This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft File: AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft (raw, json) Hash identifier: BXP1nTP578+Sm+8HcijAUq3UlUlAeASZTxOCJau6xsI= Subject key identifier: C9:57:B8:77:F1:CA:16:E0:81:E6:A4:3B:A3:09:BC:A8:17:43:08:67 Authority key identifier: 01:BA:E5:09:DF:7E:C5:24:D4:F7:50:FF:80:92:74:AB:00:64:93:22 Certificate issuer: /CN=01bae509df7ec524d4f750ff809274ab00649322 Certificate serial: 019B59ACDECFBAADE575D37126966D120B4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft Manifest number: 120A Signing time: Fri 26 Dec 2025 08:01:00 +0000 Manifest this update: Fri 26 Dec 2025 08:01:00 +0000 Manifest next update: Sat 27 Dec 2025 08:01:00 +0000 Files and hashes: 1: AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl (hash: X7PfLnCBiTO13ZJqi20SyNDxczr0TDVKwVxfJB8P8Eg=) 2: r9ivPCH7B-EIjmvOeGIsU1bVmJw.roa (hash: ZoMymQkL6qzTxWYBfF5BxJb7oUgkp1cRchZsdJ96SAk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:de:cf:ba:ad:e5:75:d3:71:26:96:6d:12:0b:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01bae509df7ec524d4f750ff809274ab00649322 Validity Not Before: Dec 26 08:01:00 2025 GMT Not After : Dec 27 08:01:00 2025 GMT Subject: CN=c957b877f1ca16e081e6a43ba309bca817430867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6c:b9:5e:9f:88:fe:04:ad:8e:2f:4d:87:69: 66:53:42:1e:93:30:ff:b2:41:8d:34:99:6e:9f:8d: 06:95:ac:29:3b:94:67:c1:d1:05:38:5a:7b:8a:08: e1:ee:13:06:9b:d0:1c:00:c6:ac:39:5a:77:17:b0: b5:f4:0c:6c:61:b1:f8:c9:b6:64:70:45:39:e0:54: 57:d5:b6:0d:22:04:1c:8d:70:82:8f:a5:20:ca:a3: 95:bb:22:5d:d1:ba:e3:b0:ad:25:c0:9f:6e:bd:4c: a7:ef:45:7e:dd:eb:a0:9b:f8:90:b3:22:90:2a:38: 86:57:c3:fc:ad:bc:52:f8:e9:6f:69:6b:4a:f5:5f: 20:ab:43:09:61:fe:2f:58:2a:ac:62:e2:10:2f:c1: f0:a5:a9:b4:ce:45:bf:48:22:9a:6c:ae:2b:5a:b9: 82:cf:68:9f:ae:7b:c2:dd:1b:7f:86:ba:bf:ac:d6: ba:52:6b:87:de:ee:30:3c:d8:c6:19:2a:a8:50:74: d5:8f:6b:4e:d3:c2:31:8b:d0:58:3a:e1:e9:6c:2d: 97:1d:c5:17:84:3d:0c:4c:64:18:9c:85:38:0c:af: 37:03:f2:a1:00:0a:9a:69:e7:8d:6f:f3:01:51:1e: c5:71:05:b6:90:44:c3:1e:c9:e0:d0:2b:c3:3a:f2: e4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:57:B8:77:F1:CA:16:E0:81:E6:A4:3B:A3:09:BC:A8:17:43:08:67 X509v3 Authority Key Identifier: keyid:01:BA:E5:09:DF:7E:C5:24:D4:F7:50:FF:80:92:74:AB:00:64:93:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:ea:3a:40:c8:bc:b3:ea:f8:53:02:dc:51:09:5f:d0:60:4e: 