This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft File: ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft (raw, json) Hash identifier: DMqc+HERg1pRoyUBuiEZ4WivNjqctV7xPxLr9NVa3zE= Subject key identifier: 23:1E:44:82:C0:70:37:5A:6E:E0:A6:CC:09:19:18:FE:24:05:BB:E8 Authority key identifier: 00:18:A3:32:8C:44:F0:8F:65:24:3C:61:E0:64:FE:FE:D6:41:3C:04 Certificate issuer: /CN=0018a3328c44f08f65243c61e064fefed6413c04 Certificate serial: 019AF2ADCB9D5B4C290BB0156C4C6C407D62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABijMoxE8I9lJDxh4GT-_tZBPAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 08:01:07 +0000 Manifest this update: Sat 06 Dec 2025 08:01:07 +0000 Manifest next update: Sun 07 Dec 2025 08:01:07 +0000 Files and hashes: 1: ABijMoxE8I9lJDxh4GT-_tZBPAQ.crl (hash: FNAwM8Y7eWIU98B3TkIkPqwNEZRUihlB1HlxEfKeaLE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ABijMoxE8I9lJDxh4GT-_tZBPAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:cb:9d:5b:4c:29:0b:b0:15:6c:4c:6c:40:7d:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0018a3328c44f08f65243c61e064fefed6413c04 Validity Not Before: Dec 6 08:01:07 2025 GMT Not After : Dec 7 08:01:07 2025 GMT Subject: CN=231e4482c070375a6ee0a6cc091918fe2405bbe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7a:16:08:9f:eb:f1:cf:c0:f4:2c:3a:90:d1: 5b:3e:d7:07:bc:9c:a1:59:5e:67:03:5a:55:d3:76: db:83:a1:1b:de:86:76:7a:c0:20:50:52:4e:5d:67: d7:5c:cc:2d:03:ef:24:db:a0:79:5d:dd:4d:7a:c5: e2:39:50:8f:f4:ec:9c:65:7c:04:6c:52:36:4c:9f: 06:2f:78:85:ac:2e:93:6b:ba:f7:7f:cd:e4:c6:27: 75:72:8b:ed:22:90:c3:09:05:c2:a9:ac:02:e6:b0: 79:81:c0:d4:20:84:fb:a7:cd:43:9a:be:0e:f5:d9: e9:e0:6b:37:2c:60:15:8f:5a:51:d5:d5:6c:fa:fc: 5b:ca:66:2a:8a:b3:8a:57:76:b5:70:24:f0:aa:96: 7c:a8:4b:da:c3:7c:f1:90:4a:10:2c:b5:18:99:37: 2c:41:d7:d8:b2:44:70:b0:be:46:62:d2:61:d4:70: f2:56:54:bb:90:51:bf:d0:a0:78:0a:ba:15:4b:d5: 4e:f1:3e:dd:bc:5a:b1:b4:bc:04:26:a7:6f:f7:ba: 83:05:a4:2a:ff:c5:c8:c4:5a:ec:83:7a:a5:d0:2a: ae:f1:01:19:d2:6a:c1:06:48:c3:eb:ec:86:4e:b4: 82:72:d6:59:d6:a4:a2:e1:b0:44:0b:f4:2e:fa:da: 31:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:1E:44:82:C0:70:37:5A:6E:E0:A6:CC:09:19:18:FE:24:05:BB:E8 X509v3 Authority Key Identifier: keyid:00:18:A3:32:8C:44:F0:8F:65:24:3C:61:E0:64:FE:FE:D6:41:3C:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABijMoxE8I9lJDxh4GT-_tZBPAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:64:3d:c5:45:49:b8:95:46:ea:c4:06:67:76:4f:fd:9a:21: 