This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft File: AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft (raw, json) Hash identifier: ab9aZpbLnEe5Vkf+S9Dw0i6IxehMiXmy/chcBdCoTBQ= Subject key identifier: F5:86:EB:C2:B0:A2:72:6C:1E:13:DF:45:23:B5:2A:50:CE:30:1F:AA Authority key identifier: 00:2F:A6:E1:90:56:83:89:05:BC:32:B5:3A:B0:D1:04:7D:78:E4:D4 Certificate issuer: /CN=002fa6e19056838905bc32b53ab0d1047d78e4d4 Certificate serial: 019B5C40A8D14B5D7D30F83E50B31A9BF3E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft Manifest number: 1769 Signing time: Fri 26 Dec 2025 20:01:39 +0000 Manifest this update: Fri 26 Dec 2025 20:01:39 +0000 Manifest next update: Sat 27 Dec 2025 20:01:39 +0000 Files and hashes: 1: AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl (hash: kGt9IDaK+49P+BM0jwHKVkiQei1HrSUbeRsXwsmnFSw=) 2: FGVVapfPvK0QzFf1pALkp5bEruw.roa (hash: TSwtNe6AniR+9RFExziwrrS0q9Xsbcr++0YQr2+oyJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:40:a8:d1:4b:5d:7d:30:f8:3e:50:b3:1a:9b:f3:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=002fa6e19056838905bc32b53ab0d1047d78e4d4 Validity Not Before: Dec 26 20:01:39 2025 GMT Not After : Dec 27 20:01:39 2025 GMT Subject: CN=f586ebc2b0a2726c1e13df4523b52a50ce301faa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:46:9e:b2:f1:3a:ae:a2:d2:c5:e1:35:af:0e: 0f:99:22:e5:b7:8c:78:6c:57:0c:d6:3e:85:c4:cf: 45:4d:13:bf:89:55:20:19:89:43:fa:76:26:e9:34: 60:ef:03:f4:75:50:89:11:6f:18:ca:eb:97:7e:2e: ba:82:6a:58:df:07:1f:19:ae:e4:f8:cd:45:90:38: ca:5a:9f:b9:4a:ee:4b:7f:e3:65:d6:2f:7f:c3:1b: c6:27:8e:a0:da:c7:ae:b6:94:24:79:08:2a:52:b9: 58:11:74:cb:4c:86:b5:a1:c9:0d:cc:a1:2f:32:50: 98:65:de:78:56:27:7d:d3:d7:89:9c:49:a1:cd:ac: c5:a5:ae:f6:ca:e4:22:d5:59:51:4b:cb:ae:f7:78: f7:67:81:86:36:2a:db:77:70:7f:64:90:96:03:03: ab:af:8f:d7:b8:3b:bf:74:b1:f2:37:b4:70:8d:15: 0f:68:0f:bf:78:32:c1:01:72:e2:71:da:00:d7:54: 92:d4:d3:79:16:a6:6c:00:34:bf:69:aa:42:d4:07: 02:9e:fd:bf:1c:df:43:e6:dd:e2:6b:5f:75:71:7c: 02:20:af:8e:06:a7:72:9e:6f:40:c8:e8:a8:0c:31: 48:46:50:44:4e:f7:d4:3f:67:72:52:68:09:29:b6: a7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:86:EB:C2:B0:A2:72:6C:1E:13:DF:45:23:B5:2A:50:CE:30:1F:AA X509v3 Authority Key Identifier: keyid:00:2F:A6:E1:90:56:83:89:05:BC:32:B5:3A:B0:D1:04:7D:78:E4:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:f2:10:3b:ff:2e:f6:46:d4:e6:ba:83:0b:15:1e:f4:81:c8: 