This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.mft File: ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.mft (raw, json) Hash identifier: U6oKw5K4j0Wdbs4EPn4evQ9p/523Of54lBx1RHzuiiE= Subject key identifier: A0:35:B9:F6:67:E2:98:A0:29:25:1C:74:58:74:7B:0F:A4:AB:43:FF Authority key identifier: 00:11:FE:2B:2F:67:54:7A:D7:12:D6:FC:36:AC:67:DD:69:2F:0E:1E Certificate issuer: /CN=0011fe2b2f67547ad712d6fc36ac67dd692f0e1e Certificate serial: 019B318CFBBC57BE4716D809FD7D47C978DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.mft Manifest number: 0DF4 Signing time: Thu 18 Dec 2025 13:01:21 +0000 Manifest this update: Thu 18 Dec 2025 13:01:21 +0000 Manifest next update: Fri 19 Dec 2025 13:01:21 +0000 Files and hashes: 1: ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.crl (hash: EKIG1VYgLoODKmYthuhSjAejsgIO73IuyDHUxyzmo+U=) 2: BvIKnOZDDnJ3fYjwKb9MPS2VREA.roa (hash: 6YHj3YUhTYKgioEXOjY6pW/I1gB2DwKxLtlbSUJymPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.crl rsync://rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.mft rsync://rpki.ripe.net/repository/DEFAULT/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:fb:bc:57:be:47:16:d8:09:fd:7d:47:c9:78:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0011fe2b2f67547ad712d6fc36ac67dd692f0e1e Validity Not Before: Dec 18 13:01:21 2025 GMT Not After : Dec 19 13:01:21 2025 GMT Subject: CN=a035b9f667e298a029251c7458747b0fa4ab43ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5d:1a:19:e9:b6:95:3d:d8:79:b9:83:35:7b: 1f:d4:6f:f0:42:92:fd:05:36:71:04:36:63:ec:f1: ca:60:2a:32:70:02:b4:28:cf:16:72:00:d4:19:2b: dd:46:fe:b9:49:2f:40:fe:e9:b2:10:26:39:99:a2: fb:c3:bb:c8:8b:4e:34:f4:87:7f:29:73:bd:8b:cb: bb:2c:2b:e0:76:8a:7d:f1:8c:42:f6:4c:7d:a1:41: 67:4a:4d:d9:31:6e:f8:cc:9e:7f:59:10:2f:f2:0b: 26:ff:38:84:bc:45:39:06:ab:ec:63:c4:8d:8c:51: 55:cc:64:99:ec:3f:a1:7d:f7:d8:62:15:a6:da:9c: ca:96:c0:d8:25:f9:53:79:9a:df:17:8b:75:90:e2: 3d:b4:23:eb:19:b6:6a:e1:ef:a6:0f:56:d9:ff:f4: 98:41:0a:af:b5:53:81:0a:6d:eb:7d:c6:de:ef:65: 46:38:9d:ba:8b:4c:3d:b4:28:c5:8c:ba:0d:71:5f: 11:6f:0e:c5:d9:de:0c:be:5a:3e:6b:f7:0c:19:08: 7c:62:a7:fe:56:4e:1c:ea:5e:6d:4d:1c:a4:7f:74: f0:05:a6:40:3c:e6:48:81:3b:3b:76:d6:6b:fa:47: be:9d:ca:ca:4e:82:09:fd:3d:f9:0a:1b:83:0d:38: f2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:35:B9:F6:67:E2:98:A0:29:25:1C:74:58:74:7B:0F:A4:AB:43:FF X509v3 Authority Key Identifier: