This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft File: AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft (raw, json) Hash identifier: GqvFHQgfSo5ryy0pucP939Nt4X8FJ0mMZSSFtt2GQWI= Subject key identifier: 46:63:24:5E:AC:C8:11:E9:D1:59:67:28:8B:B7:85:E3:63:A2:5E:23 Authority key identifier: 00:2F:A6:E1:90:56:83:89:05:BC:32:B5:3A:B0:D1:04:7D:78:E4:D4 Certificate issuer: /CN=002fa6e19056838905bc32b53ab0d1047d78e4d4 Certificate serial: 019AF20974981A2F7FAEF35516FAD7530BDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft Manifest number: 1732 Signing time: Sat 06 Dec 2025 05:01:36 +0000 Manifest this update: Sat 06 Dec 2025 05:01:36 +0000 Manifest next update: Sun 07 Dec 2025 05:01:36 +0000 Files and hashes: 1: AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl (hash: JubX3mG3MbITA/E/ayUOY3IyrLPXmK9sggW+hE1+2CA=) 2: FGVVapfPvK0QzFf1pALkp5bEruw.roa (hash: TSwtNe6AniR+9RFExziwrrS0q9Xsbcr++0YQr2+oyJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:74:98:1a:2f:7f:ae:f3:55:16:fa:d7:53:0b:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=002fa6e19056838905bc32b53ab0d1047d78e4d4 Validity Not Before: Dec 6 05:01:36 2025 GMT Not After : Dec 7 05:01:36 2025 GMT Subject: CN=4663245eacc811e9d15967288bb785e363a25e23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e6:e1:ba:23:39:46:d4:55:b3:37:8c:18:1d: 71:5b:08:36:c3:c1:99:96:6f:0d:27:eb:82:22:98: 51:2c:0f:47:72:85:1e:e7:fa:9f:46:4e:43:38:fc: 7f:13:2c:97:ad:c5:9c:af:79:db:ce:0f:f4:fe:18: ed:78:0c:d6:7c:dd:83:c0:67:b8:34:a7:7c:57:da: d2:05:73:c3:cf:a2:c1:e3:88:38:18:54:fe:03:f3: 60:74:17:b8:4a:8b:e9:02:97:e3:96:61:1a:be:bb: cf:78:16:e3:29:2e:0f:67:8c:d2:e9:bf:6c:2b:52: 91:b9:50:5f:20:69:d8:e3:f0:8f:82:f7:78:bc:d4: 0b:02:18:89:e6:aa:fa:fb:30:dc:83:c7:2c:5a:b6: 4f:63:40:51:e6:2c:d1:86:9e:84:aa:43:09:39:40: a3:a0:4a:bb:a9:7f:39:a7:8b:4a:76:98:67:09:77: 17:ba:c9:e3:99:a9:fd:dd:0b:38:d2:50:91:35:b6: dd:11:0f:f9:a4:8b:da:eb:69:5f:55:70:11:10:97: 48:3a:ba:1f:f3:f8:08:96:68:43:5b:22:5c:87:dd: 03:24:0d:b5:77:fc:c9:c9:ad:12:4c:45:7d:d5:18: 64:7c:0c:48:94:64:c8:4c:04:94:a9:28:f2:61:8f: 20:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:63:24:5E:AC:C8:11:E9:D1:59:67:28:8B:B7:85:E3:63:A2:5E:23 X509v3 Authority Key Identifier: keyid:00:2F:A6:E1:90:56:83:89:05:BC:32:B5:3A:B0:D1:04:7D:78:E4:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:c5:34:b5:65:ab:14:a0:9a:2c:db:c9:23:0a:01:11:52:ab: f9:c1:0a:d5:8b:37:5c:3c:89:b9:b5:78:a4:23:13:9a:ac:53: 35:48:53:72:f2:18:1f:20:87:8c:ae:05:4c:da:59:3b:72:45: 6d:ae:4c:b0:99:52:16:4e:eb:3e:b3:e4:2e:b3:ba:4c:5b:09: 5e:7d:c1:28:a0:b6:00:08:14:90:8c:25:fe:66:90:c0:a9:7b: f4:e5:7e:a0:9c:1f:5f:19:af:7e:a9:d8:d7:a7:75:e8:64:9f: ab:7f:8b:51:21:37:2e:f1:de:c8:f0:49:36:a6:78:84:ad:ca: 4f:df:a6:1c:4e:84:b1:ac:41:f6:b2:1b:8b:95:ff:b3:d9:98: 7e:f3:e5:71:d5:db:a8:70:9f:c7:fd:72:62:e3:0f:3d:b2:bb: 5e:79:0d:01:98:09:04:95:4f:c4:2d:ef:4a:26:a9:ce:26:85: d9:69:88:4c:8d:d3:72:b8:44:e5:bf:14:fa:d1:24:27:7b:66: 34:9e:ab:1f:9d:c9:49:bb:cc:7b:a9:9f:f1:eb:79:5b:89:5b: 66:54:10:3a:cf:ab:ca:4c:d2:f3:b7:7c:6a:15:6b:d2:8d:fb: aa:8e:29:ff:ef:e9:b4:7e:54:49:27:74:32:08:8f:1a:46:72: 0a:b2:b2:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCXSYGi9/rvNVFvrXUwvdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMmZhNmUxOTA1NjgzODkwNWJjMzJiNTNhYjBkMTA0N2Q3 OGU0ZDQwHhcNMjUxMjA2MDUwMTM2WhcNMjUxMjA3MDUwMTM2WjAzMTEwLwYDVQQD Eyg0NjYzMjQ1ZWFjYzgxMWU5ZDE1OTY3Mjg4YmI3ODVlMzYzYTI1ZTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjObhuiM5RtRVszeMGB1xWwg2w8GZ lm8NJ+uCIphRLA9HcoUe5/qfRk5DOPx/EyyXrcWcr3nbzg/0/hjteAzWfN2DwGe4 NKd8V9rSBXPDz6LB44g4GFT+A/NgdBe4SovpApfjlmEavrvPeBbjKS4PZ4zS6b9s K1KRuVBfIGnY4/CPgvd4vNQLAhiJ5qr6+zDcg8csWrZPY0BR5izRhp6EqkMJOUCj oEq7qX85p4tKdphnCXcXusnjman93Qs40lCRNbbdEQ/5pIva62lfVXAREJdIOrof 8/gIlmhDWyJch90DJA21d/zJya0STEV91RhkfAxIlGTITASUqSjyYY8gMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEZjJF6syBHp0VlnKIu3heNjol4jMB8GA1UdIwQY MBaAFAAvpuGQVoOJBbwytTqw0QR9eOTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUMtbTRaQldnNGtGdkRLMU9yRFJCSDE0NU5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny84NjZiNmItZjU2Yy00YTJmLTkwMmQt ZmJjMzZlNDM0OGY1LzEvQUMtbTRaQldnNGtGdkRLMU9yRFJCSDE0NU5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny84NjZiNmItZjU2Yy00YTJmLTkwMmQtZmJjMzZlNDM0OGY1 LzEvQUMtbTRaQldnNGtGdkRLMU9yRFJCSDE0NU5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkcU0tWWr FKCaLNvJIwoBEVKr+cEK1Ys3XDyJubV4pCMTmqxTNUhTcvIYHyCHjK4FTNpZO3JF ba5MsJlSFk7rPrPkLrO6TFsJXn3BKKC2AAgUkIwl/maQwKl79OV+oJwfXxmvfqnY 16d16GSfq3+LUSE3LvHeyPBJNqZ4hK3KT9+mHE6EsaxB9rIbi5X/s9mYfvPlcdXb qHCfx/1yYuMPPbK7XnkNAZgJBJVPxC3vSiapziaF2WmITI3TcrhE5b8U+tEkJ3tm NJ6rH53JSbvMe6mf8et5W4lbZlQQOs+rykzS87d8ahVr0o37qo4p/+/ptH5USSd0 MgiPGkZyCrKyiQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:29:42 2025 by rpki-client