This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft File: AUcceelkLK72p0N_H3TFR4rlISk.mft (raw, json) Hash identifier: eg00o+pVt/p3tNa34YXyU9T1oNXHW8fpADNTAz4wjGg= Subject key identifier: 11:46:E0:E1:80:04:63:00:68:5C:56:B7:0E:4F:67:81:A2:2C:F0:F8 Authority key identifier: 01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29 Certificate issuer: /CN=01471c79e9642caef6a7437f1f74c5478ae52129 Certificate serial: 019AF2ADE98E7B25A68ABB4D940A545FD2F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 08:01:15 +0000 Manifest this update: Sat 06 Dec 2025 08:01:15 +0000 Manifest next update: Sun 07 Dec 2025 08:01:15 +0000 Files and hashes: 1: AUcceelkLK72p0N_H3TFR4rlISk.crl (hash: bWTOO4dxzCr1WEzBJYIryUCc7H3rEUkucCnayS5AcZ8=) 2: Woea8VSGgNA3cNDF8RWlevzY9Hg.roa (hash: 7c3YRutklvVu8P78YT4m9rpUu/U9zqtHnEw08R8/8Mg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:e9:8e:7b:25:a6:8a:bb:4d:94:0a:54:5f:d2:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01471c79e9642caef6a7437f1f74c5478ae52129 Validity Not Before: Dec 6 08:01:15 2025 GMT Not After : Dec 7 08:01:15 2025 GMT Subject: CN=1146e0e180046300685c56b70e4f6781a22cf0f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ba:09:cb:0b:11:e3:a7:36:2c:47:27:9b:3f: e2:57:81:44:44:d6:7f:4c:a6:b8:e4:84:16:5e:90: 07:56:03:dc:88:c5:d6:31:05:70:62:c0:4d:ee:a8: 95:87:06:f5:30:12:14:90:c0:ae:59:e4:7d:9d:31: 52:0a:67:7d:b8:d4:9b:cc:d3:35:e6:a1:c9:89:af: 36:2a:2e:23:31:ec:67:11:81:1c:eb:08:96:5b:1f: 32:f4:aa:e9:29:7e:a4:f6:be:af:07:d3:0b:ba:d8: 60:7a:2e:d6:35:c6:56:0e:f0:9a:61:f4:b9:7d:f5: e7:f1:48:6e:ba:ec:a1:54:9b:05:0f:57:9c:de:fa: 4c:2a:a9:eb:54:f8:8b:48:ce:e8:4e:0f:ca:ca:d2: 09:36:96:ee:eb:d3:cd:3d:52:f8:ab:1a:cf:c5:66: b3:2d:78:bf:06:93:2c:50:51:17:34:d4:56:53:18: 99:2d:80:e1:98:51:ad:08:86:bb:cc:21:b2:9a:ed: e8:dd:c1:83:b8:08:6a:69:45:03:3a:19:b0:0c:ed: cc:10:a4:bd:21:76:ae:11:28:3d:23:e2:de:fb:e9: 57:3c:cf:db:74:6c:71:58:b8:d4:88:57:53:0a:3a: f5:f5:b1:ba:02:c3:be:d6:d1:99:92:a9:34:57:c5: f3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:46:E0:E1:80:04:63:00:68:5C:56:B7:0E:4F:67:81:A2:2C:F0:F8 X509v3 Authority Key Identifier: keyid:01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:c2:04:f5:5e:a4:29:d7:69:41:28:d0:87:0e:dd:29:9e:9c: a8:1c:28:85:c8:7f:2a:3f:24:70:93:ba:a8:ca:8b:9f:9d:63: e6:cc:61:dd:02:61:b8:13:6f:78:68:45:1a:8d:a6:1d:9b:93: 5d:f8:e9:66:f8:0a:3d:60:0b:ce:52:39:8e:57:eb:93:5c:78: 2b:2d:ef:aa:b1:3f:5d:ef:a8:25:be:6f:0b:29:cd:ab:da:69: 29:ee:0c:e1:73:9c:37:3e:6f:db:d1:69:7b:cb:ac:6f:4d:35: 16:bb:00:84:e0:89:f0:be:30:34:3e:34:31:bc:94:77:30:f1: b7:18:15:86:5a:96:eb:e4:b8:e8:86:33:d3:eb:29:b0:41:2b: 90:92:5d:ad:86:cd:35:0d:64:77:32:df:5d:b1:b3:2f:34:fc: 3c:7d:cc:89:73:55:ba:d1:f9:33:b7:70:af:99:98:f9:d2:87: 98:bd:8b:78:fc:cb:63:5a:ee:8b:96:3a:e9:a5:dd:6b:20:9a: b5:82:ff:94:43:9d:3d:65:d1:10:da:bc:aa:d9:e5:1a:7d:f4: 67:0a:23:80:af:2f:a8:c6:f0:dc:4a:54:95:aa:37:65:2d:16: d7:dd:ae:36:31:b4:f9:d5:fa:8a:78:ad:2a:79:4b:43:0e:b7: 68:fb:13:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryremOeyWmirtNlApUX9L5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNDcxYzc5ZTk2NDJjYWVmNmE3NDM3ZjFmNzRjNTQ3OGFl NTIxMjkwHhcNMjUxMjA2MDgwMTE1WhcNMjUxMjA3MDgwMTE1WjAzMTEwLwYDVQQD EygxMTQ2ZTBlMTgwMDQ2MzAwNjg1YzU2YjcwZTRmNjc4MWEyMmNmMGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7oJywsR46c2LEcnmz/iV4FERNZ/ TKa45IQWXpAHVgPciMXWMQVwYsBN7qiVhwb1MBIUkMCuWeR9nTFSCmd9uNSbzNM1 5qHJia82Ki4jMexnEYEc6wiWWx8y9KrpKX6k9r6vB9MLuthgei7WNcZWDvCaYfS5 ffXn8UhuuuyhVJsFD1ec3vpMKqnrVPiLSM7oTg/KytIJNpbu69PNPVL4qxrPxWaz LXi/BpMsUFEXNNRWUxiZLYDhmFGtCIa7zCGymu3o3cGDuAhqaUUDOhmwDO3MEKS9 IXauESg9I+Le++lXPM/bdGxxWLjUiFdTCjr19bG6AsO+1tGZkqk0V8Xz9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFG4OGABGMAaFxWtw5PZ4GiLPD4MB8GA1UdIwQY MBaAFAFHHHnpZCyu9qdDfx90xUeK5SEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVVjY2VlbGtMSzcycDBOX0gzVEZSNHJsSVNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9lMWEzN2QtODY4ZS00NmJiLWE3Yzgt OWQyZDlmNmVlZTkzLzEvQVVjY2VlbGtMSzcycDBOX0gzVEZSNHJsSVNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9lMWEzN2QtODY4ZS00NmJiLWE3YzgtOWQyZDlmNmVlZTkz LzEvQVVjY2VlbGtMSzcycDBOX0gzVEZSNHJsSVNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdcIE9V6k KddpQSjQhw7dKZ6cqBwohch/Kj8kcJO6qMqLn51j5sxh3QJhuBNveGhFGo2mHZuT XfjpZvgKPWALzlI5jlfrk1x4Ky3vqrE/Xe+oJb5vCynNq9ppKe4M4XOcNz5v29Fp e8usb001FrsAhOCJ8L4wND40MbyUdzDxtxgVhlqW6+S46IYz0+spsEErkJJdrYbN NQ1kdzLfXbGzLzT8PH3MiXNVutH5M7dwr5mY+dKHmL2LePzLY1rui5Y66aXdayCa tYL/lEOdPWXRENq8qtnlGn30ZwojgK8vqMbw3EpUlao3ZS0W192uNjG0+dX6init KnlLQw63aPsTpg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:20:20 2025 by rpki-client