This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft File: AcOKBqObILjaQACSN9dqzdKOcaU.mft (raw, json) Hash identifier: CewinnjqgsQ1pNDHwsAo3JLKS7GpYEmqqnd1i2RftOE= Subject key identifier: 20:BF:0E:B0:BA:B0:BC:DA:B4:B1:93:04:3D:66:9B:66:65:6D:FB:CF Authority key identifier: 01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5 Certificate issuer: /CN=01c38a06a39b20b8da40009237d76acdd28e71a5 Certificate serial: 019AF31BABA769BDE0AC8E240A7FFDBD5689 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft Manifest number: 178F Signing time: Sat 06 Dec 2025 10:01:08 +0000 Manifest this update: Sat 06 Dec 2025 10:01:08 +0000 Manifest next update: Sun 07 Dec 2025 10:01:08 +0000 Files and hashes: 1: 5GwPbo7__4TJOwvRCe73j2O6xPU.roa (hash: 24uofXG+x5P8v+OHdd1JuXbfxl5UDoLkFS3hRtXAGVU=) 2: AcOKBqObILjaQACSN9dqzdKOcaU.crl (hash: k918lb2o4xfCwKS1V8TUy42Qd4M++nEAVIXJfsdDD3s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:ab:a7:69:bd:e0:ac:8e:24:0a:7f:fd:bd:56:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01c38a06a39b20b8da40009237d76acdd28e71a5 Validity Not Before: Dec 6 10:01:08 2025 GMT Not After : Dec 7 10:01:08 2025 GMT Subject: CN=20bf0eb0bab0bcdab4b193043d669b66656dfbcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:cc:2b:3e:03:9d:dd:1b:3b:e4:67:f1:e9:4d: 38:05:0b:56:73:8f:6c:32:d7:80:cf:fd:05:7a:99: f1:eb:a4:e6:e0:d6:18:1d:07:0c:01:3e:66:8f:e9: b1:88:bd:43:38:fc:7c:50:0c:a5:df:96:f1:e9:13: 77:f0:6e:e8:86:17:da:11:a4:f3:d8:23:44:9a:cf: 8c:f3:48:1f:cf:40:74:5f:8c:84:88:bf:f7:38:e5: 16:a8:3c:a5:3d:5b:3b:dd:7f:d2:3a:d9:63:50:fc: 97:1e:c3:40:e3:2c:f1:e7:67:33:20:55:17:6c:91: 14:7e:d5:77:5c:89:f0:41:ec:78:56:88:dd:41:f9: a7:2a:37:89:26:d9:3f:91:6d:68:6a:ad:e3:75:d4: 23:03:8c:66:53:5b:b0:ba:8d:1d:7a:2d:aa:d7:40: 2f:27:02:93:1d:60:cf:35:ff:6a:89:7f:db:e2:55: 3f:16:91:bf:3c:f2:23:54:3b:80:08:56:9b:9d:7d: 99:b5:77:48:0c:67:d8:f3:3a:04:31:45:9f:53:ae: 5e:6f:b2:29:49:20:53:a9:5f:34:87:dd:18:0c:20: ba:7e:82:69:95:72:c2:ad:ad:1d:d4:37:48:33:f0: b1:37:ef:9b:6e:00:f1:d4:b1:6d:f1:cf:9c:5a:60: 84:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:BF:0E:B0:BA:B0:BC:DA:B4:B1:93:04:3D:66:9B:66:65:6D:FB:CF X509v3 Authority Key Identifier: keyid:01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:5f:0a:f6:af:28:ad:43:32:21:d2:d9:15:13:7e:ec:31:b8: 17:d0:90:40:3c:57:2b:be:04:66:84:1c:6b:5d:cb:bf:f1:cb: 