keyid:00:11:FE:2B:2F:67:54:7A:D7:12:D6:FC:36:AC:67:DD:69:2F:0E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:cc:63:b9:4e:9c:e9:42:6f:6f:6e:8a:ca:20:36:e2:14:0b: 35:f9:77:b3:e8:28:e7:f0:07:4a:fa:87:fd:ca:c8:3d:1c:24: f1:7e:24:ee:7b:12:8d:40:3f:05:21:f7:fe:2c:fa:75:29:b5: 13:6b:c9:a6:60:bd:64:5d:8a:65:f9:52:f1:42:27:af:13:ba: 6c:1e:0c:4b:b5:2a:33:8f:44:76:8f:bc:ef:e0:28:67:fa:74: 57:fb:98:94:71:3a:01:67:98:32:c3:90:b9:1b:e4:4d:10:3d: 16:39:7c:1f:6c:ac:bf:2a:68:c2:a8:2b:92:6f:e1:24:48:19: 42:f9:12:57:ce:b1:8a:32:e0:cc:52:ba:62:45:2e:8f:12:d5: 7e:7b:8b:e9:02:24:43:f0:ec:f4:fe:27:40:5c:b9:e2:92:d5: fa:bc:89:eb:bc:4b:19:ef:ce:45:72:37:db:16:cf:ac:ac:5b: 2b:a9:68:5c:e8:52:c0:d0:a0:7a:93:d0:48:04:3e:94:b5:fe: a9:5a:56:cc:29:eb:dc:a5:ee:b5:5b:97:d2:bb:ff:70:29:39: 3f:57:94:ad:d9:2d:1d:66:6f:4d:53:e3:89:7c:b3:2c:e3:9d: 8e:49:bd:7e:7b:14:f3:eb:9a:cd:5f:48:ed:6e:6d:51:be:ca: af:c2:a8:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjPu8V75HFtgJ/X1HyXjeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMTFmZTJiMmY2NzU0N2FkNzEyZDZmYzM2YWM2N2RkNjky ZjBlMWUwHhcNMjUxMjE4MTMwMTIxWhcNMjUxMjE5MTMwMTIxWjAzMTEwLwYDVQQD EyhhMDM1YjlmNjY3ZTI5OGEwMjkyNTFjNzQ1ODc0N2IwZmE0YWI0M2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl0aGem2lT3YebmDNXsf1G/wQpL9 BTZxBDZj7PHKYCoycAK0KM8WcgDUGSvdRv65SS9A/umyECY5maL7w7vIi0409Id/ KXO9i8u7LCvgdop98YxC9kx9oUFnSk3ZMW74zJ5/WRAv8gsm/ziEvEU5BqvsY8SN jFFVzGSZ7D+hfffYYhWm2pzKlsDYJflTeZrfF4t1kOI9tCPrGbZq4e+mD1bZ//SY QQqvtVOBCm3rfcbe72VGOJ26i0w9tCjFjLoNcV8Rbw7F2d4Mvlo+a/cMGQh8Yqf+ Vk4c6l5tTRykf3TwBaZAPOZIgTs7dtZr+ke+ncrKToIJ/T35ChuDDTjyowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKA1ufZn4pigKSUcdFh0ew+kq0P/MB8GA1UdIwQY MBaAFAAR/isvZ1R61xLW/DasZ91pLw4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUJILUt5OW5WSHJYRXRiOE5xeG4zV2t2RGg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS80ZGQwNmQtZTdhNi00NDkxLTllMTMt YTI4OGI0MWE1MGY2LzEvQUJILUt5OW5WSHJYRXRiOE5xeG4zV2t2RGg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS80ZGQwNmQtZTdhNi00NDkxLTllMTMtYTI4OGI0MWE1MGY2 LzEvQUJILUt5OW5WSHJYRXRiOE5xeG4zV2t2RGg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoMxjuU6c 6UJvb26KyiA24hQLNfl3s+go5/AHSvqH/crIPRwk8X4k7nsSjUA/BSH3/iz6dSm1 E2vJpmC9ZF2KZflS8UInrxO6bB4MS7UqM49Edo+87+AoZ/p0V/uYlHE6AWeYMsOQ uRvkTRA9Fjl8H2ysvypowqgrkm/hJEgZQvkSV86xijLgzFK6YkUujxLVfnuL6QIk Q/Ds9P4nQFy54pLV+ryJ67xLGe/ORXI32xbPrKxbK6loXOhSwNCgepPQSAQ+lLX+ qVpWzCnr3KXutVuX0rv/cCk5P1eUrdktHWZvTVPjiXyzLOOdjkm9fnsU8+uazV9I 7W5tUb7Kr8Koaw== -----END CERTIFICATE-----Generated at Thu Dec 18 20:36:27 2025 by rpki-client