c:9e:e1:ae:65:f9:4b:89:ae:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01bae509df7ec524d4f750ff809274ab00649322 Validity Not Before: Dec 6 02:01:09 2025 GMT Not After : Dec 7 02:01:09 2025 GMT Subject: CN=4396537c338c7f9e1ac3a99769e196fec2de7427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:26:8a:6b:93:4e:af:eb:b9:65:1e:0e:08:e7: 50:a6:f8:d8:04:58:6c:79:06:94:22:05:a1:9b:c5: ac:6f:a9:54:7e:e4:3c:19:bb:7c:c1:5f:59:d9:8e: 79:94:cc:b4:36:05:88:b1:35:fb:06:cc:07:4a:a6: c2:8b:89:23:2a:25:1c:6c:ca:88:a5:90:3f:04:51: f1:52:12:89:c5:7f:28:19:a9:4f:40:c3:e5:b9:e2: 56:b3:3e:cf:8a:55:0b:29:02:37:38:20:62:99:0f: 73:9c:34:fb:33:4d:2e:cd:ce:7e:f8:8a:d7:ac:60: e9:80:92:4e:3c:9d:19:e3:9e:29:b4:dc:64:7d:45: 12:ee:60:b9:6a:bc:46:ea:a1:4d:a8:51:4e:d2:e3: d7:91:13:ed:84:03:77:da:2a:07:53:45:a2:21:6b: 2f:b7:a6:87:f6:e1:fb:e1:02:6a:bd:10:89:72:e2: 5e:3e:74:53:d5:e1:4e:d5:a1:9f:cf:2f:42:9f:1b: d0:f5:ac:76:7c:be:2c:b5:46:15:67:b6:6f:c2:e0: 80:cc:27:e8:c7:14:6e:d8:96:15:2f:a1:7c:ea:08: 63:99:64:37:9e:c7:51:76:6c:57:08:bd:a2:16:b2: e1:65:82:7b:ba:61:ac:85:90:25:fe:70:bc:b8:72: 3a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:96:53:7C:33:8C:7F:9E:1A:C3:A9:97:69:E1:96:FE:C2:DE:74:27 X509v3 Authority Key Identifier: keyid:01:BA:E5:09:DF:7E:C5:24:D4:F7:50:FF:80:92:74:AB:00:64:93:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:c2:07:b3:bd:4f:d5:0f:0e:bc:7d:df:5c:f1:48:a5:c9:7f: 1c:71:3e:ae:da:33:36:af:58:2b:e0:43:64:b8:a0:bb:be:55: 4d:4b:46:58:d1:b6:bd:9c:2e:b5:d3:50:a2:0f:44:33:93:e9: 72:ac:55:03:73:3d:39:7f:41:cd:5c:9f:ec:ac:ec:c5:9f:74: e3:d7:36:19:cb:29:3d:91:72:ae:fa:8b:27:2e:6c:c7:2e:2f: fd:74:a6:a1:ed:5f:78:cd:23:1f:fe:99:ac:b7:41:50:b2:23: 2d:d8:75:b1:be:57:b0:34:70:e2:de:e5:69:bb:1c:a5:f9:3a: 5e:41:74:ec:21:2a:bf:8e:3b:7c:f6:a4:21:4e:c1:a9:1b:f5: 72:b4:4d:1c:e5:7c:94:38:1d:fc:1a:d1:bb:05:f3:39:75:ea: 4b:6b:81:45:59:50:f6:c2:2f:46:11:0e:34:ac:6d:9e:7e:dc: 09:53:e0:b6:04:d0:37:92:75:e8:c7:a5:75:72:55:3f:f3:8c: 7a:08:09:e6:6a:ed:72:28:38:42:8e:41:5c:be:0c:7f:83:70: 40:09:d8:c8:ac:d9:c1:87:76:c4:eb:c7:c7:18:8a:98:16:ec: 25:93:00:82:74:17:e5:db:c8:74:3a:76:0b:01:0b:13:b4:8d: 1a:53:3e:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZDw+9MWcnuGuZflLia47MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxYmFlNTA5ZGY3ZWM1MjRkNGY3NTBmZjgwOTI3NGFiMDA2 NDkzMjIwHhcNMjUxMjA2MDIwMTA5WhcNMjUxMjA3MDIwMTA5WjAzMTEwLwYDVQQD Eyg0Mzk2NTM3YzMzOGM3ZjllMWFjM2E5OTc2OWUxOTZmZWMyZGU3NDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyaKa5NOr+u5ZR4OCOdQpvjYBFhs eQaUIgWhm8Wsb6lUfuQ8Gbt8wV9Z2Y55lMy0NgWIsTX7BswHSqbCi4kjKiUcbMqI pZA/BFHxUhKJxX8oGalPQMPlueJWsz7PilULKQI3OCBimQ9znDT7M00uzc5++IrX rGDpgJJOPJ0Z454ptNxkfUUS7mC5arxG6qFNqFFO0uPXkRPthAN32ioHU0WiIWsv t6aH9uH74QJqvRCJcuJePnRT1eFO1aGfzy9CnxvQ9ax2fL4stUYVZ7ZvwuCAzCfo xxRu2JYVL6F86ghjmWQ3nsdRdmxXCL2iFrLhZYJ7umGshZAl/nC8uHI63wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEOWU3wzjH+eGsOpl2nhlv7C3nQnMB8GA1UdIwQY MBaAFAG65QnffsUk1PdQ/4CSdKsAZJMiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWJybENkOS14U1RVOTFEX2dKSjBxd0Jra3lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZmJhYzAtZTdhNS00Yzk1LTg4YjYt ODRhOWVmZWMwZDFiLzEvQWJybENkOS14U1RVOTFEX2dKSjBxd0Jra3lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9hZmJhYzAtZTdhNS00Yzk1LTg4YjYtODRhOWVmZWMwZDFi LzEvQWJybENkOS14U1RVOTFEX2dKSjBxd0Jra3lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0cIHs71P 1Q8OvH3fXPFIpcl/HHE+rtozNq9YK+BDZLigu75VTUtGWNG2vZwutdNQog9EM5Pp cqxVA3M9OX9BzVyf7KzsxZ9049c2GcspPZFyrvqLJy5sxy4v/XSmoe1feM0jH/6Z rLdBULIjLdh1sb5XsDRw4t7labscpfk6XkF07CEqv447fPakIU7BqRv1crRNHOV8 lDgd/BrRuwXzOXXqS2uBRVlQ9sIvRhEONKxtnn7cCVPgtgTQN5J16MeldXJVP/OM eggJ5mrtcig4Qo5BXL4Mf4NwQAnYyKzZwYd2xOvHxxiKmBbsJZMAgnQX5dvIdDp2 CwELE7SNGlM+TQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:05:57 2025 by rpki-client