This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.mft File: ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.mft (raw, json) Hash identifier: oV6x5nNFtfWu0xssdbbTGd/Wb1dt31wYWGCjoxrJ+y4= Subject key identifier: 9C:0F:FF:C1:39:AE:69:5A:E5:96:CB:60:08:60:B2:F9:19:6A:6E:D0 Authority key identifier: 00:11:FE:2B:2F:67:54:7A:D7:12:D6:FC:36:AC:67:DD:69:2F:0E:1E Certificate issuer: /CN=0011fe2b2f67547ad712d6fc36ac67dd692f0e1e Certificate serial: 019AF1D249A73D3C1C8AB0972E8CF058B292 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.mft Manifest number: 0DD3 Signing time: Sat 06 Dec 2025 04:01:21 +0000 Manifest this update: Sat 06 Dec 2025 04:01:21 +0000 Manifest next update: Sun 07 Dec 2025 04:01:21 +0000 Files and hashes: 1: ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.crl (hash: jOiGDl3sEP3KT0F8Ju8JeFHDGPxo8PUPwldAnZfloEQ=) 2: BvIKnOZDDnJ3fYjwKb9MPS2VREA.roa (hash: 6YHj3YUhTYKgioEXOjY6pW/I1gB2DwKxLtlbSUJymPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.crl rsync://rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.mft rsync://rpki.ripe.net/repository/DEFAULT/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:49:a7:3d:3c:1c:8a:b0:97:2e:8c:f0:58:b2:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0011fe2b2f67547ad712d6fc36ac67dd692f0e1e Validity Not Before: Dec 6 04:01:21 2025 GMT Not After : Dec 7 04:01:21 2025 GMT Subject: CN=9c0fffc139ae695ae596cb600860b2f9196a6ed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:1f:9a:53:88:cd:cd:15:d4:c6:26:be:af:85: 59:01:36:7f:6e:a4:6a:20:43:0d:67:bb:12:92:51: de:8d:c5:a9:a1:62:e0:ab:2c:e4:df:ae:35:fb:29: 8c:75:20:fd:d2:97:79:82:27:ac:dc:83:71:61:6b: 69:4a:44:2a:d7:5a:a1:58:4d:01:38:6a:7a:4e:48: 4d:0b:3d:94:44:ed:4f:96:b0:d4:6f:12:ed:c1:82: 99:b7:3e:1b:a9:f9:0f:57:ec:c0:3e:eb:06:78:42: b6:e2:0d:98:b0:a4:c4:e3:e1:85:a9:82:ea:1d:f6: 63:01:49:a3:89:fa:19:d0:49:01:70:a6:73:56:2e: 34:59:d4:5b:a1:8d:05:27:cd:b0:b6:cc:8b:2c:3b: 23:1a:77:e3:ee:a6:f6:f3:d9:6b:7d:61:1a:9e:3a: c0:af:2f:b1:56:20:ac:8d:ca:56:ae:1f:40:0e:00: 24:c8:70:14:ee:01:d6:14:54:11:52:87:cc:c5:4c: 86:1f:74:1e:3c:f3:0e:d2:95:c6:30:34:a6:70:15: 10:69:42:d6:4f:45:18:ed:04:03:8c:5f:f6:2d:f9: 83:03:b2:2d:bb:ca:eb:63:49:68:0c:8d:36:f4:d6: 99:db:9a:56:3a:d4:43:45:38:4d:b0:ed:b0:3b:d0: ed:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:0F:FF:C1:39:AE:69:5A:E5:96:CB:60:08:60:B2:F9:19:6A:6E:D0 X509v3 Authority Key Identifier: