This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft File: Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft (raw, json) Hash identifier: uvIq/Z0NoRho40+3C1VkqWHJv2uIjry6MXe8Fvg6CSo= Subject key identifier: EC:32:C5:3C:1E:02:CC:14:20:E3:11:08:2D:75:E9:0E:B4:90:AA:46 Authority key identifier: 01:BA:E3:7F:8B:4E:42:DD:90:D9:B1:4F:60:B2:41:42:87:D4:1B:80 Certificate issuer: /CN=01bae37f8b4e42dd90d9b14f60b2414287d41b80 Certificate serial: 019AF2773083FB0053556436A7BA320D6591 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Abrjf4tOQt2Q2bFPYLJBQofUG4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 07:01:28 +0000 Manifest this update: Sat 06 Dec 2025 07:01:28 +0000 Manifest next update: Sun 07 Dec 2025 07:01:28 +0000 Files and hashes: 1: Abrjf4tOQt2Q2bFPYLJBQofUG4A.crl (hash: lV0L30Z+UzP4NES5H2YNZrbnW4ADD1WAmdK7bEOOwio=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.crl rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft rsync://rpki.ripe.net/repository/DEFAULT/Abrjf4tOQt2Q2bFPYLJBQofUG4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:30:83:fb:00:53:55:64:36:a7:ba:32:0d:65:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01bae37f8b4e42dd90d9b14f60b2414287d41b80 Validity Not Before: Dec 6 07:01:28 2025 GMT Not After : Dec 7 07:01:28 2025 GMT Subject: CN=ec32c53c1e02cc1420e311082d75e90eb490aa46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:16:28:0c:8c:42:c9:27:3c:f7:cf:e9:0e:cd: 42:9b:9e:5c:5c:d4:cd:e8:df:8f:c2:38:2c:81:31: 4e:2f:9b:e7:ad:4f:e1:c3:5a:33:28:88:d7:36:ac: 33:6f:50:45:79:5d:e7:41:04:10:43:07:59:eb:26: d8:2c:bb:da:31:f4:e7:48:aa:2b:5d:31:f6:b9:29: 2a:76:5d:09:dc:2d:26:f9:b0:36:de:45:11:9a:d2: a4:90:26:db:de:aa:32:fe:e0:d6:52:a6:f8:c9:2d: e0:61:a3:70:5b:dd:2d:87:74:65:75:3c:89:58:f3: fe:ae:43:c6:df:02:3c:0a:cf:6a:22:27:73:27:aa: c2:3a:17:6b:38:fc:a1:1a:ce:7e:55:09:7c:7f:f0: 34:34:f7:2c:7d:0f:57:b0:ee:0c:d0:36:43:c1:5c: 4a:95:9d:8f:cd:9b:2d:f9:09:33:ce:a2:78:30:f9: e2:00:db:40:3e:04:f7:e4:45:9a:4a:c6:d1:d2:bc: fd:27:d0:77:20:e5:2e:d3:2e:eb:10:15:5b:d8:1d: 22:ad:e0:67:e0:cf:29:f0:8e:df:a7:56:7c:90:ed: 07:10:e4:29:de:94:8e:df:ff:98:41:99:7b:bc:1b: 91:b3:da:3d:66:a6:a6:59:07:e4:b1:f5:a2:fa:a5: e9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:32:C5:3C:1E:02:CC:14:20:E3:11:08:2D:75:E9:0E:B4:90:AA:46 X509v3 Authority Key Identifier: keyid:01:BA:E3:7F:8B:4E:42:DD:90:D9:B1:4F:60:B2:41:42:87:D4:1B:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Abrjf4tOQt2Q2bFPYLJBQofUG4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:9f:74:cb:67:e9:89:93:38:f3:b5:fb:17:33:29:ab:5b:1e: 