This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft File: acl31Fwp2BvZI_3rHwkv80ZE4zw.mft (raw, json) Hash identifier: 6+GoUP/JAKi3usKCAnC5wMDamyiRox6wbKFn7jd+/0Y= Subject key identifier: 2C:47:85:CE:6B:B4:08:FF:CD:DD:0A:D1:F4:43:F9:60:A1:D7:41:59 Authority key identifier: 69:C9:77:D4:5C:29:D8:1B:D9:23:FD:EB:1F:09:2F:F3:46:44:E3:3C Certificate issuer: /CN=69c977d45c29d81bd923fdeb1f092ff34644e33c Certificate serial: 019AF0882F07873A6D76D394091DF0B54146 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft Manifest number: 1760 Signing time: Fri 05 Dec 2025 22:00:47 +0000 Manifest this update: Fri 05 Dec 2025 22:00:47 +0000 Manifest next update: Sat 06 Dec 2025 22:00:47 +0000 Files and hashes: 1: Mdki5Hd0a9qoQTU9ek_fjxSZC_M.roa (hash: pAUm7peLEtEelIaq9NrLFDpZyXIMHk6pqW2ILgJV6og=) 2: acl31Fwp2BvZI_3rHwkv80ZE4zw.crl (hash: cmqYgbz9kMsqniO8FkNSYtUkm7ep8SU1pM0gifXMuDk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:2f:07:87:3a:6d:76:d3:94:09:1d:f0:b5:41:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69c977d45c29d81bd923fdeb1f092ff34644e33c Validity Not Before: Dec 5 22:00:47 2025 GMT Not After : Dec 6 22:00:47 2025 GMT Subject: CN=2c4785ce6bb408ffcddd0ad1f443f960a1d74159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ce:a9:5a:1d:eb:ac:91:4d:ad:46:14:0c:dc: 8b:44:fc:be:d8:06:b7:6b:aa:44:0c:56:da:38:46: 37:23:ea:69:bb:00:b5:a8:30:27:69:ff:07:63:9b: 79:e3:35:7c:60:85:96:a0:16:b0:9a:3e:e4:2b:01: fe:fc:71:ec:10:ff:6d:cd:4c:9d:f1:c3:5b:35:24: e5:7e:88:b7:5d:bd:d2:25:9f:c1:a6:11:bb:9a:95: c3:c3:59:18:c6:49:9f:1c:16:6d:bc:9b:78:14:9b: 33:e0:18:cc:7f:b2:51:c2:27:92:07:81:06:c4:dd: 7b:34:62:30:4e:54:03:a0:91:fb:fb:43:88:a2:01: 7f:ee:c4:01:f2:05:e3:17:e2:f3:40:47:06:68:45: ba:6c:69:9c:91:f7:74:db:37:3a:55:2e:27:1f:50: 82:f9:e1:4b:3a:a7:ec:d4:60:d5:28:43:4f:00:40: fc:73:d8:2c:19:57:8e:da:2c:ca:89:70:63:32:8b: b9:a5:db:b4:52:d6:92:7f:db:44:55:46:21:fe:b9: dd:4e:23:c5:f3:92:62:0e:43:98:cd:1e:3b:58:72: 5e:3b:dd:e0:d4:91:02:ca:e6:fa:66:1d:cb:cb:25: 2d:be:57:b6:98:8d:6c:c1:01:8e:f1:55:0d:a5:ec: a5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:47:85:CE:6B:B4:08:FF:CD:DD:0A:D1:F4:43:F9:60:A1:D7:41:59 X509v3 Authority Key Identifier: keyid:69:C9:77:D4:5C:29:D8:1B:D9:23:FD:EB:1F:09:2F:F3:46:44:E3:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:fa:be:01:1c:70:16:f6:57:ac:1f:ee:51:0f:53:85:20:dc: 