This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft File: ABFADVSPohr4GaDG4j53pgEutek.mft (raw, json) Hash identifier: f+HvFsd3ky3TwwlewlHc0aGx3yGuXVts1SbRIXlOsNg= Subject key identifier: 1D:65:86:44:5F:D2:7B:44:5E:42:31:C9:98:C8:9D:A6:E5:CA:8D:57 Authority key identifier: 00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9 Certificate issuer: /CN=0011400d548fa21af819a0c6e23e77a6012eb5e9 Certificate serial: 019AF19A9D4DF4A14288E1D296BBE8488DD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 03:00:33 +0000 Manifest this update: Sat 06 Dec 2025 03:00:33 +0000 Manifest next update: Sun 07 Dec 2025 03:00:33 +0000 Files and hashes: 1: 1-4u4Dw9kw9Y9CEi6GTjA8RhiXyk.roa (hash: Kdt5sjduBNPRdliFvzUojjEC7aaeGnPMG73opbmbK+Q=) 2: ABFADVSPohr4GaDG4j53pgEutek.crl (hash: w59gx/qDEKAZYeId8+03KaqLpS/7Qn8rzSXgmpIDb70=) 3: nFTNuRdL8Z-Wdwlm8A1gxGSf2iE.roa (hash: Be/+xAPsxrgz7pa9P1aEcP7attPVHrGgMu7I83eiMD8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:9d:4d:f4:a1:42:88:e1:d2:96:bb:e8:48:8d:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0011400d548fa21af819a0c6e23e77a6012eb5e9 Validity Not Before: Dec 6 03:00:33 2025 GMT Not After : Dec 7 03:00:33 2025 GMT Subject: CN=1d6586445fd27b445e4231c998c89da6e5ca8d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:29:98:2c:b7:47:3d:2f:97:c6:c4:12:a1:25: 00:f9:29:05:03:37:37:c8:c3:db:3a:aa:59:e0:65: 30:83:d0:47:ca:ea:4e:06:17:8d:cf:4b:53:99:dc: a5:45:d6:ca:62:9e:b3:27:b5:7b:71:5c:0d:d8:70: 04:79:3a:27:5e:b0:d9:1f:38:c4:fd:df:88:37:6e: af:e8:d2:e2:c1:f9:38:3f:3e:1c:26:6f:d0:39:e1: 1c:45:7d:32:46:fe:bb:15:e6:39:a7:14:8f:c1:87: 64:99:37:05:59:d8:a0:d6:37:bd:cc:5c:ea:79:f8: 4c:e1:43:fb:d9:bf:82:25:ac:3d:f5:70:b1:bc:4c: 2f:62:23:ae:cf:1b:1c:25:b8:99:db:83:04:3a:cc: 69:ef:4d:d6:97:35:a2:50:f7:50:ad:73:c2:3a:b4: d3:cf:ea:43:5a:0e:de:95:a0:f1:7d:0b:dd:56:ef: cb:c5:5c:e5:6c:cc:c3:8c:b0:ec:78:ac:74:07:1c: df:82:b7:bf:99:c4:ea:d7:13:9b:a7:e4:50:e1:6d: 38:64:fa:ca:65:85:37:81:0a:c5:2a:36:6a:4a:5b: f1:27:86:63:ea:97:e9:e3:a8:f2:b9:ca:87:75:81: d7:f2:5f:fd:33:8c:22:f2:f6:b0:31:97:3a:ab:17: 55:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:65:86:44:5F:D2:7B:44:5E:42:31:C9:98:C8:9D:A6:E5:CA:8D:57 X509v3 Authority Key Identifier: keyid:00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:f3:c0:33:57:ea:70:03:c7:b7:1d:b0:19:d5:71:7b:9a:8b: 