This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft File: Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft (raw, json) Hash identifier: YmEtg1sC5epSvmHU0ulXSsRKllDC+HN/+u8uLlGBXwg= Subject key identifier: 82:6A:CE:D8:A0:FB:DB:1E:49:74:DC:58:35:8B:FA:B5:DC:C5:0A:20 Authority key identifier: 01:BA:E3:7F:8B:4E:42:DD:90:D9:B1:4F:60:B2:41:42:87:D4:1B:80 Certificate issuer: /CN=01bae37f8b4e42dd90d9b14f60b2414287d41b80 Certificate serial: 019B24ACC91BFC5B27E089D6E81D1B4B5375 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Abrjf4tOQt2Q2bFPYLJBQofUG4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft Manifest number: 177A Signing time: Tue 16 Dec 2025 01:01:01 +0000 Manifest this update: Tue 16 Dec 2025 01:01:01 +0000 Manifest next update: Wed 17 Dec 2025 01:01:01 +0000 Files and hashes: 1: Abrjf4tOQt2Q2bFPYLJBQofUG4A.crl (hash: yvK1mvxViRkSkD5xXUeX7gTPF+0YifWhzLxVgbdjh04=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.crl rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft rsync://rpki.ripe.net/repository/DEFAULT/Abrjf4tOQt2Q2bFPYLJBQofUG4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:ac:c9:1b:fc:5b:27:e0:89:d6:e8:1d:1b:4b:53:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01bae37f8b4e42dd90d9b14f60b2414287d41b80 Validity Not Before: Dec 16 01:01:01 2025 GMT Not After : Dec 17 01:01:01 2025 GMT Subject: CN=826aced8a0fbdb1e4974dc58358bfab5dcc50a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:23:de:f1:8c:19:f4:85:12:51:11:5f:26:1c: 56:e6:48:60:08:96:95:b5:0b:70:7d:80:4b:d9:5f: dc:b1:76:a9:95:a8:dc:fd:e5:bd:c6:d4:6d:fa:b1: d9:13:59:63:7d:6c:9b:38:83:68:99:de:5b:27:25: 39:ed:f4:ca:6c:9b:13:62:62:45:f7:34:80:73:fd: 4b:b9:5e:82:4e:a2:a3:c9:84:32:6a:4e:8e:4b:06: fd:46:7f:2b:67:d5:a9:3d:0f:6d:97:23:10:86:38: 35:a9:6d:0e:28:90:52:59:6b:d0:0b:76:f9:bd:d6: 5d:fb:dc:af:85:19:14:07:82:ba:be:3d:33:e5:35: 4b:fa:c4:49:ea:ba:95:4e:00:d5:d5:95:f0:ca:b9: 6d:49:3b:93:ed:7a:e2:be:9b:0d:dc:4d:4f:94:55: a5:1b:f5:d6:4a:d3:b7:74:9a:4f:9f:81:64:a4:bc: da:38:c3:59:bd:2e:88:79:38:13:a5:63:2b:e0:af: f9:64:07:2f:1a:87:21:6f:77:c8:a0:3d:cb:1f:7d: a6:c9:c8:f8:89:56:8f:19:fd:cf:b0:7f:22:d6:35: 98:a8:d5:dd:bb:61:7b:25:2f:9b:0e:3b:e5:2d:a2: a9:cf:5d:62:79:14:35:af:f8:85:81:19:66:1b:77: 16:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:6A:CE:D8:A0:FB:DB:1E:49:74:DC:58:35:8B:FA:B5:DC:C5:0A:20 X509v3 Authority Key Identifier: keyid:01:BA:E3:7F:8B:4E:42:DD:90:D9:B1:4F:60:B2:41:42:87:D4:1B:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Abrjf4tOQt2Q2bFPYLJBQofUG4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:e8:25:3e:a3:ca:d8:9c:a8:09:b1:35:a3:5b:8f:79:26:4b: 