This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft File: Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft (raw, json) Hash identifier: LqbHVxV316rE5gqI2+bXUhdsty7bzaCuTXYq6Pc17KU= Subject key identifier: 2B:A1:E5:DF:8B:B2:7F:ED:2D:ED:81:3D:37:F2:D7:57:62:6C:3F:0F Authority key identifier: 01:CE:8A:50:DD:43:27:2B:47:4D:55:44:3D:2F:AC:46:56:64:77:C2 Certificate issuer: /CN=01ce8a50dd43272b474d55443d2fac46566477c2 Certificate serial: 019AF23FE9D95B7B721C528310765C653555 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 06:01:06 +0000 Manifest this update: Sat 06 Dec 2025 06:01:06 +0000 Manifest next update: Sun 07 Dec 2025 06:01:06 +0000 Files and hashes: 1: Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl (hash: Cs6gdcRgtg4EId9ky5Zx/QqHyIIPQ3rSoR28/hi2MT8=) 2: rnVgQnSvZayWReSkh23-vQQTXhc.roa (hash: hebKWON0JMZ90AbYifXQ2mjTupBoFKWh8ulvnxLBZ8A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:e9:d9:5b:7b:72:1c:52:83:10:76:5c:65:35:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01ce8a50dd43272b474d55443d2fac46566477c2 Validity Not Before: Dec 6 06:01:06 2025 GMT Not After : Dec 7 06:01:06 2025 GMT Subject: CN=2ba1e5df8bb27fed2ded813d37f2d757626c3f0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:71:79:78:40:4c:40:08:f7:40:4b:2e:8e:e0: fa:48:ed:7e:86:02:06:f1:4a:e0:b1:23:2b:da:2e: ad:0e:30:9d:a9:f2:25:c5:40:0b:92:50:e4:20:ed: 48:b5:ec:f5:09:5e:e9:52:81:81:32:d8:95:50:09: e0:04:18:e8:b5:6b:2b:df:88:98:e7:53:d8:e4:05: 5f:8a:77:9b:7c:da:af:73:e3:78:bb:e6:b3:ee:c9: 83:81:ea:1a:84:5f:68:bc:d0:c5:e3:dc:c3:0e:fb: b0:4e:a5:a9:e3:de:76:72:50:09:81:97:26:0d:09: fc:cb:45:d8:18:b2:4d:bd:91:85:bf:61:b6:ab:21: 06:b6:84:5d:a0:82:91:08:a5:5b:91:3c:d9:9d:61: ba:2d:b2:ed:21:fd:56:3b:45:bb:17:0c:b8:cd:7a: 4a:b6:64:12:14:b6:42:b0:9a:d1:9d:4e:ed:b6:63: 95:f9:35:5a:14:e6:15:99:8d:ef:04:0c:68:81:09: cd:aa:bf:45:d9:f6:9c:04:30:68:00:85:04:98:f8: af:d2:2e:db:37:cc:77:ac:05:23:1a:49:f0:22:07: ce:be:c7:05:2f:86:83:b8:28:b4:cd:3c:2e:e2:08: e2:87:8b:61:55:48:97:e4:83:f7:68:3a:a2:04:c2: 9e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A1:E5:DF:8B:B2:7F:ED:2D:ED:81:3D:37:F2:D7:57:62:6C:3F:0F X509v3 Authority Key Identifier: keyid:01:CE:8A:50:DD:43:27:2B:47:4D:55:44:3D:2F:AC:46:56:64:77:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:01:3a:65:04:4e:f9:51:97:ae:86:82:14:67:3a:a2:2d:ee: 