3b:3b:98:c2:77:e9:36:2c:4e:8f:7b:07:34:55:01:07:fd:35: 0e:93:45:ee:b3:85:d7:02:7f:4a:64:2e:47:34:c1:65:41:98: cf:9c:af:b4:56:70:34:e0:84:36:4f:89:b5:36:92:b9:8d:c4: ef:e6:16:39:93:55:05:f9:15:1a:ab:31:df:2a:15:2f:25:b5: 90:a5:c6:60:b6:8f:5c:c3:20:cb:26:33:f6:d2:0d:ff:a4:dc: 46:0c:42:f2:13:d0:ce:e2:ed:fb:17:e6:ab:e5:cb:fa:9e:fd: a8:03:e6:df:cc:41:53:cc:ce:ef:0b:e7:b6:dd:05:45:79:cf: 96:f2:70:df:b6:fa:56:66:fb:5c:22:52:d7:73:9b:00:2c:ef: 1b:43:cc:ac:55:29:3e:bb:35:a7:e1:75:e9:97:a3:2b:f9:36: ee:03:04:6c:44:fb:5f:2e:11:31:ac:b2:51:56:ac:d2:2e:02: 2e:07:a4:db:cc:33:9f:0f:fc:91:45:13:ed:24:60:f0:d4:9a: 4d:21:d2:ef:bc:74:a4:2d:df:8a:1c:29:12:e8:d6:02:5a:dd: 18:4e:b1:8a:7d:ee:05:c2:80:90:06:5e:04:8e:b5:9e:7e:a9: 74:45:f4:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmp1N9KFCiOHSlrvoSI3RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMTE0MDBkNTQ4ZmEyMWFmODE5YTBjNmUyM2U3N2E2MDEy ZWI1ZTkwHhcNMjUxMjA2MDMwMDMzWhcNMjUxMjA3MDMwMDMzWjAzMTEwLwYDVQQD EygxZDY1ODY0NDVmZDI3YjQ0NWU0MjMxYzk5OGM4OWRhNmU1Y2E4ZDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSmYLLdHPS+XxsQSoSUA+SkFAzc3 yMPbOqpZ4GUwg9BHyupOBheNz0tTmdylRdbKYp6zJ7V7cVwN2HAEeTonXrDZHzjE /d+IN26v6NLiwfk4Pz4cJm/QOeEcRX0yRv67FeY5pxSPwYdkmTcFWdig1je9zFzq efhM4UP72b+CJaw99XCxvEwvYiOuzxscJbiZ24MEOsxp703WlzWiUPdQrXPCOrTT z+pDWg7elaDxfQvdVu/LxVzlbMzDjLDseKx0Bxzfgre/mcTq1xObp+RQ4W04ZPrK ZYU3gQrFKjZqSlvxJ4Zj6pfp46jyucqHdYHX8l/9M4wi8vawMZc6qxdVSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB1lhkRf0ntEXkIxyZjInablyo1XMB8GA1UdIwQY MBaAFAARQA1Uj6Ia+BmgxuI+d6YBLrXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUJGQURWU1BvaHI0R2FERzRqNTNwZ0V1dGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81MmRhYWItNjgyOS00NWZhLTk2N2Ut MDFmNDYwNmM2NWVjLzEvQUJGQURWU1BvaHI0R2FERzRqNTNwZ0V1dGVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy81MmRhYWItNjgyOS00NWZhLTk2N2UtMDFmNDYwNmM2NWVj LzEvQUJGQURWU1BvaHI0R2FERzRqNTNwZ0V1dGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJPPAM1fq cAPHtx2wGdVxe5qLOzuYwnfpNixOj3sHNFUBB/01DpNF7rOF1wJ/SmQuRzTBZUGY z5yvtFZwNOCENk+JtTaSuY3E7+YWOZNVBfkVGqsx3yoVLyW1kKXGYLaPXMMgyyYz 9tIN/6TcRgxC8hPQzuLt+xfmq+XL+p79qAPm38xBU8zO7wvntt0FRXnPlvJw37b6 Vmb7XCJS13ObACzvG0PMrFUpPrs1p+F16ZejK/k27gMEbET7Xy4RMayyUVas0i4C Lgek28wznw/8kUUT7SRg8NSaTSHS77x0pC3fihwpEujWAlrdGE6xin3uBcKAkAZe BI61nn6pdEX0vA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:22 2025 by rpki-client