This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft File: AcS3hNgWbovQ9H1yD95frsFkWzQ.mft (raw, json) Hash identifier: cYddJP0ExigHHvR5TiRM/id+I0IjVoilUhVVzsy/Amc= Subject key identifier: F2:B3:22:95:CF:8D:97:47:73:CD:01:57:5C:B6:9A:5D:FD:92:82:E4 Authority key identifier: 01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34 Certificate issuer: /CN=01c4b784d8166e8bd0f47d720fde5faec1645b34 Certificate serial: 019B63F95242E687399686E3DC7D6CCA83B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft Manifest number: 179D Signing time: Sun 28 Dec 2025 08:00:42 +0000 Manifest this update: Sun 28 Dec 2025 08:00:42 +0000 Manifest next update: Mon 29 Dec 2025 08:00:42 +0000 Files and hashes: 1: AcS3hNgWbovQ9H1yD95frsFkWzQ.crl (hash: G7ft94vFmCk0dgwmuAUKFiqql3dTM98MBOJ3hc8qLbc=) 2: TfDOBJVmJoj40V_l3LjkaTEjm8g.roa (hash: ReTHm2rRZcfjOGQDNdmXkBd+jk6YyXS+LSWab0KtASc=) 3: v50wWhyCI7hTEJpByG9mHooOhqA.roa (hash: E6PQDvh39GUQ1c6SbkD744Bu9C+vTY8Ul4lMsKxnnNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:f9:52:42:e6:87:39:96:86:e3:dc:7d:6c:ca:83:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01c4b784d8166e8bd0f47d720fde5faec1645b34 Validity Not Before: Dec 28 08:00:42 2025 GMT Not After : Dec 29 08:00:42 2025 GMT Subject: CN=f2b32295cf8d974773cd01575cb69a5dfd9282e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1f:0a:30:51:7b:f0:01:30:ea:cb:4a:8e:97: bb:5c:27:a3:79:0b:5e:37:39:95:70:c1:d0:b3:27: ba:40:3c:e5:dc:60:0b:34:f2:4e:cd:11:28:b9:2f: 39:4b:8b:91:c9:83:86:74:bd:f3:a8:cb:e4:bc:5f: a3:3e:19:32:9e:2d:b8:c2:48:fb:1f:4a:24:30:e6: a2:e2:19:a9:1c:da:57:f1:19:dd:41:2d:99:74:dc: 60:57:8a:97:d7:81:14:42:db:5f:d8:fc:fb:82:3e: 1a:70:8e:9a:c1:59:7e:64:79:1b:98:9b:81:44:3c: 13:8e:32:66:94:b2:0e:11:3b:51:7a:08:5b:76:65: 0b:7b:ed:b9:f5:af:c2:f2:b9:b1:fc:6e:44:c2:00: e6:65:99:c1:76:71:21:28:31:d4:2d:80:21:39:d0: 47:06:02:a6:72:a3:84:dd:6b:ed:8a:ee:36:b2:0e: 08:70:19:0d:3b:45:76:b6:3b:96:03:24:80:bd:e6: 9f:2d:c3:95:b1:d8:00:f9:23:de:10:4e:ee:96:c4: eb:2a:9b:7e:a3:76:7c:fd:3c:8a:f8:85:96:60:b2: 6a:0e:4d:29:75:12:90:37:4c:3d:aa:84:eb:a9:62: 89:d4:8d:11:33:78:4c:ef:a6:58:62:9d:f0:ef:50: 87:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B3:22:95:CF:8D:97:47:73:CD:01:57:5C:B6:9A:5D:FD:92:82:E4 X509v3 Authority Key Identifier: keyid:01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:19:b8:70:72:8b:ef:48:82:c7:71:2b:5a:a6:a6:41:3b:26: 