This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft File: ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft (raw, json) Hash identifier: CtfoTxzUw/pBD0gbhU2gxweUv+tzG/RaeKZ2hLwqwGU= Subject key identifier: A0:C2:86:EF:CB:85:56:21:EE:BD:A2:39:50:C7:75:65:CD:EF:CC:9E Authority key identifier: 00:2C:88:65:BC:2A:07:E4:AC:FE:B2:63:B4:D9:CF:62:46:0F:D5:23 Certificate issuer: /CN=002c8865bc2a07e4acfeb263b4d9cf62460fd523 Certificate serial: 019B38A242EC47AD338DA73CE6AADE36DD69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft Manifest number: 0DB6 Signing time: Fri 19 Dec 2025 22:01:56 +0000 Manifest this update: Fri 19 Dec 2025 22:01:56 +0000 Manifest next update: Sat 20 Dec 2025 22:01:56 +0000 Files and hashes: 1: ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl (hash: THPw7LIka64EJo5Ygf2pHgsXrjjtySdfaoi3biS5ucU=) 2: F8t05KMRne3MsUcmQpBcGXGBMI8.roa (hash: d6IcpYMjJ62EgVhlSLiumFte8BB2LXTHsEgOP/d/Rss=) 3: FXe_JPwCxokWG0F8sL8Vx_t96gE.roa (hash: 9THWoynL84G88vnVxVYdONxnlu6uMlCDE+r39l01xOU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:42:ec:47:ad:33:8d:a7:3c:e6:aa:de:36:dd:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=002c8865bc2a07e4acfeb263b4d9cf62460fd523 Validity Not Before: Dec 19 22:01:56 2025 GMT Not After : Dec 20 22:01:56 2025 GMT Subject: CN=a0c286efcb855621eebda23950c77565cdefcc9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:98:87:03:eb:8f:d4:05:9b:df:ea:77:22:bd: cc:b3:fb:84:29:2f:50:ff:1b:ad:10:2b:13:75:db: e2:2c:34:37:ca:31:0e:a3:b1:e7:04:90:8b:66:00: 10:4c:45:58:d5:14:0c:bf:b1:35:40:e1:dc:23:31: 16:15:0b:86:0b:fc:e5:26:07:28:3d:1e:ac:47:b5: 5e:27:99:55:e1:74:36:0a:2b:0a:da:27:9e:f0:e8: 2e:61:7d:79:c5:a7:39:cd:c8:17:1a:4d:e5:c4:2c: 6a:11:c3:eb:3e:8f:e6:41:d1:57:55:34:c6:27:7a: 6c:2b:42:0d:80:a7:38:eb:43:74:1e:27:1b:67:b6: f0:e3:96:3f:77:5d:56:df:17:18:4f:b0:1e:43:15: 00:77:e2:5a:26:11:fb:fa:d6:c2:df:f4:cc:d1:44: ab:17:3b:1c:12:ce:a2:75:54:79:5c:da:3f:3f:2f: db:77:16:7d:14:3a:9f:9b:af:1d:0f:a4:38:98:a5: 6c:8d:8c:f6:2d:c1:b3:1f:d2:70:2e:84:fe:6f:f4: 81:9f:5f:10:44:3f:c8:28:36:55:09:6a:9a:bc:ad: 98:6b:3c:f1:8c:bc:84:bf:eb:e8:2b:50:2b:4b:08: 25:17:b7:9d:bc:f0:69:34:3b:1a:18:d2:3a:b1:45: 4d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C2:86:EF:CB:85:56:21:EE:BD:A2:39:50:C7:75:65:CD:EF:CC:9E X509v3 Authority Key Identifier: keyid:00:2C:88:65:BC:2A:07:E4:AC:FE:B2:63:B4:D9:CF:62:46:0F:D5:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:55:ab:8c:df:a4:ee:fd:b8:25:82:ad:89:85:13:e3:49:e6: c5:4a:1a:65:56:a9:10:68:3e:89:93:ff:99:81:61:98:25:8d: 61:04:7d:d6:e7:eb:ce:94:fe:d3:f6:34:c7:2e:81:4e:34:99: b8:68:eb:f6:b0:21:6a:dc:b2:29:5e:99:80:ab:c9:33:9f:ce: ae:d5:e7:88:c4:88:f2:14:4c:97:8a:5c:2a:3f:14:19:ca:9f: 7e:27:a9:20:22:2d:51:93:bf:0b:01:78:f3:99:8d:5d:0d:e4: 09:dd:df:72:5f:de:7a:49:5b:0d:18:53:1b:5e:d9:41:8e:e7: 29:f4:4e:78:6d:a0:13:f0:0e:bb:99:58:08:b9:7d:4d:a1:04: cd:89:5b:9c:99:e0:da:27:7d:ec:a5:93:fc:71:d5:2a:f4:28: 6a:ca:e5:3d:34:71:ac:3f:0e:55:a0:a9:32:b2:e3:7b:93:4d: 12:a2:32:dc:c6:59:d6:b8:e8:33:f3:ed:14:04:96:36:6f:09: 0d:8f:a3:6b:13:58:f0:d4:ff:34:0a:87:0a:3e:dd:40:da:1c: c6:fc:3e:06:e3:3e:c4:97:2c:c2:93:29:c6:75:4c:85:f3:d0: b2:de:8a:81:56:e7:83:41:34:66:2f:25:8f:a2:8e:63:13:7c: e6:65:c6:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4okLsR60zjac85qreNt1pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMmM4ODY1YmMyYTA3ZTRhY2ZlYjI2M2I0ZDljZjYyNDYw ZmQ1MjMwHhcNMjUxMjE5MjIwMTU2WhcNMjUxMjIwMjIwMTU2WjAzMTEwLwYDVQQD EyhhMGMyODZlZmNiODU1NjIxZWViZGEyMzk1MGM3NzU2NWNkZWZjYzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZiHA+uP1AWb3+p3Ir3Ms/uEKS9Q /xutECsTddviLDQ3yjEOo7HnBJCLZgAQTEVY1RQMv7E1QOHcIzEWFQuGC/zlJgco PR6sR7VeJ5lV4XQ2CisK2iee8OguYX15xac5zcgXGk3lxCxqEcPrPo/mQdFXVTTG J3psK0INgKc460N0HicbZ7bw45Y/d11W3xcYT7AeQxUAd+JaJhH7+tbC3/TM0USr FzscEs6idVR5XNo/Py/bdxZ9FDqfm68dD6Q4mKVsjYz2LcGzH9JwLoT+b/SBn18Q RD/IKDZVCWqavK2YazzxjLyEv+voK1ArSwglF7edvPBpNDsaGNI6sUVNJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDChu/LhVYh7r2iOVDHdWXN78yeMB8GA1UdIwQY MBaAFAAsiGW8KgfkrP6yY7TZz2JGD9UjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUN5SVpid3FCLVNzX3JKanROblBZa1lQMVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9kN2ZhZGMtMWViZi00MmRhLTliMjIt YTYwYzIwYzhmNzE3LzEvQUN5SVpid3FCLVNzX3JKanROblBZa1lQMVNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9kN2ZhZGMtMWViZi00MmRhLTliMjItYTYwYzIwYzhmNzE3 LzEvQUN5SVpid3FCLVNzX3JKanROblBZa1lQMVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaFWrjN+k 7v24JYKtiYUT40nmxUoaZVapEGg+iZP/mYFhmCWNYQR91ufrzpT+0/Y0xy6BTjSZ uGjr9rAhatyyKV6ZgKvJM5/OrtXniMSI8hRMl4pcKj8UGcqffiepICItUZO/CwF4 85mNXQ3kCd3fcl/eeklbDRhTG17ZQY7nKfROeG2gE/AOu5lYCLl9TaEEzYlbnJng 2id97KWT/HHVKvQoasrlPTRxrD8OVaCpMrLje5NNEqIy3MZZ1rjoM/PtFASWNm8J DY+jaxNY8NT/NAqHCj7dQNocxvw+BuM+xJcswpMpxnVMhfPQst6KgVbng0E0Zi8l j6KOYxN85mXGCQ== -----END CERTIFICATE-----Generated at Sat Dec 20 00:52:26 2025 by rpki-client