This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft File: ACSx8TWREL_5kemsb1FGn9y0h68.mft (raw, json) Hash identifier: kUpaklOFV00DcMCaXR5+AfOmdXkRvy+R9cfyhHA54Ac= Subject key identifier: CE:23:42:E1:0B:73:7A:4F:34:65:3D:84:F9:57:27:0A:5B:74:6B:55 Authority key identifier: 00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF Certificate issuer: /CN=0024b1f1359110bff991e9ac6f51469fdcb487af Certificate serial: 019B3C7DCAEE9528BA2001532CB9F4CE6825 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft Manifest number: 0CB9 Signing time: Sat 20 Dec 2025 16:00:35 +0000 Manifest this update: Sat 20 Dec 2025 16:00:35 +0000 Manifest next update: Sun 21 Dec 2025 16:00:35 +0000 Files and hashes: 1: 6Z3iiHN3VyWW6gZ2ZKzE17TH2kM.roa (hash: cm3sLpQPG8ZwhW1sT/aVnn9uH1eRaB9OvY6srQjdKdA=) 2: ACSx8TWREL_5kemsb1FGn9y0h68.crl (hash: o+Rd3c0JRrSMxysKSODUtpXEh5J0JbiaKfJ1iY9TJ38=) 3: Y1KfRgbBfVzefGdkb0Fwgsciahg.roa (hash: aNRmz1hoVc6DWpXca8uL7+cZ3Jjgl7p4/PhhQMng11U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:ca:ee:95:28:ba:20:01:53:2c:b9:f4:ce:68:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0024b1f1359110bff991e9ac6f51469fdcb487af Validity Not Before: Dec 20 16:00:35 2025 GMT Not After : Dec 21 16:00:35 2025 GMT Subject: CN=ce2342e10b737a4f34653d84f957270a5b746b55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2f:66:d5:c5:ae:bc:b1:ca:df:04:e9:99:ac: 91:16:a1:2e:d5:03:1c:67:24:e4:9f:6d:20:33:23: be:43:60:f5:4d:e3:cd:0b:18:f7:a2:15:f4:1f:48: 2b:76:67:2c:db:21:fa:09:f0:95:ce:53:fa:ea:9a: a0:23:a2:92:fe:98:91:ad:67:e4:cc:be:7e:ef:2a: 15:ca:c1:3e:04:75:4f:7c:e0:5f:2b:09:e0:b3:de: ef:ff:fc:93:e5:b0:e3:a9:ea:4c:e1:03:6d:95:0c: 1b:74:24:1b:31:5c:a3:45:42:13:9f:3e:55:9f:14: fc:9d:bc:5d:09:91:d3:10:6a:c9:e8:6d:3a:e0:9c: e0:28:b5:31:07:39:26:20:bf:8e:49:8a:59:b0:a9: cd:53:8d:54:8f:4f:cb:3b:cc:75:c7:0d:d7:99:b0: a9:33:44:18:0c:55:03:c5:92:ac:35:28:11:75:47: 3c:0b:4d:52:a7:6c:35:24:08:b7:eb:f3:0b:e7:4c: d4:b9:b6:6e:3f:7c:7c:72:25:cf:98:00:fb:10:86: 68:6c:c2:47:af:f5:8a:1c:5e:79:a2:dc:ab:14:94: 30:54:82:70:b1:12:2f:f4:fa:4c:05:07:b4:8d:eb: e8:2a:34:63:3d:bc:ae:a8:33:f8:ce:57:f6:54:e2: 46:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:23:42:E1:0B:73:7A:4F:34:65:3D:84:F9:57:27:0A:5B:74:6B:55 X509v3 Authority Key Identifier: keyid:00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:6f:bb:02:16:ca:d3:d0:9a:a9:cb:bc:dc:da:7e:3e:ea:f1: 