52:95:92:65:ea:ab:f8:34:62:da:c2:8b:75:a1:1e:72:dd:58: 57:b7:76:49:90:0f:78:95:82:0f:4b:04:44:01:fd:0c:e2:80: 27:0b:b5:42:a1:e2:90:c0:87:8b:a9:95:b1:c4:e7:6b:38:31: eb:05:44:4d:e7:57:9c:55:25:d5:3e:a1:32:5c:c8:c9:58:32: 45:82:ec:88:80:59:1d:74:0d:f1:a0:74:62:1b:63:1f:98:c3: 7b:b0:4c:61:fc:43:dd:06:69:f2:06:07:82:dd:12:87:b8:02: e1:e2:71:c1:63:13:11:d8:3c:e5:93:bf:ac:19:b1:90:a7:61: 80:7f:b7:0c:33:36:7e:be:c1:41:88:af:ba:1f:2e:f1:70:44: c9:21:06:4d:3c:21:50:8a:dc:a2:1e:3e:f1:bd:c6:0f:4e:af: 0e:77:a4:47:ea:b7:d9:3a:25:aa:74:16:f5:7e:e9:5d:ee:48: 3e:aa:7f:5f:6d:b1:b0:ca:b3:1c:30:af:61:76:b0:96:1b:11: 4a:85:42:58:8a:91:39:a9:28:ab:bc:ba:e0:17:07:3b:1e:ce: 6e:80:d8:50:93:fd:82:6b:65:81:57:ac:1f:e6:0c:04:0d:69: ec:0a:ac:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrN7Puq3lddNxJpZtEgtOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxYmFlNTA5ZGY3ZWM1MjRkNGY3NTBmZjgwOTI3NGFiMDA2 NDkzMjIwHhcNMjUxMjI2MDgwMTAwWhcNMjUxMjI3MDgwMTAwWjAzMTEwLwYDVQQD EyhjOTU3Yjg3N2YxY2ExNmUwODFlNmE0M2JhMzA5YmNhODE3NDMwODY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2y5Xp+I/gStji9Nh2lmU0IekzD/ skGNNJlun40GlawpO5RnwdEFOFp7igjh7hMGm9AcAMasOVp3F7C19AxsYbH4ybZk cEU54FRX1bYNIgQcjXCCj6UgyqOVuyJd0brjsK0lwJ9uvUyn70V+3eugm/iQsyKQ KjiGV8P8rbxS+OlvaWtK9V8gq0MJYf4vWCqsYuIQL8Hwpam0zkW/SCKabK4rWrmC z2ifrnvC3Rt/hrq/rNa6UmuH3u4wPNjGGSqoUHTVj2tO08Ixi9BYOuHpbC2XHcUX hD0MTGQYnIU4DK83A/KhAAqaaeeNb/MBUR7FcQW2kETDHsng0CvDOvLkswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMlXuHfxyhbggeakO6MJvKgXQwhnMB8GA1UdIwQY MBaAFAG65QnffsUk1PdQ/4CSdKsAZJMiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWJybENkOS14U1RVOTFEX2dKSjBxd0Jra3lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZmJhYzAtZTdhNS00Yzk1LTg4YjYt ODRhOWVmZWMwZDFiLzEvQWJybENkOS14U1RVOTFEX2dKSjBxd0Jra3lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9hZmJhYzAtZTdhNS00Yzk1LTg4YjYtODRhOWVmZWMwZDFi LzEvQWJybENkOS14U1RVOTFEX2dKSjBxd0Jra3lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAquo6QMi8 s+r4UwLcUQlf0GBOUpWSZeqr+DRi2sKLdaEect1YV7d2SZAPeJWCD0sERAH9DOKA Jwu1QqHikMCHi6mVscTnazgx6wVETedXnFUl1T6hMlzIyVgyRYLsiIBZHXQN8aB0 YhtjH5jDe7BMYfxD3QZp8gYHgt0Sh7gC4eJxwWMTEdg85ZO/rBmxkKdhgH+3DDM2 fr7BQYivuh8u8XBEySEGTTwhUIrcoh4+8b3GD06vDnekR+q32TolqnQW9X7pXe5I Pqp/X22xsMqzHDCvYXawlhsRSoVCWIqROakoq7y64BcHOx7OboDYUJP9gmtlgVes H+YMBA1p7Aqsyw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:25 2025 by rpki-client