6b:2d:8c:2d:d7:46:5b:aa:08:12:f4:9e:75:84:e3:b7:c1:6d: 70:09:35:e3:98:f5:2b:3a:ab:68:fb:e5:c5:35:2f:e5:4b:ff: 16:3b:20:a7:e9:75:af:bf:6e:b6:d6:f8:83:af:86:13:07:e7: ac:37:2e:04:62:18:3a:36:8d:43:23:4a:80:49:21:f1:ef:7e: 51:c0:57:49:e3:15:98:18:60:ba:3b:a8:de:de:40:fd:0e:b1: e9:76:4c:e5:69:8b:12:12:88:a1:25:a4:9f:ef:6c:ba:01:a5: e7:db:47:9c:a5:c3:95:8f:fc:18:a0:cd:87:78:0d:42:4d:fe: 86:74:3a:18:12:88:54:de:dc:ff:e0:ba:61:a1:2b:76:64:13: 20:e0:54:a3:33:6e:33:21:17:e3:ca:b1:0b:c9:77:49:81:f0: 0e:47:d8:5c:ef:7b:2c:dd:f8:05:9a:79:04:96:13:5d:05:eb: 8c:bf:13:c7:8c:df:ca:d8:b4:12:cd:4e:f9:1b:8e:cc:ce:16: a9:6b:97:c7:78:d8:f5:09:89:86:d8:85:cd:99:3d:43:63:ac: e3:d8:ef:73:95:65:98:43:4c:20:e5:d9:54:1a:07:4d:8f:dd: dc:9b:e1:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydzCD+wBTVWQ2p7oyDWWRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxYmFlMzdmOGI0ZTQyZGQ5MGQ5YjE0ZjYwYjI0MTQyODdk NDFiODAwHhcNMjUxMjA2MDcwMTI4WhcNMjUxMjA3MDcwMTI4WjAzMTEwLwYDVQQD EyhlYzMyYzUzYzFlMDJjYzE0MjBlMzExMDgyZDc1ZTkwZWI0OTBhYTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxYoDIxCySc898/pDs1Cm55cXNTN 6N+PwjgsgTFOL5vnrU/hw1ozKIjXNqwzb1BFeV3nQQQQQwdZ6ybYLLvaMfTnSKor XTH2uSkqdl0J3C0m+bA23kURmtKkkCbb3qoy/uDWUqb4yS3gYaNwW90th3RldTyJ WPP+rkPG3wI8Cs9qIidzJ6rCOhdrOPyhGs5+VQl8f/A0NPcsfQ9XsO4M0DZDwVxK lZ2PzZst+QkzzqJ4MPniANtAPgT35EWaSsbR0rz9J9B3IOUu0y7rEBVb2B0ireBn 4M8p8I7fp1Z8kO0HEOQp3pSO3/+YQZl7vBuRs9o9ZqamWQfksfWi+qXpcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOwyxTweAswUIOMRCC116Q60kKpGMB8GA1UdIwQY MBaAFAG643+LTkLdkNmxT2CyQUKH1BuAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWJyamY0dE9RdDJRMmJGUFlMSkJRb2ZVRzRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8wODU3MGUtZjBhMS00YzgwLTg4MDEt ZTdjMzlmNTI5MGQwLzEvQWJyamY0dE9RdDJRMmJGUFlMSkJRb2ZVRzRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8wODU3MGUtZjBhMS00YzgwLTg4MDEtZTdjMzlmNTI5MGQw LzEvQWJyamY0dE9RdDJRMmJGUFlMSkJRb2ZVRzRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeJ90y2fp iZM487X7FzMpq1seay2MLddGW6oIEvSedYTjt8FtcAk145j1KzqraPvlxTUv5Uv/ Fjsgp+l1r79uttb4g6+GEwfnrDcuBGIYOjaNQyNKgEkh8e9+UcBXSeMVmBhgujuo 3t5A/Q6x6XZM5WmLEhKIoSWkn+9sugGl59tHnKXDlY/8GKDNh3gNQk3+hnQ6GBKI VN7c/+C6YaErdmQTIOBUozNuMyEX48qxC8l3SYHwDkfYXO97LN34BZp5BJYTXQXr jL8Tx4zfyti0Es1O+RuOzM4WqWuXx3jY9QmJhtiFzZk9Q2Os49jvc5VlmENMIOXZ VBoHTY/d3Jvhmg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:47:38 2025 by rpki-client