This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft File: AUcceelkLK72p0N_H3TFR4rlISk.mft (raw, json) Hash identifier: ulJ45jNXii1ffxhs6QS29XgZRSnHlu2Z8JPJgZCRtxU= Subject key identifier: 42:C3:47:5F:C8:8A:E5:78:78:3B:C7:E6:D5:9E:5A:6D:FD:85:75:45 Authority key identifier: 01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29 Certificate issuer: /CN=01471c79e9642caef6a7437f1f74c5478ae52129 Certificate serial: 019B552B55DB46281F0D56E896F35658B4AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft Manifest number: 1794 Signing time: Thu 25 Dec 2025 11:01:01 +0000 Manifest this update: Thu 25 Dec 2025 11:01:01 +0000 Manifest next update: Fri 26 Dec 2025 11:01:01 +0000 Files and hashes: 1: AUcceelkLK72p0N_H3TFR4rlISk.crl (hash: H9BctbkXa40Dc+H2bc9t5IvGqKjZ3eKPn5bfCuO+peI=) 2: Woea8VSGgNA3cNDF8RWlevzY9Hg.roa (hash: 7c3YRutklvVu8P78YT4m9rpUu/U9zqtHnEw08R8/8Mg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:2b:55:db:46:28:1f:0d:56:e8:96:f3:56:58:b4:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01471c79e9642caef6a7437f1f74c5478ae52129 Validity Not Before: Dec 25 11:01:01 2025 GMT Not After : Dec 26 11:01:01 2025 GMT Subject: CN=42c3475fc88ae578783bc7e6d59e5a6dfd857545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d0:5a:dc:05:5e:44:14:b2:38:3a:d0:50:52: 27:2b:6e:a2:90:65:36:72:54:7e:1e:6f:2f:b8:5a: 2a:d4:54:f6:28:ac:e9:0d:ad:1f:74:dd:ec:36:42: 4a:b3:6a:7a:87:8d:61:11:4e:e0:2b:56:22:91:ef: de:73:92:f5:19:52:55:09:68:76:73:f8:fa:c6:f5: 00:ca:8e:dd:a0:a6:55:fd:1b:ce:d0:7f:e2:c4:ab: dc:54:4c:75:bf:18:69:37:84:4c:dd:57:38:82:4b: 99:34:9d:5c:1a:f3:b0:3b:15:5a:3e:71:70:32:da: 23:21:cb:68:7f:a1:7a:9d:79:3b:9d:7f:be:dd:be: 63:25:b6:ca:27:28:02:06:80:a7:39:6f:3f:b6:ce: 38:b9:20:c8:0a:c6:0c:9e:c9:4b:41:87:f1:40:89: a0:79:ff:64:08:d4:b5:97:da:f7:1f:4e:12:bb:96: ce:89:cf:4d:75:55:4a:5f:2f:de:4c:e4:d1:47:ec: 33:4f:f0:ec:25:cf:33:e1:98:30:6e:74:be:0c:3b: 67:60:e6:65:9b:5e:ae:90:32:7b:3d:4f:7a:ea:66: 6e:11:83:42:ff:c3:b4:c3:7b:df:51:d5:f4:7d:d0: 05:5d:f6:83:12:ad:9e:f2:32:d9:12:ab:8e:1b:20: 71:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C3:47:5F:C8:8A:E5:78:78:3B:C7:E6:D5:9E:5A:6D:FD:85:75:45 X509v3 Authority Key Identifier: keyid:01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:5e:a1:7f:f1:cf:2b:7f:ce:0a:8b:46:02:f6:17:63:2e:78: d3:4b:c5:23:a6:5d:a5:4c:cc:fc:0e:98:76:b4:27:ff:2c:46: 