This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft File: AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft (raw, json) Hash identifier: HavK73y+c44/OeG6iLFXrU8f+KjCfX0Wic6LR3s9DCs= Subject key identifier: 02:20:A9:AA:0E:6C:CA:D8:BC:69:A5:EC:9C:C0:BA:B2:2C:B8:1D:5C Authority key identifier: 00:2F:A6:E1:90:56:83:89:05:BC:32:B5:3A:B0:D1:04:7D:78:E4:D4 Certificate issuer: /CN=002fa6e19056838905bc32b53ab0d1047d78e4d4 Certificate serial: 019B35A0E699EE95F4EFB2EAFD8569C23291 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft Manifest number: 1755 Signing time: Fri 19 Dec 2025 08:01:35 +0000 Manifest this update: Fri 19 Dec 2025 08:01:35 +0000 Manifest next update: Sat 20 Dec 2025 08:01:35 +0000 Files and hashes: 1: AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl (hash: nYrjIV25VtdxgNCAt1shN1773dDjVp/iEFlDq/esmhY=) 2: FGVVapfPvK0QzFf1pALkp5bEruw.roa (hash: TSwtNe6AniR+9RFExziwrrS0q9Xsbcr++0YQr2+oyJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:e6:99:ee:95:f4:ef:b2:ea:fd:85:69:c2:32:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=002fa6e19056838905bc32b53ab0d1047d78e4d4 Validity Not Before: Dec 19 08:01:35 2025 GMT Not After : Dec 20 08:01:35 2025 GMT Subject: CN=0220a9aa0e6ccad8bc69a5ec9cc0bab22cb81d5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e6:8d:10:87:28:00:bc:77:55:c5:51:14:32: b7:4a:5e:32:1c:47:ff:34:82:18:df:fb:ce:1b:20: 66:8f:53:83:db:8a:a1:44:34:52:be:25:42:b7:60: 39:c3:fe:2d:58:a1:2a:45:66:ec:92:e2:99:74:fc: 44:58:f0:fe:7b:f3:d5:58:7f:8e:d8:31:d6:79:74: 57:8c:7b:24:50:cf:40:ce:cb:ba:aa:75:0e:ab:3a: 81:bf:59:c4:2a:8a:48:05:17:94:66:71:53:ee:3e: 93:f1:d5:b0:d8:d2:5c:03:62:2c:06:a7:1d:f1:9e: 7f:f8:1e:9c:bb:0a:74:b7:ef:f5:d0:92:70:9a:ad: f4:25:6b:fd:46:57:8e:df:7b:4a:7f:ee:88:57:82: 35:aa:5c:4b:33:45:48:64:6a:b7:b0:95:4c:a3:10: c7:8c:6e:56:c8:f8:e4:ec:9d:08:88:0d:1e:aa:eb: d3:23:a7:03:07:fe:b9:10:21:81:bf:71:cd:79:04: de:d5:9f:21:2b:67:92:33:a5:6d:fc:a5:cf:84:47: db:57:ec:48:c3:d2:d0:34:ad:de:f3:a9:8e:b9:e6: 95:80:ee:58:1d:f1:39:d9:25:a2:cf:18:8f:6d:7b: 32:e3:63:81:20:b3:ec:ff:d9:1f:04:42:c4:c6:10: 83:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:20:A9:AA:0E:6C:CA:D8:BC:69:A5:EC:9C:C0:BA:B2:2C:B8:1D:5C X509v3 Authority Key Identifier: keyid:00:2F:A6:E1:90:56:83:89:05:BC:32:B5:3A:B0:D1:04:7D:78:E4:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:23:dc:8e:ff:95:2a:ad:67:ee:3c:67:c0:ed:b2:74:a6:6a: 