This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft File: AcvG50Tu-cAWdAHVbB-TgO72SUg.mft (raw, json) Hash identifier: ifAJpAJBC/Juv/BloidUO0rT3iD17ySw1vGLgdV2yqE= Subject key identifier: BB:4C:3B:62:F0:85:83:ED:79:BA:6A:58:42:94:26:5B:CE:9E:AE:2E Authority key identifier: 01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48 Certificate issuer: /CN=01cbc6e744eef9c0167401d56c1f9380eef64948 Certificate serial: 019B3B3459B4714D40A31D0CDA91D017A2EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft Manifest number: 0612 Signing time: Sat 20 Dec 2025 10:00:45 +0000 Manifest this update: Sat 20 Dec 2025 10:00:45 +0000 Manifest next update: Sun 21 Dec 2025 10:00:45 +0000 Files and hashes: 1: AcvG50Tu-cAWdAHVbB-TgO72SUg.crl (hash: +ixVCGAE25vBFd0WeRFjrBqLyzHYfuSJP1nA9/CHHTk=) 2: BX2JPGJy6RMaPcWuXvWlFqwNrIA.roa (hash: u+UX2pAd1eP7HJXW9NY0JTLVGtLaRb7rjxt8LHxvOj8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:59:b4:71:4d:40:a3:1d:0c:da:91:d0:17:a2:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01cbc6e744eef9c0167401d56c1f9380eef64948 Validity Not Before: Dec 20 10:00:45 2025 GMT Not After : Dec 21 10:00:45 2025 GMT Subject: CN=bb4c3b62f08583ed79ba6a584294265bce9eae2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:dc:19:52:4e:fa:55:df:1f:8f:06:ec:d0:45: 15:01:6d:b9:fa:66:68:eb:45:6b:f9:50:b4:04:03: a5:43:36:b1:87:a6:35:0a:7e:d1:4a:97:03:51:91: ad:03:f6:9e:b6:f7:e3:e7:8a:8d:ad:07:1a:a0:9f: 69:9b:1f:78:30:69:94:88:9d:92:84:a5:b1:5f:44: dd:18:44:34:72:5d:11:d6:07:38:fe:35:19:dd:7b: ea:33:ae:5f:be:7b:07:79:b9:88:5c:c2:5a:fd:4e: f2:57:f8:f6:61:c5:52:a2:8f:de:9c:c8:f7:5d:7c: 09:fc:21:fc:4c:0a:27:0a:61:5b:cc:08:c4:14:71: c5:0d:18:82:73:6a:18:61:ba:55:76:85:79:78:84: fd:59:45:a2:29:94:b8:18:7a:61:92:9b:bd:67:fb: 13:87:5f:5b:71:78:cf:ca:c1:75:01:6c:a0:70:2a: 19:2a:6a:f0:62:6d:df:4b:f1:04:c1:d9:87:4c:a6: ae:bb:53:d4:21:1a:87:c1:3a:35:72:7a:80:3b:90: 43:c9:8a:25:8d:77:e7:12:ab:f3:00:e9:5f:cf:f0: 5a:4f:f3:78:6a:0e:0b:c4:ca:e8:fb:f4:ad:5f:af: 34:b5:49:6a:41:79:12:c4:5d:6d:5d:f4:c5:bd:f2: c2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:4C:3B:62:F0:85:83:ED:79:BA:6A:58:42:94:26:5B:CE:9E:AE:2E X509v3 Authority Key Identifier: keyid:01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:6e:94:d1:16:ce:be:84:64:ae:f3:41:a7:d6:05:b1:9f:6c: 5c:0e:1f:c3:4d:d1:4e:e9:11:c2:11:9d:22:4f:39:45:0a:bc: 