This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft File: Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft (raw, json) Hash identifier: YHBEvcny5kIC1WQwM3yxUblV8/A0E6+DGBy+F+oCKxs= Subject key identifier: FB:D7:FD:BC:34:B3:DE:F2:ED:E5:0D:4C:42:42:4D:C9:73:0E:44:BD Authority key identifier: 01:BA:E3:7F:8B:4E:42:DD:90:D9:B1:4F:60:B2:41:42:87:D4:1B:80 Certificate issuer: /CN=01bae37f8b4e42dd90d9b14f60b2414287d41b80 Certificate serial: 019B0F6E715EA502AFF96A85771EEF860FD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Abrjf4tOQt2Q2bFPYLJBQofUG4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft Manifest number: 176F Signing time: Thu 11 Dec 2025 22:00:54 +0000 Manifest this update: Thu 11 Dec 2025 22:00:54 +0000 Manifest next update: Fri 12 Dec 2025 22:00:54 +0000 Files and hashes: 1: Abrjf4tOQt2Q2bFPYLJBQofUG4A.crl (hash: fXY5KNsM2m66VHxiMwZhiJRlayvk348Q5Nww82XXELo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.crl rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft rsync://rpki.ripe.net/repository/DEFAULT/Abrjf4tOQt2Q2bFPYLJBQofUG4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 22:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:71:5e:a5:02:af:f9:6a:85:77:1e:ef:86:0f:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01bae37f8b4e42dd90d9b14f60b2414287d41b80 Validity Not Before: Dec 11 22:00:54 2025 GMT Not After : Dec 12 22:00:54 2025 GMT Subject: CN=fbd7fdbc34b3def2ede50d4c42424dc9730e44bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:dc:ce:9a:e2:f4:a6:65:f1:cd:d4:ec:40:61: 80:0b:d7:2c:a4:b0:0e:a3:f2:34:21:65:6a:e5:d5: bd:d2:c1:03:d9:0d:a5:8b:6c:20:ba:ec:ac:cf:5d: 1c:d7:b3:77:9b:dc:1c:f8:e3:db:c9:11:82:36:ef: fc:50:e9:82:35:af:7e:24:6c:f0:e3:cf:3e:74:84: bd:8f:a5:76:2e:f1:63:78:5e:00:85:80:ea:3c:e1: e5:e9:1a:f6:3c:c1:3f:9d:35:57:3c:07:3f:50:57: a3:e7:47:50:ec:b1:0b:b8:9d:be:54:18:0c:b4:ca: 64:42:dd:b8:02:cb:26:31:e6:17:d5:80:39:42:c1: ad:75:3a:47:e5:43:ff:85:c5:df:c0:63:14:f3:5e: 24:b2:87:f9:70:b1:9e:e4:8d:bf:08:f5:8d:39:d8: 66:a2:b7:3c:26:eb:a3:47:d6:6f:86:c1:b3:eb:a3: 82:aa:33:53:d6:1f:bc:54:df:a3:28:16:51:3c:c3: 9c:61:c0:6e:8d:04:d0:4c:93:8e:2b:7e:93:eb:09: d4:91:5c:6c:70:09:38:ef:87:1c:9d:7a:59:6c:53: 52:a4:dc:e4:ee:16:38:95:62:d8:83:f0:bb:c9:4f: 77:dd:ec:bf:7c:99:94:37:ac:0b:1d:60:7b:50:e5: 39:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D7:FD:BC:34:B3:DE:F2:ED:E5:0D:4C:42:42:4D:C9:73:0E:44:BD X509v3 Authority Key Identifier: keyid:01:BA:E3:7F:8B:4E:42:DD:90:D9:B1:4F:60:B2:41:42:87:D4:1B:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Abrjf4tOQt2Q2bFPYLJBQofUG4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:f5:d9:89:02:01:04:7b:1a:46:3d:59:28:7e:61:b1:03:ec: d6:c1:d0:34:d3:99:32:d9:bb:87:b9:ac:3a:d8:ef:69:3e:6e: 33:75:a4:1d:da:9d:f6:15:87:a6:da:dc:67:1b:1f:02:63:ee: 21:5a:22:72:98:ad:4d:46:d5:38:46:7e:fd:52:f1:5e:02:af: 01:f2:e9:75:c2:45:7c:19:cf:5a:fe:f2:21:6b:21:5f:36:a1: 30:ee:df:ee:d6:58:21:68:5d:33:e4:0a:18:c5:db:78:b4:fd: f0:27:84:b6:d6:25:04:97:c2:eb:e0:5d:80:42:69:3b:5d:3d: 9a:f6:c6:c3:74:0a:51:c2:48:e1:9a:7a:70:4e:3d:82:29:34: d0:d1:c2:b7:71:57:29:f2:1c:25:d7:26:9e:e3:40:ff:07:f8: 57:62:d7:8d:16:19:07:aa:26:46:78:f9:e4:09:fb:e0:fc:8f: 05:6e:4a:fb:a5:0b:45:6f:44:28:46:09:c5:f6:00:fa:e3:6b: 4a:79:f7:f0:90:ad:9b:55:d1:d2:cf:e6:73:07:60:3e:90:5a: e5:43:c9:26:8b:f3:92:a4:fe:b7:eb:d8:55:86:35:ee:b2:2d: 7a:d0:80:30:ef:2e:9a:6e:22:d6:14:09:f7:df:0e:f9:13:ce: b6:7d:7b:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbnFepQKv+WqFdx7vhg/XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxYmFlMzdmOGI0ZTQyZGQ5MGQ5YjE0ZjYwYjI0MTQyODdk NDFiODAwHhcNMjUxMjExMjIwMDU0WhcNMjUxMjEyMjIwMDU0WjAzMTEwLwYDVQQD EyhmYmQ3ZmRiYzM0YjNkZWYyZWRlNTBkNGM0MjQyNGRjOTczMGU0NGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydzOmuL0pmXxzdTsQGGAC9cspLAO o/I0IWVq5dW90sED2Q2li2wguuysz10c17N3m9wc+OPbyRGCNu/8UOmCNa9+JGzw 488+dIS9j6V2LvFjeF4AhYDqPOHl6Rr2PME/nTVXPAc/UFej50dQ7LELuJ2+VBgM tMpkQt24AssmMeYX1YA5QsGtdTpH5UP/hcXfwGMU814ksof5cLGe5I2/CPWNOdhm orc8JuujR9ZvhsGz66OCqjNT1h+8VN+jKBZRPMOcYcBujQTQTJOOK36T6wnUkVxs cAk474ccnXpZbFNSpNzk7hY4lWLYg/C7yU933ey/fJmUN6wLHWB7UOU5bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPvX/bw0s97y7eUNTEJCTclzDkS9MB8GA1UdIwQY MBaAFAG643+LTkLdkNmxT2CyQUKH1BuAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWJyamY0dE9RdDJRMmJGUFlMSkJRb2ZVRzRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8wODU3MGUtZjBhMS00YzgwLTg4MDEt ZTdjMzlmNTI5MGQwLzEvQWJyamY0dE9RdDJRMmJGUFlMSkJRb2ZVRzRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8wODU3MGUtZjBhMS00YzgwLTg4MDEtZTdjMzlmNTI5MGQw LzEvQWJyamY0dE9RdDJRMmJGUFlMSkJRb2ZVRzRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQPXZiQIB BHsaRj1ZKH5hsQPs1sHQNNOZMtm7h7msOtjvaT5uM3WkHdqd9hWHptrcZxsfAmPu IVoicpitTUbVOEZ+/VLxXgKvAfLpdcJFfBnPWv7yIWshXzahMO7f7tZYIWhdM+QK GMXbeLT98CeEttYlBJfC6+BdgEJpO109mvbGw3QKUcJI4Zp6cE49gik00NHCt3FX KfIcJdcmnuNA/wf4V2LXjRYZB6omRnj55An74PyPBW5K+6ULRW9EKEYJxfYA+uNr Snn38JCtm1XR0s/mcwdgPpBa5UPJJovzkqT+t+vYVYY17rItetCAMO8umm4i1hQJ 998O+RPOtn17Ag== -----END CERTIFICATE-----Generated at Fri Dec 12 05:31:51 2025 by rpki-client