This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft File: AclpL7GkCf800a87grjj2mRnXDI.mft (raw, json) Hash identifier: jhof+mdRvJXo5dSRWepyp0xrmPtLCUUzYYsWwBTNtEw= Subject key identifier: A0:D3:56:83:6B:F3:A8:B1:75:0C:DF:C6:57:28:2F:CF:0F:F3:9E:D5 Authority key identifier: 01:C9:69:2F:B1:A4:09:FF:34:D1:AF:3B:82:B8:E3:DA:64:67:5C:32 Certificate issuer: /CN=01c9692fb1a409ff34d1af3b82b8e3da64675c32 Certificate serial: 019AF12DA31420379D7D6F2BC392C675CCBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft Manifest number: 0CD6 Signing time: Sat 06 Dec 2025 01:01:31 +0000 Manifest this update: Sat 06 Dec 2025 01:01:31 +0000 Manifest next update: Sun 07 Dec 2025 01:01:31 +0000 Files and hashes: 1: AclpL7GkCf800a87grjj2mRnXDI.crl (hash: Fk7V7b9xVIiPrK8NtwQ9vnfX0FqP/z1O4pPQTsweRyA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.crl rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:a3:14:20:37:9d:7d:6f:2b:c3:92:c6:75:cc:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01c9692fb1a409ff34d1af3b82b8e3da64675c32 Validity Not Before: Dec 6 01:01:31 2025 GMT Not After : Dec 7 01:01:31 2025 GMT Subject: CN=a0d356836bf3a8b1750cdfc657282fcf0ff39ed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3c:60:ad:d8:b3:d9:5a:b8:89:8c:b4:73:b3: e0:d2:c1:e3:d8:2b:f3:99:cf:d3:ba:cf:de:8b:b3: f4:76:25:7a:ca:27:9e:cf:a8:f4:ee:01:48:30:5b: 2f:73:d9:60:bb:42:85:3e:69:1d:b0:d5:c1:67:2a: c7:ba:08:d1:26:23:1b:08:37:1d:2f:c5:01:91:4f: 09:5e:57:47:5a:4f:97:85:6a:a6:54:e7:29:06:c1: 36:a9:30:f8:17:ea:35:97:bc:e4:56:68:b9:1f:8c: 6d:76:a9:cf:8e:3d:45:23:c9:c9:f5:ab:6b:7d:9a: f4:43:75:21:bd:98:cc:53:2e:e2:50:b9:49:8f:b2: 12:96:90:44:95:32:dd:53:9d:38:d9:47:72:08:ab: e2:97:90:51:3f:9b:32:d9:7d:b6:54:b0:d7:06:5c: da:b4:63:f4:c9:a2:c2:0c:23:a0:a3:84:d6:3d:95: fa:ef:78:ff:a8:c6:ce:89:70:72:2a:23:8d:32:cb: aa:25:81:ef:31:de:db:18:65:02:a4:7b:bb:6f:6c: 3e:10:72:4c:8b:2a:d2:ce:cc:5b:03:07:9e:5d:d0: 8c:0b:c9:d4:82:f1:1b:d6:00:26:50:41:11:47:26: 5c:e8:7b:51:c6:7b:79:33:d2:96:c8:a5:a3:c3:9b: a2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D3:56:83:6B:F3:A8:B1:75:0C:DF:C6:57:28:2F:CF:0F:F3:9E:D5 X509v3 Authority Key Identifier: keyid:01:C9:69:2F:B1:A4:09:FF:34:D1:AF:3B:82:B8:E3:DA:64:67:5C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:df:a4:8b:ea:b2:aa:0c:88:e0:b8:df:7b:64:22:ca:dc:7a: 71:b7:67:b5:21:2d:d5:43:3c:99:c8:cf:a7:cd:fa:5d:26:92: 