09:2a:0c:5f:18:eb:26:c0:32:19:1e:a4:cf:2c:b9:e1:b4:bd: 4f:be:a6:a4:4f:fc:59:9a:e6:23:7e:f3:90:4c:73:d7:92:e5: 9f:73:27:3d:3b:0a:0a:4a:4a:8f:5b:95:4a:8f:85:0b:01:9f: 13:7c:eb:3c:51:5d:9b:47:72:e9:6c:de:07:32:e6:76:62:55: d6:65:97:0e:c0:7e:96:a2:57:d3:8b:20:a3:a9:e9:18:93:a8: f9:cc:a0:ca:f8:61:fa:7b:12:3c:7a:68:72:51:db:df:af:57: 56:aa:a0:6e:a3:e9:81:06:87:69:be:a4:0a:d3:61:f9:27:20: 6f:36:dc:52:8d:7b:73:2a:21:df:5b:d4:ab:c8:95:16:33:1e: a9:d5:52:72:36:b2:cb:47:1b:ab:05:cd:37:d5:5e:eb:40:be: 96:f5:7a:8d:74:bb:ad:5e:92:c4:47:cd:b9:63:e2:d1:4d:a3: d5:b8:35:14:20:c8:4a:9d:59:64:31:80:9c:9d:26:18:cf:4f: 71:83:97:88:c4:87:b2:71:71:d7:65:29:6a:a8:09:f5:66:6b: d4:54:d6:65:72:4d:db:50:91:e6:c0:45:1b:73:57:e1:d6:7d: 74:85:7d:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskrMkb/Fsn4InW6B0bS1N1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxYmFlMzdmOGI0ZTQyZGQ5MGQ5YjE0ZjYwYjI0MTQyODdk NDFiODAwHhcNMjUxMjE2MDEwMTAxWhcNMjUxMjE3MDEwMTAxWjAzMTEwLwYDVQQD Eyg4MjZhY2VkOGEwZmJkYjFlNDk3NGRjNTgzNThiZmFiNWRjYzUwYTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryPe8YwZ9IUSURFfJhxW5khgCJaV tQtwfYBL2V/csXaplajc/eW9xtRt+rHZE1ljfWybOINomd5bJyU57fTKbJsTYmJF 9zSAc/1LuV6CTqKjyYQyak6OSwb9Rn8rZ9WpPQ9tlyMQhjg1qW0OKJBSWWvQC3b5 vdZd+9yvhRkUB4K6vj0z5TVL+sRJ6rqVTgDV1ZXwyrltSTuT7XrivpsN3E1PlFWl G/XWStO3dJpPn4FkpLzaOMNZvS6IeTgTpWMr4K/5ZAcvGochb3fIoD3LH32mycj4 iVaPGf3PsH8i1jWYqNXdu2F7JS+bDjvlLaKpz11ieRQ1r/iFgRlmG3cWzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIJqztig+9seSXTcWDWL+rXcxQogMB8GA1UdIwQY MBaAFAG643+LTkLdkNmxT2CyQUKH1BuAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWJyamY0dE9RdDJRMmJGUFlMSkJRb2ZVRzRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8wODU3MGUtZjBhMS00YzgwLTg4MDEt ZTdjMzlmNTI5MGQwLzEvQWJyamY0dE9RdDJRMmJGUFlMSkJRb2ZVRzRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8wODU3MGUtZjBhMS00YzgwLTg4MDEtZTdjMzlmNTI5MGQw LzEvQWJyamY0dE9RdDJRMmJGUFlMSkJRb2ZVRzRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAguglPqPK 2JyoCbE1o1uPeSZLCSoMXxjrJsAyGR6kzyy54bS9T76mpE/8WZrmI37zkExz15Ll n3MnPTsKCkpKj1uVSo+FCwGfE3zrPFFdm0dy6WzeBzLmdmJV1mWXDsB+lqJX04sg o6npGJOo+cygyvhh+nsSPHpoclHb369XVqqgbqPpgQaHab6kCtNh+ScgbzbcUo17 cyoh31vUq8iVFjMeqdVScjayy0cbqwXNN9Ve60C+lvV6jXS7rV6SxEfNuWPi0U2j 1bg1FCDISp1ZZDGAnJ0mGM9PcYOXiMSHsnFx12UpaqgJ9WZr1FTWZXJN21CR5sBF G3NX4dZ9dIV9Qw== -----END CERTIFICATE-----Generated at Tue Dec 16 07:08:30 2025 by rpki-client