This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.mft File: aBHhJcs1cHby-jE4yT6aJoGxeJM.mft (raw, json) Hash identifier: YMupoD+A0KxcLLjtbD1TxjCYzgan2TCyLx6sP85deBc= Subject key identifier: FB:DE:3C:8E:77:0B:14:87:78:D9:9A:53:CC:2C:F0:01:12:B8:16:A3 Authority key identifier: 68:11:E1:25:CB:35:70:76:F2:FA:31:38:C9:3E:9A:26:81:B1:78:93 Certificate issuer: /CN=6811e125cb357076f2fa3138c93e9a2681b17893 Certificate serial: 019B34C430E11C25562F8B95DB4A4AA6B5DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBHhJcs1cHby-jE4yT6aJoGxeJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 04:00:31 +0000 Manifest this update: Fri 19 Dec 2025 04:00:31 +0000 Manifest next update: Sat 20 Dec 2025 04:00:31 +0000 Files and hashes: 1: aBHhJcs1cHby-jE4yT6aJoGxeJM.crl (hash: XxSvvJue+dhw+ACZBglNBIy547ByhJyH9mTaNYyVHIQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.mft rsync://rpki.ripe.net/repository/DEFAULT/aBHhJcs1cHby-jE4yT6aJoGxeJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:30:e1:1c:25:56:2f:8b:95:db:4a:4a:a6:b5:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6811e125cb357076f2fa3138c93e9a2681b17893 Validity Not Before: Dec 19 04:00:31 2025 GMT Not After : Dec 20 04:00:31 2025 GMT Subject: CN=fbde3c8e770b148778d99a53cc2cf00112b816a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c5:4d:09:a2:01:b3:83:bd:7f:fa:1e:c2:1c: f4:92:96:4b:cf:89:9a:0b:68:f0:74:b5:c4:8f:75: 49:0f:e2:64:93:a5:f1:66:36:ca:1b:06:d7:02:59: 5c:9b:80:50:5e:d8:f9:f9:b0:75:52:8a:c8:d4:8f: c7:ee:ed:af:4b:ac:e2:59:81:53:e3:60:fd:b4:6b: 35:f9:57:1b:fa:4c:06:70:2d:f3:13:8a:67:f4:73: c1:39:29:66:1b:84:15:ea:93:38:1b:86:30:2f:11: 41:8b:1c:bd:37:cb:e4:92:97:c9:3b:90:26:d7:da: 95:79:60:01:b7:a6:0c:5a:73:21:03:c5:ca:33:a1: e6:44:cf:19:e0:09:7a:17:e6:80:2e:75:dd:1f:b8: 1f:ad:40:39:33:4a:53:23:ec:b6:80:72:18:71:c5: 65:08:ee:06:b8:28:3d:00:e1:06:95:75:86:60:39: 0c:ce:71:8d:9c:19:42:b8:bd:31:d1:12:23:d5:bd: e4:ff:48:41:12:39:4d:65:f7:93:be:bd:e8:6b:63: 53:c6:1d:db:3f:84:69:d5:81:a6:c7:d3:79:05:4a: 6c:c0:20:f9:eb:3f:68:18:8b:9b:32:ed:b0:b5:13: 7e:6f:4a:81:ea:92:96:86:ad:d3:11:61:35:37:20: 98:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:DE:3C:8E:77:0B:14:87:78:D9:9A:53:CC:2C:F0:01:12:B8:16:A3 X509v3 Authority Key Identifier: keyid:68:11:E1:25:CB:35:70:76:F2:FA:31:38:C9:3E:9A:26:81:B1:78:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBHhJcs1cHby-jE4yT6aJoGxeJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:9d:3b:b4:1a:e3:c7:73:dd:20:68:54:83:26:47:e5:1f:43: 