55:77:b3:53:b5:2e:0c:0b:e3:7c:0a:3b:6c:8a:16:5c:19:6e: 5a:6f:39:43:d0:ee:63:f6:3a:81:c8:f4:dd:aa:93:b1:83:06: e7:d3:03:e2:be:a2:07:83:7a:f6:72:ba:3d:09:b4:ba:77:49: 7e:c6:d5:3c:b3:52:c4:04:42:b3:17:65:c7:fc:5e:7f:72:f7: e3:fa:89:21:39:fc:08:bf:75:3c:fd:23:91:f2:27:c0:ba:1c: 0c:95:64:0e:1d:61:3e:33:45:f9:a6:ea:d9:bb:35:5a:49:37: 80:1e:b2:d7:78:ce:f3:57:df:f7:d6:74:64:97:f1:56:4a:e6: 1b:f8:68:49:c5:91:c1:50:cb:c3:f9:b6:f4:37:20:11:1a:fb: bf:5e:e8:24:90:c9:39:f7:f3:7c:3f:fc:8d:21:16:4d:cb:a1: 21:bd:32:f2:d2:ef:33:08:14:18:a8:28:b1:1f:70:68:af:d1: 29:43:ce:4a:c3:03:4c:80:eb:72:cd:20:9b:6f:87:bd:31:4a: 0a:21:01:00:5e:57:4d:d6:5c:ab:9d:3f:85:67:b6:9d:bb:6c: 5c:e8:b8:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVK1XbRigfDVbolvNWWLSqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNDcxYzc5ZTk2NDJjYWVmNmE3NDM3ZjFmNzRjNTQ3OGFl NTIxMjkwHhcNMjUxMjI1MTEwMTAxWhcNMjUxMjI2MTEwMTAxWjAzMTEwLwYDVQQD Eyg0MmMzNDc1ZmM4OGFlNTc4NzgzYmM3ZTZkNTllNWE2ZGZkODU3NTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdBa3AVeRBSyODrQUFInK26ikGU2 clR+Hm8vuFoq1FT2KKzpDa0fdN3sNkJKs2p6h41hEU7gK1Yike/ec5L1GVJVCWh2 c/j6xvUAyo7doKZV/RvO0H/ixKvcVEx1vxhpN4RM3Vc4gkuZNJ1cGvOwOxVaPnFw MtojIctof6F6nXk7nX++3b5jJbbKJygCBoCnOW8/ts44uSDICsYMnslLQYfxQImg ef9kCNS1l9r3H04Su5bOic9NdVVKXy/eTOTRR+wzT/DsJc8z4ZgwbnS+DDtnYOZl m16ukDJ7PU966mZuEYNC/8O0w3vfUdX0fdAFXfaDEq2e8jLZEquOGyBxWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFELDR1/IiuV4eDvH5tWeWm39hXVFMB8GA1UdIwQY MBaAFAFHHHnpZCyu9qdDfx90xUeK5SEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVVjY2VlbGtMSzcycDBOX0gzVEZSNHJsSVNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9lMWEzN2QtODY4ZS00NmJiLWE3Yzgt OWQyZDlmNmVlZTkzLzEvQVVjY2VlbGtMSzcycDBOX0gzVEZSNHJsSVNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9lMWEzN2QtODY4ZS00NmJiLWE3YzgtOWQyZDlmNmVlZTkz LzEvQVVjY2VlbGtMSzcycDBOX0gzVEZSNHJsSVNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo16hf/HP K3/OCotGAvYXYy5400vFI6ZdpUzM/A6YdrQn/yxGVXezU7UuDAvjfAo7bIoWXBlu Wm85Q9DuY/Y6gcj03aqTsYMG59MD4r6iB4N69nK6PQm0undJfsbVPLNSxARCsxdl x/xef3L34/qJITn8CL91PP0jkfInwLocDJVkDh1hPjNF+abq2bs1Wkk3gB6y13jO 81ff99Z0ZJfxVkrmG/hoScWRwVDLw/m29DcgERr7v17oJJDJOffzfD/8jSEWTcuh Ib0y8tLvMwgUGKgosR9waK/RKUPOSsMDTIDrcs0gm2+HvTFKCiEBAF5XTdZcq50/ hWe2nbtsXOi4SQ== -----END CERTIFICATE-----Generated at Thu Dec 25 13:09:55 2025 by rpki-client