4f:d6:fe:7d:ec:3c:09:6d:93:79:17:69:60:28:21:37:af:c3: 1f:ad:56:06:90:70:f5:cc:6c:6c:af:16:6f:3a:72:80:b4:35: 00:b1:ff:fc:87:d2:b8:44:29:5b:9c:aa:3c:50:26:4e:72:3f: e3:9f:0b:d7:9a:ef:f6:02:20:41:97:0b:ad:2f:ed:bb:24:a3: 76:7b:08:3e:bc:89:6e:4e:97:02:17:22:ec:e9:b1:14:a4:16: af:30:71:51:18:7a:07:36:14:65:15:4d:f2:97:19:be:a8:cf: df:6b:87:6d:11:a4:7a:5d:6c:94:ae:4e:75:2f:56:cd:31:91: 03:83:60:75:ab:4d:d0:25:91:f4:ca:ba:16:45:62:e2:11:4c: e7:89:eb:dc:6b:45:05:af:de:af:71:d6:75:eb:cc:51:3e:a8: 01:2d:20:61:d7:f7:44:14:8d:d5:6b:fd:7f:06:b6:e9:f3:86: d9:a7:34:4f:3d:a7:05:6f:5a:ad:88:00:8b:1e:94:55:ea:92: 04:df:80:c8:c8:4f:d3:20:52:21:c9:3a:92:85:59:a6:0c:f9: 8c:75:ad:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG6unab3grI4kCn/9vVaJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxYzM4YTA2YTM5YjIwYjhkYTQwMDA5MjM3ZDc2YWNkZDI4 ZTcxYTUwHhcNMjUxMjA2MTAwMTA4WhcNMjUxMjA3MTAwMTA4WjAzMTEwLwYDVQQD EygyMGJmMGViMGJhYjBiY2RhYjRiMTkzMDQzZDY2OWI2NjY1NmRmYmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18wrPgOd3Rs75Gfx6U04BQtWc49s MteAz/0Fepnx66Tm4NYYHQcMAT5mj+mxiL1DOPx8UAyl35bx6RN38G7ohhfaEaTz 2CNEms+M80gfz0B0X4yEiL/3OOUWqDylPVs73X/SOtljUPyXHsNA4yzx52czIFUX bJEUftV3XInwQex4VojdQfmnKjeJJtk/kW1oaq3jddQjA4xmU1uwuo0dei2q10Av JwKTHWDPNf9qiX/b4lU/FpG/PPIjVDuACFabnX2ZtXdIDGfY8zoEMUWfU65eb7Ip SSBTqV80h90YDCC6foJplXLCra0d1DdIM/CxN++bbgDx1LFt8c+cWmCE1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCC/DrC6sLzatLGTBD1mm2ZlbfvPMB8GA1UdIwQY MBaAFAHDigajmyC42kAAkjfXas3SjnGlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWNPS0JxT2JJTGphUUFDU045ZHF6ZEtPY2FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS82YThlNWUtMzliNi00N2UzLWJiYjAt YjI5ZjEwY2MwMzI4LzEvQWNPS0JxT2JJTGphUUFDU045ZHF6ZEtPY2FVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS82YThlNWUtMzliNi00N2UzLWJiYjAtYjI5ZjEwY2MwMzI4 LzEvQWNPS0JxT2JJTGphUUFDU045ZHF6ZEtPY2FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmF8K9q8o rUMyIdLZFRN+7DG4F9CQQDxXK74EZoQca13Lv/HLT9b+few8CW2TeRdpYCghN6/D H61WBpBw9cxsbK8WbzpygLQ1ALH//IfSuEQpW5yqPFAmTnI/458L15rv9gIgQZcL rS/tuySjdnsIPryJbk6XAhci7OmxFKQWrzBxURh6BzYUZRVN8pcZvqjP32uHbRGk el1slK5OdS9WzTGRA4NgdatN0CWR9Mq6FkVi4hFM54nr3GtFBa/er3HWdevMUT6o AS0gYdf3RBSN1Wv9fwa26fOG2ac0Tz2nBW9arYgAix6UVeqSBN+AyMhP0yBSIck6 koVZpgz5jHWt5g== -----END CERTIFICATE-----Generated at Sat Dec 6 14:03:52 2025 by rpki-client