This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft File: acp8FyMtsGNJHPpYUgM2n_vrdu0.mft (raw, json) Hash identifier: Pd+LYPNuxjAiFHKAYfyYrzujTXAij82V2giykAiPuGQ= Subject key identifier: E3:84:80:F2:89:CF:17:86:6D:53:63:1D:51:B8:D6:EA:4F:82:2A:B1 Authority key identifier: 69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED Certificate issuer: /CN=69ca7c17232db063491cfa585203369ffbeb76ed Certificate serial: 019AF3527D058DA344487223BF988ABE1635 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 11:01:00 +0000 Manifest this update: Sat 06 Dec 2025 11:01:00 +0000 Manifest next update: Sun 07 Dec 2025 11:01:00 +0000 Files and hashes: 1: RkLlZjAasSrGiOmklIx_O-q25zk.roa (hash: Gwgv1/PPnszGyK+vUndl8BVc2mtdNprpDuh7CKowocQ=) 2: acp8FyMtsGNJHPpYUgM2n_vrdu0.crl (hash: Lbp4hHJixrMcbMM9igUADtnMY9FpTTW6hAbEPgXil5g=) 3: iLjCLg8Y0QSYNaQ0b-3HMIIKDDY.roa (hash: KCNb4IsFzC9RfJdx7AFbupcSXkYx7SjrNORvTA5EESA=) 4: jyBvJ0cOfKi9WwiQt60pyraI-oY.roa (hash: y3Y58DOqvcc4jvZsYybVxfvwXagMIIOulZAsS9iNgBc=) 5: s9L9BNwHKJhVemHf55wRw3Mdhbk.roa (hash: beDBJWuacokDomSZPce/uodduuYfGqhfMVgZDVtONCo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:7d:05:8d:a3:44:48:72:23:bf:98:8a:be:16:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69ca7c17232db063491cfa585203369ffbeb76ed Validity Not Before: Dec 6 11:01:00 2025 GMT Not After : Dec 7 11:01:00 2025 GMT Subject: CN=e38480f289cf17866d53631d51b8d6ea4f822ab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bd:a1:a4:d7:48:97:27:59:7e:0d:31:eb:fb: 08:50:fb:61:24:bd:26:8a:44:e7:a3:15:1f:ae:09: e8:79:78:ee:78:d9:9b:83:d1:6b:95:3c:af:77:16: 4e:3e:59:5b:bf:28:45:20:0c:d1:90:35:c9:1f:cb: 4b:2e:9d:8d:1c:f7:ea:3c:a3:31:c4:1c:29:9d:ea: 7a:2a:a5:59:e7:71:1d:6c:3d:51:b4:4c:da:da:b2: cf:2d:64:a0:22:a6:ff:eb:f5:8e:42:e5:5f:1a:2d: 8f:08:5d:61:f3:54:b6:47:08:25:17:1c:37:37:c3: 5e:fd:6a:d0:37:89:4e:32:fa:f9:0e:0c:8d:76:71: d6:9b:5e:55:a0:c5:cf:cb:8e:4e:d8:31:c0:12:6e: 6c:2b:2c:da:38:8d:96:07:6d:fe:1b:37:fe:1c:d7: 79:25:82:e3:0b:c0:7b:b9:26:d0:58:67:5e:7e:4e: 62:9d:b2:5c:67:04:27:55:e1:26:71:5a:17:df:ed: 11:87:25:6e:1f:ba:0b:4a:05:1b:e9:87:ce:7b:59: 08:37:2a:54:0f:75:be:98:5a:b7:1c:6b:74:59:80: 38:f6:a0:51:19:e4:49:03:1f:e1:d1:3b:51:e3:4b: 9d:3f:a5:7b:5d:82:93:d7:75:b1:cd:55:41:ab:ff: 70:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:84:80:F2:89:CF:17:86:6D:53:63:1D:51:B8:D6:EA:4F:82:2A:B1 X509v3 