7b:33:7a:27:37:0d:92:95:e2:27:0b:54:d8:a9:d4:17:8b:ae: f4:41:3b:af:e5:01:48:f0:08:39:68:52:9f:f9:89:79:52:35: ea:46:ad:bc:ca:63:27:c5:04:56:89:fb:ce:cd:a8:93:c2:fd: bf:2b:4d:b5:c5:e9:a5:c7:33:0a:3e:be:5e:8c:68:4b:8d:76: e8:aa:fa:5c:3a:54:76:76:87:1c:8f:0a:e5:fa:92:fa:03:93: ff:8f:f2:27:9b:c2:82:f6:8e:55:74:af:72:7d:c3:11:aa:54: e4:13:53:de:78:a7:89:8a:25:3a:5f:5e:1d:9f:75:af:14:20: 9c:97:b4:70:e2:29:a0:8a:ae:8b:6d:bb:fe:9a:d8:b7:77:36: 69:56:d1:c5:a2:3c:cb:34:a4:46:00:db:4c:24:99:cf:ec:24: d8:de:ec:12:d7:26:ac:fe:76:0c:9a:bc:9f:a7:1f:91:b9:8d: 7f:45:52:96:6c:2b:28:44:42:df:d7:47:93:5b:9f:2d:50:dc: 2f:1a:8f:5a:7f:12:c3:41:24:9a:0d:d4:61:da:b9:8f:d0:a2: e2:76:fc:74:6e:8b:fb:b2:ad:7f:98:b3:14:c3:08:fc:de:35: 2a:b4:14:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrcudW0wpC7AVbExsQH1iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMThhMzMyOGM0NGYwOGY2NTI0M2M2MWUwNjRmZWZlZDY0 MTNjMDQwHhcNMjUxMjA2MDgwMTA3WhcNMjUxMjA3MDgwMTA3WjAzMTEwLwYDVQQD EygyMzFlNDQ4MmMwNzAzNzVhNmVlMGE2Y2MwOTE5MThmZTI0MDViYmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4noWCJ/r8c/A9Cw6kNFbPtcHvJyh WV5nA1pV03bbg6Eb3oZ2esAgUFJOXWfXXMwtA+8k26B5Xd1NesXiOVCP9OycZXwE bFI2TJ8GL3iFrC6Ta7r3f83kxid1covtIpDDCQXCqawC5rB5gcDUIIT7p81Dmr4O 9dnp4Gs3LGAVj1pR1dVs+vxbymYqirOKV3a1cCTwqpZ8qEvaw3zxkEoQLLUYmTcs QdfYskRwsL5GYtJh1HDyVlS7kFG/0KB4CroVS9VO8T7dvFqxtLwEJqdv97qDBaQq /8XIxFrsg3ql0Cqu8QEZ0mrBBkjD6+yGTrSCctZZ1qSi4bBEC/Qu+toxPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCMeRILAcDdabuCmzAkZGP4kBbvoMB8GA1UdIwQY MBaAFAAYozKMRPCPZSQ8YeBk/v7WQTwEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUJpak1veEU4STlsSkR4aDRHVC1fdFpCUEFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81MDFlOTgtNjBmMi00ZjYzLTg3NmYt NzIwZTUxNTM5MTZjLzEvQUJpak1veEU4STlsSkR4aDRHVC1fdFpCUEFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC81MDFlOTgtNjBmMi00ZjYzLTg3NmYtNzIwZTUxNTM5MTZj LzEvQUJpak1veEU4STlsSkR4aDRHVC1fdFpCUEFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd2Q9xUVJ uJVG6sQGZ3ZP/ZohezN6JzcNkpXiJwtU2KnUF4uu9EE7r+UBSPAIOWhSn/mJeVI1 6katvMpjJ8UEVon7zs2ok8L9vytNtcXppcczCj6+XoxoS4126Kr6XDpUdnaHHI8K 5fqS+gOT/4/yJ5vCgvaOVXSvcn3DEapU5BNT3niniYolOl9eHZ91rxQgnJe0cOIp oIqui227/prYt3c2aVbRxaI8yzSkRgDbTCSZz+wk2N7sEtcmrP52DJq8n6cfkbmN f0VSlmwrKERC39dHk1ufLVDcLxqPWn8Sw0Ekmg3UYdq5j9Ci4nb8dG6L+7Ktf5iz FMMI/N41KrQUYQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:24:54 2025 by rpki-client