This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft File: KAabTsBHxsLYCkmS5CKLMXzIsgw.mft (raw, json) Hash identifier: 3O+WDzNlM08TZcViLtjSSQaj6vK0T7jYhYa71U1j9r4= Subject key identifier: D0:77:6D:3E:17:AD:47:43:AC:FC:8E:8F:F1:8D:F2:42:9F:22:52:D9 Authority key identifier: 28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C Certificate issuer: /CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c Certificate serial: 019B1916A4DBBFBDCDFEA203F4C1D14B9325 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft Manifest number: 1084 Signing time: Sat 13 Dec 2025 19:01:12 +0000 Manifest this update: Sat 13 Dec 2025 19:01:12 +0000 Manifest next update: Sun 14 Dec 2025 19:01:12 +0000 Files and hashes: 1: KAabTsBHxsLYCkmS5CKLMXzIsgw.crl (hash: KX8NenV/LPDBjzxTGPtqqSAnlAN5tjnf/mJtCKLZa7A=) 2: z5t3MUctHGLyNYnasAsmy7myIE0.roa (hash: mO/iLAoYiC6aPBgVm4fsRrMygy6NYm/K/6/lkuaPce4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:16:a4:db:bf:bd:cd:fe:a2:03:f4:c1:d1:4b:93:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c Validity Not Before: Dec 13 19:01:12 2025 GMT Not After : Dec 14 19:01:12 2025 GMT Subject: CN=d0776d3e17ad4743acfc8e8ff18df2429f2252d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:34:79:63:76:fd:07:e7:d0:9a:dc:1a:4b:13: 1d:79:e2:fe:fa:34:b7:bf:83:48:9d:48:b7:61:20: 2b:b1:d9:c0:6c:d2:35:2e:41:87:70:e0:dd:ee:7a: 59:09:3b:b7:fa:9b:4d:5c:27:f1:c2:5e:1d:bb:c1: 92:57:9e:14:6e:c8:02:70:94:91:97:99:55:3b:eb: 17:25:b9:ab:80:cb:1f:b8:11:8f:ac:e8:54:eb:3d: d7:12:c4:62:f9:11:f7:bc:9f:dd:fa:42:8a:a1:c5: c5:b8:28:a5:a5:a7:d9:0a:1c:3a:30:f3:92:87:ff: 85:40:a5:c9:c6:f4:d5:1a:0f:01:f5:bc:60:80:c6: 8f:7f:2e:e1:e5:96:3c:4b:36:ef:cb:2f:3b:f6:d8: d3:cd:3b:37:ad:f9:5c:5a:9a:bc:ef:63:ad:a8:51: 97:8d:8e:65:89:6f:ba:c1:98:44:67:b8:8f:f1:23: b1:b0:22:00:74:06:cf:58:6c:ad:6d:38:bf:53:bd: 3f:f3:d4:59:57:cc:9a:8b:54:c6:a3:72:be:b0:ec: 2b:b0:e3:5b:a4:2f:f3:26:ff:fe:4f:59:ba:3a:43: 06:83:43:8d:9f:62:11:b1:59:75:74:81:40:73:88: 1c:90:a5:0c:40:c5:6c:66:ff:f2:41:17:c6:ef:a9: 97:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:77:6D:3E:17:AD:47:43:AC:FC:8E:8F:F1:8D:F2:42:9F:22:52:D9 X509v3 Authority Key Identifier: keyid:28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:c9:54:6a:57:ab:09:21:02:6f:00:7d:b5:f2:0c:e2:c0:4c: ea:f0:0b:0c:7d:1d:9e:6c:bc:9a:3d:f0:6f:26:ae:63:f9:62: ac:52:d5:2a:28:74:a5:2f:f5:04:c7:e3:16:14:4c:5b:58:29: 4d:fa:36:06:17:7f:4c:71:e7:89:b9:1f:f5:f3:73:64:d6:b5: 72:cd:19:6c:8c:a4:52:9b:7f:eb:0b:ec:37:48:e2:36:19:f5: 0c:73:89:8e:c7:76:48:01:82:77:87:28:e9:d3:17:43:1b:db: 55:86:78:33:5d:73:6c:ce:97:4f:65:a3:d4:6d:cd:6d:c1:70: 8b:d0:fe:ba:34:36:56:93:22:b5:8f:8c:fb:f7:b7:8a:f2:bc: fe:99:43:6c:55:88:cc:87:0c:0b:94:2a:37:10:fd:38:24:c4: 1c:ae:35:ac:6a:00:46:84:2c:7f:4f:a1:f6:6c:f4:ee:6b:2b: 58:8e:15:3a:79:88:b3:f6:a9:49:10:f1:e4:f4:21:66:15:7f: 0d:1f:52:df:1a:e4:39:65:ca:a6:ea:4e:d0:f4:75:70:ec:e4: 7b:ec:31:d8:7b:14:81:fc:f5:11:ab:ce:ba:b0:be:9b:01:df: 83:82:6b:f5:bc:b9:97:67:2d:22:9c:6f:8e:01:74:88:cc:f9: f6:87:df:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZFqTbv73N/qID9MHRS5MlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MDY5YjRlYzA0N2M2YzJkODBhNDk5MmU0MjI4YjMxN2Nj OGIyMGMwHhcNMjUxMjEzMTkwMTEyWhcNMjUxMjE0MTkwMTEyWjAzMTEwLwYDVQQD EyhkMDc3NmQzZTE3YWQ0NzQzYWNmYzhlOGZmMThkZjI0MjlmMjI1MmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TR5Y3b9B+fQmtwaSxMdeeL++jS3 v4NInUi3YSArsdnAbNI1LkGHcODd7npZCTu3+ptNXCfxwl4du8GSV54UbsgCcJSR l5lVO+sXJbmrgMsfuBGPrOhU6z3XEsRi+RH3vJ/d+kKKocXFuCilpafZChw6MPOS h/+FQKXJxvTVGg8B9bxggMaPfy7h5ZY8Szbvyy879tjTzTs3rflcWpq872OtqFGX jY5liW+6wZhEZ7iP8SOxsCIAdAbPWGytbTi/U70/89RZV8yai1TGo3K+sOwrsONb pC/zJv/+T1m6OkMGg0ONn2IRsVl1dIFAc4gckKUMQMVsZv/yQRfG76mXxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNB3bT4XrUdDrPyOj/GN8kKfIlLZMB8GA1UdIwQY MBaAFCgGm07AR8bC2ApJkuQiizF8yLIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0FhYlRzQkh4c0xZQ2ttUzVDS0xNWHpJc2d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wMjQ1NTQtN2FhNi00YzlmLWE0ODct ZGY3YjQ1YmU0NmM3LzEvS0FhYlRzQkh4c0xZQ2ttUzVDS0xNWHpJc2d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8wMjQ1NTQtN2FhNi00YzlmLWE0ODctZGY3YjQ1YmU0NmM3 LzEvS0FhYlRzQkh4c0xZQ2ttUzVDS0xNWHpJc2d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGslUaler CSECbwB9tfIM4sBM6vALDH0dnmy8mj3wbyauY/lirFLVKih0pS/1BMfjFhRMW1gp Tfo2Bhd/THHnibkf9fNzZNa1cs0ZbIykUpt/6wvsN0jiNhn1DHOJjsd2SAGCd4co 6dMXQxvbVYZ4M11zbM6XT2Wj1G3NbcFwi9D+ujQ2VpMitY+M+/e3ivK8/plDbFWI zIcMC5QqNxD9OCTEHK41rGoARoQsf0+h9mz07msrWI4VOnmIs/apSRDx5PQhZhV/ DR9S3xrkOWXKpupO0PR1cOzke+wx2HsUgfz1EavOurC+mwHfg4Jr9by5l2ctIpxv jgF0iMz59offxw== -----END CERTIFICATE-----Generated at Sun Dec 14 01:54:51 2025 by rpki-client