This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft File: aBYXGz-RsdELBEWYf2EUKKvxPho.mft (raw, json) Hash identifier: WWfSDgUUkaSBb+KMpWOI4pmIVggdp3GFbaeF1SVpVms= Subject key identifier: 8B:48:3B:C3:31:94:73:8F:88:70:22:D7:C7:5D:4C:72:77:C7:CD:C1 Authority key identifier: 68:16:17:1B:3F:91:B1:D1:0B:04:45:98:7F:61:14:28:AB:F1:3E:1A Certificate issuer: /CN=6816171b3f91b1d10b0445987f611428abf13e1a Certificate serial: 019B59AC7BCAD7BFED382FC3BD7496D84921 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft Manifest number: 027C Signing time: Fri 26 Dec 2025 08:00:34 +0000 Manifest this update: Fri 26 Dec 2025 08:00:34 +0000 Manifest next update: Sat 27 Dec 2025 08:00:34 +0000 Files and hashes: 1: aBYXGz-RsdELBEWYf2EUKKvxPho.crl (hash: dtrLBr5hWwwvkwqZFjaWnZFwenGn1oXBTLPx/nr60XI=) 2: ctE-xjtRaK2N_xv7jPgdr16mAqk.roa (hash: 6dqptnwwlw4mSqTSZoD2O9lUv3DCB5Cf6H1piQtg/m0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:7b:ca:d7:bf:ed:38:2f:c3:bd:74:96:d8:49:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6816171b3f91b1d10b0445987f611428abf13e1a Validity Not Before: Dec 26 08:00:34 2025 GMT Not After : Dec 27 08:00:34 2025 GMT Subject: CN=8b483bc33194738f887022d7c75d4c7277c7cdc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e3:89:f9:da:20:95:fa:25:e7:ac:76:75:ab: 59:3f:8d:ab:1d:82:50:6b:24:00:0a:43:67:09:99: 16:a9:19:5a:fa:78:12:14:74:f7:01:7f:bf:95:2e: 4c:1a:e4:4e:71:87:91:41:3a:1e:b9:ac:96:4d:d1: 33:b5:b1:86:d8:12:dd:91:98:fb:38:81:f9:5a:ad: 58:84:ac:c7:43:9f:2a:30:64:40:59:6a:5b:9c:54: 68:cc:43:31:f2:42:b3:b0:bd:91:ab:a2:d9:74:1a: bc:f7:f8:f0:5d:52:26:2d:46:a3:8b:33:a5:8f:49: 3a:f5:66:1b:c6:94:5e:3a:07:0d:11:22:8e:1c:82: 99:c9:b5:97:05:63:9b:45:7d:15:af:27:51:4e:df: 52:77:f8:24:31:07:d3:a9:e9:61:e1:e3:22:51:de: 24:ce:18:f5:51:b9:02:67:f1:ef:ac:5c:7e:33:3e: 6d:73:5c:36:54:c4:2b:56:09:b1:e7:a5:f7:b5:49: 05:88:9c:95:9c:66:11:50:58:ab:8a:39:4b:64:ff: d8:d3:c3:ed:4b:ed:bb:09:63:fc:a6:81:92:1d:12: 13:9a:07:77:56:ed:47:92:14:c1:f3:a0:33:3b:a2: e0:43:a1:8a:47:76:b8:0c:d6:66:2a:3d:d6:72:76: cc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:48:3B:C3:31:94:73:8F:88:70:22:D7:C7:5D:4C:72:77:C7:CD:C1 X509v3 Authority Key Identifier: keyid:68:16:17:1B:3F:91:B1:D1:0B:04:45:98:7F:61:14:28:AB:F1:3E:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:7d:5d:fa:48:86:e3:e3:5c:0a:f2:21:4f:33:4b:8c:e3:7d: db:c0:53:d4:b1:8c:a7:4b:3a:c5:7c:d4:0e:3f:8f:aa:a8:9b: 82:e9:9f:47:22:b0:c7:ec:a3:0d:55:b3:b1:f7:3a:03:f5:f1: 04:f0:13:a4:ac:b9:27:ff:33:f8:1e:8e:78:d8:94:22:c2:12: 9f:b3:e2:20:f0:07:39:1a:39:bd:23:76:d5:a9:4f:2c:3f:ef: 3a:8b:69:61:9d:ac:5c:76:04:a2:e0:2e:75:28:9d:2b:65:49: 4c:64:e9:d0:40:ff:fa:5d:44:c4:e3:f1:6c:1a:a8:59:28:92: d9:cb:19:67:1f:a5:e7:e9:9a:4a:09:00:a3:40:fb:5a:24:b6: f9:ba:59:33:53:53:73:11:06:68:10:60:07:37:58:d2:08:66: 1c:0a:63:49:17:82:f0:72:47:c1:06:9e:da:2e:d8:0d:9b:6f: 15:1d:24:63:3d:ef:ce:5e:c6:91:54:41:ba:0c:cf:99:73:a8: 29:46:0e:85:db:66:a0:32:dc:a8:7e:70:5e:4d:c0:f4:38:ca: da:fb:45:da:0f:0b:9d:3b:ce:c1:18:9c:2e:6e:6f:3e:0e:18: 1f:ca:05:8d:e3:dc:18:d1:5c:7c:5b:8f:4e:c0:77:ee:cc:6b: 73:5b:a0:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrHvK17/tOC/DvXSW2EkhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MTYxNzFiM2Y5MWIxZDEwYjA0NDU5ODdmNjExNDI4YWJm MTNlMWEwHhcNMjUxMjI2MDgwMDM0WhcNMjUxMjI3MDgwMDM0WjAzMTEwLwYDVQQD Eyg4YjQ4M2JjMzMxOTQ3MzhmODg3MDIyZDdjNzVkNGM3Mjc3YzdjZGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruOJ+doglfol56x2datZP42rHYJQ ayQACkNnCZkWqRla+ngSFHT3AX+/lS5MGuROcYeRQToeuayWTdEztbGG2BLdkZj7 OIH5Wq1YhKzHQ58qMGRAWWpbnFRozEMx8kKzsL2Rq6LZdBq89/jwXVImLUajizOl j0k69WYbxpReOgcNESKOHIKZybWXBWObRX0VrydRTt9Sd/gkMQfTqelh4eMiUd4k zhj1UbkCZ/HvrFx+Mz5tc1w2VMQrVgmx56X3tUkFiJyVnGYRUFirijlLZP/Y08Pt S+27CWP8poGSHRITmgd3Vu1HkhTB86AzO6LgQ6GKR3a4DNZmKj3WcnbM+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFItIO8MxlHOPiHAi18ddTHJ3x83BMB8GA1UdIwQY MBaAFGgWFxs/kbHRCwRFmH9hFCir8T4aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUJZWEd6LVJzZEVMQkVXWWYyRVVLS3Z4UGhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8yYTUxNTUtMTMzNi00NTA3LTlhM2Yt ZjBhN2UxY2EzYzg1LzEvYUJZWEd6LVJzZEVMQkVXWWYyRVVLS3Z4UGhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8yYTUxNTUtMTMzNi00NTA3LTlhM2YtZjBhN2UxY2EzYzg1 LzEvYUJZWEd6LVJzZEVMQkVXWWYyRVVLS3Z4UGhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAon1d+kiG 4+NcCvIhTzNLjON928BT1LGMp0s6xXzUDj+PqqibgumfRyKwx+yjDVWzsfc6A/Xx BPATpKy5J/8z+B6OeNiUIsISn7PiIPAHORo5vSN21alPLD/vOotpYZ2sXHYEouAu dSidK2VJTGTp0ED/+l1ExOPxbBqoWSiS2csZZx+l5+maSgkAo0D7WiS2+bpZM1NT cxEGaBBgBzdY0ghmHApjSReC8HJHwQae2i7YDZtvFR0kYz3vzl7GkVRBugzPmXOo KUYOhdtmoDLcqH5wXk3A9DjK2vtF2g8LnTvOwRicLm5vPg4YH8oFjePcGNFcfFuP TsB37sxrc1ugkQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:44:20 2025 by rpki-client