keyid:00:11:FE:2B:2F:67:54:7A:D7:12:D6:FC:36:AC:67:DD:69:2F:0E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:b3:13:3a:8a:3f:fc:8f:b9:cf:1f:7c:20:17:88:19:b4:de: f7:98:b5:f9:ff:67:b2:ea:07:ce:3f:21:96:c8:f1:1e:32:ed: 83:dc:b6:b7:c3:df:70:59:df:b5:2b:a7:3e:8e:b2:43:25:46: 31:03:e2:2a:eb:4f:db:c3:2a:d0:d8:7d:ab:4f:ce:f4:15:41: 45:df:6a:ae:77:1b:f7:73:8d:96:3e:ec:4b:ab:ba:54:0d:10: 3c:64:51:10:12:13:d2:a9:f4:51:30:6a:55:8e:eb:60:4b:48: 48:48:3f:e6:23:62:8d:5d:b7:d3:59:c0:bc:dc:c8:62:db:af: d1:2d:e0:3a:47:db:ac:ce:fe:6f:79:a3:36:47:ba:45:7b:45: 8d:82:3d:3d:3c:ba:2e:04:ca:92:63:cd:f2:b3:a9:a0:ff:d2: da:f1:c0:c2:f5:d3:1f:ed:6d:78:4b:1c:23:51:78:74:56:38: 39:a3:a1:20:ec:93:c2:2a:a3:f4:03:1a:b0:65:28:b1:3a:48: f3:da:88:bc:e4:48:fc:33:c1:8c:6b:b5:15:99:6a:45:d3:ce: 1c:08:3f:a8:29:be:ec:f5:39:35:d9:f2:19:3f:08:05:db:a6: e3:4f:2d:da:5c:a3:a3:9d:bc:8f:bb:3f:2b:5e:1f:cb:fe:9e: 63:24:35:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0kmnPTwcirCXLozwWLKSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMTFmZTJiMmY2NzU0N2FkNzEyZDZmYzM2YWM2N2RkNjky ZjBlMWUwHhcNMjUxMjA2MDQwMTIxWhcNMjUxMjA3MDQwMTIxWjAzMTEwLwYDVQQD Eyg5YzBmZmZjMTM5YWU2OTVhZTU5NmNiNjAwODYwYjJmOTE5NmE2ZWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5h+aU4jNzRXUxia+r4VZATZ/bqRq IEMNZ7sSklHejcWpoWLgqyzk3641+ymMdSD90pd5gies3INxYWtpSkQq11qhWE0B OGp6TkhNCz2URO1PlrDUbxLtwYKZtz4bqfkPV+zAPusGeEK24g2YsKTE4+GFqYLq HfZjAUmjifoZ0EkBcKZzVi40WdRboY0FJ82wtsyLLDsjGnfj7qb289lrfWEanjrA ry+xViCsjcpWrh9ADgAkyHAU7gHWFFQRUofMxUyGH3QePPMO0pXGMDSmcBUQaULW T0UY7QQDjF/2LfmDA7Itu8rrY0loDI029NaZ25pWOtRDRThNsO2wO9Dt9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJwP/8E5rmla5ZbLYAhgsvkZam7QMB8GA1UdIwQY MBaAFAAR/isvZ1R61xLW/DasZ91pLw4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUJILUt5OW5WSHJYRXRiOE5xeG4zV2t2RGg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS80ZGQwNmQtZTdhNi00NDkxLTllMTMt YTI4OGI0MWE1MGY2LzEvQUJILUt5OW5WSHJYRXRiOE5xeG4zV2t2RGg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS80ZGQwNmQtZTdhNi00NDkxLTllMTMtYTI4OGI0MWE1MGY2 LzEvQUJILUt5OW5WSHJYRXRiOE5xeG4zV2t2RGg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOrMTOoo/ /I+5zx98IBeIGbTe95i1+f9nsuoHzj8hlsjxHjLtg9y2t8PfcFnftSunPo6yQyVG MQPiKutP28Mq0Nh9q0/O9BVBRd9qrncb93ONlj7sS6u6VA0QPGRREBIT0qn0UTBq VY7rYEtISEg/5iNijV2301nAvNzIYtuv0S3gOkfbrM7+b3mjNke6RXtFjYI9PTy6 LgTKkmPN8rOpoP/S2vHAwvXTH+1teEscI1F4dFY4OaOhIOyTwiqj9AMasGUosTpI 89qIvORI/DPBjGu1FZlqRdPOHAg/qCm+7PU5NdnyGT8IBdum408t2lyjo528j7s/ K14fy/6eYyQ18g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:03 2025 by rpki-client