This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft File: xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft (raw, json) Hash identifier: hf5ulJ+WdOBsaGrxRBvKYCMkZYAD9LKMPsr394s08h8= Subject key identifier: FC:AE:33:B2:D3:42:B6:B0:19:52:89:5B:C5:F8:3A:40:1A:90:CD:27 Authority key identifier: C4:06:EA:8D:5D:70:54:EF:89:97:E6:29:2E:3B:04:4B:09:3A:27:C6 Certificate issuer: /CN=c406ea8d5d7054ef8997e6292e3b044b093a27c6 Certificate serial: 019B2363FB1895EFA085363EE73F7466E147 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft Manifest number: 0209 Signing time: Mon 15 Dec 2025 19:01:53 +0000 Manifest this update: Mon 15 Dec 2025 19:01:53 +0000 Manifest next update: Tue 16 Dec 2025 19:01:53 +0000 Files and hashes: 1: NGw8ktOj6OOwsyhqpmQcxVz3HFU.roa (hash: Z7YWYHXxapOgTQP+VOKpEFoycxd68wL+FS31DhS3NVc=) 2: xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl (hash: h6mXuUlu8NX8n/QmxcfwDWYsEOl1uIhPrem/MISTdLU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:63:fb:18:95:ef:a0:85:36:3e:e7:3f:74:66:e1:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c406ea8d5d7054ef8997e6292e3b044b093a27c6 Validity Not Before: Dec 15 19:01:53 2025 GMT Not After : Dec 16 19:01:53 2025 GMT Subject: CN=fcae33b2d342b6b01952895bc5f83a401a90cd27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a9:d5:3f:4d:eb:4a:94:86:8f:9e:a1:40:25: d9:31:58:23:f1:9e:9a:da:78:48:fb:5b:4f:74:27: 8b:81:c8:ba:de:21:c6:50:c4:dc:a1:f8:99:11:57: cc:f0:b7:2c:04:9f:10:b6:76:7d:70:64:02:70:e8: 03:14:8d:d9:ca:94:c9:f9:8b:8d:4e:e2:43:aa:65: c7:41:e4:3b:1b:40:35:df:3a:4f:5a:42:c8:a2:fb: 0f:6a:73:5c:dd:a3:1e:e3:09:ed:e9:66:1b:b9:c3: e9:45:c9:1e:9d:13:a4:55:39:c6:40:1f:40:0e:85: d3:a9:de:e4:8a:23:87:3a:d3:73:29:c4:3c:4d:f8: e6:73:9f:dd:c7:03:b5:01:60:f6:d5:c9:9b:f1:f4: 75:6d:41:f9:bc:69:c6:ae:e7:9a:a8:3e:18:48:50: 8e:ea:b1:a9:48:4a:db:d0:1c:83:8f:4d:89:25:d7: f1:75:88:85:fd:83:eb:03:70:6c:fe:d1:68:94:e3: d9:2a:67:ab:47:d8:3e:92:b7:54:bf:49:55:50:6d: c2:ca:4a:d9:92:2b:32:a9:c8:fd:93:3c:26:40:c3: 2e:2b:10:f0:54:ed:fd:ac:c6:d2:2b:bb:ac:da:f9: 8b:2c:f7:7c:9c:59:45:6b:2d:1a:70:9b:b7:cf:c0: b3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:AE:33:B2:D3:42:B6:B0:19:52:89:5B:C5:F8:3A:40:1A:90:CD:27 X509v3 Authority Key Identifier: keyid:C4:06:EA:8D:5D:70:54:EF:89:97:E6:29:2E:3B:04:4B:09:3A:27:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:b9:2e:9e:1e:be:d1:54:bc:f4:5d:85:49:57:11:3f:ac:42: 