This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft File: ACzThauQKWJxijm7ez7JmqQE5cA.mft (raw, json) Hash identifier: +NWR8ThfjpIBc5yPj5iWEI3BcuIWHINNsJZ2C5t1kFw= Subject key identifier: 45:ED:07:C4:97:2A:CF:84:51:17:23:B1:AD:BA:BD:CB:04:9D:C5:10 Authority key identifier: 00:2C:D3:85:AB:90:29:62:71:8A:39:BB:7B:3E:C9:9A:A4:04:E5:C0 Certificate issuer: /CN=002cd385ab902962718a39bb7b3ec99aa404e5c0 Certificate serial: 019B32D62CDAA2762ABFBF1F15735755BFC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft Manifest number: 0B14 Signing time: Thu 18 Dec 2025 19:00:55 +0000 Manifest this update: Thu 18 Dec 2025 19:00:55 +0000 Manifest next update: Fri 19 Dec 2025 19:00:55 +0000 Files and hashes: 1: ACzThauQKWJxijm7ez7JmqQE5cA.crl (hash: bMQ5qEbw4rhdzr2FU3e1vPtjerZ2kacB+PixZxJhy4E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:2c:da:a2:76:2a:bf:bf:1f:15:73:57:55:bf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=002cd385ab902962718a39bb7b3ec99aa404e5c0 Validity Not Before: Dec 18 19:00:55 2025 GMT Not After : Dec 19 19:00:55 2025 GMT Subject: CN=45ed07c4972acf84511723b1adbabdcb049dc510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cb:8d:de:2d:c6:e3:9f:6d:af:ba:35:26:aa: 6d:8f:c1:0a:fb:ae:b0:d0:3e:81:19:f5:bf:c7:47: d1:f0:9d:fe:1c:4c:86:cb:60:6f:96:de:13:2f:1f: 55:f2:33:7b:1f:6e:06:51:8f:d6:ee:e5:c4:b8:3c: c0:e5:da:93:b3:e1:f2:23:1d:64:6b:3f:81:67:5a: 54:f2:fd:f1:7b:8a:7f:c2:25:f9:0f:d8:8d:4c:6e: 79:76:ae:19:b6:9b:fa:95:d9:ad:0b:3b:a1:b6:20: f2:e0:96:68:05:8c:02:fa:73:4d:9a:56:7d:1e:f0: a2:64:e3:95:e2:0c:ff:f9:b8:80:83:46:a4:4d:6b: 88:84:5b:3f:18:6f:48:40:f2:82:71:5c:55:87:f9: b0:5b:2c:62:8b:a6:a2:b5:5f:06:b4:a3:7f:c2:b4: c0:a7:0c:fc:83:73:33:95:51:11:f5:45:c4:19:f1: 44:d6:e6:77:9e:91:91:f5:cf:17:1c:d8:86:b7:8e: ca:1f:57:3f:81:05:18:d2:b5:14:e7:e0:f5:42:83: 3f:b8:b4:3d:fe:f9:6d:ff:2c:43:21:e0:10:25:5f: 3f:ed:7f:00:0b:dd:87:86:eb:99:0f:94:f5:9e:6a: 1b:cd:a6:ba:42:55:1f:84:8b:7e:ea:92:5b:bf:b3: 7c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:ED:07:C4:97:2A:CF:84:51:17:23:B1:AD:BA:BD:CB:04:9D:C5:10 X509v3 Authority Key Identifier: keyid:00:2C:D3:85:AB:90:29:62:71:8A:39:BB:7B:3E:C9:9A:A4:04:E5:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:e7:0b:37:a8:2a:5b:33:08:26:48:0a:b2:b8:67:36:9e:d7: fb:2d:9d:12:4c:8d:58:aa:d2:6e:c3:50:44:69:4c:27:4c:a3: f9:17:f6:46:86:e6:8e:ed:35:90:00:69:cb:59:c9:b9:5c:3c: 5e:dc:cb:b8:f5:a6:fa:43:a5:1b:a6:8c:9d:43:85:d8:c5:c6: 10:40:30:b8:73:65:76:19:4d:3c:f4:01:7e:3e:98:3b:a8:3d: a1:9a:de:0c:51:7c:cc:92:61:01:74:56:41:1d:81:ab:29:d9: 29:0e:28:96:dc:41:0d:29:09:79:4e:d8:61:ed:00:7b:47:ea: 46:ae:5a:80:f8:6c:8b:94:43:80:ad:25:6f:1e:14:09:f0:4b: f1:16:b3:d7:b9:e8:95:97:9f:5d:de:1a:16:5e:d2:a6:a2:c6: c3:45:c4:fd:1c:6d:f2:5a:ed:33:20:0d:c2:7b:1e:e3:e5:bb: e2:20:61:66:10:2a:d3:69:4c:4f:d2:92:ef:a7:58:01:db:21: 1b:ec:5f:cf:8f:1e:30:47:25:b1:84:cd:c6:b9:f6:3e:c1:9f: fc:fa:fa:fd:6a:08:2d:1c:cc:e1:f5:00:f2:11:26:5d:e2:7d: d5:bd:3a:e5:40:c8:cc:10:ce:02:f3:05:9a:cc:cb:fd:ad:fc: 5c:22:73:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1izaonYqv78fFXNXVb/AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMmNkMzg1YWI5MDI5NjI3MThhMzliYjdiM2VjOTlhYTQw NGU1YzAwHhcNMjUxMjE4MTkwMDU1WhcNMjUxMjE5MTkwMDU1WjAzMTEwLwYDVQQD Eyg0NWVkMDdjNDk3MmFjZjg0NTExNzIzYjFhZGJhYmRjYjA0OWRjNTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0suN3i3G459tr7o1Jqptj8EK+66w 0D6BGfW/x0fR8J3+HEyGy2Bvlt4TLx9V8jN7H24GUY/W7uXEuDzA5dqTs+HyIx1k az+BZ1pU8v3xe4p/wiX5D9iNTG55dq4Ztpv6ldmtCzuhtiDy4JZoBYwC+nNNmlZ9 HvCiZOOV4gz/+biAg0akTWuIhFs/GG9IQPKCcVxVh/mwWyxii6aitV8GtKN/wrTA pwz8g3MzlVER9UXEGfFE1uZ3npGR9c8XHNiGt47KH1c/gQUY0rUU5+D1QoM/uLQ9 /vlt/yxDIeAQJV8/7X8AC92HhuuZD5T1nmobzaa6QlUfhIt+6pJbv7N8aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEXtB8SXKs+EURcjsa26vcsEncUQMB8GA1UdIwQY MBaAFAAs04WrkClicYo5u3s+yZqkBOXAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUN6VGhhdVFLV0p4aWptN2V6N0ptcVFFNWNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9jZjVmMzAtZTdkMC00YWQzLTg5ODct ZTIzNWQ5MGY2NDcxLzEvQUN6VGhhdVFLV0p4aWptN2V6N0ptcVFFNWNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9jZjVmMzAtZTdkMC00YWQzLTg5ODctZTIzNWQ5MGY2NDcx LzEvQUN6VGhhdVFLV0p4aWptN2V6N0ptcVFFNWNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJecLN6gq WzMIJkgKsrhnNp7X+y2dEkyNWKrSbsNQRGlMJ0yj+Rf2Robmju01kABpy1nJuVw8 XtzLuPWm+kOlG6aMnUOF2MXGEEAwuHNldhlNPPQBfj6YO6g9oZreDFF8zJJhAXRW QR2BqynZKQ4oltxBDSkJeU7YYe0Ae0fqRq5agPhsi5RDgK0lbx4UCfBL8Raz17no lZefXd4aFl7SpqLGw0XE/Rxt8lrtMyANwnse4+W74iBhZhAq02lMT9KS76dYAdsh G+xfz48eMEclsYTNxrn2PsGf/Pr6/WoILRzM4fUA8hEmXeJ91b065UDIzBDOAvMF mszL/a38XCJztQ== -----END CERTIFICATE-----Generated at Fri Dec 19 00:11:32 2025 by rpki-client