06:c1:16:0d:f0:f9:a9:12:78:b9:74:2f:81:ac:0e:cf:97:16: 1a:42:28:dc:55:70:1a:25:1d:2e:bd:9b:9d:30:ae:8f:78:8e: a3:c8:6b:8e:f9:df:42:a1:58:f0:6c:c9:63:1d:f0:7c:8c:26: 2d:f0:0b:fc:2c:c5:7d:9c:4a:2a:49:db:99:12:3f:72:b2:6d: c7:7b:db:15:79:1f:3a:e6:7c:9c:f6:d3:77:ce:c8:b8:ae:6d: cc:1d:88:45:7a:58:e7:26:ec:ea:19:02:88:60:9a:64:51:3f: 5a:0f:52:0d:36:64:3b:65:b7:a0:01:7c:94:55:ff:f8:a6:b3: c0:8f:9b:69:b2:bc:07:c2:aa:b2:84:31:c3:a0:f3:e0:d8:d9: ab:7c:bb:ed:51:50:b1:ff:bc:15:c3:86:b8:46:63:e8:f8:26: a2:07:11:4c:d7:34:9f:ed:33:9c:eb:15:f9:25:49:22:7f:53: ab:18:72:50:04:be:c7:b7:0a:1e:b0:d8:36:dd:99:ef:0a:6e: 1d:d8:0d:83:e6:ce:86:48:79:4b:02:e2:4e:7a:e0:56:22:5a: 45:ea:1d:6a:04:d1:a0:2d:75:b9:a5:48:e2:9a:a0:99:d6:e8: 76:33:dd:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fcrulSi6IAFTLLn0zmglMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMjRiMWYxMzU5MTEwYmZmOTkxZTlhYzZmNTE0NjlmZGNi NDg3YWYwHhcNMjUxMjIwMTYwMDM1WhcNMjUxMjIxMTYwMDM1WjAzMTEwLwYDVQQD EyhjZTIzNDJlMTBiNzM3YTRmMzQ2NTNkODRmOTU3MjcwYTViNzQ2YjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAli9m1cWuvLHK3wTpmayRFqEu1QMc ZyTkn20gMyO+Q2D1TePNCxj3ohX0H0grdmcs2yH6CfCVzlP66pqgI6KS/piRrWfk zL5+7yoVysE+BHVPfOBfKwngs97v//yT5bDjqepM4QNtlQwbdCQbMVyjRUITnz5V nxT8nbxdCZHTEGrJ6G064JzgKLUxBzkmIL+OSYpZsKnNU41Uj0/LO8x1xw3XmbCp M0QYDFUDxZKsNSgRdUc8C01Sp2w1JAi36/ML50zUubZuP3x8ciXPmAD7EIZobMJH r/WKHF55otyrFJQwVIJwsRIv9PpMBQe0jevoKjRjPbyuqDP4zlf2VOJG/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM4jQuELc3pPNGU9hPlXJwpbdGtVMB8GA1UdIwQY MBaAFAAksfE1kRC/+ZHprG9RRp/ctIevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUNTeDhUV1JFTF81a2Vtc2IxRkduOXkwaDY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iNTk3YzQtNmEzMi00MDA4LWIyZWUt MmRhNjI1ZWI3MjQyLzEvQUNTeDhUV1JFTF81a2Vtc2IxRkduOXkwaDY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9iNTk3YzQtNmEzMi00MDA4LWIyZWUtMmRhNjI1ZWI3MjQy LzEvQUNTeDhUV1JFTF81a2Vtc2IxRkduOXkwaDY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaW+7AhbK 09Caqcu83Np+PurxBsEWDfD5qRJ4uXQvgawOz5cWGkIo3FVwGiUdLr2bnTCuj3iO o8hrjvnfQqFY8GzJYx3wfIwmLfAL/CzFfZxKKknbmRI/crJtx3vbFXkfOuZ8nPbT d87IuK5tzB2IRXpY5ybs6hkCiGCaZFE/Wg9SDTZkO2W3oAF8lFX/+KazwI+babK8 B8KqsoQxw6Dz4NjZq3y77VFQsf+8FcOGuEZj6PgmogcRTNc0n+0znOsV+SVJIn9T qxhyUAS+x7cKHrDYNt2Z7wpuHdgNg+bOhkh5SwLiTnrgViJaReodagTRoC11uaVI 4pqgmdbodjPdDQ== -----END CERTIFICATE-----Generated at Sat Dec 20 22:15:13 2025 by rpki-client