6b:02:dd:df:dd:84:49:8b:da:78:29:cb:1b:53:85:c1:ed:29: 10:8a:13:4c:1a:b5:11:e0:73:d7:7f:c7:b4:e0:f7:ce:ee:9f: c9:c1:fc:c7:4a:fb:c0:e1:5c:9c:a6:6c:2c:91:a2:cd:d5:cf: 8c:47:8b:d7:ee:d6:f7:c2:30:77:39:11:16:a4:81:a5:ea:94: ad:aa:56:f4:5f:51:f2:f8:41:4d:73:2a:b0:c3:d3:5f:95:83: 4f:2f:16:c1:9a:14:4d:71:09:bf:46:c1:77:3d:ba:61:3b:68: 2a:28:4e:70:f9:e1:a5:16:61:ff:7c:9d:8f:57:68:a6:e4:ae: 1a:d9:6f:bd:d4:fd:8d:b4:9b:68:3c:3f:6e:75:be:2d:0e:f7: 9f:05:49:8c:cf:a0:a7:94:07:81:ae:fd:60:ae:b7:84:20:2f: f4:ca:51:e8:6c:b6:8c:3a:ef:c7:41:33:cd:51:33:a9:9b:ff: 05:54:c8:6c:f0:bd:6b:57:fb:29:2c:b0:43:6b:44:7c:a9:66: 45:85:d0:b3:62:2c:f2:cd:4e:55:9e:91:1d:76:04:99:7d:48: 79:9b:5d:e8:63:06:4b:50:f8:e0:00:08:c1:62:92:33:c5:bb: 70:13:99:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xDDhHCVWL4uV20pKprXdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MTFlMTI1Y2IzNTcwNzZmMmZhMzEzOGM5M2U5YTI2ODFi MTc4OTMwHhcNMjUxMjE5MDQwMDMxWhcNMjUxMjIwMDQwMDMxWjAzMTEwLwYDVQQD EyhmYmRlM2M4ZTc3MGIxNDg3NzhkOTlhNTNjYzJjZjAwMTEyYjgxNmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcVNCaIBs4O9f/oewhz0kpZLz4ma C2jwdLXEj3VJD+Jkk6XxZjbKGwbXAllcm4BQXtj5+bB1UorI1I/H7u2vS6ziWYFT 42D9tGs1+Vcb+kwGcC3zE4pn9HPBOSlmG4QV6pM4G4YwLxFBixy9N8vkkpfJO5Am 19qVeWABt6YMWnMhA8XKM6HmRM8Z4Al6F+aALnXdH7gfrUA5M0pTI+y2gHIYccVl CO4GuCg9AOEGlXWGYDkMznGNnBlCuL0x0RIj1b3k/0hBEjlNZfeTvr3oa2NTxh3b P4Rp1YGmx9N5BUpswCD56z9oGIubMu2wtRN+b0qB6pKWhq3TEWE1NyCYgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPvePI53CxSHeNmaU8ws8AESuBajMB8GA1UdIwQY MBaAFGgR4SXLNXB28voxOMk+miaBsXiTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUJIaEpjczFjSGJ5LWpFNHlUNmFKb0d4ZUpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9lYmFjYmQtODE5MC00ZTVhLWEwM2Et Y2Q0Mzk0OTJiN2FlLzEvYUJIaEpjczFjSGJ5LWpFNHlUNmFKb0d4ZUpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9lYmFjYmQtODE5MC00ZTVhLWEwM2EtY2Q0Mzk0OTJiN2Fl LzEvYUJIaEpjczFjSGJ5LWpFNHlUNmFKb0d4ZUpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApZ07tBrj x3PdIGhUgyZH5R9DawLd392ESYvaeCnLG1OFwe0pEIoTTBq1EeBz13/HtOD3zu6f ycH8x0r7wOFcnKZsLJGizdXPjEeL1+7W98IwdzkRFqSBpeqUrapW9F9R8vhBTXMq sMPTX5WDTy8WwZoUTXEJv0bBdz26YTtoKihOcPnhpRZh/3ydj1dopuSuGtlvvdT9 jbSbaDw/bnW+LQ73nwVJjM+gp5QHga79YK63hCAv9MpR6Gy2jDrvx0EzzVEzqZv/ BVTIbPC9a1f7KSywQ2tEfKlmRYXQs2Is8s1OVZ6RHXYEmX1IeZtd6GMGS1D44AAI wWKSM8W7cBOZig== -----END CERTIFICATE-----Generated at Fri Dec 19 08:07:21 2025 by rpki-client