This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft File: aBzk2Zuo67kaeUq_y90VveCcmfg.mft (raw, json) Hash identifier: E2Mzv1xYOpawyacIuIE7KFqVmij78pMAyPnNMxUiN50= Subject key identifier: 57:10:73:48:DC:90:79:99:C3:B1:24:79:7E:4F:8D:C7:FA:F8:1C:24 Authority key identifier: 68:1C:E4:D9:9B:A8:EB:B9:1A:79:4A:BF:CB:DD:15:BD:E0:9C:99:F8 Certificate issuer: /CN=681ce4d99ba8ebb91a794abfcbdd15bde09c99f8 Certificate serial: 019AF12D54D03950C59C5A55BE8B612A1103 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft Manifest number: 176E Signing time: Sat 06 Dec 2025 01:01:11 +0000 Manifest this update: Sat 06 Dec 2025 01:01:11 +0000 Manifest next update: Sun 07 Dec 2025 01:01:11 +0000 Files and hashes: 1: PK7BcrFS0l5bnlZ0HAf0zsv4dRI.roa (hash: X0DXQ3bBNCzCj3LUePAQk7Zy5NXqPrKEOx5dW7kBo5M=) 2: aBzk2Zuo67kaeUq_y90VveCcmfg.crl (hash: /8+WyM/FtgAA21nNtf5568hMY+XnipcEG9YIDDTmqaM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:54:d0:39:50:c5:9c:5a:55:be:8b:61:2a:11:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=681ce4d99ba8ebb91a794abfcbdd15bde09c99f8 Validity Not Before: Dec 6 01:01:11 2025 GMT Not After : Dec 7 01:01:11 2025 GMT Subject: CN=57107348dc907999c3b124797e4f8dc7faf81c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:54:3a:d1:0d:5f:48:df:47:25:f3:bd:13:fd: ea:10:64:19:f2:be:e8:de:3a:aa:b0:a1:a4:5f:54: 3b:a3:27:8f:a3:81:2e:d5:7e:da:cc:35:a3:ab:17: f4:97:dc:c6:cf:2e:d3:15:aa:7f:ee:61:cf:78:63: da:22:cc:19:bc:6a:1f:9a:39:97:4a:75:ba:a0:2d: cb:39:bb:da:08:09:79:e5:6a:5d:4e:02:fe:46:f0: 42:bb:89:93:67:c3:b7:81:66:28:b5:41:cb:98:b1: 09:ea:5f:98:c1:8d:61:62:7d:27:7c:5e:6b:e4:0d: 9c:8a:9a:4e:a4:2d:45:95:3a:dd:35:2f:55:cf:89: 6a:81:a1:1f:f7:c2:05:0c:2c:27:74:1e:67:88:02: 0f:af:09:b8:e6:64:d0:5a:86:06:9e:f9:d5:b4:88: 17:04:7a:3b:77:f7:39:f5:5b:4d:e1:f0:55:d3:96: d4:93:fa:f7:29:54:00:7e:65:16:49:2c:01:bc:52: d8:f7:51:9e:56:9d:86:5c:5d:a6:4f:c4:ca:67:3f: 55:d3:42:ad:fe:30:3b:54:30:6c:3b:83:fb:6d:b1: 2c:d8:f4:4f:44:78:34:a6:84:aa:a6:f3:5f:ad:91: ff:f7:e5:40:9a:52:3b:41:35:f2:4f:be:84:c8:e3: 9e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:10:73:48:DC:90:79:99:C3:B1:24:79:7E:4F:8D:C7:FA:F8:1C:24 X509v3 Authority Key Identifier: keyid:68:1C:E4:D9:9B:A8:EB:B9:1A:79:4A:BF:CB:DD:15:BD:E0:9C:99:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:c9:67:f0:cd:6b:7b:f5:ef:8e:64:96:b2:5c:b5:3a:05:4f: bb:53:de:a5:06:f9:5a:ce:b9:86:c3:28:f4:98:09:f2:81:08: 10:3d:d7:d7:e5:0d:0e:5e:fa:5b:85:66:1c:e8:00:10:3c:62: e5:0c:ed:a6:95:17:c6:95:cb:5d:7c:36:1d:c5:4a:c5:35:19: 7f:fc:dc:42:0f:d1:de:8e:7f:37:17:0a:21:3c:b5:27:fa:80: a2:29:98:e0:72:71:b5:48:66:88:90:6e:c4:c1:ff:c6:aa:81: c7:2f:33:71:cd:e4:a6:1f:e4:ec:45:0c:e9:dc:31:88:c5:7d: 28:0c:19:76:8e:83:12:53:88:44:62:3b:7f:ac:02:c8:f7:a5: ce:44:15:ce:38:2c:88:a2:85:ae:72:78:61:37:99:8c:77:33: e1:9e:44:d6:6b:d5:22:f8:37:65:51:a3:84:57:37:52:d4:97: d6:cc:97:d5:c5:d2:ec:9f:87:4b:cc:76:27:08:07:b3:7c:04: 0d:b4:6b:b3:d7:38:73:50:e8:6b:13:99:7b:8f:da:96:30:2c: d2:38:6f:18:d8:f1:72:e0:0c:8f:aa:ca:34:57:f3:11:3f:dd: 69:79:f7:f7:6e:96:13:95:b1:e7:84:01:bb:5a:89:58:1e:4d: 24:1c:14:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLVTQOVDFnFpVvothKhEDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MWNlNGQ5OWJhOGViYjkxYTc5NGFiZmNiZGQxNWJkZTA5 Yzk5ZjgwHhcNMjUxMjA2MDEwMTExWhcNMjUxMjA3MDEwMTExWjAzMTEwLwYDVQQD Eyg1NzEwNzM0OGRjOTA3OTk5YzNiMTI0Nzk3ZTRmOGRjN2ZhZjgxYzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlQ60Q1fSN9HJfO9E/3qEGQZ8r7o 3jqqsKGkX1Q7oyePo4Eu1X7azDWjqxf0l9zGzy7TFap/7mHPeGPaIswZvGofmjmX SnW6oC3LObvaCAl55WpdTgL+RvBCu4mTZ8O3gWYotUHLmLEJ6l+YwY1hYn0nfF5r 5A2cippOpC1FlTrdNS9Vz4lqgaEf98IFDCwndB5niAIPrwm45mTQWoYGnvnVtIgX BHo7d/c59VtN4fBV05bUk/r3KVQAfmUWSSwBvFLY91GeVp2GXF2mT8TKZz9V00Kt /jA7VDBsO4P7bbEs2PRPRHg0poSqpvNfrZH/9+VAmlI7QTXyT76EyOOeIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFcQc0jckHmZw7EkeX5Pjcf6+BwkMB8GA1UdIwQY MBaAFGgc5NmbqOu5GnlKv8vdFb3gnJn4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUJ6azJadW82N2thZVVxX3k5MFZ2ZUNjbWZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi82YjllZTgtOTI0Yi00YTMxLWE0NjQt OWY5OWMxNDc3ZmJlLzEvYUJ6azJadW82N2thZVVxX3k5MFZ2ZUNjbWZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi82YjllZTgtOTI0Yi00YTMxLWE0NjQtOWY5OWMxNDc3ZmJl LzEvYUJ6azJadW82N2thZVVxX3k5MFZ2ZUNjbWZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXsln8M1r e/XvjmSWsly1OgVPu1PepQb5Ws65hsMo9JgJ8oEIED3X1+UNDl76W4VmHOgAEDxi 5QztppUXxpXLXXw2HcVKxTUZf/zcQg/R3o5/NxcKITy1J/qAoimY4HJxtUhmiJBu xMH/xqqBxy8zcc3kph/k7EUM6dwxiMV9KAwZdo6DElOIRGI7f6wCyPelzkQVzjgs iKKFrnJ4YTeZjHcz4Z5E1mvVIvg3ZVGjhFc3UtSX1syX1cXS7J+HS8x2JwgHs3wE DbRrs9c4c1DoaxOZe4/aljAs0jhvGNjxcuAMj6rKNFfzET/daXn3926WE5Wx54QB u1qJWB5NJBwU+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:15 2025 by rpki-client