Authority Key Identifier: keyid:69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:c0:60:c1:7d:02:c7:81:c0:7d:74:84:f6:50:fc:43:9e:88: 7d:d5:47:62:4c:08:f8:7d:15:f8:2c:a9:d6:58:56:51:af:f3: dc:c5:d7:4b:db:91:de:6b:47:b7:6c:ca:14:0a:25:cd:44:be: e5:ee:fa:59:80:c5:33:df:92:5f:c5:0b:19:c9:c4:b3:00:58: 1c:9a:cb:56:e6:40:a6:11:b2:87:c4:3a:80:b9:64:44:97:7b: 2f:02:e2:6b:8e:4f:76:85:62:6c:9b:30:bf:f3:87:3b:81:52: 92:f4:1e:21:e2:ae:92:e3:8f:9c:7e:b2:ce:52:4c:a4:15:db: fb:b3:ce:94:e6:79:ea:61:3a:33:e1:1c:49:5f:00:f4:87:fe: 25:77:57:27:d0:f6:55:09:53:6c:8d:63:ea:89:5c:f8:10:bc: 94:89:a9:d5:81:c2:d2:35:a4:e4:29:c4:a7:01:41:02:e9:c0: 70:41:f9:15:fa:fe:39:52:d3:15:3d:df:51:e8:b4:df:6c:93: df:79:be:c7:8a:f7:6d:d8:d2:ff:7a:23:6b:b0:9d:ba:a6:67: 9f:73:77:1e:b8:a9:a9:c8:c8:51:7e:21:9e:28:40:63:d0:47: 32:73:80:a4:26:9f:13:a4:d5:d5:78:08:30:92:ee:ab:95:49: 8b:cb:25:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUn0FjaNESHIjv5iKvhY1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5Y2E3YzE3MjMyZGIwNjM0OTFjZmE1ODUyMDMzNjlmZmJl Yjc2ZWQwHhcNMjUxMjA2MTEwMTAwWhcNMjUxMjA3MTEwMTAwWjAzMTEwLwYDVQQD EyhlMzg0ODBmMjg5Y2YxNzg2NmQ1MzYzMWQ1MWI4ZDZlYTRmODIyYWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt72hpNdIlydZfg0x6/sIUPthJL0m ikTnoxUfrgnoeXjueNmbg9FrlTyvdxZOPllbvyhFIAzRkDXJH8tLLp2NHPfqPKMx xBwpnep6KqVZ53EdbD1RtEza2rLPLWSgIqb/6/WOQuVfGi2PCF1h81S2RwglFxw3 N8Ne/WrQN4lOMvr5DgyNdnHWm15VoMXPy45O2DHAEm5sKyzaOI2WB23+Gzf+HNd5 JYLjC8B7uSbQWGdefk5inbJcZwQnVeEmcVoX3+0RhyVuH7oLSgUb6YfOe1kINypU D3W+mFq3HGt0WYA49qBRGeRJAx/h0TtR40udP6V7XYKT13WxzVVBq/9wHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOOEgPKJzxeGbVNjHVG41upPgiqxMB8GA1UdIwQY MBaAFGnKfBcjLbBjSRz6WFIDNp/763btMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9iZmI0MjMtZGE2OS00MjY1LTk1ZTUt ZjQ3YWU3ZGRhZWMwLzEvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9iZmI0MjMtZGE2OS00MjY1LTk1ZTUtZjQ3YWU3ZGRhZWMw LzEvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOMBgwX0C x4HAfXSE9lD8Q56IfdVHYkwI+H0V+Cyp1lhWUa/z3MXXS9uR3mtHt2zKFAolzUS+ 5e76WYDFM9+SX8ULGcnEswBYHJrLVuZAphGyh8Q6gLlkRJd7LwLia45PdoVibJsw v/OHO4FSkvQeIeKukuOPnH6yzlJMpBXb+7POlOZ56mE6M+EcSV8A9If+JXdXJ9D2 VQlTbI1j6olc+BC8lImp1YHC0jWk5CnEpwFBAunAcEH5Ffr+OVLTFT3fUei032yT 33m+x4r3bdjS/3oja7CduqZnn3N3HripqcjIUX4hnihAY9BHMnOApCafE6TV1XgI MJLuq5VJi8sl3g== -----END CERTIFICATE-----Generated at Sat Dec 6 13:36:53 2025 by rpki-client