This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft File: AclpL7GkCf800a87grjj2mRnXDI.mft (raw, json) Hash identifier: pI6aOZodi9yD2SaAwCv1HnXJboFSi/ciY3XzGNDjOzw= Subject key identifier: 6C:3F:49:23:11:63:59:92:C0:C9:3F:A6:73:7B:A7:DA:CE:26:B9:4B Authority key identifier: 01:C9:69:2F:B1:A4:09:FF:34:D1:AF:3B:82:B8:E3:DA:64:67:5C:32 Certificate issuer: /CN=01c9692fb1a409ff34d1af3b82b8e3da64675c32 Certificate serial: 019B2D0BD2636207A43CEE87F25A6DB42417 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft Manifest number: 0CF5 Signing time: Wed 17 Dec 2025 16:01:48 +0000 Manifest this update: Wed 17 Dec 2025 16:01:48 +0000 Manifest next update: Thu 18 Dec 2025 16:01:48 +0000 Files and hashes: 1: AclpL7GkCf800a87grjj2mRnXDI.crl (hash: ggRtDA3xFSWS0lSVcTRA2gfPZglcLQYrSzUnbLbVRxA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.crl rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 16:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:d2:63:62:07:a4:3c:ee:87:f2:5a:6d:b4:24:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01c9692fb1a409ff34d1af3b82b8e3da64675c32 Validity Not Before: Dec 17 16:01:48 2025 GMT Not After : Dec 18 16:01:48 2025 GMT Subject: CN=6c3f492311635992c0c93fa6737ba7dace26b94b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:20:d7:5e:37:40:97:8c:17:9e:4c:ae:06:40: 3b:f3:fe:86:0f:83:6f:b7:87:41:42:08:ca:fb:56: 76:d1:c4:57:a1:12:a5:c6:26:f1:e6:4a:64:bd:6c: 5c:c9:4b:d7:c0:82:c6:6b:f7:a9:f7:40:b9:16:ac: d0:b1:77:bc:d5:0d:4f:84:81:b2:58:01:28:e3:c4: f1:a6:13:3b:22:cb:fc:52:5e:18:c1:7c:98:b1:9f: f8:93:ee:7e:89:56:03:b5:d9:0c:05:c9:c6:68:4b: 72:95:6f:de:07:ef:d9:73:55:e3:19:9f:32:8c:73: 23:1b:a5:6a:61:9b:6a:1a:58:54:df:dd:21:87:9a: 48:18:7c:a7:17:e4:31:43:51:de:48:73:73:62:43: 62:b7:fa:0d:8f:2b:44:79:ad:4a:a9:31:c3:77:ea: ba:9a:74:62:0d:9b:84:b7:1e:4d:7d:82:1c:d0:57: 09:c1:6d:7a:ca:9b:34:be:a2:64:60:75:46:8a:eb: d6:02:23:10:36:2a:88:3e:fd:05:a3:42:23:f9:ad: 8f:94:35:54:a3:dc:48:80:0e:56:22:ad:33:86:a5: 3f:d9:74:e7:ff:de:1b:0f:e9:b2:77:d0:f6:26:00: 75:d4:43:d3:4f:de:9a:dd:50:c5:53:fe:a2:25:e3: b1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:3F:49:23:11:63:59:92:C0:C9:3F:A6:73:7B:A7:DA:CE:26:B9:4B X509v3 Authority Key Identifier: keyid:01:C9:69:2F:B1:A4:09:FF:34:D1:AF:3B:82:B8:E3:DA:64:67:5C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:a3:90:df:3d:fb:62:2d:c2:e0:10:62:4f:57:3d:86:20:23: 