This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft File: ACzThauQKWJxijm7ez7JmqQE5cA.mft (raw, json) Hash identifier: sWUCzWOAoq2G6ylf7TkwYPNMi0x/L1ortbf+gKOkMC0= Subject key identifier: 10:F3:D6:29:01:39:13:4E:DA:00:71:CA:D3:18:DA:38:FF:34:2E:C4 Authority key identifier: 00:2C:D3:85:AB:90:29:62:71:8A:39:BB:7B:3E:C9:9A:A4:04:E5:C0 Certificate issuer: /CN=002cd385ab902962718a39bb7b3ec99aa404e5c0 Certificate serial: 019B4DE08F614160F403B772DAB9CE9EECFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft Manifest number: 0B22 Signing time: Wed 24 Dec 2025 01:02:00 +0000 Manifest this update: Wed 24 Dec 2025 01:02:00 +0000 Manifest next update: Thu 25 Dec 2025 01:02:00 +0000 Files and hashes: 1: ACzThauQKWJxijm7ez7JmqQE5cA.crl (hash: 8sz90dgv1nwKIVOqDO0u/tM7tOXnyUg+TkMwJ9D+0/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e0:8f:61:41:60:f4:03:b7:72:da:b9:ce:9e:ec:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=002cd385ab902962718a39bb7b3ec99aa404e5c0 Validity Not Before: Dec 24 01:02:00 2025 GMT Not After : Dec 25 01:02:00 2025 GMT Subject: CN=10f3d6290139134eda0071cad318da38ff342ec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:43:12:85:64:65:44:d3:89:5d:fd:e7:c2:c4: ad:1c:46:d4:e3:01:a8:69:df:e2:24:69:dd:14:28: af:f0:c4:ce:66:cb:09:9b:3e:93:ba:82:2e:5b:63: 68:c7:46:5c:60:b7:eb:69:82:d4:2b:24:3d:1c:ca: 5b:11:dd:ba:50:22:8d:b8:45:64:10:09:29:cf:5e: 58:d4:04:42:74:78:78:1a:0e:18:b2:7e:b2:13:c5: 89:08:e5:67:bc:cd:19:9a:b3:7d:6e:8b:eb:36:d7: 85:5a:00:e8:bf:fc:d7:99:64:e6:cf:20:38:56:66: b3:80:f2:fd:82:26:32:db:b9:44:50:04:06:7d:a2: 49:76:d8:f2:d8:8a:57:37:c3:36:25:82:b8:15:f0: 4a:31:74:8b:7b:80:07:a1:75:8b:25:16:bb:99:ea: b3:8d:9d:42:38:28:93:26:03:4d:ba:9c:4d:e5:f7: f8:9f:02:8e:77:48:b1:72:ac:df:e7:3e:a9:ce:04: 14:2f:15:eb:2b:a3:26:f2:e0:c1:c0:c2:94:a0:da: 75:c8:11:c7:1d:ce:1c:66:54:c7:8f:97:cd:19:35: f6:81:ff:c4:ea:38:44:f6:74:ea:c7:d8:ba:d3:c5: 23:c7:2e:f3:20:45:59:d9:14:bf:5c:14:b1:44:13: 14:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F3:D6:29:01:39:13:4E:DA:00:71:CA:D3:18:DA:38:FF:34:2E:C4 X509v3 Authority Key Identifier: keyid:00:2C:D3:85:AB:90:29:62:71:8A:39:BB:7B:3E:C9:9A:A4:04:E5:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:83:49:fd:f9:6d:60:96:1f:7a:46:e1:06:d1:ec:c4:40:74: e2:4a:be:43:3c:b6:1a:0d:61:c0:f4:af:dc:57:4f:8a:d2:25: 