This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft File: aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft (raw, json) Hash identifier: jzUEfPWZPbTihNkreDRPTX2mwqWQwIsxJ5+7XsNc8x4= Subject key identifier: 75:34:23:6B:6A:3D:60:38:49:8B:B5:B5:92:1E:0A:18:C1:74:70:62 Authority key identifier: 68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14 Certificate issuer: /CN=6810aa89239242dacc9d03e3af22d4e87a783414 Certificate serial: 019AF1640F12C46C91ECEDA02D8CE8BC9174 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft Manifest number: 176E Signing time: Sat 06 Dec 2025 02:00:57 +0000 Manifest this update: Sat 06 Dec 2025 02:00:57 +0000 Manifest next update: Sun 07 Dec 2025 02:00:57 +0000 Files and hashes: 1: KpdjyDNFWz3xF34alZfaZ7kXPps.roa (hash: esX9PQgUe5/lICxLP0x3doHLhF8XKXX5g+pfJtsxi+M=) 2: aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl (hash: Tm7ImEsV/bql4q5wk99UPVGYELeBLibhjUjUeUdiXBQ=) 3: oPeQLPX6uGsTa0wO6DH1EULp4f4.roa (hash: KrmKJHT/mJohWjDeVABcWMG4FCh9RJOamHor38/dr+U=) 4: xs4Lhq2dtoSR5NylGdQYpzYAJFY.roa (hash: BY/PFQ7JiAuNhQeV/tshKqWnXgR5ng/nvPLH2dMAqLA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:0f:12:c4:6c:91:ec:ed:a0:2d:8c:e8:bc:91:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6810aa89239242dacc9d03e3af22d4e87a783414 Validity Not Before: Dec 6 02:00:57 2025 GMT Not After : Dec 7 02:00:57 2025 GMT Subject: CN=7534236b6a3d6038498bb5b5921e0a18c1747062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:88:73:04:b7:ba:03:fe:e8:ff:e4:48:f3:fb: 4d:14:f7:e0:d9:44:0b:b7:ce:dc:c6:23:6c:a6:ad: 37:1b:6b:e0:7a:4f:c8:7c:3a:1b:e4:61:ff:c4:0e: 3f:d8:e2:c6:e4:3f:c4:a0:7e:81:dc:a7:f5:7f:5a: 77:dc:83:d3:df:4e:d9:77:00:64:8b:f8:d6:a0:8c: 6c:0d:79:63:2e:fb:c3:be:a2:ce:9a:12:9b:ee:22: af:f3:bb:f8:0d:f5:c3:7b:9e:ec:13:c8:ca:5a:6c: af:de:7b:49:cd:b5:ab:48:7e:83:2d:56:a2:8d:a2: a9:d8:1b:c4:88:fb:3a:91:8f:31:44:f4:0f:a4:23: 33:89:73:82:d6:35:8a:59:c5:cf:ca:13:19:a9:6c: 74:cd:3d:34:56:cc:73:f0:1d:07:35:a0:2a:eb:3d: 43:b5:6e:99:c4:87:15:40:fb:b4:47:42:57:70:f8: c2:3f:d3:4e:5b:9c:57:f7:76:be:17:96:52:73:95: a6:a2:62:04:d8:06:3e:0d:f4:c4:8c:68:b6:a0:d0: c1:65:4b:e4:3e:ef:8f:62:55:9d:cd:de:81:76:a0: f4:b9:c4:91:fe:26:65:f2:be:81:5f:7c:db:5b:e7: e9:a2:3a:78:ca:04:7c:66:46:61:3f:52:c0:02:ba: 86:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:34:23:6B:6A:3D:60:38:49:8B:B5:B5:92:1E:0A:18:C1:74:70:62 X509v3 Authority Key Identifier: keyid:68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:67:67:ed:17:52:75:76:0e:9a:93:52:ac:22:c3:0a:c6:08: b0:46:de:fe:6d:e0:ff:eb:7d:cd:06:f5:1b:aa:ce:7e:87:1e: 38:9b:5d:3d:a4:09:e4:9f:3a:21:0a:ad:49:a3:da:3d:4d:7e: 20:ae:84:f4:a3:c5:6f:86:8d:95:bc:6c:95:9e:c3:4a:6e:0a: 28:6b:93:75:2e:f5:6a:08:85:7b:fa:be:b6:84:b0:c7:2e:22: db:e5:98:b0:60:a9:dd:7a:05:a6:52:6b:4b:3e:b4:75:2f:81: 21:26:34:52:8b:44:2e:22:4f:1e:26:58:49:c2:e9:15:44:40: e4:f2:ba:d9:94:8a:6b:2a:f8:27:b0:b7:6d:f7:b0:de:a7:32: 6e:a6:f8:30:40:5d:cf:46:0c:71:91:c1:6d:52:22:bf:4e:75: 69:02:f2:f4:8d:9b:d2:30:14:3d:8d:d4:8c:d2:00:d6:23:5e: 25:b1:ab:80:b3:7f:34:ae:e6:42:79:40:90:fa:b7:3d:56:6d: b7:51:db:3a:00:34:08:06:1e:f6:eb:4e:8a:6b:03:e5:09:53: 74:7c:39:56:1d:85:0c:59:1c:b1:0c:14:62:db:28:4c:55:11: 72:f2:c0:ad:0e:0b:24:a8:8e:df:67:8b:18:9d:0b:e4:b8:fb: b4:b8:88:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZA8SxGyR7O2gLYzovJF0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MTBhYTg5MjM5MjQyZGFjYzlkMDNlM2FmMjJkNGU4N2E3 ODM0MTQwHhcNMjUxMjA2MDIwMDU3WhcNMjUxMjA3MDIwMDU3WjAzMTEwLwYDVQQD Eyg3NTM0MjM2YjZhM2Q2MDM4NDk4YmI1YjU5MjFlMGExOGMxNzQ3MDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYhzBLe6A/7o/+RI8/tNFPfg2UQL t87cxiNspq03G2vgek/IfDob5GH/xA4/2OLG5D/EoH6B3Kf1f1p33IPT307ZdwBk i/jWoIxsDXljLvvDvqLOmhKb7iKv87v4DfXDe57sE8jKWmyv3ntJzbWrSH6DLVai jaKp2BvEiPs6kY8xRPQPpCMziXOC1jWKWcXPyhMZqWx0zT00Vsxz8B0HNaAq6z1D tW6ZxIcVQPu0R0JXcPjCP9NOW5xX93a+F5ZSc5WmomIE2AY+DfTEjGi2oNDBZUvk Pu+PYlWdzd6BdqD0ucSR/iZl8r6BX3zbW+fpojp4ygR8ZkZhP1LAArqGawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHU0I2tqPWA4SYu1tZIeChjBdHBiMB8GA1UdIwQY MBaAFGgQqokjkkLazJ0D468i1Oh6eDQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUJDcWlTT1NRdHJNblFQanJ5TFU2SHA0TkJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wMjQ0ZTQtNzNlMy00NDlkLWEwNmEt MWY2ODk5MzViOTBmLzEvYUJDcWlTT1NRdHJNblFQanJ5TFU2SHA0TkJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wMjQ0ZTQtNzNlMy00NDlkLWEwNmEtMWY2ODk5MzViOTBm LzEvYUJDcWlTT1NRdHJNblFQanJ5TFU2SHA0TkJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB2dn7RdS dXYOmpNSrCLDCsYIsEbe/m3g/+t9zQb1G6rOfoceOJtdPaQJ5J86IQqtSaPaPU1+ IK6E9KPFb4aNlbxslZ7DSm4KKGuTdS71agiFe/q+toSwxy4i2+WYsGCp3XoFplJr Sz60dS+BISY0UotELiJPHiZYScLpFURA5PK62ZSKayr4J7C3bfew3qcybqb4MEBd z0YMcZHBbVIiv051aQLy9I2b0jAUPY3UjNIA1iNeJbGrgLN/NK7mQnlAkPq3PVZt t1HbOgA0CAYe9utOimsD5QlTdHw5Vh2FDFkcsQwUYtsoTFURcvLArQ4LJKiO32eL GJ0L5Lj7tLiIxw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:44:15 2025 by rpki-client