73:fb:6d:0e:04:bb:ad:13:ca:f7:a6:7a:6c:f5:79:83:c8:41: 4a:84:70:b8:6e:27:21:9d:36:71:d8:bf:eb:74:7d:f8:9e:0d: b9:ac:c9:9d:2a:58:d0:44:af:56:50:2c:f5:c6:d3:cd:5b:03: 30:e2:0d:7d:12:dc:70:96:64:18:2e:69:1c:b7:fa:a6:68:8d: 0c:a9:40:55:c8:b7:bb:93:62:08:54:b0:e6:14:b6:69:27:fa: 25:1c:4f:f8:02:cd:bb:f8:9d:e0:2d:1b:b4:96:7c:67:b5:73: b6:21:52:96:e6:14:ea:b0:25:f5:79:98:37:25:e9:ea:ae:29: 18:f1:dc:99:72:2f:92:64:01:dd:54:4d:88:ca:2d:2c:80:a2: b1:90:22:83:87:8c:d8:97:7c:0a:e8:62:a3:60:b7:d0:28:36: b2:50:94:58:f4:23:95:90:1d:71:14:59:c5:47:18:2a:16:97: 1f:43:53:5a:06:da:53:78:7b:fe:ca:b2:6e:84:fb:5c:55:a6: a7:6b:e4:24:d1:99:ce:c2:ab:4d:a4:b9:a6:70:aa:7b:b7:a0: 5f:00:a4:28:5a:0e:ba:c2:ac:97:31:03:e7:d3:77:21:60:a9: 76:1e:ce:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtj+VJC5oc5lobj3H1syoO5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxYzRiNzg0ZDgxNjZlOGJkMGY0N2Q3MjBmZGU1ZmFlYzE2 NDViMzQwHhcNMjUxMjI4MDgwMDQyWhcNMjUxMjI5MDgwMDQyWjAzMTEwLwYDVQQD EyhmMmIzMjI5NWNmOGQ5NzQ3NzNjZDAxNTc1Y2I2OWE1ZGZkOTI4MmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxh8KMFF78AEw6stKjpe7XCejeQte NzmVcMHQsye6QDzl3GALNPJOzREouS85S4uRyYOGdL3zqMvkvF+jPhkyni24wkj7 H0okMOai4hmpHNpX8RndQS2ZdNxgV4qX14EUQttf2Pz7gj4acI6awVl+ZHkbmJuB RDwTjjJmlLIOETtReghbdmULe+259a/C8rmx/G5EwgDmZZnBdnEhKDHULYAhOdBH BgKmcqOE3Wvtiu42sg4IcBkNO0V2tjuWAySAveafLcOVsdgA+SPeEE7ulsTrKpt+ o3Z8/TyK+IWWYLJqDk0pdRKQN0w9qoTrqWKJ1I0RM3hM76ZYYp3w71CH5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKzIpXPjZdHc80BV1y2ml39koLkMB8GA1UdIwQY MBaAFAHEt4TYFm6L0PR9cg/eX67BZFs0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWNTM2hOZ1dib3ZROUgxeUQ5NWZyc0ZrV3pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9mMmI4NDAtMmM4NS00NjViLThiOTMt NWI1YmViMTA1MTNiLzEvQWNTM2hOZ1dib3ZROUgxeUQ5NWZyc0ZrV3pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9mMmI4NDAtMmM4NS00NjViLThiOTMtNWI1YmViMTA1MTNi LzEvQWNTM2hOZ1dib3ZROUgxeUQ5NWZyc0ZrV3pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKhm4cHKL 70iCx3ErWqamQTsmc/ttDgS7rRPK96Z6bPV5g8hBSoRwuG4nIZ02cdi/63R9+J4N uazJnSpY0ESvVlAs9cbTzVsDMOINfRLccJZkGC5pHLf6pmiNDKlAVci3u5NiCFSw 5hS2aSf6JRxP+ALNu/id4C0btJZ8Z7VztiFSluYU6rAl9XmYNyXp6q4pGPHcmXIv kmQB3VRNiMotLICisZAig4eM2Jd8Cuhio2C30Cg2slCUWPQjlZAdcRRZxUcYKhaX H0NTWgbaU3h7/sqyboT7XFWmp2vkJNGZzsKrTaS5pnCqe7egXwCkKFoOusKslzED 59N3IWCpdh7OFQ== -----END CERTIFICATE-----Generated at Sun Dec 28 09:43:23 2025 by rpki-client