This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
File: AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft (raw, json)
Hash identifier: K7OM5KgceVQGRDbx5ZevMekQkthMXoXp9DTwxdhR8fY=
Subject key identifier: CD:74:72:B5:C6:69:20:D4:8E:49:E4:69:E8:02:CB:B3:94:2E:55:6E
Authority key identifier: 01:C3:52:11:8F:D5:F7:54:54:CF:C6:1B:E6:1A:42:AB:EF:4D:C4:F8
Certificate issuer: /CN=01c352118fd5f75454cfc61be61a42abef4dc4f8
Certificate serial: 019B383382BB32ED66563B146A58257EED05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
Manifest number: 1118
Signing time: Fri 19 Dec 2025 20:00:58 +0000
Manifest this update: Fri 19 Dec 2025 20:00:58 +0000
Manifest next update: Sat 20 Dec 2025 20:00:58 +0000
Files and hashes: 1: AcNSEY_V91RUz8Yb5hpCq-9NxPg.crl (hash: ody6c7F+sbtGTJI5Ku5Lf0DVkY7+ZcSZEnytsaCUobc=)
2: lnFBPEwYXwbrEbBc_1U4hqBIiD0.roa (hash: pkORWbBvX/TB59ufAxJ53BtkrDGiG+iuAuMuYoIsXog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:38:33:82:bb:32:ed:66:56:3b:14:6a:58:25:7e:ed:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c352118fd5f75454cfc61be61a42abef4dc4f8
Validity
Not Before: Dec 19 20:00:58 2025 GMT
Not After : Dec 20 20:00:58 2025 GMT
Subject: CN=cd7472b5c66920d48e49e469e802cbb3942e556e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e8:96:68:fb:13:92:21:b0:73:d6:7a:9b:e8:
1e:54:c9:70:e6:5f:ad:19:1c:7b:b9:ea:53:97:e8:
80:78:00:52:5c:47:8a:60:a3:90:6f:4b:29:1f:14:
d6:87:d5:9c:ae:f9:65:ba:ea:b9:99:12:f5:e7:fc:
78:50:93:63:c8:35:9c:9e:c6:eb:97:ba:ad:25:d6:
3b:0f:8e:f8:8f:94:52:87:95:f0:63:29:17:64:e7:
19:ec:26:0a:ef:7b:2a:ec:b2:d7:52:c4:87:28:c0:
71:e3:59:11:fd:28:c9:82:4d:64:51:0e:92:90:1c:
f5:92:ef:be:6e:1a:d6:71:a1:a1:a6:44:fd:95:71:
47:e4:80:88:9e:22:a3:62:8c:05:7c:93:52:20:c6:
50:90:7f:5f:59:2f:22:88:49:28:ab:7a:48:ed:83:
0f:31:56:48:4f:ff:d3:67:7e:5e:00:ed:02:e2:fe:
2c:e6:67:b4:42:dc:67:ea:18:6e:26:4f:20:66:1e:
b5:58:b2:84:aa:cc:6a:b1:ab:be:41:40:6a:55:ee:
ae:ea:f5:7f:22:37:22:6e:57:56:1f:5d:36:b8:2a:
ce:53:fa:71:e4:34:c2:c9:9b:4d:fd:90:93:65:5c:
31:b9:68:8e:5a:70:18:67:4b:2a:2f:64:41:1f:e0:
36:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:74:72:B5:C6:69:20:D4:8E:49:E4:69:E8:02:CB:B3:94:2E:55:6E
X509v3 Authority Key Identifier:
keyid:01:C3:52:11:8F:D5:F7:54:54:CF:C6:1B:E6:1A:42:AB:EF:4D:C4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:5c:64:59:5d:89:1a:0c:2f:57:a4:ca:54:b5:ae:5a:27:cd:
c3:7e:f5:b4:33:14:c2:ff:20:78:10:49:48:17:21:b7:de:cc:
db:ac:9e:d5:94:26:85:b3:85:51:79:74:14:dc:15:bd:85:8c:
52:d3:3a:b4:61:b6:d9:22:81:f9:14:3f:a9:1a:9e:45:ef:61:
37:a4:ca:3d:97:46:fc:fe:d7:b8:02:ac:ea:60:37:08:60:74:
f1:68:ec:09:92:b6:ed:6e:48:32:9c:f4:7f:09:40:1b:ac:81:
6c:7e:7d:a4:3b:5d:27:6f:a9:28:3e:0c:c1:0a:85:c4:40:00:
fc:13:27:25:39:90:0c:07:32:3a:cd:ad:3c:44:63:3f:9e:83:
2f:58:c3:8a:d7:76:b2:0b:63:cf:7a:75:1d:cb:eb:1b:e6:55:
22:8a:4e:65:7b:b4:e1:a4:55:0a:91:3d:bc:3e:9c:8b:08:a5:
21:23:27:ee:f0:67:db:10:da:00:9a:cf:3f:cd:d5:21:9d:f5:
ee:d3:43:ba:16:11:2b:d1:32:d3:be:ec:70:56:9b:e3:ad:71:
29:92:8a:56:74:d5:b4:5e:df:85:69:1a:06:01:f8:bd:74:94:
08:69:7b:d4:63:f8:b0:73:ad:c9:46:f2:6f:da:f8:9e:84:3f:
02:39:8c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:00:18 2025 by rpki-client