This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft File: abfzv44Ke1kKD_qhycCsWAoLEZ4.mft (raw, json) Hash identifier: qR4oMeNsXLAeW7Q9Ob2jLdnCLto+oyhZdCr5NiVxcAY= Subject key identifier: 9E:09:6D:55:B6:39:D5:61:CF:3F:F9:AC:CC:7F:C5:1A:CB:1A:9E:43 Authority key identifier: 69:B7:F3:BF:8E:0A:7B:59:0A:0F:FA:A1:C9:C0:AC:58:0A:0B:11:9E Certificate issuer: /CN=69b7f3bf8e0a7b590a0ffaa1c9c0ac580a0b119e Certificate serial: 019B0E92F94B0A8FC8F677F8ABCDDB93BCDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abfzv44Ke1kKD_qhycCsWAoLEZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft Manifest number: 9B Signing time: Thu 11 Dec 2025 18:01:11 +0000 Manifest this update: Thu 11 Dec 2025 18:01:11 +0000 Manifest next update: Fri 12 Dec 2025 18:01:11 +0000 Files and hashes: 1: R7q2gktvFsNXXsx_b10S5ynAXaw.roa (hash: +bf2vfop1BjTPFaIwsRZHC/bhXQwlqn19Fh+mJR9npc=) 2: abfzv44Ke1kKD_qhycCsWAoLEZ4.crl (hash: OlunVWLwHCZFAX2YpcZd4h7cDmcNAO9PtsevFZ2rm5g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/abfzv44Ke1kKD_qhycCsWAoLEZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:f9:4b:0a:8f:c8:f6:77:f8:ab:cd:db:93:bc:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69b7f3bf8e0a7b590a0ffaa1c9c0ac580a0b119e Validity Not Before: Dec 11 18:01:11 2025 GMT Not After : Dec 12 18:01:11 2025 GMT Subject: CN=9e096d55b639d561cf3ff9accc7fc51acb1a9e43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a3:71:0b:49:2d:6b:70:53:db:0d:36:f1:3f: cd:c3:b2:26:19:4e:43:dc:a9:77:d5:92:d2:14:f7: 9e:47:7d:0f:a3:29:fa:b5:f4:c4:43:d5:98:b1:99: 97:88:9b:fb:ca:6c:99:94:cc:f1:54:56:72:96:04: 9d:a4:cc:30:e8:a8:30:c1:0e:2c:41:e5:2c:8b:2e: 09:54:83:4f:94:f8:2c:15:73:a4:d8:c4:a8:00:ac: 90:07:5f:8f:ec:34:d3:d4:9a:42:25:d2:8a:e4:52: f7:21:b4:3b:4a:95:0f:5f:7e:06:c9:87:29:76:57: 10:9f:c5:70:ab:76:78:a3:48:92:98:74:0a:e6:1e: f7:f5:f5:79:66:0e:e2:c6:6c:4d:72:29:13:71:dd: 08:74:8c:2f:70:c6:ba:fb:c3:ce:c3:58:19:12:25: a4:29:56:f6:9d:cd:10:b7:23:2b:fc:52:13:6f:27: cb:39:23:94:17:66:3f:92:27:c2:32:89:6a:c3:45: d0:aa:5d:d3:08:61:66:b3:f5:b3:7d:40:9b:12:33: 2c:9d:51:89:78:0a:f0:86:29:02:63:82:7b:b9:ab: 7b:85:4a:47:b3:c9:5c:d7:c8:46:93:b5:04:11:37: 07:8d:38:6b:80:5b:57:1e:e9:a5:f1:ea:a4:76:19: f5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:09:6D:55:B6:39:D5:61:CF:3F:F9:AC:CC:7F:C5:1A:CB:1A:9E:43 X509v3 Authority Key Identifier: keyid:69:B7:F3:BF:8E:0A:7B:59:0A:0F:FA:A1:C9:C0:AC:58:0A:0B:11:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abfzv44Ke1kKD_qhycCsWAoLEZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:ac:00:ba:b7:ef:34:ad:73:88:e6:24:1a:72:20:ad:a5:0c: 