This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft File: Ac8qcbLHv1QcbMBBUc0CB402mSY.mft (raw, json) Hash identifier: 4a9+TtqcFu/YHttBVSxSQJ+u7FLXmdaQJH0kAdJSXlo= Subject key identifier: AC:F1:C4:E2:F4:B6:CD:45:95:A9:95:B4:77:52:AE:1D:50:09:EE:33 Authority key identifier: 01:CF:2A:71:B2:C7:BF:54:1C:6C:C0:41:51:CD:02:07:8D:36:99:26 Certificate issuer: /CN=01cf2a71b2c7bf541c6cc04151cd02078d369926 Certificate serial: 019B416D9DC3B7F992904B8768203CC554A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft Manifest number: 0491 Signing time: Sun 21 Dec 2025 15:01:01 +0000 Manifest this update: Sun 21 Dec 2025 15:01:01 +0000 Manifest next update: Mon 22 Dec 2025 15:01:01 +0000 Files and hashes: 1: Ac8qcbLHv1QcbMBBUc0CB402mSY.crl (hash: 4isDaTzEHEn4JWnd17qO0Gc4btTP6933KMtq1JYaTg8=) 2: rygZTFCBNWEkh81f14PWqNNI1kI.roa (hash: Nw/ZIl2uHVeZMov8V5+Nv9xGTV5/WVlGxw5x2u+Et/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:9d:c3:b7:f9:92:90:4b:87:68:20:3c:c5:54:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01cf2a71b2c7bf541c6cc04151cd02078d369926 Validity Not Before: Dec 21 15:01:01 2025 GMT Not After : Dec 22 15:01:01 2025 GMT Subject: CN=acf1c4e2f4b6cd4595a995b47752ae1d5009ee33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5f:19:11:f5:b9:e8:7e:7e:de:24:04:c2:68: 09:12:8c:90:95:e8:3c:45:01:c4:c0:4a:69:d3:b1: 16:ac:6d:9a:71:e3:b8:cf:c7:5b:0d:0a:ab:d9:95: 46:d9:ff:b2:74:da:11:04:7b:94:ed:9d:86:1f:e2: 41:7c:62:a2:8c:5b:aa:eb:56:c5:d1:77:dd:f5:1b: 1e:f8:33:5f:0d:f7:e4:8b:e5:b0:7d:70:f4:be:9a: 36:f6:82:7a:c9:31:42:e9:14:c5:a6:dd:1a:e7:a4: 24:9a:cf:76:35:9e:40:6e:a2:b5:73:f0:24:18:7b: bd:15:1c:8e:4c:6a:f7:f5:c5:28:69:fe:e5:e2:f0: 73:d1:0e:c8:e8:e4:d9:ba:fb:f2:1d:ff:71:3c:45: 27:a7:97:74:8b:34:fe:1e:16:10:4d:5f:13:0f:fe: 09:d6:3e:6d:e7:f2:f4:08:c8:30:2d:b9:a5:c5:ab: d0:96:8b:29:9c:70:a7:9c:70:d5:fc:88:d1:6c:40: 77:dc:0f:7c:47:13:ee:00:25:94:f9:84:df:98:45: e1:0d:26:77:5a:85:1e:1c:6f:3c:b0:63:45:e1:a5: 01:17:5f:ce:ff:11:5d:30:7b:ed:dc:70:22:91:60: 26:cd:3a:63:5d:b8:1f:91:1e:86:98:58:64:b7:f4: 41:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F1:C4:E2:F4:B6:CD:45:95:A9:95:B4:77:52:AE:1D:50:09:EE:33 X509v3 Authority Key Identifier: keyid:01:CF:2A:71:B2:C7:BF:54:1C:6C:C0:41:51:CD:02:07:8D:36:99:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:93:f5:48:11:64:77:a3:d3:05:31:bc:90:aa:7b:b3:c0:49: 