41:68:b7:a4:fd:67:51:96:a3:70:7b:1f:5b:54:d6:ab:d8:c4: 0c:82:be:58:4b:90:20:a7:6a:fe:0d:19:14:69:8e:0a:28:04: c8:b5:ab:47:27:86:ea:13:e6:29:92:41:fe:84:53:c4:82:0a: 61:4d:a7:cf:04:22:31:6f:05:dc:51:e5:22:a8:74:1e:8f:b0: 46:ea:9f:87:9f:04:72:e3:7d:19:3a:e8:95:1b:a2:83:91:00: 86:d6:c9:75:72:b2:c6:99:a7:2f:4d:d3:07:49:27:93:e6:2c: 63:74:84:19:93:8d:a0:5c:5e:1b:01:54:e7:1e:9b:21:5c:5a: af:f1:64:6f:17:85:bf:84:8f:88:89:2c:9d:e2:3a:c6:eb:6c: 37:e7:0d:d2:82:71:bc:a3:16:2d:dd:03:50:94:1f:10:99:e7: ea:6b:27:49:b7:91:0e:f3:dc:30:e2:ef:f3:64:2c:28:33:e6: 20:6c:77:79:98:a8:ed:31:fb:84:9a:ab:73:72:e2:f7:0d:ab: fb:01:88:b9:31:5d:b9:da:0e:e0:8a:24:af:75:d9:59:95:00: 4d:ed:48:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4I9hQWD0A7dy2rnOnuz8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMmNkMzg1YWI5MDI5NjI3MThhMzliYjdiM2VjOTlhYTQw NGU1YzAwHhcNMjUxMjI0MDEwMjAwWhcNMjUxMjI1MDEwMjAwWjAzMTEwLwYDVQQD EygxMGYzZDYyOTAxMzkxMzRlZGEwMDcxY2FkMzE4ZGEzOGZmMzQyZWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkMShWRlRNOJXf3nwsStHEbU4wGo ad/iJGndFCiv8MTOZssJmz6TuoIuW2Nox0ZcYLfraYLUKyQ9HMpbEd26UCKNuEVk EAkpz15Y1ARCdHh4Gg4Ysn6yE8WJCOVnvM0ZmrN9bovrNteFWgDov/zXmWTmzyA4 VmazgPL9giYy27lEUAQGfaJJdtjy2IpXN8M2JYK4FfBKMXSLe4AHoXWLJRa7meqz jZ1COCiTJgNNupxN5ff4nwKOd0ixcqzf5z6pzgQULxXrK6Mm8uDBwMKUoNp1yBHH Hc4cZlTHj5fNGTX2gf/E6jhE9nTqx9i608Ujxy7zIEVZ2RS/XBSxRBMU0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBDz1ikBORNO2gBxytMY2jj/NC7EMB8GA1UdIwQY MBaAFAAs04WrkClicYo5u3s+yZqkBOXAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUN6VGhhdVFLV0p4aWptN2V6N0ptcVFFNWNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9jZjVmMzAtZTdkMC00YWQzLTg5ODct ZTIzNWQ5MGY2NDcxLzEvQUN6VGhhdVFLV0p4aWptN2V6N0ptcVFFNWNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9jZjVmMzAtZTdkMC00YWQzLTg5ODctZTIzNWQ5MGY2NDcx LzEvQUN6VGhhdVFLV0p4aWptN2V6N0ptcVFFNWNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf4NJ/flt YJYfekbhBtHsxEB04kq+Qzy2Gg1hwPSv3FdPitIlQWi3pP1nUZajcHsfW1TWq9jE DIK+WEuQIKdq/g0ZFGmOCigEyLWrRyeG6hPmKZJB/oRTxIIKYU2nzwQiMW8F3FHl Iqh0Ho+wRuqfh58EcuN9GTrolRuig5EAhtbJdXKyxpmnL03TB0knk+YsY3SEGZON oFxeGwFU5x6bIVxar/FkbxeFv4SPiIksneI6xutsN+cN0oJxvKMWLd0DUJQfEJnn 6msnSbeRDvPcMOLv82QsKDPmIGx3eZio7TH7hJqrc3Li9w2r+wGIuTFdudoO4Iok r3XZWZUATe1IVg== -----END CERTIFICATE-----Generated at Wed Dec 24 04:44:58 2025 by rpki-client