This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.mft File: _Acu4lFaB8Zn4cXP3AIQ5lgbCXs.mft (raw, json) Hash identifier: 3L0qs8S2Z/o2c2KwkpSWm7Mpqf93CXYOqXspA1rF57Q= Subject key identifier: 59:03:1A:A7:A9:5E:DE:EA:08:7D:C5:3F:C8:B8:94:97:D6:23:87:66 Authority key identifier: FC:07:2E:E2:51:5A:07:C6:67:E1:C5:CF:DC:02:10:E6:58:1B:09:7B Certificate issuer: /CN=fc072ee2515a07c667e1c5cfdc0210e6581b097b Certificate serial: 019B3BD9AB9417FA5A94D8AB4F2D50FF6313 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.mft Manifest number: 14C6 Signing time: Sat 20 Dec 2025 13:01:19 +0000 Manifest this update: Sat 20 Dec 2025 13:01:19 +0000 Manifest next update: Sun 21 Dec 2025 13:01:19 +0000 Files and hashes: 1: ZmTI_BE0CxW812diBboPemqYE3k.roa (hash: 8pQSyVxeeGwYbTb0adthXkVgEKcNeH2p/++sCFVOF1Y=) 2: _Acu4lFaB8Zn4cXP3AIQ5lgbCXs.crl (hash: Xrpf9AiMyugQpN2nB5hdLiu8ACBPRFDmwReXALkVWrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.mft rsync://rpki.ripe.net/repository/DEFAULT/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:ab:94:17:fa:5a:94:d8:ab:4f:2d:50:ff:63:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc072ee2515a07c667e1c5cfdc0210e6581b097b Validity Not Before: Dec 20 13:01:19 2025 GMT Not After : Dec 21 13:01:19 2025 GMT Subject: CN=59031aa7a95edeea087dc53fc8b89497d6238766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:56:26:33:8e:32:3d:4e:fe:12:55:73:1f:be: d6:c4:e6:c4:c6:94:e5:6b:eb:8c:35:f7:96:94:43: b9:a7:c6:60:20:cf:af:05:9b:f9:d9:67:5b:48:f2: a9:e7:92:67:26:7e:da:78:4d:7e:8d:98:cf:41:ae: 9e:a1:0d:f9:1d:81:dd:44:d6:fb:db:47:0a:36:0e: dc:11:96:9b:78:e9:79:bd:b9:e9:8c:2c:88:07:3e: fd:16:5d:0a:f8:ea:68:0e:4c:7b:c4:ac:b1:ee:25: 18:26:4a:92:7d:85:a5:b2:75:8a:02:c5:cf:12:38: 83:fe:5d:09:bc:1d:d7:c5:f6:1a:59:29:76:70:4f: b8:22:ce:0e:8a:0d:34:f9:6a:54:fe:dc:ee:9a:10: c8:df:59:0d:19:f2:0f:12:81:84:29:ea:b6:ce:ec: 0d:24:15:5b:24:66:3b:78:55:7b:ba:f5:89:1f:65: 61:73:a2:d4:94:ae:7d:18:52:b0:fb:f2:0e:f0:1c: 38:2d:ec:e8:a8:c7:26:30:5e:25:89:09:07:6b:db: 85:d0:53:67:e7:34:1b:9b:a3:83:72:85:3a:70:63: a5:42:40:eb:1f:ce:21:aa:0a:1d:d5:72:07:70:38: 9c:f6:bf:9e:b4:9c:7c:d7:aa:8e:c2:0a:10:20:d3: 53:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:03:1A:A7:A9:5E:DE:EA:08:7D:C5:3F:C8:B8:94:97:D6:23:87:66 X509v3 Authority Key Identifier: keyid:FC:07:2E:E2:51:5A:07:C6:67:E1:C5:CF:DC:02:10:E6:58:1B:09:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:32:72:bd:fa:a1:06:b2:e1:a5:04:e5:e0:62:53:ad:97:aa: