This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft File: AbP6KriQG0FeEIOIcsY9nwzhNq0.mft (raw, json) Hash identifier: NyakqmiYUSh8C/dx7o2DRCsymI9UwVH4rahGpwSM100= Subject key identifier: 11:B7:1F:40:49:4E:69:46:4B:67:2D:E5:7C:8D:36:B7:0C:32:DE:84 Authority key identifier: 01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD Certificate issuer: /CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad Certificate serial: 019B258831E4E497DBACAA515DCF298EDA28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft Manifest number: 177D Signing time: Tue 16 Dec 2025 05:00:41 +0000 Manifest this update: Tue 16 Dec 2025 05:00:41 +0000 Manifest next update: Wed 17 Dec 2025 05:00:41 +0000 Files and hashes: 1: 0hK3wBSxWrzCK9XVRCjqAk7iR3E.roa (hash: Mgc0oHHsHOO9ITKbdZfi4fNvcPC7tfyysZUz/pdAbRc=) 2: AbP6KriQG0FeEIOIcsY9nwzhNq0.crl (hash: qACI5cAs8/Tq3zwUU3HlY6DF+PTVc/daaKLRydik1WM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:88:31:e4:e4:97:db:ac:aa:51:5d:cf:29:8e:da:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad Validity Not Before: Dec 16 05:00:41 2025 GMT Not After : Dec 17 05:00:41 2025 GMT Subject: CN=11b71f40494e69464b672de57c8d36b70c32de84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0a:6b:8b:70:27:1c:e5:f2:e9:8e:38:8b:28: 32:4c:4e:94:77:05:a7:87:a0:d2:84:57:07:25:f6: 4f:58:05:da:f5:48:9e:85:35:d5:29:fb:95:84:d7: 3d:e3:03:43:85:75:7f:94:91:23:54:76:c6:2a:b8: da:9c:04:e9:5b:f2:30:cb:a3:33:ed:20:ae:37:4f: 09:3d:aa:ed:e9:57:6c:82:3a:97:97:b6:c1:3b:ba: c6:31:70:9a:2d:e5:3c:82:2f:47:08:fb:4d:1c:0c: 96:7c:f2:94:7c:d8:4d:13:00:82:59:f7:21:d3:2b: 6d:86:76:4b:4d:0b:b7:4a:3a:ff:07:3e:8b:7b:c8: 9c:67:8f:ba:d5:5d:57:cf:f6:ea:4b:22:c8:5e:b7: 64:e7:45:e3:ae:b6:27:dc:47:4c:8f:98:f8:7a:84: d0:2e:89:dd:eb:59:57:47:30:41:01:14:e2:07:77: 76:8b:e9:fa:88:2c:b4:a2:d9:7b:36:19:73:fe:d9: 04:af:11:b4:be:d5:8e:0c:8d:56:93:8d:9f:8f:cf: 61:60:11:07:c5:b5:92:ef:f9:cd:94:19:8e:06:ce: 04:a4:c3:5e:a3:08:06:a3:db:25:63:a4:15:a6:12: a3:b5:84:da:11:9d:18:72:a1:ae:7a:51:09:c6:be: 8e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B7:1F:40:49:4E:69:46:4B:67:2D:E5:7C:8D:36:B7:0C:32:DE:84 X509v3 Authority Key Identifier: keyid:01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:27:f1:e4:95:7b:0b:e8:35:ee:c3:3b:32:b7:1f:7f:d1:08: 72:1f:2f:1a:ea:1c:f6:14:21:b9:5e:5c:a7:ce:d3:55:7d:de: 