50:00:f6:75:22:c8:f0:33:53:9a:29:ed:03:9d:d3:57:b4:89: 0a:7d:e4:6f:05:36:1b:03:23:a0:fd:8c:fb:c5:17:ea:89:85: e1:a3:9b:88:0e:fd:99:1c:9f:4c:4b:71:c3:7b:83:45:31:ba: 6a:45:c5:f6:49:77:b9:ac:6b:89:fb:96:f4:9d:0f:03:b6:ad: 2e:56:78:99:76:f5:c5:fc:3e:2b:03:74:87:89:be:97:d1:5e: 73:6f:b1:03:1f:a5:39:e5:22:26:cd:50:9b:63:d8:c9:cc:9a: 55:3c:c5:22:dc:b9:dd:9a:8f:cd:38:e7:30:0f:f7:a7:5c:c2: 65:13:5f:ef:70:36:5e:01:b4:a0:35:29:ec:e0:ec:8e:9c:06: 5e:4a:7f:b3:7f:4d:33:67:07:b6:93:a0:37:53:06:39:8e:a9: 51:08:fe:6e:b9:46:fb:49:df:f6:39:66:58:9f:dc:7d:90:cf: 03:d2:f3:92:28:26:9a:bb:d5:79:40:94:ae:0d:20:98:79:34: 92:d4:c7:6f:2f:78:38:f2:91:5e:22:0d:9b:5c:21:c2:d0:bd: fc:61:4d:20:de:9a:c1:2d:e6:ad:de:70:b2:7c:94:8b:7b:2f: d6:d4:46:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstC9JjYgekPO6H8lpttCQXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxYzk2OTJmYjFhNDA5ZmYzNGQxYWYzYjgyYjhlM2RhNjQ2 NzVjMzIwHhcNMjUxMjE3MTYwMTQ4WhcNMjUxMjE4MTYwMTQ4WjAzMTEwLwYDVQQD Eyg2YzNmNDkyMzExNjM1OTkyYzBjOTNmYTY3MzdiYTdkYWNlMjZiOTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCDXXjdAl4wXnkyuBkA78/6GD4Nv t4dBQgjK+1Z20cRXoRKlxibx5kpkvWxcyUvXwILGa/ep90C5FqzQsXe81Q1PhIGy WAEo48TxphM7Isv8Ul4YwXyYsZ/4k+5+iVYDtdkMBcnGaEtylW/eB+/Zc1XjGZ8y jHMjG6VqYZtqGlhU390hh5pIGHynF+QxQ1HeSHNzYkNit/oNjytEea1KqTHDd+q6 mnRiDZuEtx5NfYIc0FcJwW16yps0vqJkYHVGiuvWAiMQNiqIPv0Fo0Ij+a2PlDVU o9xIgA5WIq0zhqU/2XTn/94bD+myd9D2JgB11EPTT96a3VDFU/6iJeOxCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGw/SSMRY1mSwMk/pnN7p9rOJrlLMB8GA1UdIwQY MBaAFAHJaS+xpAn/NNGvO4K449pkZ1wyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWNscEw3R2tDZjgwMGE4N2dyamoybVJuWERJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy82MzBmZWMtZGQ1Ni00NmFjLWEwMzgt ZGRiODkwZDc4ZmU5LzEvQWNscEw3R2tDZjgwMGE4N2dyamoybVJuWERJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy82MzBmZWMtZGQ1Ni00NmFjLWEwMzgtZGRiODkwZDc4ZmU5 LzEvQWNscEw3R2tDZjgwMGE4N2dyamoybVJuWERJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ6OQ3z37 Yi3C4BBiT1c9hiAjUAD2dSLI8DNTmintA53TV7SJCn3kbwU2GwMjoP2M+8UX6omF 4aObiA79mRyfTEtxw3uDRTG6akXF9kl3uaxrifuW9J0PA7atLlZ4mXb1xfw+KwN0 h4m+l9Fec2+xAx+lOeUiJs1Qm2PYycyaVTzFIty53ZqPzTjnMA/3p1zCZRNf73A2 XgG0oDUp7ODsjpwGXkp/s39NM2cHtpOgN1MGOY6pUQj+brlG+0nf9jlmWJ/cfZDP A9LzkigmmrvVeUCUrg0gmHk0ktTHby94OPKRXiINm1whwtC9/GFNIN6awS3mrd5w snyUi3sv1tRGUA== -----END CERTIFICATE-----Generated at Wed Dec 17 23:41:36 2025 by rpki-client