This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft File: 1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft (raw, json) Hash identifier: SSgJ6fNTy9UB7RdSNtfZK9E26YXM0hqHd5bLHqbKxtA= Subject key identifier: 48:1F:A5:8B:4B:EB:63:28:42:12:21:7A:CA:89:02:88:10:96:47:0C Authority key identifier: F8:06:EC:9C:F1:DE:AB:F9:D6:CD:5F:88:91:BB:82:D5:6F:91:D6:78 Certificate issuer: /CN=f806ec9cf1deabf9d6cd5f8891bb82d56f91d678 Certificate serial: 019B597617A4D6E2F621D6D25BCFE71A9D37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft Manifest number: 14DA Signing time: Fri 26 Dec 2025 07:01:09 +0000 Manifest this update: Fri 26 Dec 2025 07:01:09 +0000 Manifest next update: Sat 27 Dec 2025 07:01:09 +0000 Files and hashes: 1: 1-AbsnPHeq_nWzV-IkbuC1W-R1ng.crl (hash: gwK5ubP+6FaEOer/W3E/wJX983O6c9Ne7AF/BfgB1pU=) 2: 4WNYU3DPTpnOXIdy-DcRolCswoU.roa (hash: lJMeZdxIdcMT6oAlo0ZhGiaOSgJa2FyIZlyPkCXNXeU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft rsync://rpki.ripe.net/repository/DEFAULT/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:17:a4:d6:e2:f6:21:d6:d2:5b:cf:e7:1a:9d:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f806ec9cf1deabf9d6cd5f8891bb82d56f91d678 Validity Not Before: Dec 26 07:01:09 2025 GMT Not After : Dec 27 07:01:09 2025 GMT Subject: CN=481fa58b4beb63284212217aca8902881096470c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:78:02:80:5b:eb:06:81:1d:48:bb:b3:9c:57: 8f:07:eb:df:ae:2e:7d:6f:58:d6:1c:d4:76:a4:b4: 0c:4a:36:c3:f4:89:68:1b:b0:42:9c:63:09:c7:03: d1:e7:6b:16:c7:28:9d:f7:05:7a:1e:8f:e0:77:4d: 1c:28:64:d2:70:a7:a5:e4:5e:3d:10:ef:0d:55:80: 52:01:9d:a9:2f:b5:b1:cb:dc:73:3b:3e:2a:4a:6a: 41:86:64:10:bf:87:bb:08:f1:3b:67:fa:54:2d:d8: 63:62:d7:6d:63:6a:95:37:c6:5a:98:8e:c4:1a:fe: 5f:11:fa:ea:9e:a8:f5:9e:54:f5:b3:90:49:25:79: b5:10:a7:a0:5a:13:46:21:d5:bc:54:c8:b7:a8:11: 4f:20:71:3a:c5:3c:fd:fa:af:d1:68:63:c7:0f:e1: 68:6d:5c:74:b6:15:8f:a6:aa:42:b6:31:de:c0:d8: a0:a8:ae:ba:d4:7a:ca:77:1e:d1:9c:b5:d3:bd:1a: 2e:0b:67:36:0f:4d:34:ae:ad:2b:37:dc:fb:0b:92: 42:ac:38:a5:87:25:1a:bf:30:bf:ff:a4:61:c4:93: 21:91:f8:b0:4f:1f:dd:71:52:c5:66:2c:d5:04:4b: 1e:b7:28:90:f1:9d:16:ea:dc:b3:df:aa:18:44:16: 8d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:1F:A5:8B:4B:EB:63:28:42:12:21:7A:CA:89:02:88:10:96:47:0C X509v3 Authority Key Identifier: keyid:F8:06:EC:9C:F1:DE:AB:F9:D6:CD:5F:88:91:BB:82:D5:6F:91:D6:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:40:37:38:bf:c4:d1:99:7a:f2:b2:61:3f:92:e4:a5:62:e4: 