This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft File: AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft (raw, json) Hash identifier: Y5e4+DoYfae9Y5KEbsQDsz6zARtrkw9hcOfxFE6tDz0= Subject key identifier: F5:68:F6:F3:99:C5:49:7C:91:11:0C:87:26:9E:7B:14:16:A7:CB:E4 Authority key identifier: 01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29 Certificate issuer: /CN=01c2863a6438b3402752a4740e90ce42eb589129 Certificate serial: 019B3B6B3DBDC59A3A57012D05473EABE08D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft Manifest number: 111D Signing time: Sat 20 Dec 2025 11:00:42 +0000 Manifest this update: Sat 20 Dec 2025 11:00:42 +0000 Manifest next update: Sun 21 Dec 2025 11:00:42 +0000 Files and hashes: 1: AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl (hash: Heu19MJ/rBEdzn7vH0f8CbxNuDvUd6D1o04JQ/ISDks=) 2: DVOzFfjLRaTUZyMinPqbQ4S_9DE.roa (hash: W1flvtqrAEaVVbhIS1vtvgxbygP7i6aEq71rS+R0/KY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:3d:bd:c5:9a:3a:57:01:2d:05:47:3e:ab:e0:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01c2863a6438b3402752a4740e90ce42eb589129 Validity Not Before: Dec 20 11:00:42 2025 GMT Not After : Dec 21 11:00:42 2025 GMT Subject: CN=f568f6f399c5497c91110c87269e7b1416a7cbe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:59:21:ab:10:e2:b6:e7:ab:8b:96:0b:b7:7f: 4b:a6:24:79:5b:67:6d:d9:4b:7a:1c:15:70:57:96: 1f:2f:3e:92:f8:21:60:f7:a9:4c:33:a9:57:d3:4e: 96:e2:d6:bb:2c:bd:a5:51:a5:fb:e7:42:85:e9:2e: 32:58:ac:69:20:d2:11:ac:c4:b3:2c:5d:d1:3b:cd: b4:0f:09:c2:fd:73:ff:cd:c0:4d:f2:27:eb:12:01: dc:c4:4d:70:ca:60:93:cd:ae:8d:1b:35:68:95:03: de:4f:56:e3:8e:cf:bc:b7:50:a2:cb:a3:cc:ce:a8: 03:00:3a:d6:ec:c3:57:89:51:7d:98:7a:0b:51:43: 8c:28:04:55:f3:7e:06:b7:b1:f3:de:14:42:ca:d0: 79:59:6b:4d:43:b2:1d:d0:95:70:92:19:a9:8f:94: 77:cb:6e:7a:f0:2f:93:98:20:5e:f8:c7:2b:d5:b3: 90:07:2b:4a:68:be:28:df:87:23:31:c6:a1:65:f9: 86:79:c0:79:7d:ed:f4:86:43:73:a2:04:da:b2:45: 54:f9:2d:20:d2:04:29:87:fd:32:c4:f0:01:bd:96: af:75:d7:78:4c:5d:63:ed:6a:9d:06:ab:19:40:8d: 06:30:02:e0:e9:dd:9d:4a:d5:86:ed:21:93:1f:1f: f3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:68:F6:F3:99:C5:49:7C:91:11:0C:87:26:9E:7B:14:16:A7:CB:E4 X509v3 Authority Key Identifier: keyid:01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:68:e1:f8:ac:98:6f:7c:82:c3:56:15:01:6c:a0:26:2d:67: 