55:ff:70:9f:5e:ea:80:66:1c:8a:04:a3:17:d5:54:49:41:90: e1:ae:c6:e4:28:50:67:16:03:c2:b4:b6:be:42:6c:c3:b6:83: 54:4f:0b:47:31:38:a9:4f:5f:8d:e1:d5:1a:77:95:8f:54:f0: 27:2c:ea:58:c0:0e:75:e0:ce:4f:3d:60:51:c0:5f:60:54:c3: 80:14:5c:c3:c9:b6:8f:aa:67:bf:58:f3:7a:7d:04:b6:eb:8f: 70:97:d5:40:c6:06:60:79:7f:d5:41:81:2f:2c:0e:83:aa:10: 37:12:5b:f2:c9:de:2f:5c:c8:00:e3:5c:7e:39:c7:c0:78:3d: 7a:1d:70:59:37:37:48:5f:69:88:4a:34:81:2a:aa:10:cd:d0: 0b:18:13:1b:f7:d3:90:56:cf:ae:2d:c8:0b:a8:d0:3e:92:89: b1:57:42:3a:19:fb:08:d7:f8:3f:ff:83:ed:a4:64:92:6f:40: 1f:2e:1b:5d:72:bb:79:68:17:f8:e9:20:ad:4b:0c:b9:7a:30: 92:c3:21:88:0c:1e:ed:05:b0:a1:0e:a8:2e:5f:c7:7a:08:9b: 36:81:14:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsliDHk5JfbrKpRXc8pjtooMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxYjNmYTJhYjg5MDFiNDE1ZTEwODM4ODcyYzYzZDlmMGNl MTM2YWQwHhcNMjUxMjE2MDUwMDQxWhcNMjUxMjE3MDUwMDQxWjAzMTEwLwYDVQQD EygxMWI3MWY0MDQ5NGU2OTQ2NGI2NzJkZTU3YzhkMzZiNzBjMzJkZTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArApri3AnHOXy6Y44iygyTE6UdwWn h6DShFcHJfZPWAXa9UiehTXVKfuVhNc94wNDhXV/lJEjVHbGKrjanATpW/Iwy6Mz 7SCuN08JPart6VdsgjqXl7bBO7rGMXCaLeU8gi9HCPtNHAyWfPKUfNhNEwCCWfch 0ytthnZLTQu3Sjr/Bz6Le8icZ4+61V1Xz/bqSyLIXrdk50XjrrYn3EdMj5j4eoTQ Lond61lXRzBBARTiB3d2i+n6iCy0otl7Nhlz/tkErxG0vtWODI1Wk42fj89hYBEH xbWS7/nNlBmOBs4EpMNeowgGo9slY6QVphKjtYTaEZ0YcqGuelEJxr6OhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBG3H0BJTmlGS2ct5XyNNrcMMt6EMB8GA1UdIwQY MBaAFAGz+iq4kBtBXhCDiHLGPZ8M4TatMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWJQNktyaVFHMEZlRUlPSWNzWTlud3poTnEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS80MmJkYTYtYTVkYS00NzFiLWEzYmYt ODFlY2I0OTBmYjg2LzEvQWJQNktyaVFHMEZlRUlPSWNzWTlud3poTnEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS80MmJkYTYtYTVkYS00NzFiLWEzYmYtODFlY2I0OTBmYjg2 LzEvQWJQNktyaVFHMEZlRUlPSWNzWTlud3poTnEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZifx5JV7 C+g17sM7Mrcff9EIch8vGuoc9hQhuV5cp87TVX3eVf9wn17qgGYcigSjF9VUSUGQ 4a7G5ChQZxYDwrS2vkJsw7aDVE8LRzE4qU9fjeHVGneVj1TwJyzqWMAOdeDOTz1g UcBfYFTDgBRcw8m2j6pnv1jzen0EtuuPcJfVQMYGYHl/1UGBLywOg6oQNxJb8sne L1zIAONcfjnHwHg9eh1wWTc3SF9piEo0gSqqEM3QCxgTG/fTkFbPri3IC6jQPpKJ sVdCOhn7CNf4P/+D7aRkkm9AHy4bXXK7eWgX+OkgrUsMuXowksMhiAwe7QWwoQ6o Ll/HegibNoEUtw== -----END CERTIFICATE-----Generated at Tue Dec 16 08:18:45 2025 by rpki-client