This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft File: aBYXGz-RsdELBEWYf2EUKKvxPho.mft (raw, json) Hash identifier: a3yJgPjVetEe/3WxtwJe9UqaNKKk0TYNSpTgUVFePv4= Subject key identifier: 38:18:6D:67:35:E2:1A:D4:E2:2D:A8:AB:0E:F6:33:66:09:D1:47:83 Authority key identifier: 68:16:17:1B:3F:91:B1:D1:0B:04:45:98:7F:61:14:28:AB:F1:3E:1A Certificate issuer: /CN=6816171b3f91b1d10b0445987f611428abf13e1a Certificate serial: 019AF16429F0F759965B193C0F86FEF0FDCA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft Manifest number: 0246 Signing time: Sat 06 Dec 2025 02:01:04 +0000 Manifest this update: Sat 06 Dec 2025 02:01:04 +0000 Manifest next update: Sun 07 Dec 2025 02:01:04 +0000 Files and hashes: 1: aBYXGz-RsdELBEWYf2EUKKvxPho.crl (hash: KFN8qffGfg8RM4RgseVEd23SAMWMX1v8I/EiAs6jVk8=) 2: ctE-xjtRaK2N_xv7jPgdr16mAqk.roa (hash: 6dqptnwwlw4mSqTSZoD2O9lUv3DCB5Cf6H1piQtg/m0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:29:f0:f7:59:96:5b:19:3c:0f:86:fe:f0:fd:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6816171b3f91b1d10b0445987f611428abf13e1a Validity Not Before: Dec 6 02:01:04 2025 GMT Not After : Dec 7 02:01:04 2025 GMT Subject: CN=38186d6735e21ad4e22da8ab0ef6336609d14783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d2:7e:a4:4a:00:72:0d:21:61:2d:7e:d5:25: f4:85:5e:a2:ca:a3:4b:64:aa:7a:09:83:a5:67:ee: 1c:7e:ad:5d:57:ab:91:20:f3:40:47:6e:b9:b3:88: 61:75:81:15:57:2d:e9:3f:f6:96:65:73:81:0d:f8: bd:77:31:6e:0e:99:30:d5:50:b3:c4:51:39:45:7f: 14:73:49:de:9b:b4:62:e6:d7:65:55:a9:8b:e8:35: f2:55:d2:bf:44:48:94:ef:27:b6:b9:d2:66:2a:b8: a9:dc:68:58:09:a1:d7:5e:7d:99:00:22:35:0f:c4: 76:aa:2e:c1:14:9d:3d:4c:c6:59:5a:7e:cc:a9:f7: a6:89:5d:7d:4b:71:f1:62:c2:83:59:aa:51:66:c2: 7d:23:56:a9:09:3a:40:17:56:c9:b5:51:e0:bf:a1: fa:34:5f:e0:26:9c:f5:e0:03:dd:63:0f:0a:34:6c: 20:a5:92:af:fb:48:87:f2:20:79:f8:a8:ea:99:cd: 14:b7:9b:1a:9a:d3:f5:4b:d8:02:f3:ed:9f:4e:30: 62:da:e3:7c:bc:d0:a2:ab:6e:04:b7:43:f8:e4:07: 0f:30:db:28:36:cc:de:78:54:d7:89:a9:92:58:df: 82:e7:1f:51:ac:04:fc:f5:67:3b:42:c6:24:c4:b7: 2e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:18:6D:67:35:E2:1A:D4:E2:2D:A8:AB:0E:F6:33:66:09:D1:47:83 X509v3 Authority Key Identifier: keyid:68:16:17:1B:3F:91:B1:D1:0B:04:45:98:7F:61:14:28:AB:F1:3E:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:34:2a:c7:27:84:fd:6f:11:9a:4e:b8:c1:78:ba:08:fc:d4: 