This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft File: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft (raw, json) Hash identifier: hyvvz/bNLGqVDgHmTzfUuO213p7m4UhWHZCqPcQ7s48= Subject key identifier: 0F:74:B6:CD:1E:49:FC:02:BF:EC:88:54:50:49:66:53:B4:A1:26:FB Authority key identifier: 00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42 Certificate issuer: /CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942 Certificate serial: 019AF1D23C9A8061B5273E0174FD26484326 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 04:01:18 +0000 Manifest this update: Sat 06 Dec 2025 04:01:18 +0000 Manifest next update: Sun 07 Dec 2025 04:01:18 +0000 Files and hashes: 1: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl (hash: 6wTI6LXXl4anhIq2MYJe54gA/umozbjLSDLeQRauq7E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:3c:9a:80:61:b5:27:3e:01:74:fd:26:48:43:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942 Validity Not Before: Dec 6 04:01:18 2025 GMT Not After : Dec 7 04:01:18 2025 GMT Subject: CN=0f74b6cd1e49fc02bfec885450496653b4a126fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:61:cd:1d:f9:fc:dd:81:db:88:4f:3b:85:30: fb:32:eb:6e:e8:89:50:1f:47:3c:2a:ef:e8:b4:21: 89:f6:2d:a1:6d:37:56:c2:e5:72:90:fb:99:8e:62: 87:ca:42:3f:03:45:aa:f5:e9:b1:b4:31:9f:e7:93: 0e:4a:8e:30:6a:b8:c8:1a:c2:d0:90:9b:2c:67:14: 31:14:0c:68:65:f5:d8:72:7b:83:26:0d:9f:43:44: 02:5a:51:f9:62:60:9b:9b:1d:87:16:f5:60:14:eb: fa:52:05:f8:97:13:08:d2:9e:c0:4f:fa:af:24:4b: 07:70:de:1d:1a:81:bd:fc:e4:5e:07:a1:39:bd:34: e6:52:55:fc:7b:da:c8:e8:b4:6b:24:9b:ed:b2:fd: 88:ba:9c:1a:53:b4:03:4e:2c:f2:23:33:d6:fc:84: e1:d3:61:3d:b0:c7:5b:4a:7d:33:d7:3c:55:8c:4a: af:5b:63:fc:34:82:27:ef:e8:ee:ad:1a:e3:37:d3: 0e:b7:28:29:80:9f:33:0b:13:28:50:4c:60:f0:11: b5:23:7a:45:e6:eb:11:07:74:d7:60:0a:39:cb:5c: ac:74:5f:02:3b:14:96:6a:c1:f9:11:c2:d5:bc:ef: 1d:7a:6a:ab:d9:dc:4b:91:f3:34:c2:1d:1a:a0:08: c9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:74:B6:CD:1E:49:FC:02:BF:EC:88:54:50:49:66:53:B4:A1:26:FB X509v3 Authority Key Identifier: keyid:00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:08:dc:48:45:37:fe:48:15:2e:a0:e2:7e:84:89:6d:37:8a: fa:f0:9f:1b:78:71:89:12:3e:ae:f1:93:3a:4c:c7:f5:70:ed: 46:08:a7:35:5d:87:24:3a:05:e9:54:7b:6d:26:3d:2b:59:88: 8b:2f:59:27:81:d8:96:3b:46:33:d8:ca:19:4f:59:23:c3:75: 33:aa:b4:46:c4:80:21:1b:7f:3f:1e:97:84:d7:0f:2f:fa:28: da:dd:74:80:58:82:b2:20:69:12:74:0d:e3:e9:c7:8b:59:77: bb:74:6b:5a:5c:f6:e2:fc:01:03:d6:9f:e7:50:5f:3c:2f:d8: 10:59:cc:0d:d9:d6:f2:e6:27:29:4b:c6:19:9f:3e:ed:b9:aa: 2e:3e:67:5d:c4:4c:4c:5b:ba:f2:5f:2d:8b:fd:8c:69:3c:1e: 42:7b:6e:22:68:01:4c:fa:ed:58:bd:5b:f9:47:c7:cf:18:17: 66:68:f4:66:d8:5b:9e:78:7f:72:17:22:3d:2b:a2:11:61:07: cb:00:4b:9d:3a:e4:81:ad:a2:ce:cb:45:96:f2:a7:0f:8a:5a: 83:d3:27:59:0f:26:b2:03:ad:40:3e:b8:c3:ea:2a:04:1e:d4: 2c:ea:64:82:ab:99:3d:1c:a3:59:5f:03:de:81:22:05:36:1a: 64:21:cd:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0jyagGG1Jz4BdP0mSEMmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMDA2ZDVlMGMyNzkzMTFkMWE4MWZkMGJiZDIxMGQwYmRh ZDU5NDIwHhcNMjUxMjA2MDQwMTE4WhcNMjUxMjA3MDQwMTE4WjAzMTEwLwYDVQQD EygwZjc0YjZjZDFlNDlmYzAyYmZlYzg4NTQ1MDQ5NjY1M2I0YTEyNmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22HNHfn83YHbiE87hTD7Mutu6IlQ H0c8Ku/otCGJ9i2hbTdWwuVykPuZjmKHykI/A0Wq9emxtDGf55MOSo4warjIGsLQ kJssZxQxFAxoZfXYcnuDJg2fQ0QCWlH5YmCbmx2HFvVgFOv6UgX4lxMI0p7AT/qv JEsHcN4dGoG9/OReB6E5vTTmUlX8e9rI6LRrJJvtsv2IupwaU7QDTizyIzPW/ITh 02E9sMdbSn0z1zxVjEqvW2P8NIIn7+jurRrjN9MOtygpgJ8zCxMoUExg8BG1I3pF 5usRB3TXYAo5y1ysdF8COxSWasH5EcLVvO8demqr2dxLkfM0wh0aoAjJBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA90ts0eSfwCv+yIVFBJZlO0oSb7MB8GA1UdIwQY MBaAFAAAbV4MJ5MR0agf0LvSENC9rVlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUFCdFhnd25reEhScUJfUXU5SVEwTDJ0V1VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85N2I3ZDAtODM4My00YTM3LThjY2Ut MWY5MThkOTM3NTZmLzEvQUFCdFhnd25reEhScUJfUXU5SVEwTDJ0V1VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC85N2I3ZDAtODM4My00YTM3LThjY2UtMWY5MThkOTM3NTZm LzEvQUFCdFhnd25reEhScUJfUXU5SVEwTDJ0V1VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYAjcSEU3 /kgVLqDifoSJbTeK+vCfG3hxiRI+rvGTOkzH9XDtRginNV2HJDoF6VR7bSY9K1mI iy9ZJ4HYljtGM9jKGU9ZI8N1M6q0RsSAIRt/Px6XhNcPL/oo2t10gFiCsiBpEnQN 4+nHi1l3u3RrWlz24vwBA9af51BfPC/YEFnMDdnW8uYnKUvGGZ8+7bmqLj5nXcRM TFu68l8ti/2MaTweQntuImgBTPrtWL1b+UfHzxgXZmj0Zthbnnh/chciPSuiEWEH ywBLnTrkga2izstFlvKnD4pag9MnWQ8msgOtQD64w+oqBB7ULOpkgquZPRyjWV8D 3oEiBTYaZCHN5w== -----END CERTIFICATE-----Generated at Sat Dec 6 11:07:11 2025 by rpki-client