This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft File: AblFvZ9KDnOPSRWctrba8iSG1cA.mft (raw, json) Hash identifier: 94vJLO7hOQ4OokJiqZkgJ3Z+Hp5UAu7lG6SMbv8vcbA= Subject key identifier: 4E:98:8E:E1:3B:19:79:78:07:7A:76:6A:AF:DB:D0:E8:4F:EE:A8:35 Authority key identifier: 01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0 Certificate issuer: /CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0 Certificate serial: 019AF12E0C062117E6E69426EAFAB393345F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft Manifest number: 0E31 Signing time: Sat 06 Dec 2025 01:01:57 +0000 Manifest this update: Sat 06 Dec 2025 01:01:57 +0000 Manifest next update: Sun 07 Dec 2025 01:01:57 +0000 Files and hashes: 1: AblFvZ9KDnOPSRWctrba8iSG1cA.crl (hash: SYM0Cw+bRo6uXC7wL3MGsRcgHPpop+kMepIpCP/F2kE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:0c:06:21:17:e6:e6:94:26:ea:fa:b3:93:34:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0 Validity Not Before: Dec 6 01:01:57 2025 GMT Not After : Dec 7 01:01:57 2025 GMT Subject: CN=4e988ee13b197978077a766aafdbd0e84feea835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:de:80:ea:66:84:f8:93:6d:7e:81:71:d9:fe: 43:45:53:2e:68:77:98:d4:8d:a6:d8:11:b3:46:14: ac:e8:23:fd:82:31:26:0d:3f:73:63:33:1b:fc:ea: 22:1b:9d:41:2b:33:c2:33:e2:cc:03:b3:41:68:14: 18:a9:28:7e:bb:e1:a9:ed:fb:6b:82:c0:8a:29:63: fe:43:fe:ab:a7:c7:6b:59:e1:c3:57:43:61:b1:38: 45:6c:16:1f:15:a9:af:4e:07:3f:b2:41:69:6a:e8: cd:80:a0:16:a6:26:b2:54:23:06:85:3f:3a:1d:8c: a1:9d:d6:81:07:8f:16:09:55:63:40:3f:d7:67:2e: a9:90:c1:1e:3a:5c:a9:b5:e5:0e:db:c9:ab:00:4d: bb:7d:ce:80:0e:df:8f:fc:a4:63:ac:87:4d:f3:03: 26:24:00:5c:16:69:02:da:5f:8e:fe:10:88:65:1d: 9a:74:6e:22:64:71:69:26:7d:45:a8:ec:73:e2:1c: 95:2a:7a:1e:fb:62:16:fe:2c:3e:2a:60:f8:c5:33: ca:18:c2:15:b0:55:9e:16:9b:05:80:0a:8c:c6:01: 25:1a:33:ab:bc:61:60:f6:38:79:2e:0a:e8:85:5b: 24:f1:74:e8:6f:fa:bd:6f:1a:c0:d7:67:37:fb:e7: f0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:98:8E:E1:3B:19:79:78:07:7A:76:6A:AF:DB:D0:E8:4F:EE:A8:35 X509v3 Authority Key Identifier: keyid:01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:a3:66:d0:12:67:2d:b2:5d:ef:a3:6f:4b:b0:85:05:07:dd: f3:d0:90:08:3e:fc:6c:bb:d2:1c:47:00:47:e3:e1:f6:a7:ce: 8e:7e:41:6b:cf:89:a1:ca:29:07:36:d6:46:9d:d5:46:4c:30: 59:a7:07:7a:15:fa:f8:35:9d:ef:19:93:58:c0:af:27:70:db: 13:3b:39:a2:af:93:df:8c:b7:77:87:0d:f3:8c:bb:70:ac:a9: 1e:eb:2e:42:77:d5:11:ab:71:74:39:f8:fe:d1:e2:9e:70:65: 33:e8:e7:12:09:8c:d5:4c:f9:34:f9:75:4b:55:c9:2d:db:6a: 15:fb:ce:a6:40:fd:74:f7:69:8a:b6:41:02:0d:2c:d0:7d:51: e8:24:2c:c8:6d:3f:b8:a4:77:bf:89:55:9b:df:85:52:5c:ad: d6:cf:02:ed:c5:68:57:5e:b2:ea:e5:cf:0b:d6:7e:fb:e4:56: 42:e0:fa:3c:bc:fb:84:83:58:25:ec:da:c8:c5:82:05:18:06: aa:d2:d7:c4:79:59:02:74:2f:1d:8a:51:d7:0f:b0:2b:1a:d6: 90:d8:9f:6b:38:8a:36:db:a4:cb:79:59:10:05:21:97:c9:31: ce:a0:d4:bb:69:54:3f:0b:9d:0f:48:9a:db:56:58:de:5a:2f: d6:ed:06:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLgwGIRfm5pQm6vqzkzRfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxYjk0NWJkOWY0YTBlNzM4ZjQ5MTU5Y2I2YjZkYWYyMjQ4 NmQ1YzAwHhcNMjUxMjA2MDEwMTU3WhcNMjUxMjA3MDEwMTU3WjAzMTEwLwYDVQQD Eyg0ZTk4OGVlMTNiMTk3OTc4MDc3YTc2NmFhZmRiZDBlODRmZWVhODM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs96A6maE+JNtfoFx2f5DRVMuaHeY 1I2m2BGzRhSs6CP9gjEmDT9zYzMb/OoiG51BKzPCM+LMA7NBaBQYqSh+u+Gp7ftr gsCKKWP+Q/6rp8drWeHDV0NhsThFbBYfFamvTgc/skFpaujNgKAWpiayVCMGhT86 HYyhndaBB48WCVVjQD/XZy6pkMEeOlypteUO28mrAE27fc6ADt+P/KRjrIdN8wMm JABcFmkC2l+O/hCIZR2adG4iZHFpJn1FqOxz4hyVKnoe+2IW/iw+KmD4xTPKGMIV sFWeFpsFgAqMxgElGjOrvGFg9jh5LgrohVsk8XTob/q9bxrA12c3++fwyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE6YjuE7GXl4B3p2aq/b0OhP7qg1MB8GA1UdIwQY MBaAFAG5Rb2fSg5zj0kVnLa22vIkhtXAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWJsRnZaOUtEbk9QU1JXY3RyYmE4aVNHMWNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy84YzllZGItYTIyNi00NWFkLThiM2It ZDNiZDdhYjNlZDM2LzEvQWJsRnZaOUtEbk9QU1JXY3RyYmE4aVNHMWNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy84YzllZGItYTIyNi00NWFkLThiM2ItZDNiZDdhYjNlZDM2 LzEvQWJsRnZaOUtEbk9QU1JXY3RyYmE4aVNHMWNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQKNm0BJn LbJd76NvS7CFBQfd89CQCD78bLvSHEcAR+Ph9qfOjn5Ba8+JocopBzbWRp3VRkww WacHehX6+DWd7xmTWMCvJ3DbEzs5oq+T34y3d4cN84y7cKypHusuQnfVEatxdDn4 /tHinnBlM+jnEgmM1Uz5NPl1S1XJLdtqFfvOpkD9dPdpirZBAg0s0H1R6CQsyG0/ uKR3v4lVm9+FUlyt1s8C7cVoV16y6uXPC9Z+++RWQuD6PLz7hINYJezayMWCBRgG qtLXxHlZAnQvHYpR1w+wKxrWkNifaziKNtuky3lZEAUhl8kxzqDUu2lUPwudD0ia 21ZY3lov1u0G7A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:19 2025 by rpki-client