3e:00:93:fe:62:51:1d:e1:82:4a:c2:50:3d:67:7b:27:8b:90: fd:73:b4:27:9a:6e:fb:32:94:ba:f8:32:c6:8f:9e:1f:2e:79: 0c:25:c9:93:e0:47:5f:10:d2:05:a4:3c:a1:26:65:1e:9d:9a: 87:2c:e7:7f:43:76:ec:67:03:ce:d2:eb:01:64:8e:9d:8d:05: 1e:8c:fe:63:be:b6:20:d2:73:24:43:33:35:77:95:12:31:f8: 78:13:8e:1d:fb:3b:3d:56:49:ef:85:dd:14:39:f8:14:09:32: ee:00:a0:b8:d0:bf:54:4c:86:a7:93:2e:e8:bf:fd:46:7a:1b: 92:d6:80:22:c8:34:5b:1c:36:1c:9a:35:9a:29:a0:a5:c8:e9: e9:83:d6:35:75:54:1c:65:04:2c:88:f8:c8:9d:8b:13:45:a5: 96:bb:9e:e3:de:c2:d3:ce:1d:22:3b:86:d9:68:23:43:21:d7: 99:93:2f:d5:97:e9:7c:52:c5:28:28:38:aa:66:bb:08:db:57: 0e:3f:0b:ae:25:a5:52:5b:b1:86:82:02:1b:5a:1e:19:ad:17: f7:f2:ba:b2:8f:e4:6c:e9:0c:d7:ae:97:86:b1:0a:ca:50:6e: cb:16:07:9d -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtZdhek1uL2IdbSW8/nGp03MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MDZlYzljZjFkZWFiZjlkNmNkNWY4ODkxYmI4MmQ1NmY5 MWQ2NzgwHhcNMjUxMjI2MDcwMTA5WhcNMjUxMjI3MDcwMTA5WjAzMTEwLwYDVQQD Eyg0ODFmYTU4YjRiZWI2MzI4NDIxMjIxN2FjYTg5MDI4ODEwOTY0NzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3gCgFvrBoEdSLuznFePB+vfri59 b1jWHNR2pLQMSjbD9IloG7BCnGMJxwPR52sWxyid9wV6Ho/gd00cKGTScKel5F49 EO8NVYBSAZ2pL7Wxy9xzOz4qSmpBhmQQv4e7CPE7Z/pULdhjYtdtY2qVN8ZamI7E Gv5fEfrqnqj1nlT1s5BJJXm1EKegWhNGIdW8VMi3qBFPIHE6xTz9+q/RaGPHD+Fo bVx0thWPpqpCtjHewNigqK661HrKdx7RnLXTvRouC2c2D000rq0rN9z7C5JCrDil hyUavzC//6RhxJMhkfiwTx/dcVLFZizVBEsetyiQ8Z0W6tyz36oYRBaN9QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEgfpYtL62MoQhIhesqJAogQlkcMMB8GA1UdIwQY MBaAFPgG7Jzx3qv51s1fiJG7gtVvkdZ4MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1BYnNuUEhlcV9uV3pWLUlrYnVDMVctUjFuZy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvNDQwNGY1LWUxMGMtNDE5MC05Mjcw LWFjMGE4NGEyN2Q1My8xLzEtQWJzblBIZXFfbld6Vi1Ja2J1QzFXLVIxbmcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzBhLzQ0MDRmNS1lMTBjLTQxOTAtOTI3MC1hYzBhODRhMjdk NTMvMS8xLUFic25QSGVxX25XelYtSWtidUMxVy1SMW5nLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACkA3 OL/E0Zl68rJhP5LkpWLkPgCT/mJRHeGCSsJQPWd7J4uQ/XO0J5pu+zKUuvgyxo+e Hy55DCXJk+BHXxDSBaQ8oSZlHp2ahyznf0N27GcDztLrAWSOnY0FHoz+Y762INJz JEMzNXeVEjH4eBOOHfs7PVZJ74XdFDn4FAky7gCguNC/VEyGp5Mu6L/9RnobktaA Isg0Wxw2HJo1mimgpcjp6YPWNXVUHGUELIj4yJ2LE0Wllrue497C084dIjuG2Wgj QyHXmZMv1ZfpfFLFKCg4qma7CNtXDj8LriWlUluxhoICG1oeGa0X9/K6so/kbOkM 166XhrEKylBuyxYHnQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:44:20 2025 by rpki-client