This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft File: ANCpW-DmARCcsZiEJouiIERVx5A.mft (raw, json) Hash identifier: NEqQqZ5cXLrpiKZkoZz+8tWmXVXJ2wrZD4PIw4b0MoA= Subject key identifier: 5C:D1:3E:0E:4D:5F:85:D2:D1:04:20:07:0D:21:96:D8:EC:73:4A:2E Authority key identifier: 00:D0:A9:5B:E0:E6:01:10:9C:B1:98:84:26:8B:A2:20:44:55:C7:90 Certificate issuer: /CN=00d0a95be0e601109cb19884268ba2204455c790 Certificate serial: 019B3A8F80960CF63E35C5D68A6C762AAB74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANCpW-DmARCcsZiEJouiIERVx5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 07:00:41 +0000 Manifest this update: Sat 20 Dec 2025 07:00:41 +0000 Manifest next update: Sun 21 Dec 2025 07:00:41 +0000 Files and hashes: 1: ANCpW-DmARCcsZiEJouiIERVx5A.crl (hash: YR4QSs/Qi4oLnkr8NAonMRSmqgz1GOtv6595Pxn5YLo=) 2: n-jYW3TtB-3xqB2bSX1FBgJznUA.roa (hash: o6wnmb3KQIJ7ZwCfbyHPmnS166j6EiJX08Afnad5JbA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.crl rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft rsync://rpki.ripe.net/repository/DEFAULT/ANCpW-DmARCcsZiEJouiIERVx5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:80:96:0c:f6:3e:35:c5:d6:8a:6c:76:2a:ab:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00d0a95be0e601109cb19884268ba2204455c790 Validity Not Before: Dec 20 07:00:41 2025 GMT Not After : Dec 21 07:00:41 2025 GMT Subject: CN=5cd13e0e4d5f85d2d10420070d2196d8ec734a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:da:e1:b5:77:ac:1e:c8:ae:e5:ba:4a:34:ec: 60:0b:ca:ae:e3:a4:91:6c:24:60:a1:89:cd:b8:1a: 1f:56:5f:e0:49:be:a0:f3:08:99:92:4a:00:8d:54: 03:bb:a1:61:6c:4d:41:f4:df:41:14:3f:ba:31:80: ce:10:97:3d:7e:f0:30:db:8d:ff:28:d0:15:59:14: b4:28:58:34:6f:a3:66:1c:e9:95:ac:11:7e:8a:62: 74:f9:ce:0e:c6:55:99:86:2a:17:f5:9b:15:c7:3b: 71:75:75:a7:48:c6:87:88:01:0f:69:a1:4b:34:33: ef:c2:bb:cb:5d:4f:f3:9f:56:81:eb:eb:43:8b:08: 10:42:3d:2a:54:09:b1:8b:65:04:54:d7:c2:92:90: 09:96:02:e1:18:7a:77:d6:72:7e:f0:1f:97:98:3f: ac:74:b4:55:a4:51:d7:7f:6e:52:ab:14:84:5e:76: 77:f8:bf:a1:f8:6a:0f:9b:5b:24:40:aa:84:04:cb: 0d:7f:0b:8b:74:26:1f:08:f2:27:be:3a:8a:4f:2a: e2:0c:61:7d:87:4a:1f:df:fb:7e:73:22:e4:6a:76: b9:98:c9:7f:90:61:84:0e:01:45:af:da:8f:74:ca: 24:00:cb:83:16:2e:6c:94:8a:a7:39:f4:e0:8c:fe: 95:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D1:3E:0E:4D:5F:85:D2:D1:04:20:07:0D:21:96:D8:EC:73:4A:2E X509v3 Authority Key Identifier: keyid:00:D0:A9:5B:E0:E6:01:10:9C:B1:98:84:26:8B:A2:20:44:55:C7:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANCpW-DmARCcsZiEJouiIERVx5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:20:83:db:5e:24:fc:65:e7:18:44:b6:cf:4a:1d:60:23:2b: a8:8f:20:4d:b5:a8:0d:07:3b:8d:30:e4:82:f1:f9:44:02:27: c9:ad:71:4d:8a:18:f6:26:6a:68:ce:8a:a5:9d:fd:40:35:a8: 59:60:48:1f:13:02:12:4f:f2:1e:f5:48:5a:9f:f1:28:78:7e: f1:77:71:ea:a6:22:76:52:a4:2d:f9:c2:41:7f:ee:71:b0:c0: b2:d8:56:4a:af:1e:3b:4d:be:21:83:e8:3c:29:e1:0d:18:63: 47:0d:b2:65:4a:22:c2:59:07:57:6d:be:d2:bf:3c:3b:27:56: 3d:51:c9:07:4f:b0:d7:ff:13:70:f9:d9:b1:29:16:ad:c0:4f: 63:c0:af:93:0b:0d:f6:40:a4:35:71:04:1b:68:80:cd:15:d9: d7:5c:a4:4b:0c:fb:cb:18:65:57:df:ef:f5:13:a2:ed:4a:9d: f0:ba:e8:db:f0:05:90:d1:2c:c1:64:89:e5:21:bb:8f:31:77: 8b:24:26:bb:67:2a:1d:75:0b:c4:f8:d9:bc:5e:cd:fa:40:73: 24:6d:7f:d3:eb:70:59:01:9a:6c:25:b9:a5:5c:3f:03:b0:51: 6b:a0:ec:5c:ea:79:0e:39:12:8b:25:ca:92:1e:ca:25:ed:26: a8:c8:40:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j4CWDPY+NcXWimx2Kqt0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwZDBhOTViZTBlNjAxMTA5Y2IxOTg4NDI2OGJhMjIwNDQ1 NWM3OTAwHhcNMjUxMjIwMDcwMDQxWhcNMjUxMjIxMDcwMDQxWjAzMTEwLwYDVQQD Eyg1Y2QxM2UwZTRkNWY4NWQyZDEwNDIwMDcwZDIxOTZkOGVjNzM0YTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtrhtXesHsiu5bpKNOxgC8qu46SR bCRgoYnNuBofVl/gSb6g8wiZkkoAjVQDu6FhbE1B9N9BFD+6MYDOEJc9fvAw243/ KNAVWRS0KFg0b6NmHOmVrBF+imJ0+c4OxlWZhioX9ZsVxztxdXWnSMaHiAEPaaFL NDPvwrvLXU/zn1aB6+tDiwgQQj0qVAmxi2UEVNfCkpAJlgLhGHp31nJ+8B+XmD+s dLRVpFHXf25SqxSEXnZ3+L+h+GoPm1skQKqEBMsNfwuLdCYfCPInvjqKTyriDGF9 h0of3/t+cyLkana5mMl/kGGEDgFFr9qPdMokAMuDFi5slIqnOfTgjP6V8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFzRPg5NX4XS0QQgBw0hltjsc0ouMB8GA1UdIwQY MBaAFADQqVvg5gEQnLGYhCaLoiBEVceQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU5DcFctRG1BUkNjc1ppRUpvdWlJRVJWeDVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8yZTVhMzQtNWFlMy00Y2JlLTkwOTAt ZDFmZDRkYTJkNWNiLzEvQU5DcFctRG1BUkNjc1ppRUpvdWlJRVJWeDVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My8yZTVhMzQtNWFlMy00Y2JlLTkwOTAtZDFmZDRkYTJkNWNi LzEvQU5DcFctRG1BUkNjc1ppRUpvdWlJRVJWeDVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlSCD214k /GXnGES2z0odYCMrqI8gTbWoDQc7jTDkgvH5RAInya1xTYoY9iZqaM6KpZ39QDWo WWBIHxMCEk/yHvVIWp/xKHh+8Xdx6qYidlKkLfnCQX/ucbDAsthWSq8eO02+IYPo PCnhDRhjRw2yZUoiwlkHV22+0r88OydWPVHJB0+w1/8TcPnZsSkWrcBPY8CvkwsN 9kCkNXEEG2iAzRXZ11ykSwz7yxhlV9/v9ROi7Uqd8Lro2/AFkNEswWSJ5SG7jzF3 iyQmu2cqHXULxPjZvF7N+kBzJG1/0+twWQGabCW5pVw/A7BRa6DsXOp5DjkSiyXK kh7KJe0mqMhAGA== -----END CERTIFICATE-----Generated at Sat Dec 20 15:04:06 2025 by rpki-client