This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.mft File: pABDs-E67Tl_iTLPXRP_T0qv5ro.mft (raw, json) Hash identifier: AxzW27JiqvAhmTfnZKKEvF9TTvf1AYqKXPQGNfWJklM= Subject key identifier: D0:EF:7C:C2:70:6C:56:2B:66:AC:6D:1E:FF:7E:A2:8C:F9:BD:EC:8B Authority key identifier: A4:00:43:B3:E1:3A:ED:39:7F:89:32:CF:5D:13:FF:4F:4A:AF:E6:BA Certificate issuer: /CN=a40043b3e13aed397f8932cf5d13ff4f4aafe6ba Certificate serial: 019AF31D0A46950F450A30410F87E25CF76A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pABDs-E67Tl_iTLPXRP_T0qv5ro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.mft Manifest number: 0A1E Signing time: Sat 06 Dec 2025 10:02:37 +0000 Manifest this update: Sat 06 Dec 2025 10:02:37 +0000 Manifest next update: Sun 07 Dec 2025 10:02:37 +0000 Files and hashes: 1: 6PmEXqzCqtOkV5rlVnjN7lD4y7o.roa (hash: oeYIl7mC76NEmwPAocr8euhDeieJStNOycGYHO+qVzg=) 2: pABDs-E67Tl_iTLPXRP_T0qv5ro.crl (hash: FnwqCC1NmcyTDPqNLKorskbsF+NdtVhCF6elrbGlE28=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.crl rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.mft rsync://rpki.ripe.net/repository/DEFAULT/pABDs-E67Tl_iTLPXRP_T0qv5ro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:0a:46:95:0f:45:0a:30:41:0f:87:e2:5c:f7:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a40043b3e13aed397f8932cf5d13ff4f4aafe6ba Validity Not Before: Dec 6 10:02:37 2025 GMT Not After : Dec 7 10:02:37 2025 GMT Subject: CN=d0ef7cc2706c562b66ac6d1eff7ea28cf9bdec8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0f:b7:c1:4c:24:e2:12:5b:03:d6:26:24:75: 31:9d:1b:4c:02:f2:39:31:fb:7b:40:d0:8b:28:38: 5d:e5:db:2b:53:f5:57:80:d6:d6:1a:ff:39:f7:1a: c4:97:94:93:bc:4d:d5:e5:28:05:f0:0e:1b:e1:63: ae:26:16:0c:2c:fb:43:9b:4b:ad:c6:af:32:ec:20: f2:f3:8c:0d:50:7d:a6:e3:ab:21:1e:d4:24:00:15: ed:a3:01:11:86:86:96:fe:2e:e9:8b:8f:7f:94:84: c1:6f:ea:17:e8:94:7a:21:87:c2:bc:a6:b7:88:51: 38:91:b4:51:db:6e:fb:cd:17:ee:60:2f:06:4e:f5: 08:d0:28:f8:c3:54:f8:4e:47:49:aa:8e:eb:2f:45: 17:b1:2e:50:29:5c:07:62:1c:24:ba:ee:ee:a1:a8: 41:74:4c:62:b6:10:91:80:75:85:ad:5e:ea:df:9a: 48:cb:d3:7d:ca:50:09:82:ab:3b:7f:46:9d:38:cb: 2d:ef:08:52:f8:2e:d4:4f:c4:c1:34:2d:19:d2:fe: 76:90:20:e2:31:2f:7b:8b:d5:32:81:9b:fb:26:e0: 58:89:62:d5:3d:a9:17:e9:5b:8f:49:cb:de:a6:aa: 35:77:69:5c:d9:d3:93:2b:29:12:8a:1a:0b:4f:5d: 95:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:EF:7C:C2:70:6C:56:2B:66:AC:6D:1E:FF:7E:A2:8C:F9:BD:EC:8B X509v3 Authority Key Identifier: keyid:A4:00:43:B3:E1:3A:ED:39:7F:89:32:CF:5D:13:FF:4F:4A:AF:E6:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pABDs-E67Tl_iTLPXRP_T0qv5ro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:92:cc:bf:77:13:4a:08:38:31:5d:87:04:b1:02:bb:28:af: 00:a3:6d:1a:e2:bf:67:d1:3d:c0:cb:b3:bc:29:35:53:ee:5a: 6e:8f:4f:34:bd:82:e1:75:dd:44:1c:1f:21:ce:5e:c8:35:6a: a8:40:a0:e8:18:0d:7a:64:cb:c4:5e:a1:6e:f3:69:2b:1c:12: 86:27:bb:5b:8e:aa:b7:24:dd:e2:e0:b0:96:43:8d:ed:26:1f: fe:1c:d9:e7:f1:83:a0:94:3f:07:c2:84:ca:8a:9c:1c:b4:76: 2c:d1:57:ed:f9:85:82:e8:39:75:5a:e1:80:57:a3:c3:b0:16: 79:42:77:f9:85:b5:9a:1a:31:5d:16:63:59:99:60:23:12:0e: 2d:de:dd:0c:30:4f:89:ae:e5:1a:78:05:e5:85:d4:c1:e4:77: d3:e8:fc:43:b8:d1:42:15:c7:dc:5f:c1:54:87:8c:cc:c0:ad: de:35:f5:da:5f:f6:ee:59:ef:34:dc:fe:5c:a5:f7:33:b8:47: 87:92:80:05:a4:16:ea:49:3b:98:25:e9:d2:9e:bd:79:e0:b2: c4:15:2c:7f:17:de:73:38:59:45:a5:a9:66:4f:f6:16:1b:95: 43:63:b7:c2:cd:36:a3:31:79:4c:78:c3:79:3f:53:f3:d0:9a: d8:0a:21:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHQpGlQ9FCjBBD4fiXPdqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MDA0M2IzZTEzYWVkMzk3Zjg5MzJjZjVkMTNmZjRmNGFh ZmU2YmEwHhcNMjUxMjA2MTAwMjM3WhcNMjUxMjA3MTAwMjM3WjAzMTEwLwYDVQQD EyhkMGVmN2NjMjcwNmM1NjJiNjZhYzZkMWVmZjdlYTI4Y2Y5YmRlYzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlg+3wUwk4hJbA9YmJHUxnRtMAvI5 Mft7QNCLKDhd5dsrU/VXgNbWGv859xrEl5STvE3V5SgF8A4b4WOuJhYMLPtDm0ut xq8y7CDy84wNUH2m46shHtQkABXtowERhoaW/i7pi49/lITBb+oX6JR6IYfCvKa3 iFE4kbRR2277zRfuYC8GTvUI0Cj4w1T4TkdJqo7rL0UXsS5QKVwHYhwkuu7uoahB dExithCRgHWFrV7q35pIy9N9ylAJgqs7f0adOMst7whS+C7UT8TBNC0Z0v52kCDi MS97i9UygZv7JuBYiWLVPakX6VuPScvepqo1d2lc2dOTKykSihoLT12ViwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNDvfMJwbFYrZqxtHv9+ooz5veyLMB8GA1UdIwQY MBaAFKQAQ7PhOu05f4kyz10T/09Kr+a6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEFCRHMtRTY3VGxfaVRMUFhSUF9UMHF2NXJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9hM2Q4ZjUtMGQzYy00MmZhLThjNjkt YjljMGRmNzBhZDNmLzEvcEFCRHMtRTY3VGxfaVRMUFhSUF9UMHF2NXJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9hM2Q4ZjUtMGQzYy00MmZhLThjNjktYjljMGRmNzBhZDNm LzEvcEFCRHMtRTY3VGxfaVRMUFhSUF9UMHF2NXJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUZLMv3cT Sgg4MV2HBLECuyivAKNtGuK/Z9E9wMuzvCk1U+5abo9PNL2C4XXdRBwfIc5eyDVq qECg6BgNemTLxF6hbvNpKxwShie7W46qtyTd4uCwlkON7SYf/hzZ5/GDoJQ/B8KE yoqcHLR2LNFX7fmFgug5dVrhgFejw7AWeUJ3+YW1mhoxXRZjWZlgIxIOLd7dDDBP ia7lGngF5YXUweR30+j8Q7jRQhXH3F/BVIeMzMCt3jX12l/27lnvNNz+XKX3M7hH h5KABaQW6kk7mCXp0p69eeCyxBUsfxfeczhZRaWpZk/2FhuVQ2O3ws02ozF5THjD eT9T89Ca2Aohxw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:49:27 2025 by rpki-client