03:5b:05:7c:ec:f8:c6:dc:05:59:95:7a:08:27:7e:90:e1:5f: a1:65:71:fc:e3:db:1e:69:a8:64:d6:0a:65:dc:ca:34:a1:30: 0f:7b:99:10:84:4c:8d:ca:ae:5f:b9:25:0a:6e:35:bc:02:78: fe:27:ec:e3:af:dc:40:e3:23:2c:d2:7c:85:23:75:6c:ee:48: 79:80:c2:d9:6e:c7:6f:1c:d0:49:50:8b:b3:8e:88:d0:00:7d: 04:42:89:0f:2d:3e:d4:cc:99:7e:ee:d1:fa:d3:56:0f:1d:71: 94:f8:5b:35:af:7b:76:96:6e:b4:48:33:73:5c:bd:07:e0:da: b3:9e:a5:96:0b:ca:f5:9e:0f:8a:0e:b6:64:bf:58:b3:06:62: 1a:34:b7:d5:da:f5:5c:cd:43:04:e8:da:1c:36:21:b2:8d:1e: e5:ef:cf:64:cb:4d:b7:62:6a:1c:62:42:a3:22:b6:59:ec:0e: 94:6d:e9:ce:65:b3:45:1e:fd:f2:57:ae:63:a1:3e:16:e0:5f: 8e:28:dc:c9:d9:1b:f1:73:8e:e6:6c:34:32:2b:ca:2c:49:c5: 88:15:12:d3:ab:21:cb:62:03:3b:79:85:20:35:4e:cb:39:3e: 65:c9:eb:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZCnw91mWWxk8D4b+8P3KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MTYxNzFiM2Y5MWIxZDEwYjA0NDU5ODdmNjExNDI4YWJm MTNlMWEwHhcNMjUxMjA2MDIwMTA0WhcNMjUxMjA3MDIwMTA0WjAzMTEwLwYDVQQD EygzODE4NmQ2NzM1ZTIxYWQ0ZTIyZGE4YWIwZWY2MzM2NjA5ZDE0NzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9J+pEoAcg0hYS1+1SX0hV6iyqNL ZKp6CYOlZ+4cfq1dV6uRIPNAR265s4hhdYEVVy3pP/aWZXOBDfi9dzFuDpkw1VCz xFE5RX8Uc0nem7Ri5tdlVamL6DXyVdK/REiU7ye2udJmKrip3GhYCaHXXn2ZACI1 D8R2qi7BFJ09TMZZWn7MqfemiV19S3HxYsKDWapRZsJ9I1apCTpAF1bJtVHgv6H6 NF/gJpz14APdYw8KNGwgpZKv+0iH8iB5+Kjqmc0Ut5samtP1S9gC8+2fTjBi2uN8 vNCiq24Et0P45AcPMNsoNszeeFTXiamSWN+C5x9RrAT89Wc7QsYkxLcuIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDgYbWc14hrU4i2oqw72M2YJ0UeDMB8GA1UdIwQY MBaAFGgWFxs/kbHRCwRFmH9hFCir8T4aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUJZWEd6LVJzZEVMQkVXWWYyRVVLS3Z4UGhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8yYTUxNTUtMTMzNi00NTA3LTlhM2Yt ZjBhN2UxY2EzYzg1LzEvYUJZWEd6LVJzZEVMQkVXWWYyRVVLS3Z4UGhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8yYTUxNTUtMTMzNi00NTA3LTlhM2YtZjBhN2UxY2EzYzg1 LzEvYUJZWEd6LVJzZEVMQkVXWWYyRVVLS3Z4UGhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQTQqxyeE /W8Rmk64wXi6CPzUA1sFfOz4xtwFWZV6CCd+kOFfoWVx/OPbHmmoZNYKZdzKNKEw D3uZEIRMjcquX7klCm41vAJ4/ifs46/cQOMjLNJ8hSN1bO5IeYDC2W7HbxzQSVCL s46I0AB9BEKJDy0+1MyZfu7R+tNWDx1xlPhbNa97dpZutEgzc1y9B+Das56llgvK 9Z4Pig62ZL9YswZiGjS31dr1XM1DBOjaHDYhso0e5e/PZMtNt2JqHGJCoyK2WewO lG3pzmWzRR798leuY6E+FuBfjijcydkb8XOO5mw0MivKLEnFiBUS06shy2IDO3mF IDVOyzk+ZcnrrQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:39:51 2025 by rpki-client