4a:13:65:97:cf:9d:01:ed:48:0d:db:fd:a6:93:1b:da:ca:6b: 35:97:5c:12:3e:43:00:35:f4:b5:1b:5b:50:73:33:6f:c1:f1: 92:38:66:f6:77:80:ee:81:cc:97:39:fd:c6:db:07:1b:36:4d: b1:4e:b6:f8:7e:e8:aa:0a:fa:a3:5b:41:21:81:98:1c:d3:a7: 33:c2:d3:3b:0b:7c:92:c9:e2:84:aa:18:93:10:2b:fb:5f:31: 9c:a8:f5:ac:7e:66:cc:47:6e:55:d5:75:52:a6:38:4e:ef:f0: 93:a2:fc:fd:36:a5:32:b5:b0:51:0d:99:76:20:e3:36:18:44: 22:8c:2c:c3:69:57:8d:5a:db:c6:96:ff:b2:d3:79:ab:85:ce: d1:7c:2b:51:15:b8:b2:97:5a:8c:e3:58:19:ca:b8:46:36:1d: 06:99:fd:46:56:10:15:5d:8e:64:ef:b9:c3:58:33:0b:12:99: cd:d4:95:2e:55:cc:f7:fd:c7:c0:5d:ba:c4:68:55:9d:13:02: 40:ba:a1:f7:d1:29:67:44:13:24:8c:4b:de:5a:89:ae:05:df: 94:5f:18:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLaMUIDedfW8rw5LGdcy6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxYzk2OTJmYjFhNDA5ZmYzNGQxYWYzYjgyYjhlM2RhNjQ2 NzVjMzIwHhcNMjUxMjA2MDEwMTMxWhcNMjUxMjA3MDEwMTMxWjAzMTEwLwYDVQQD EyhhMGQzNTY4MzZiZjNhOGIxNzUwY2RmYzY1NzI4MmZjZjBmZjM5ZWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDxgrdiz2Vq4iYy0c7Pg0sHj2Cvz mc/Tus/ei7P0diV6yieez6j07gFIMFsvc9lgu0KFPmkdsNXBZyrHugjRJiMbCDcd L8UBkU8JXldHWk+XhWqmVOcpBsE2qTD4F+o1l7zkVmi5H4xtdqnPjj1FI8nJ9atr fZr0Q3UhvZjMUy7iULlJj7ISlpBElTLdU5042UdyCKvil5BRP5sy2X22VLDXBlza tGP0yaLCDCOgo4TWPZX673j/qMbOiXByKiONMsuqJYHvMd7bGGUCpHu7b2w+EHJM iyrSzsxbAweeXdCMC8nUgvEb1gAmUEERRyZc6HtRxnt5M9KWyKWjw5uisQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDTVoNr86ixdQzfxlcoL88P857VMB8GA1UdIwQY MBaAFAHJaS+xpAn/NNGvO4K449pkZ1wyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWNscEw3R2tDZjgwMGE4N2dyamoybVJuWERJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy82MzBmZWMtZGQ1Ni00NmFjLWEwMzgt ZGRiODkwZDc4ZmU5LzEvQWNscEw3R2tDZjgwMGE4N2dyamoybVJuWERJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy82MzBmZWMtZGQ1Ni00NmFjLWEwMzgtZGRiODkwZDc4ZmU5 LzEvQWNscEw3R2tDZjgwMGE4N2dyamoybVJuWERJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN9+ki+qy qgyI4Ljfe2Qiytx6cbdntSEt1UM8mcjPp836XSaSShNll8+dAe1IDdv9ppMb2spr NZdcEj5DADX0tRtbUHMzb8Hxkjhm9neA7oHMlzn9xtsHGzZNsU62+H7oqgr6o1tB IYGYHNOnM8LTOwt8ksnihKoYkxAr+18xnKj1rH5mzEduVdV1UqY4Tu/wk6L8/Tal MrWwUQ2ZdiDjNhhEIowsw2lXjVrbxpb/stN5q4XO0XwrURW4spdajONYGcq4RjYd Bpn9RlYQFV2OZO+5w1gzCxKZzdSVLlXM9/3HwF26xGhVnRMCQLqh99EpZ0QTJIxL 3lqJrgXflF8YNg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:45:28 2025 by rpki-client