18:5b:81:f4:c2:e1:7d:6a:90:cf:0d:7c:83:8f:d1:b8:63:a8: 27:e3:ad:59:61:30:4e:54:aa:b7:62:a9:e6:eb:ad:7f:9a:01: 1b:80:5e:2a:0f:2b:c1:60:be:24:02:dc:bc:aa:58:a6:ec:3e: e9:6a:23:ce:68:8d:8e:e0:36:e0:b7:05:d1:b9:e9:1d:d3:ef: a0:e7:21:c2:db:7e:b9:e5:7e:93:47:dc:7b:d9:af:65:6e:73: 74:0d:7f:6a:c3:88:88:22:23:48:37:8e:43:4f:69:91:be:d7: 25:45:88:c6:71:59:1f:b3:0d:ee:4d:4c:0f:87:f9:27:71:11: b3:19:f0:cc:71:c4:5a:98:bb:b3:dd:76:41:b6:22:ae:35:64: 36:e9:ee:80:d8:d3:47:d5:a5:d9:c6:c4:8f:a1:22:7a:28:80: 80:63:25:a4:14:68:66:e3:09:25:59:5b:99:97:6b:22:5c:21: a8:dc:bf:71:0a:fd:62:36:ae:ce:ee:c3:9b:cd:0f:8c:c9:e4: 40:f9:bc:df:5a:81:44:01:c6:5c:ac:15:de:4e:5f:8f:6c:6f: 31:3d:be:70:54:c8:34:9e:e1:79:72:6a:be:02:a9:d9:f4:c5: 3e:70:4e:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkvlLCo/I9nf4q83bk7zcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5YjdmM2JmOGUwYTdiNTkwYTBmZmFhMWM5YzBhYzU4MGEw YjExOWUwHhcNMjUxMjExMTgwMTExWhcNMjUxMjEyMTgwMTExWjAzMTEwLwYDVQQD Eyg5ZTA5NmQ1NWI2MzlkNTYxY2YzZmY5YWNjYzdmYzUxYWNiMWE5ZTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqNxC0kta3BT2w028T/Nw7ImGU5D 3Kl31ZLSFPeeR30Poyn6tfTEQ9WYsZmXiJv7ymyZlMzxVFZylgSdpMww6KgwwQ4s QeUsiy4JVINPlPgsFXOk2MSoAKyQB1+P7DTT1JpCJdKK5FL3IbQ7SpUPX34GyYcp dlcQn8Vwq3Z4o0iSmHQK5h739fV5Zg7ixmxNcikTcd0IdIwvcMa6+8POw1gZEiWk KVb2nc0QtyMr/FITbyfLOSOUF2Y/kifCMolqw0XQql3TCGFms/WzfUCbEjMsnVGJ eArwhikCY4J7uat7hUpHs8lc18hGk7UEETcHjThrgFtXHuml8eqkdhn1twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ4JbVW2OdVhzz/5rMx/xRrLGp5DMB8GA1UdIwQY MBaAFGm387+OCntZCg/6ocnArFgKCxGeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWJmenY0NEtlMWtLRF9xaHljQ3NXQW9MRVo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8xNmQ4NWYtODViNS00MmUzLWFkOWYt ZWVjMDVmNDlhYzg2LzEvYWJmenY0NEtlMWtLRF9xaHljQ3NXQW9MRVo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8xNmQ4NWYtODViNS00MmUzLWFkOWYtZWVjMDVmNDlhYzg2 LzEvYWJmenY0NEtlMWtLRF9xaHljQ3NXQW9MRVo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw6wAurfv NK1ziOYkGnIgraUMGFuB9MLhfWqQzw18g4/RuGOoJ+OtWWEwTlSqt2Kp5uutf5oB G4BeKg8rwWC+JALcvKpYpuw+6WojzmiNjuA24LcF0bnpHdPvoOchwtt+ueV+k0fc e9mvZW5zdA1/asOIiCIjSDeOQ09pkb7XJUWIxnFZH7MN7k1MD4f5J3ERsxnwzHHE Wpi7s912QbYirjVkNunugNjTR9Wl2cbEj6EieiiAgGMlpBRoZuMJJVlbmZdrIlwh qNy/cQr9Yjauzu7Dm80PjMnkQPm831qBRAHGXKwV3k5fj2xvMT2+cFTINJ7heXJq vgKp2fTFPnBO3g== -----END CERTIFICATE-----Generated at Fri Dec 12 02:51:41 2025 by rpki-client