c4:a0:78:94:6a:f5:40:75:66:fc:1e:8c:02:e6:62:d0:d8:02: b8:36:aa:db:00:50:5a:dd:a4:e8:76:58:4f:49:ba:d3:8a:7d: 54:ac:6c:78:56:b0:04:ad:c3:bc:c8:6b:78:5e:7c:20:09:ef: 03:f4:d6:50:c5:0e:af:81:e0:75:e9:93:01:eb:cc:84:99:51: 62:bb:78:91:9d:3a:97:a5:e9:ab:d5:de:0e:2e:62:95:c2:6c: 57:26:73:59:a4:6d:7d:ff:3c:02:61:e7:c1:44:7f:ce:98:5e: 7a:bf:d5:91:54:3f:eb:d5:db:99:5b:d1:65:ce:ac:c7:91:d1: df:c4:7d:12:cf:7d:36:84:42:c6:71:67:2b:df:22:90:58:fd: 55:b5:d3:b2:f1:45:54:4c:36:7b:5b:c9:42:16:1b:a0:d9:ec: fd:4b:5f:87:55:5b:6b:44:a8:94:7c:00:5a:6a:9b:d6:07:f3: 9e:6a:67:8f:57:46:20:dc:71:02:dc:7f:e6:a8:da:a9:ed:48: d9:0a:51:82:9c:d2:e0:bd:fa:b8:7a:b6:b3:b0:80:39:91:94: f6:fc:12:a0:c0:ce:ee:b1:1f:02:63:3f:3a:9e:06:cc:e0:10: a9:ae:09:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72auUF/palNirTy1Q/2MTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMDcyZWUyNTE1YTA3YzY2N2UxYzVjZmRjMDIxMGU2NTgx YjA5N2IwHhcNMjUxMjIwMTMwMTE5WhcNMjUxMjIxMTMwMTE5WjAzMTEwLwYDVQQD Eyg1OTAzMWFhN2E5NWVkZWVhMDg3ZGM1M2ZjOGI4OTQ5N2Q2MjM4NzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVYmM44yPU7+ElVzH77WxObExpTl a+uMNfeWlEO5p8ZgIM+vBZv52WdbSPKp55JnJn7aeE1+jZjPQa6eoQ35HYHdRNb7 20cKNg7cEZabeOl5vbnpjCyIBz79Fl0K+OpoDkx7xKyx7iUYJkqSfYWlsnWKAsXP EjiD/l0JvB3XxfYaWSl2cE+4Is4Oig00+WpU/tzumhDI31kNGfIPEoGEKeq2zuwN JBVbJGY7eFV7uvWJH2Vhc6LUlK59GFKw+/IO8Bw4LezoqMcmMF4liQkHa9uF0FNn 5zQbm6ODcoU6cGOlQkDrH84hqgod1XIHcDic9r+etJx816qOwgoQINNTRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFkDGqepXt7qCH3FP8i4lJfWI4dmMB8GA1UdIwQY MBaAFPwHLuJRWgfGZ+HFz9wCEOZYGwl7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0FjdTRsRmFCOFpuNGNYUDNBSVE1bGdiQ1hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xM2ZmNDktNzRhNS00ZjAxLWJjNmYt YzRiY2YxNDcxYjVhLzEvX0FjdTRsRmFCOFpuNGNYUDNBSVE1bGdiQ1hzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8xM2ZmNDktNzRhNS00ZjAxLWJjNmYtYzRiY2YxNDcxYjVh LzEvX0FjdTRsRmFCOFpuNGNYUDNBSVE1bGdiQ1hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPDJyvfqh BrLhpQTl4GJTrZeqxKB4lGr1QHVm/B6MAuZi0NgCuDaq2wBQWt2k6HZYT0m604p9 VKxseFawBK3DvMhreF58IAnvA/TWUMUOr4HgdemTAevMhJlRYrt4kZ06l6Xpq9Xe Di5ilcJsVyZzWaRtff88AmHnwUR/zpheer/VkVQ/69XbmVvRZc6sx5HR38R9Es99 NoRCxnFnK98ikFj9VbXTsvFFVEw2e1vJQhYboNns/Utfh1Vba0SolHwAWmqb1gfz nmpnj1dGINxxAtx/5qjaqe1I2QpRgpzS4L36uHq2s7CAOZGU9vwSoMDO7rEfAmM/ Op4GzOAQqa4JgQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:14:18 2025 by rpki-client