This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d938dc-00c4-4680-9944-4a3733f4722b/1/aBFGMD9XUewN_C71R6qyR69OaB8.mft File: aBFGMD9XUewN_C71R6qyR69OaB8.mft (raw, json) Hash identifier: 4Dhy0ocDiuoIieMq9gC0wEmYY4pdbmDlEe0OiTtE6/k= Subject key identifier: 78:62:D7:17:07:2B:1C:77:FB:3C:22:E8:DD:D3:EF:E8:A8:46:44:B1 Authority key identifier: 68:11:46:30:3F:57:51:EC:0D:FC:2E:F5:47:AA:B2:47:AF:4E:68:1F Certificate issuer: /CN=681146303f5751ec0dfc2ef547aab247af4e681f Certificate serial: 019B597691B64332B1488D21DFC2AE2FDE30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBFGMD9XUewN_C71R6qyR69OaB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/d938dc-00c4-4680-9944-4a3733f4722b/1/aBFGMD9XUewN_C71R6qyR69OaB8.mft Manifest number: 0E77 Signing time: Fri 26 Dec 2025 07:01:41 +0000 Manifest this update: Fri 26 Dec 2025 07:01:41 +0000 Manifest next update: Sat 27 Dec 2025 07:01:41 +0000 Files and hashes: 1: aBFGMD9XUewN_C71R6qyR69OaB8.crl (hash: dlAr549HjDGaUy6dk7AniyjLqXLwMQKNI1obM86LZJo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/d938dc-00c4-4680-9944-4a3733f4722b/1/aBFGMD9XUewN_C71R6qyR69OaB8.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/d938dc-00c4-4680-9944-4a3733f4722b/1/aBFGMD9XUewN_C71R6qyR69OaB8.mft rsync://rpki.ripe.net/repository/DEFAULT/aBFGMD9XUewN_C71R6qyR69OaB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:91:b6:43:32:b1:48:8d:21:df:c2:ae:2f:de:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=681146303f5751ec0dfc2ef547aab247af4e681f Validity Not Before: Dec 26 07:01:41 2025 GMT Not After : Dec 27 07:01:41 2025 GMT Subject: CN=7862d717072b1c77fb3c22e8ddd3efe8a84644b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d8:0c:81:72:86:71:8f:a5:cd:d0:f1:b8:51: 2f:e5:32:f4:4b:df:e9:d4:cd:c5:9e:0e:a0:6e:5f: f6:8d:51:44:06:2f:ac:4b:f1:36:d5:45:b3:61:f2: ce:0d:af:08:78:12:66:2a:3c:29:8b:58:c3:8f:a2: d9:81:24:22:25:3b:50:2c:fd:4c:bf:6a:b4:28:91: f7:03:3b:60:51:07:98:7d:59:ce:a8:2d:5f:5b:13: d5:6b:2c:28:61:9c:b8:06:f9:44:96:5d:5a:19:a9: b7:e0:56:77:0b:d8:f3:96:c8:a5:ae:85:43:43:78: 5e:a0:68:e0:5f:1a:c7:48:40:f3:6f:2d:78:29:af: 79:6d:50:78:98:57:0b:5f:3d:33:ff:42:11:9c:d4: 56:31:29:93:02:7b:fb:e4:49:57:1e:60:7f:22:82: 62:cc:0c:1b:5b:fa:31:0e:03:1e:4f:bb:88:d5:25: 68:c9:4f:02:a2:d6:0f:d5:95:ef:64:2c:9d:3f:a0: 51:30:a4:c4:40:84:5c:99:b0:cb:3d:61:2e:7b:2f: 51:de:b0:95:e6:95:d0:3a:81:dc:02:12:6f:21:ce: c7:06:73:02:3f:fa:d1:7e:b2:be:d1:74:46:fc:a7: 93:c2:68:73:31:c9:8c:26:4e:e6:bf:ab:b5:f4:1f: 4d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:62:D7:17:07:2B:1C:77:FB:3C:22:E8:DD:D3:EF:E8:A8:46:44:B1 X509v3 Authority Key Identifier: keyid:68:11:46:30:3F:57:51:EC:0D:FC:2E:F5:47:AA:B2:47:AF:4E:68:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBFGMD9XUewN_C71R6qyR69OaB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d938dc-00c4-4680-9944-4a3733f4722b/1/aBFGMD9XUewN_C71R6qyR69OaB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d938dc-00c4-4680-9944-4a3733f4722b/1/aBFGMD9XUewN_C71R6qyR69OaB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:52:e5:e7:c0:3c:bf:c3:91:aa:90:92:e8:8c:b0:5c:38:e0: d5:b5:5d:6c:f3:fc:a6:fa:fb:c6:21:a4:b6:a8:fb:97:f7:ed: d3:5e:d3:29:7d:11:a6:a6:35:ad:a4:d3:c9:af:2e:46:48:04: b4:48:d7:05:60:a9:09:36:b5:a4:c7:47:c8:9e:60:c9:97:75: fd:04:6c:cf:17:db:19:e4:c8:8e:e8:c2:5f:0f:dc:50:0f:c9: b4:cc:50:ce:ac:66:52:ba:56:ae:0c:eb:02:4d:63:99:87:84: 45:cc:5b:fe:15:6c:d0:1c:51:5c:64:19:00:b2:4d:57:02:48: 5b:48:59:4c:b0:37:23:04:48:61:f0:64:12:33:46:35:d3:ce: 0a:c2:d5:79:53:a1:ca:75:df:e8:9f:98:9b:b5:f6:81:31:4e: 6b:52:a7:93:19:8b:e8:53:99:3b:0f:ad:b6:65:25:26:99:70: 09:bb:e4:e7:0c:87:11:17:61:e2:56:34:ec:48:83:d0:5a:fe: 2a:a8:24:29:14:a1:a9:20:cc:7a:04:9d:73:c1:f7:7b:a3:a7: 60:22:64:7f:d7:5d:79:a2:a1:b7:b6:53:38:a9:45:ab:12:c4: 09:23:bc:21:f0:41:ea:04:da:d0:4c:96:6f:c2:d7:b4:03:74: 96:83:a1:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdpG2QzKxSI0h38KuL94wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MTE0NjMwM2Y1NzUxZWMwZGZjMmVmNTQ3YWFiMjQ3YWY0 ZTY4MWYwHhcNMjUxMjI2MDcwMTQxWhcNMjUxMjI3MDcwMTQxWjAzMTEwLwYDVQQD Eyg3ODYyZDcxNzA3MmIxYzc3ZmIzYzIyZThkZGQzZWZlOGE4NDY0NGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNgMgXKGcY+lzdDxuFEv5TL0S9/p 1M3Fng6gbl/2jVFEBi+sS/E21UWzYfLODa8IeBJmKjwpi1jDj6LZgSQiJTtQLP1M v2q0KJH3AztgUQeYfVnOqC1fWxPVaywoYZy4BvlEll1aGam34FZ3C9jzlsilroVD Q3heoGjgXxrHSEDzby14Ka95bVB4mFcLXz0z/0IRnNRWMSmTAnv75ElXHmB/IoJi zAwbW/oxDgMeT7uI1SVoyU8CotYP1ZXvZCydP6BRMKTEQIRcmbDLPWEuey9R3rCV 5pXQOoHcAhJvIc7HBnMCP/rRfrK+0XRG/KeTwmhzMcmMJk7mv6u19B9N0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHhi1xcHKxx3+zwi6N3T7+ioRkSxMB8GA1UdIwQY MBaAFGgRRjA/V1HsDfwu9UeqskevTmgfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUJGR01EOVhVZXdOX0M3MVI2cXlSNjlPYUI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9kOTM4ZGMtMDBjNC00NjgwLTk5NDQt NGEzNzMzZjQ3MjJiLzEvYUJGR01EOVhVZXdOX0M3MVI2cXlSNjlPYUI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9kOTM4ZGMtMDBjNC00NjgwLTk5NDQtNGEzNzMzZjQ3MjJi LzEvYUJGR01EOVhVZXdOX0M3MVI2cXlSNjlPYUI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl1Ll58A8 v8ORqpCS6IywXDjg1bVdbPP8pvr7xiGktqj7l/ft017TKX0RpqY1raTTya8uRkgE tEjXBWCpCTa1pMdHyJ5gyZd1/QRszxfbGeTIjujCXw/cUA/JtMxQzqxmUrpWrgzr Ak1jmYeERcxb/hVs0BxRXGQZALJNVwJIW0hZTLA3IwRIYfBkEjNGNdPOCsLVeVOh ynXf6J+Ym7X2gTFOa1KnkxmL6FOZOw+ttmUlJplwCbvk5wyHERdh4lY07EiD0Fr+ KqgkKRShqSDMegSdc8H3e6OnYCJkf9ddeaKht7ZTOKlFqxLECSO8IfBB6gTa0EyW b8LXtAN0loOhow== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:38 2025 by rpki-client