06:a0:80:f2:2b:94:bb:d4:8a:38:87:0e:25:9c:c7:af:2a:7c: b7:4e:e7:ef:3c:c9:cb:2f:91:8d:6d:29:4a:d1:f3:cc:a2:5b: 21:1e:de:00:bb:5f:77:0e:a5:e0:13:70:91:42:49:7a:58:77: dd:96:6a:66:4c:c8:94:74:19:f8:86:b5:7e:db:5f:96:2b:9e: 8d:ed:85:74:9b:79:15:00:e3:d0:1d:78:a7:5b:57:5c:59:4e: 1f:9b:2a:ca:a5:f6:82:33:79:71:6e:f1:23:f9:0e:35:5e:bb: 79:29:56:88:62:38:e6:9f:3e:a7:8c:96:8d:3d:d4:c9:88:00: 40:6e:d0:c0:22:e2:2d:c7:35:50:7e:ab:8d:9e:91:63:20:09: 38:dd:50:05:5b:90:7c:a7:eb:74:ae:59:58:6f:54:5d:96:2a: 65:ab:2e:02:1d:f6:48:03:1f:64:2e:ab:bf:87:e2:37:df:a9: d1:91:2d:a5:4b:01:b9:5a:5a:fc:2f:28:a6:ac:e9:82:fd:59: ea:bf:34:53:93:2f:dc:bb:b8:54:fb:d9:9e:a9:8a:73:65:01: a7:a0:a8:0f:3a:e5:89:7b:47:a9:a1:fb:21:69:79:d2:f0:f2: 76:b6:46:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oOaZ7pX077Lq/YVpwjKRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMmZhNmUxOTA1NjgzODkwNWJjMzJiNTNhYjBkMTA0N2Q3 OGU0ZDQwHhcNMjUxMjE5MDgwMTM1WhcNMjUxMjIwMDgwMTM1WjAzMTEwLwYDVQQD EygwMjIwYTlhYTBlNmNjYWQ4YmM2OWE1ZWM5Y2MwYmFiMjJjYjgxZDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweaNEIcoALx3VcVRFDK3Sl4yHEf/ NIIY3/vOGyBmj1OD24qhRDRSviVCt2A5w/4tWKEqRWbskuKZdPxEWPD+e/PVWH+O 2DHWeXRXjHskUM9Azsu6qnUOqzqBv1nEKopIBReUZnFT7j6T8dWw2NJcA2IsBqcd 8Z5/+B6cuwp0t+/10JJwmq30JWv9RleO33tKf+6IV4I1qlxLM0VIZGq3sJVMoxDH jG5WyPjk7J0IiA0equvTI6cDB/65ECGBv3HNeQTe1Z8hK2eSM6Vt/KXPhEfbV+xI w9LQNK3e86mOueaVgO5YHfE52SWizxiPbXsy42OBILPs/9kfBELExhCDFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAIgqaoObMrYvGml7JzAurIsuB1cMB8GA1UdIwQY MBaAFAAvpuGQVoOJBbwytTqw0QR9eOTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUMtbTRaQldnNGtGdkRLMU9yRFJCSDE0NU5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny84NjZiNmItZjU2Yy00YTJmLTkwMmQt ZmJjMzZlNDM0OGY1LzEvQUMtbTRaQldnNGtGdkRLMU9yRFJCSDE0NU5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny84NjZiNmItZjU2Yy00YTJmLTkwMmQtZmJjMzZlNDM0OGY1 LzEvQUMtbTRaQldnNGtGdkRLMU9yRFJCSDE0NU5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFCPcjv+V Kq1n7jxnwO2ydKZqBqCA8iuUu9SKOIcOJZzHryp8t07n7zzJyy+RjW0pStHzzKJb IR7eALtfdw6l4BNwkUJJelh33ZZqZkzIlHQZ+Ia1fttfliueje2FdJt5FQDj0B14 p1tXXFlOH5sqyqX2gjN5cW7xI/kONV67eSlWiGI45p8+p4yWjT3UyYgAQG7QwCLi Lcc1UH6rjZ6RYyAJON1QBVuQfKfrdK5ZWG9UXZYqZasuAh32SAMfZC6rv4fiN9+p 0ZEtpUsBuVpa/C8opqzpgv1Z6r80U5Mv3Lu4VPvZnqmKc2UBp6CoDzrliXtHqaH7 IWl50vDydrZGZA== -----END CERTIFICATE-----Generated at Fri Dec 19 13:49:11 2025 by rpki-client