6a:e5:08:a2:8a:03:d5:63:fc:08:57:54:0b:47:91:e3:28:bb: 70:41:d8:c4:6d:26:77:06:f7:f1:10:b0:9c:1d:84:68:03:73: 3c:cd:48:0d:95:32:98:1e:76:c0:3a:dc:d8:94:e3:a4:ae:6e: 0d:c1:8a:87:30:51:ae:ca:04:6c:e8:8b:dd:33:01:1d:3c:03: 29:74:63:08:62:f1:48:d9:15:2a:e0:0e:48:b9:5f:ab:b8:5b: 33:89:6a:03:0e:c6:56:de:81:87:c1:13:37:43:b6:96:d4:35: d5:a4:65:1f:36:8f:b2:57:35:38:d8:53:52:ea:6a:03:9a:c3: 67:6f:69:77:d5:77:5e:c2:9d:99:36:ce:38:67:11:6c:8c:04: 0b:28:73:c2:b1:b6:10:84:47:32:e4:29:1b:9d:9a:6d:5c:55: ad:32:bf:55:68:86:31:e8:06:3f:4f:9a:58:4b:f9:42:0d:91: 62:e8:4e:ee:1a:9c:bf:b2:f5:37:a9:79:13:19:1a:42:cc:b9: 02:fd:4b:b9:fc:cd:4d:ff:86:a0:76:73:61:07:26:83:17:45: f1:1f:3e:94:a4:ca:f0:be:7f:7d:bb:dd:1a:be:60:d9:36:8d: b7:1e:d9:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiC8HhzptdtOUCR3wtUFGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5Yzk3N2Q0NWMyOWQ4MWJkOTIzZmRlYjFmMDkyZmYzNDY0 NGUzM2MwHhcNMjUxMjA1MjIwMDQ3WhcNMjUxMjA2MjIwMDQ3WjAzMTEwLwYDVQQD EygyYzQ3ODVjZTZiYjQwOGZmY2RkZDBhZDFmNDQzZjk2MGExZDc0MTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3s6pWh3rrJFNrUYUDNyLRPy+2Aa3 a6pEDFbaOEY3I+ppuwC1qDAnaf8HY5t54zV8YIWWoBawmj7kKwH+/HHsEP9tzUyd 8cNbNSTlfoi3Xb3SJZ/BphG7mpXDw1kYxkmfHBZtvJt4FJsz4BjMf7JRwieSB4EG xN17NGIwTlQDoJH7+0OIogF/7sQB8gXjF+LzQEcGaEW6bGmckfd02zc6VS4nH1CC +eFLOqfs1GDVKENPAED8c9gsGVeO2izKiXBjMou5pdu0UtaSf9tEVUYh/rndTiPF 85JiDkOYzR47WHJeO93g1JECyub6Zh3LyyUtvle2mI1swQGO8VUNpeylTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCxHhc5rtAj/zd0K0fRD+WCh10FZMB8GA1UdIwQY MBaAFGnJd9RcKdgb2SP96x8JL/NGROM8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWNsMzFGd3AyQnZaSV8zckh3a3Y4MFpFNHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8xYzlkZGMtZGM0ZC00NTcxLTgyZGIt Y2U1MzUyNmU2Njk5LzEvYWNsMzFGd3AyQnZaSV8zckh3a3Y4MFpFNHp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8xYzlkZGMtZGM0ZC00NTcxLTgyZGItY2U1MzUyNmU2Njk5 LzEvYWNsMzFGd3AyQnZaSV8zckh3a3Y4MFpFNHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJfq+ARxw FvZXrB/uUQ9ThSDcauUIoooD1WP8CFdUC0eR4yi7cEHYxG0mdwb38RCwnB2EaANz PM1IDZUymB52wDrc2JTjpK5uDcGKhzBRrsoEbOiL3TMBHTwDKXRjCGLxSNkVKuAO SLlfq7hbM4lqAw7GVt6Bh8ETN0O2ltQ11aRlHzaPslc1ONhTUupqA5rDZ29pd9V3 XsKdmTbOOGcRbIwECyhzwrG2EIRHMuQpG52abVxVrTK/VWiGMegGP0+aWEv5Qg2R YuhO7hqcv7L1N6l5ExkaQsy5Av1LufzNTf+GoHZzYQcmgxdF8R8+lKTK8L5/fbvd Gr5g2TaNtx7ZcA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:55 2025 by rpki-client