1e:ef:01:62:d9:fd:bb:ca:ac:57:f5:ea:e9:84:6d:f4:d0:87: bb:19:fe:55:4a:4c:41:84:ae:57:d1:eb:8d:92:4c:be:b0:a8: 74:17:56:92:f9:3c:d1:24:92:cf:98:78:dc:24:43:25:26:72: f3:bb:75:a0:30:dc:32:e7:3d:19:92:38:0d:1c:f8:ff:0a:bd: 13:9e:88:66:26:30:f4:0f:a5:dd:c4:cd:0d:70:5d:ca:25:b7: b5:1e:be:86:d1:8d:6c:c9:e2:ba:8d:5c:73:19:a1:27:9f:75: 7a:87:fa:41:f9:0f:db:8b:29:7b:33:da:8e:fb:6c:88:a5:49: d4:15:f6:4f:96:b8:99:4a:b0:46:7f:80:cb:e7:9b:ef:0a:00: 21:68:1c:05:61:75:e2:b1:ae:5c:eb:26:35:82:85:ca:e6:05: 3b:e0:ca:0a:2f:f8:e1:f7:12:40:8f:54:54:ce:f4:d4:84:d2: 32:55:32:50:93:6f:f8:86:29:32:54:5f:5f:58:d6:10:3c:df: 62:ec:1a:31:10:0d:c0:d8:ad:4f:94:5a:12:12:b1:1f:cb:57: 68:73:46:a9:a9:0f:53:21:c5:9c:56:4b:f3:dc:6a:76:f3:cc: d2:7e:65:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+nZW3tyHFKDEHZcZTVVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxY2U4YTUwZGQ0MzI3MmI0NzRkNTU0NDNkMmZhYzQ2NTY2 NDc3YzIwHhcNMjUxMjA2MDYwMTA2WhcNMjUxMjA3MDYwMTA2WjAzMTEwLwYDVQQD EygyYmExZTVkZjhiYjI3ZmVkMmRlZDgxM2QzN2YyZDc1NzYyNmMzZjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3F5eEBMQAj3QEsujuD6SO1+hgIG 8UrgsSMr2i6tDjCdqfIlxUALklDkIO1Itez1CV7pUoGBMtiVUAngBBjotWsr34iY 51PY5AVfinebfNqvc+N4u+az7smDgeoahF9ovNDF49zDDvuwTqWp4952clAJgZcm DQn8y0XYGLJNvZGFv2G2qyEGtoRdoIKRCKVbkTzZnWG6LbLtIf1WO0W7Fwy4zXpK tmQSFLZCsJrRnU7ttmOV+TVaFOYVmY3vBAxogQnNqr9F2facBDBoAIUEmPiv0i7b N8x3rAUjGknwIgfOvscFL4aDuCi0zTwu4gjih4thVUiX5IP3aDqiBMKexwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCuh5d+Lsn/tLe2BPTfy11dibD8PMB8GA1UdIwQY MBaAFAHOilDdQycrR01VRD0vrEZWZHfCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWM2S1VOMURKeXRIVFZWRVBTLXNSbFprZDhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9hN2MzM2ItNjgyZS00ZTAwLTgyMTEt YmI5NDUzMDg0MWU1LzEvQWM2S1VOMURKeXRIVFZWRVBTLXNSbFprZDhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9hN2MzM2ItNjgyZS00ZTAwLTgyMTEtYmI5NDUzMDg0MWU1 LzEvQWM2S1VOMURKeXRIVFZWRVBTLXNSbFprZDhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtQE6ZQRO +VGXroaCFGc6oi3uHu8BYtn9u8qsV/Xq6YRt9NCHuxn+VUpMQYSuV9HrjZJMvrCo dBdWkvk80SSSz5h43CRDJSZy87t1oDDcMuc9GZI4DRz4/wq9E56IZiYw9A+l3cTN DXBdyiW3tR6+htGNbMniuo1ccxmhJ591eof6QfkP24spezPajvtsiKVJ1BX2T5a4 mUqwRn+Ay+eb7woAIWgcBWF14rGuXOsmNYKFyuYFO+DKCi/44fcSQI9UVM701ITS MlUyUJNv+IYpMlRfX1jWEDzfYuwaMRANwNitT5RaEhKxH8tXaHNGqakPUyHFnFZL 89xqdvPM0n5lBg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:57:52 2025 by rpki-client