7f:52:fb:1e:5e:fe:7d:c4:fc:b6:87:58:95:11:ea:94:49:c0: 11:e7:41:e1:b0:e5:e7:71:17:8b:09:85:fe:08:24:a0:2b:bb: 42:22:82:ae:ae:4d:5b:41:36:65:74:13:31:cb:94:75:47:92: 8e:ec:f6:db:a5:61:b3:b2:db:46:2b:32:ca:4b:1d:f4:e0:ff: 70:d5:6b:85:ac:7a:dc:99:28:38:a7:9c:d5:24:e6:59:02:77: 22:75:56:a7:35:40:ac:4d:45:2a:1d:b2:18:c0:c1:0e:b4:12: 56:27:ac:82:4e:17:a1:ae:70:af:30:fe:42:8e:b6:d4:49:17: ba:58:ee:5c:fb:85:0c:e5:66:dc:4a:65:cb:82:96:55:fe:88: ec:b9:27:48:eb:f1:d7:c4:1b:9b:de:31:60:d4:8e:71:f6:05: 73:80:f4:02:e1:81:96:ef:3b:a2:35:5b:45:cb:ec:9a:ca:2b: 8b:43:d1:dc:9e:b3:4c:0a:a4:10:20:2b:fc:e4:cf:6d:80:83: ee:ee:49:4d:85:59:67:c5:bb:41:95:ed:20:fc:79:a8:b1:cb: a8:de:11:95:2a:e8:b8:17:56:ef:31:04:6c:40:d6:9a:ab:e2: 59:20:35:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjY/sYle+ghTY+5z90ZuFHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MDZlYThkNWQ3MDU0ZWY4OTk3ZTYyOTJlM2IwNDRiMDkz YTI3YzYwHhcNMjUxMjE1MTkwMTUzWhcNMjUxMjE2MTkwMTUzWjAzMTEwLwYDVQQD EyhmY2FlMzNiMmQzNDJiNmIwMTk1Mjg5NWJjNWY4M2E0MDFhOTBjZDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6nVP03rSpSGj56hQCXZMVgj8Z6a 2nhI+1tPdCeLgci63iHGUMTcofiZEVfM8LcsBJ8QtnZ9cGQCcOgDFI3ZypTJ+YuN TuJDqmXHQeQ7G0A13zpPWkLIovsPanNc3aMe4wnt6WYbucPpRckenROkVTnGQB9A DoXTqd7kiiOHOtNzKcQ8Tfjmc5/dxwO1AWD21cmb8fR1bUH5vGnGrueaqD4YSFCO 6rGpSErb0ByDj02JJdfxdYiF/YPrA3Bs/tFolOPZKmerR9g+krdUv0lVUG3CykrZ kisyqcj9kzwmQMMuKxDwVO39rMbSK7us2vmLLPd8nFlFay0acJu3z8CzewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPyuM7LTQrawGVKJW8X4OkAakM0nMB8GA1UdIwQY MBaAFMQG6o1dcFTviZfmKS47BEsJOifGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEFicWpWMXdWTy1KbC1ZcExqc0VTd2s2SjhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iMWIyNmMtMmI3Yy00MTE3LWIyMzUt OGIzMDFiYWMzMGM5LzEveEFicWpWMXdWTy1KbC1ZcExqc0VTd2s2SjhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iMWIyNmMtMmI3Yy00MTE3LWIyMzUtOGIzMDFiYWMzMGM5 LzEveEFicWpWMXdWTy1KbC1ZcExqc0VTd2s2SjhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAObkunh6+ 0VS89F2FSVcRP6xCf1L7Hl7+fcT8todYlRHqlEnAEedB4bDl53EXiwmF/ggkoCu7 QiKCrq5NW0E2ZXQTMcuUdUeSjuz226Vhs7LbRisyyksd9OD/cNVrhax63JkoOKec 1STmWQJ3InVWpzVArE1FKh2yGMDBDrQSViesgk4Xoa5wrzD+Qo621EkXuljuXPuF DOVm3Eply4KWVf6I7LknSOvx18Qbm94xYNSOcfYFc4D0AuGBlu87ojVbRcvsmsor i0PR3J6zTAqkECAr/OTPbYCD7u5JTYVZZ8W7QZXtIPx5qLHLqN4RlSrouBdW7zEE bEDWmqviWSA15Q== -----END CERTIFICATE-----Generated at Mon Dec 15 21:56:02 2025 by rpki-client