This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft File: ACQ0xzoO6iLG5EEHLpPbd8foovE.mft (raw, json) Hash identifier: +bq8xvr5+382Bn2ogoYMJIbJD/8ixizzlgamMmtXAGA= Subject key identifier: 19:78:92:00:1A:3F:6A:32:A5:73:EE:E1:F2:CF:F4:FA:F5:AE:76:F7 Authority key identifier: 00:24:34:C7:3A:0E:EA:22:C6:E4:41:07:2E:93:DB:77:C7:E8:A2:F1 Certificate issuer: /CN=002434c73a0eea22c6e441072e93db77c7e8a2f1 Certificate serial: 019AF31B98B75DFB423951361D6D1EE76F97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 10:01:03 +0000 Manifest this update: Sat 06 Dec 2025 10:01:03 +0000 Manifest next update: Sun 07 Dec 2025 10:01:03 +0000 Files and hashes: 1: ACQ0xzoO6iLG5EEHLpPbd8foovE.crl (hash: rcOeoBZ7msF9nXDlhGZ2+w6emmYs7wwYprLCcixNk/A=) 2: cHH8n9jIhtvEhfYf9DzKMDe1sMM.roa (hash: 24RyHXYm2+n9v+uk7dd0yGKCI/vamDa6gkuFRLODvdE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:98:b7:5d:fb:42:39:51:36:1d:6d:1e:e7:6f:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=002434c73a0eea22c6e441072e93db77c7e8a2f1 Validity Not Before: Dec 6 10:01:03 2025 GMT Not After : Dec 7 10:01:03 2025 GMT Subject: CN=197892001a3f6a32a573eee1f2cff4faf5ae76f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:52:59:d4:e0:c0:64:21:50:dd:30:8f:b9:0e: 5f:6b:ac:b0:c9:66:4c:46:b4:a5:98:30:87:4d:60: f3:1d:3a:b9:a3:75:ad:65:aa:55:07:74:86:40:71: d9:9b:bd:df:80:f8:e5:e3:20:e8:63:5a:f1:f5:44: 3b:13:4e:b9:22:d5:e9:45:4e:b1:9d:11:d3:0b:16: 7f:96:41:bf:43:de:8b:a0:4d:a4:37:d7:6f:f0:8a: 19:25:98:31:06:aa:7a:b9:57:af:0b:6b:77:3b:07: 08:5f:65:4c:85:89:06:cc:c5:25:a3:bb:ed:da:d7: 1d:20:c8:ef:af:37:17:ff:84:a1:10:f7:a8:20:72: 04:0f:8f:91:48:a9:86:22:6f:8f:f9:4c:89:45:95: 8f:0c:a9:d2:ac:d2:dd:9d:64:84:50:90:9d:61:a6: df:f6:80:18:8a:ea:90:81:9c:f9:4b:cb:de:e6:b6: fb:31:4d:58:d3:75:f8:ff:e5:3c:b5:ce:dd:78:ad: 29:b7:76:cf:3f:83:1b:8b:fa:b7:c7:a9:fe:88:c4: 02:37:5c:4a:09:99:40:f5:f3:4a:6e:f7:a4:74:e3: a1:8c:14:14:5a:b6:41:89:f6:cc:80:b2:0c:e4:51: 6b:a4:c2:cb:23:4e:e5:5a:aa:fd:40:fb:50:39:9a: 15:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:78:92:00:1A:3F:6A:32:A5:73:EE:E1:F2:CF:F4:FA:F5:AE:76:F7 X509v3 Authority Key Identifier: keyid:00:24:34:C7:3A:0E:EA:22:C6:E4:41:07:2E:93:DB:77:C7:E8:A2:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:80:22:dc:da:5a:c9:9f:9c:c9:b8:f9:23:d6:bd:60:bb:0e: ad:df:8c:a3:5e:d8:bd:b2:88:0c:66:a8:65:8b:2a:28:bd:b4: fb:4e:cb:ba:87:92:76:45:e6:08:ac:a8:ec:a5:1e:95:46:97: f5:6d:ba:10:65:3c:04:1b:d8:aa:c1:ce:32:8a:d9:36:9b:d2: ef:24:10:d8:6b:6b:e7:7e:d0:c9:5e:92:61:4a:a5:55:2c:7b: cf:ab:0e:a3:cb:06:2d:82:8c:07:19:0d:7f:bd:55:54:b1:41: f8:f6:38:d0:67:47:50:8e:cf:22:ae:59:48:63:fd:92:9b:03: ed:1b:bc:06:29:d7:6b:bd:5f:48:2c:87:56:d7:20:1a:df:d0: 5b:08:b4:09:bc:ae:5c:a1:d4:8e:b5:d5:f0:51:5c:14:3e:5b: bf:a0:8d:4b:1c:88:50:2b:87:29:e5:3e:17:63:f5:65:0b:5a: 5d:59:bf:4a:9c:73:b7:04:ad:c8:0b:bb:82:5c:90:e3:bb:a2: 28:30:82:3d:95:e4:80:f3:59:3a:68:b6:f3:bf:83:d0:d7:78: 42:c4:e7:76:07:fa:16:21:c2:e8:7d:d2:3b:2f:fa:b6:4d:96: 0e:7d:e0:57:10:e7:86:58:75:84:e5:39:af:72:e7:91:d0:34: 71:b9:07:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG5i3XftCOVE2HW0e52+XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMjQzNGM3M2EwZWVhMjJjNmU0NDEwNzJlOTNkYjc3Yzdl OGEyZjEwHhcNMjUxMjA2MTAwMTAzWhcNMjUxMjA3MTAwMTAzWjAzMTEwLwYDVQQD EygxOTc4OTIwMDFhM2Y2YTMyYTU3M2VlZTFmMmNmZjRmYWY1YWU3NmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1JZ1ODAZCFQ3TCPuQ5fa6ywyWZM RrSlmDCHTWDzHTq5o3WtZapVB3SGQHHZm73fgPjl4yDoY1rx9UQ7E065ItXpRU6x nRHTCxZ/lkG/Q96LoE2kN9dv8IoZJZgxBqp6uVevC2t3OwcIX2VMhYkGzMUlo7vt 2tcdIMjvrzcX/4ShEPeoIHIED4+RSKmGIm+P+UyJRZWPDKnSrNLdnWSEUJCdYabf 9oAYiuqQgZz5S8ve5rb7MU1Y03X4/+U8tc7deK0pt3bPP4Mbi/q3x6n+iMQCN1xK CZlA9fNKbvekdOOhjBQUWrZBifbMgLIM5FFrpMLLI07lWqr9QPtQOZoVlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBl4kgAaP2oypXPu4fLP9Pr1rnb3MB8GA1UdIwQY MBaAFAAkNMc6DuoixuRBBy6T23fH6KLxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUNRMHh6b082aUxHNUVFSExwUGJkOGZvb3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi80MDNkZGQtYzJkNS00YjU0LTk3M2Et MmI3YTc5NGQ1Nzk1LzEvQUNRMHh6b082aUxHNUVFSExwUGJkOGZvb3ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi80MDNkZGQtYzJkNS00YjU0LTk3M2EtMmI3YTc5NGQ1Nzk1 LzEvQUNRMHh6b082aUxHNUVFSExwUGJkOGZvb3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtIAi3Npa yZ+cybj5I9a9YLsOrd+Mo17YvbKIDGaoZYsqKL20+07LuoeSdkXmCKyo7KUelUaX 9W26EGU8BBvYqsHOMorZNpvS7yQQ2Gtr537QyV6SYUqlVSx7z6sOo8sGLYKMBxkN f71VVLFB+PY40GdHUI7PIq5ZSGP9kpsD7Ru8BinXa71fSCyHVtcgGt/QWwi0Cbyu XKHUjrXV8FFcFD5bv6CNSxyIUCuHKeU+F2P1ZQtaXVm/SpxztwStyAu7glyQ47ui KDCCPZXkgPNZOmi287+D0Nd4QsTndgf6FiHC6H3SOy/6tk2WDn3gVxDnhlh1hOU5 r3LnkdA0cbkHug== -----END CERTIFICATE-----Generated at Sat Dec 6 13:23:01 2025 by rpki-client