34:90:5c:9d:01:e6:eb:63:2e:af:8e:41:08:03:f7:99:4a:31: 97:76:f5:47:90:4a:14:7d:dc:47:ab:a0:9d:d1:50:dc:28:ec: cf:32:c9:07:65:cb:28:a6:e2:57:6b:52:ac:1e:af:86:74:78: e4:ff:f4:02:6e:47:e9:85:8f:5f:94:4e:03:88:2a:c2:fe:1e: e7:f4:b8:41:97:37:66:26:c2:12:0c:c3:8b:86:bd:e1:9e:e9: 86:65:d4:e9:79:a6:ac:b0:7f:fe:68:e4:c6:d8:7b:ce:7a:51: 53:53:42:7b:45:8e:7a:22:8b:d8:11:a5:ab:8b:25:db:3f:12: 1b:8f:a5:d3:3b:9e:99:4c:b2:ce:44:8d:c2:16:4f:6f:11:b0: a0:de:db:db:57:ce:2f:a8:4a:0a:38:ca:90:66:f6:28:a0:6b: 33:4d:83:54:1d:3a:73:84:5c:9a:bb:26:88:a1:d4:cd:9f:2a: 77:c5:66:b3:a8:81:4f:9b:21:ed:d9:5c:b3:03:bb:2b:e9:6c: 11:15:eb:ff:57:4c:78:fd:dc:70:79:0e:94:09:8a:e3:22:39: c9:70:5a:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NFm0cU1Aox0M2pHQF6LvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxY2JjNmU3NDRlZWY5YzAxNjc0MDFkNTZjMWY5MzgwZWVm NjQ5NDgwHhcNMjUxMjIwMTAwMDQ1WhcNMjUxMjIxMTAwMDQ1WjAzMTEwLwYDVQQD EyhiYjRjM2I2MmYwODU4M2VkNzliYTZhNTg0Mjk0MjY1YmNlOWVhZTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttwZUk76Vd8fjwbs0EUVAW25+mZo 60Vr+VC0BAOlQzaxh6Y1Cn7RSpcDUZGtA/aetvfj54qNrQcaoJ9pmx94MGmUiJ2S hKWxX0TdGEQ0cl0R1gc4/jUZ3XvqM65fvnsHebmIXMJa/U7yV/j2YcVSoo/enMj3 XXwJ/CH8TAonCmFbzAjEFHHFDRiCc2oYYbpVdoV5eIT9WUWiKZS4GHphkpu9Z/sT h19bcXjPysF1AWygcCoZKmrwYm3fS/EEwdmHTKauu1PUIRqHwTo1cnqAO5BDyYol jXfnEqvzAOlfz/BaT/N4ag4LxMro+/StX680tUlqQXkSxF1tXfTFvfLC6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLtMO2LwhYPtebpqWEKUJlvOnq4uMB8GA1UdIwQY MBaAFAHLxudE7vnAFnQB1Wwfk4Du9klIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWN2RzUwVHUtY0FXZEFIVmJCLVRnTzcyU1VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mNDkzYzYtMTAzYy00ZDc5LTlhZTIt OWUyZGEzN2I0MTllLzEvQWN2RzUwVHUtY0FXZEFIVmJCLVRnTzcyU1VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9mNDkzYzYtMTAzYy00ZDc5LTlhZTItOWUyZGEzN2I0MTll LzEvQWN2RzUwVHUtY0FXZEFIVmJCLVRnTzcyU1VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiW6U0RbO voRkrvNBp9YFsZ9sXA4fw03RTukRwhGdIk85RQq8NJBcnQHm62Mur45BCAP3mUox l3b1R5BKFH3cR6ugndFQ3CjszzLJB2XLKKbiV2tSrB6vhnR45P/0Am5H6YWPX5RO A4gqwv4e5/S4QZc3ZibCEgzDi4a94Z7phmXU6XmmrLB//mjkxth7znpRU1NCe0WO eiKL2BGlq4sl2z8SG4+l0zuemUyyzkSNwhZPbxGwoN7b21fOL6hKCjjKkGb2KKBr M02DVB06c4RcmrsmiKHUzZ8qd8Vms6iBT5sh7dlcswO7K+lsERXr/1dMeP3ccHkO lAmK4yI5yXBa6A== -----END CERTIFICATE-----Generated at Sat Dec 20 12:07:30 2025 by rpki-client