93:e0:9c:8d:5b:6b:b4:fe:fa:d9:00:ff:dd:f0:b7:e4:d0:4c: 44:37:9e:ea:45:21:e3:e0:ab:87:68:68:cb:c4:ad:e4:af:5c: 85:3c:5e:81:0a:1a:27:7c:91:ea:80:5a:b6:30:92:05:b1:c9: 84:8b:c9:8a:01:d5:20:30:3d:6e:f5:5e:b4:2b:e8:31:51:f0: 2f:a4:c7:97:82:70:da:1a:67:a9:58:05:87:83:50:20:06:97: eb:59:bf:f4:7f:bb:31:04:c1:93:ee:76:36:c9:8a:ab:34:d9: 24:35:7a:f1:ce:2e:2f:b3:77:ff:fc:99:9c:ad:90:49:0c:d0: 7c:c0:b7:c6:b0:e4:88:12:ff:66:c2:43:79:63:c5:28:27:d0: b1:84:0a:bb:ab:2c:2c:74:a6:fc:e7:1f:3a:2a:cb:2c:d7:7a: 84:10:7c:25:48:75:87:98:db:5a:ac:19:40:23:ce:36:d8:90: 39:ca:85:9a:1f:c3:02:51:14:eb:38:c5:64:5a:d9:a9:98:81: 4f:50:34:46:38:e8:ce:86:1d:84:5a:84:25:b8:50:0e:d0:5e: 0c:45:1e:8a:6f:a1:5f:db:e8:89:79:b3:db:ec:85:11:aa:77: 66:77:60:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7az29xZo6VwEtBUc+q+CNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxYzI4NjNhNjQzOGIzNDAyNzUyYTQ3NDBlOTBjZTQyZWI1 ODkxMjkwHhcNMjUxMjIwMTEwMDQyWhcNMjUxMjIxMTEwMDQyWjAzMTEwLwYDVQQD EyhmNTY4ZjZmMzk5YzU0OTdjOTExMTBjODcyNjllN2IxNDE2YTdjYmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVkhqxDitueri5YLt39LpiR5W2dt 2Ut6HBVwV5YfLz6S+CFg96lMM6lX006W4ta7LL2lUaX750KF6S4yWKxpINIRrMSz LF3RO820DwnC/XP/zcBN8ifrEgHcxE1wymCTza6NGzVolQPeT1bjjs+8t1Ciy6PM zqgDADrW7MNXiVF9mHoLUUOMKARV834Gt7Hz3hRCytB5WWtNQ7Id0JVwkhmpj5R3 y2568C+TmCBe+Mcr1bOQBytKaL4o34cjMcahZfmGecB5fe30hkNzogTaskVU+S0g 0gQph/0yxPABvZavddd4TF1j7WqdBqsZQI0GMALg6d2dStWG7SGTHx/z0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPVo9vOZxUl8kREMhyaeexQWp8vkMB8GA1UdIwQY MBaAFAHChjpkOLNAJ1KkdA6QzkLrWJEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWNLR09tUTRzMEFuVXFSMERwRE9RdXRZa1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yNTIzN2UtY2U2YS00MzAyLWI2YTQt YjU0MDU4MzRmMGM1LzEvQWNLR09tUTRzMEFuVXFSMERwRE9RdXRZa1NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8yNTIzN2UtY2U2YS00MzAyLWI2YTQtYjU0MDU4MzRmMGM1 LzEvQWNLR09tUTRzMEFuVXFSMERwRE9RdXRZa1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASmjh+KyY b3yCw1YVAWygJi1nk+CcjVtrtP762QD/3fC35NBMRDee6kUh4+Crh2hoy8St5K9c hTxegQoaJ3yR6oBatjCSBbHJhIvJigHVIDA9bvVetCvoMVHwL6THl4Jw2hpnqVgF h4NQIAaX61m/9H+7MQTBk+52NsmKqzTZJDV68c4uL7N3//yZnK2QSQzQfMC3xrDk iBL/ZsJDeWPFKCfQsYQKu6ssLHSm/OcfOirLLNd6hBB8JUh1h5jbWqwZQCPONtiQ OcqFmh/DAlEU6zjFZFrZqZiBT1A0RjjozoYdhFqEJbhQDtBeDEUeim+hX9voiXmz 2+yFEap3Zndgpg== -----END CERTIFICATE-----Generated at Sat Dec 20 19:48:56 2025 by rpki-client