1f:a3:6b:5c:f1:d2:92:03:a5:aa:eb:5e:df:50:d5:dc:b6:bc: f1:a2:ce:66:fe:1e:e5:94:93:66:49:af:26:4b:c7:37:f3:bf: 39:92:3a:ff:02:27:4e:a3:e9:eb:b6:70:9c:db:35:41:43:13: 27:76:00:50:85:23:9d:9d:be:5b:90:70:9d:75:c1:11:af:83: e3:74:07:71:1c:68:96:0c:f0:45:e6:5c:08:e3:8b:76:d3:c8: 11:71:c0:61:71:7b:3a:9c:ff:d8:f7:9e:b5:ed:1b:8e:47:eb: 3d:fa:af:da:18:31:7e:88:25:bd:b7:f1:8e:b6:7d:db:91:94: d5:67:73:f6:fc:cb:f1:b2:2f:da:43:f6:c4:06:a5:91:66:90: ae:94:3c:53:ce:0f:d6:cb:be:bc:16:cf:bf:21:7b:b2:db:61: 93:25:df:13:55:c4:09:8d:43:cf:11:19:bf:b3:81:fe:85:4f: 0d:82:94:8d:7b:a3:cf:00:f5:44:18:61:f0:9c:1d:19:da:f2: 15:a8:1c:90:8c:3d:c5:62:b1:db:25:90:2f:12:96:0f:f4:22: 19:f2:fa:17:cd:9e:e9:6a:53:20:9e:d5:8b:4c:4b:5c:ac:f4: 21:77:b5:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbZ3Dt/mSkEuHaCA8xVSnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxY2YyYTcxYjJjN2JmNTQxYzZjYzA0MTUxY2QwMjA3OGQz Njk5MjYwHhcNMjUxMjIxMTUwMTAxWhcNMjUxMjIyMTUwMTAxWjAzMTEwLwYDVQQD EyhhY2YxYzRlMmY0YjZjZDQ1OTVhOTk1YjQ3NzUyYWUxZDUwMDllZTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5F8ZEfW56H5+3iQEwmgJEoyQleg8 RQHEwEpp07EWrG2aceO4z8dbDQqr2ZVG2f+ydNoRBHuU7Z2GH+JBfGKijFuq61bF 0Xfd9Rse+DNfDffki+WwfXD0vpo29oJ6yTFC6RTFpt0a56Qkms92NZ5AbqK1c/Ak GHu9FRyOTGr39cUoaf7l4vBz0Q7I6OTZuvvyHf9xPEUnp5d0izT+HhYQTV8TD/4J 1j5t5/L0CMgwLbmlxavQlospnHCnnHDV/IjRbEB33A98RxPuACWU+YTfmEXhDSZ3 WoUeHG88sGNF4aUBF1/O/xFdMHvt3HAikWAmzTpjXbgfkR6GmFhkt/RBqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKzxxOL0ts1FlamVtHdSrh1QCe4zMB8GA1UdIwQY MBaAFAHPKnGyx79UHGzAQVHNAgeNNpkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWM4cWNiTEh2MVFjYk1CQlVjMENCNDAybVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jMjRlZTEtMmNiMi00OTA3LTgwNDgt YjBmNGZiZTI2YjYxLzEvQWM4cWNiTEh2MVFjYk1CQlVjMENCNDAybVNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9jMjRlZTEtMmNiMi00OTA3LTgwNDgtYjBmNGZiZTI2YjYx LzEvQWM4cWNiTEh2MVFjYk1CQlVjMENCNDAybVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp5P1SBFk d6PTBTG8kKp7s8BJH6NrXPHSkgOlqute31DV3La88aLOZv4e5ZSTZkmvJkvHN/O/ OZI6/wInTqPp67ZwnNs1QUMTJ3YAUIUjnZ2+W5BwnXXBEa+D43QHcRxolgzwReZc COOLdtPIEXHAYXF7Opz/2Peete0bjkfrPfqv2hgxfoglvbfxjrZ925GU1Wdz9vzL 8bIv2kP2xAalkWaQrpQ8U84P1su+vBbPvyF7stthkyXfE1XECY1DzxEZv7OB/oVP DYKUjXujzwD1RBhh8JwdGdryFagckIw9xWKx2yWQLxKWD/QiGfL6F82e6WpTIJ7V i0xLXKz0IXe1RQ== -----END CERTIFICATE-----Generated at Sun Dec 21 17:32:42 2025 by rpki-client