00:af:20:b6:2a:2e:f8:ea:6b:08:c5:d1:4e:ba:a7:ed:cc:8d: 8d:39:da:ff:30:f4:bf:0f:c9:28:07:6e:ae:a8:26:e4:e4:30: 7f:80:e9:ba:a5:78:8a:53:88:64:df:ec:24:de:02:ea:36:38: 1e:34:51:ce:09:ab:47:a4:f8:e4:1a:a2:36:9a:b7:c9:7a:42: 32:07:96:10:f2:97:60:6d:7f:4a:de:1f:49:b7:2b:78:a1:f1: f5:60:c0:bd:f1:99:cb:d8:5f:ee:a3:0d:11:17:e6:28:fd:05: ab:dc:3c:94:46:fa:22:80:b1:b7:2f:a8:61:9b:c0:5a:b4:35: c3:8a:44:27:1a:20:a6:26:78:71:f7:69:17:1d:6b:b5:cf:99: f4:2f:1e:a6:13:77:85:c9:5d:7d:fb:f7:24:aa:9c:2d:07:de: 5c:d7:e2:86:52:61:d9:d5:a7:c5:40:19:f7:36:cb:28:cc:46: c8:88:d1:e7:6f:20:12:e2:02:b9:1f:72:27:d8:f8:c8:67:c3: d9:26:1b:88:d1:89:38:9a:46:1c:c8:a0:7a:59:f1:92:75:a8: 19:bb:4e:ed:c1:55:db:05:3c:aa:f7:fa:56:67:f4:3b:8b:4a: a9:df:2b:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcQKjRS119MPg+ULMam/PkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMmZhNmUxOTA1NjgzODkwNWJjMzJiNTNhYjBkMTA0N2Q3 OGU0ZDQwHhcNMjUxMjI2MjAwMTM5WhcNMjUxMjI3MjAwMTM5WjAzMTEwLwYDVQQD EyhmNTg2ZWJjMmIwYTI3MjZjMWUxM2RmNDUyM2I1MmE1MGNlMzAxZmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0aesvE6rqLSxeE1rw4PmSLlt4x4 bFcM1j6FxM9FTRO/iVUgGYlD+nYm6TRg7wP0dVCJEW8YyuuXfi66gmpY3wcfGa7k +M1FkDjKWp+5Su5Lf+Nl1i9/wxvGJ46g2seutpQkeQgqUrlYEXTLTIa1ockNzKEv MlCYZd54Vid909eJnEmhzazFpa72yuQi1VlRS8uu93j3Z4GGNirbd3B/ZJCWAwOr r4/XuDu/dLHyN7RwjRUPaA+/eDLBAXLicdoA11SS1NN5FqZsADS/aapC1AcCnv2/ HN9D5t3ia191cXwCIK+OBqdynm9AyOioDDFIRlBETvfUP2dyUmgJKbanGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPWG68KwonJsHhPfRSO1KlDOMB+qMB8GA1UdIwQY MBaAFAAvpuGQVoOJBbwytTqw0QR9eOTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUMtbTRaQldnNGtGdkRLMU9yRFJCSDE0NU5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny84NjZiNmItZjU2Yy00YTJmLTkwMmQt ZmJjMzZlNDM0OGY1LzEvQUMtbTRaQldnNGtGdkRLMU9yRFJCSDE0NU5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny84NjZiNmItZjU2Yy00YTJmLTkwMmQtZmJjMzZlNDM0OGY1 LzEvQUMtbTRaQldnNGtGdkRLMU9yRFJCSDE0NU5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy/IQO/8u 9kbU5rqDCxUe9IHIAK8gtiou+OprCMXRTrqn7cyNjTna/zD0vw/JKAdurqgm5OQw f4DpuqV4ilOIZN/sJN4C6jY4HjRRzgmrR6T45BqiNpq3yXpCMgeWEPKXYG1/St4f SbcreKHx9WDAvfGZy9hf7qMNERfmKP0Fq9w8lEb6IoCxty+oYZvAWrQ1w4pEJxog piZ4cfdpFx1rtc+Z9C8ephN3hcldffv3JKqcLQfeXNfihlJh2dWnxUAZ9zbLKMxG yIjR528gEuICuR9yJ9j4yGfD2SYbiNGJOJpGHMigelnxknWoGbtO7cFV2wU8qvf6 Vmf0O4tKqd8riQ== -----END CERTIFICATE-----Generated at Fri Dec 26 23:15:35 2025 by rpki-client