This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft File: ACreZKPSvb6PfOg2ENLnxl-zPq0.mft (raw, json) Hash identifier: rFtYBXmgoED9WwDvV/lXprYPsDxgZOz03dXWeOOxqU4= Subject key identifier: 78:57:09:01:6E:F7:2D:48:E4:6C:56:4F:70:AC:1F:47:D2:8F:C6:03 Authority key identifier: 00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD Certificate issuer: /CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead Certificate serial: 019AF27667F51BE6074FF9B9C8C5776CA83C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft Manifest number: 120D Signing time: Sat 06 Dec 2025 07:00:37 +0000 Manifest this update: Sat 06 Dec 2025 07:00:37 +0000 Manifest next update: Sun 07 Dec 2025 07:00:37 +0000 Files and hashes: 1: ACreZKPSvb6PfOg2ENLnxl-zPq0.crl (hash: TtdzxcdJYZH/mkfLQw51dYqyN7JieKq8jeqQIg7FuME=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:67:f5:1b:e6:07:4f:f9:b9:c8:c5:77:6c:a8:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead Validity Not Before: Dec 6 07:00:37 2025 GMT Not After : Dec 7 07:00:37 2025 GMT Subject: CN=785709016ef72d48e46c564f70ac1f47d28fc603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:aa:03:a2:ad:75:fd:79:e6:99:d2:be:ca:ba: 5c:d2:0a:13:79:c6:ed:68:5b:53:52:9a:50:8c:af: 77:75:d2:6f:e9:88:24:00:05:84:ec:f8:9d:73:9f: 7f:c8:e8:c9:48:dc:7e:96:15:c7:64:72:a9:da:8a: c0:35:9d:81:d4:b9:9e:6b:dc:ca:96:af:03:9f:0d: 26:9a:4b:82:db:99:ae:02:b8:68:76:e0:fe:9d:02: a4:0a:cc:b0:b8:2e:8f:79:f3:04:1a:42:a8:25:ee: 43:1f:a7:ed:06:f4:9e:40:31:a2:a5:b7:6c:88:7b: 8e:eb:4c:e2:69:30:c0:9d:68:a8:fb:d0:73:38:0f: b1:18:bd:6d:3d:5d:cc:30:df:c4:05:9e:8c:fb:93: e6:b0:d9:c1:15:13:2e:7e:6d:e9:0b:c0:8f:70:7e: 1d:90:f2:fe:99:7a:30:b5:8e:57:54:78:ca:93:f2: 3a:34:4f:fd:10:8e:98:da:2b:cd:88:78:62:c4:50: cb:82:df:c6:63:e3:42:82:47:9c:b2:cc:b4:3e:26: e8:ca:30:d3:94:a6:f0:34:fc:e6:10:98:fc:14:8f: f7:4b:dc:05:a6:5f:a0:99:f9:3e:f9:13:82:04:c5: f8:13:a1:e7:ec:1a:2d:56:a7:33:d4:c9:f7:ea:5b: d6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:57:09:01:6E:F7:2D:48:E4:6C:56:4F:70:AC:1F:47:D2:8F:C6:03 X509v3 Authority Key Identifier: keyid:00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:8b:78:86:98:c4:a9:b2:8b:1d:ca:1b:c3:28:c1:05:c3:b3: 45:5e:8a:c8:35:a4:c8:7e:d9:92:43:98:fd:08:c5:93:8f:3e: 00:97:9a:f6:54:1c:e5:a8:69:00:b5:16:13:9b:4b:56:8a:43: 73:b2:bd:fa:8d:ca:5a:c9:d2:0a:ad:c5:3b:47:d3:1e:7c:23: 5b:76:f1:0f:31:f8:f7:61:75:01:8d:eb:3a:a6:45:3e:05:70: c2:ee:0d:5d:62:3d:c6:33:08:e1:5b:66:8d:cf:47:0d:e5:65: e0:76:6f:4a:28:40:18:90:c6:fd:65:49:81:11:73:7a:60:58: 80:ff:5d:52:84:5c:e2:36:16:46:ea:98:46:99:35:1b:25:eb: c2:cd:ee:b2:7e:d5:f8:8f:3d:aa:2b:f9:f2:37:34:5c:e6:3f: 2f:22:94:87:e5:9e:be:9a:51:7f:d9:5f:ae:bd:a0:8e:76:81: 88:06:a9:eb:e9:ef:88:73:33:43:3c:5b:a2:20:53:33:2e:e1: 02:22:e4:e0:5a:0d:1a:2c:f7:6a:54:79:c0:cb:5d:02:c4:bd: 4b:68:00:40:30:aa:d2:9d:27:b4:bf:23:c3:06:28:52:91:40: 3f:52:9c:8b:b0:86:a3:39:8e:0d:da:90:6c:e1:51:d7:d5:7a: a5:98:2e:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydmf1G+YHT/m5yMV3bKg8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMmFkZTY0YTNkMmJkYmU4ZjdjZTgzNjEwZDJlN2M2NWZi MzNlYWQwHhcNMjUxMjA2MDcwMDM3WhcNMjUxMjA3MDcwMDM3WjAzMTEwLwYDVQQD Eyg3ODU3MDkwMTZlZjcyZDQ4ZTQ2YzU2NGY3MGFjMWY0N2QyOGZjNjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKoDoq11/XnmmdK+yrpc0goTecbt aFtTUppQjK93ddJv6YgkAAWE7Pidc59/yOjJSNx+lhXHZHKp2orANZ2B1Lmea9zK lq8Dnw0mmkuC25muArhoduD+nQKkCsywuC6PefMEGkKoJe5DH6ftBvSeQDGipbds iHuO60ziaTDAnWio+9BzOA+xGL1tPV3MMN/EBZ6M+5PmsNnBFRMufm3pC8CPcH4d kPL+mXowtY5XVHjKk/I6NE/9EI6Y2ivNiHhixFDLgt/GY+NCgkecssy0PiboyjDT lKbwNPzmEJj8FI/3S9wFpl+gmfk++ROCBMX4E6Hn7BotVqcz1Mn36lvWXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHhXCQFu9y1I5GxWT3CsH0fSj8YDMB8GA1UdIwQY MBaAFAAq3mSj0r2+j3zoNhDS58Zfsz6tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUNyZVpLUFN2YjZQZk9nMkVOTG54bC16UHEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84NjEzNGEtZWU0ZC00NjM3LWE0ZDQt YzU3Y2Y4ZjFjZDU0LzEvQUNyZVpLUFN2YjZQZk9nMkVOTG54bC16UHEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84NjEzNGEtZWU0ZC00NjM3LWE0ZDQtYzU3Y2Y4ZjFjZDU0 LzEvQUNyZVpLUFN2YjZQZk9nMkVOTG54bC16UHEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh4t4hpjE qbKLHcobwyjBBcOzRV6KyDWkyH7ZkkOY/QjFk48+AJea9lQc5ahpALUWE5tLVopD c7K9+o3KWsnSCq3FO0fTHnwjW3bxDzH492F1AY3rOqZFPgVwwu4NXWI9xjMI4Vtm jc9HDeVl4HZvSihAGJDG/WVJgRFzemBYgP9dUoRc4jYWRuqYRpk1GyXrws3usn7V +I89qiv58jc0XOY/LyKUh+WevppRf9lfrr2gjnaBiAap6+nviHMzQzxboiBTMy7h AiLk4FoNGiz3alR5wMtdAsS9S2gAQDCq0p0ntL8jwwYoUpFAP1Kci7CGozmODdqQ bOFR19V6pZguxw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:56:25 2025 by rpki-client