This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft File: ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft (raw, json) Hash identifier: koSo8W3VMPadKNfi9UCzq9IHX5bjO1tjzvy0s88YMg0= Subject key identifier: 2D:D4:76:68:49:23:78:74:B5:4C:5A:FF:66:B5:6D:D9:55:3A:26:1A Authority key identifier: 00:2C:88:65:BC:2A:07:E4:AC:FE:B2:63:B4:D9:CF:62:46:0F:D5:23 Certificate issuer: /CN=002c8865bc2a07e4acfeb263b4d9cf62460fd523 Certificate serial: 019B292F2DC9BF7C9059317204630DECDBB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft Manifest number: 0DAE Signing time: Tue 16 Dec 2025 22:01:56 +0000 Manifest this update: Tue 16 Dec 2025 22:01:56 +0000 Manifest next update: Wed 17 Dec 2025 22:01:56 +0000 Files and hashes: 1: ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl (hash: dKtM6ctwlxiFa4fKdbGUjmWVGEbG0fp4sVAqGuPkOJQ=) 2: F8t05KMRne3MsUcmQpBcGXGBMI8.roa (hash: d6IcpYMjJ62EgVhlSLiumFte8BB2LXTHsEgOP/d/Rss=) 3: FXe_JPwCxokWG0F8sL8Vx_t96gE.roa (hash: 9THWoynL84G88vnVxVYdONxnlu6uMlCDE+r39l01xOU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:2f:2d:c9:bf:7c:90:59:31:72:04:63:0d:ec:db:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=002c8865bc2a07e4acfeb263b4d9cf62460fd523 Validity Not Before: Dec 16 22:01:56 2025 GMT Not After : Dec 17 22:01:56 2025 GMT Subject: CN=2dd4766849237874b54c5aff66b56dd9553a261a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f6:50:0a:b4:64:8e:ab:8f:84:df:9d:47:b1: d4:e9:f0:94:1f:b6:20:f0:3c:d9:57:08:47:35:0f: e2:8e:9e:de:9e:1e:71:a4:a5:30:28:6e:db:81:56: 66:4d:1f:20:d9:9d:5b:1e:2e:ac:0d:ef:0e:3d:d4: 10:b7:f5:e3:bd:1b:25:82:15:09:fc:08:75:cb:33: 82:93:ce:a0:8a:12:f0:45:65:45:e0:9e:6a:af:48: e6:d3:fb:0b:22:36:c6:86:aa:05:03:dc:9e:f1:6c: d0:28:13:0b:9b:cd:8d:92:f2:41:fe:f0:bd:41:04: 9a:f8:d2:e0:b4:4c:23:c8:6a:d2:4e:e3:fd:4b:98: a1:ef:0b:7f:11:3b:a1:82:48:dd:7e:4f:2c:c4:c8: 56:66:e5:f8:a6:a6:da:dc:47:56:f9:f9:8a:25:14: 8c:fc:9c:74:db:e4:fe:80:cd:bc:3e:a8:44:73:ff: 05:e0:2b:ec:88:6e:77:90:d5:92:bd:18:de:65:a8: b8:28:68:bb:a3:42:56:7d:6e:2f:c5:94:e4:e1:06: 50:dc:a4:5e:db:db:6b:01:74:68:13:79:7b:0d:07: 24:84:28:32:ab:6e:c1:49:71:24:ba:41:d2:3f:a4: d5:65:bc:ad:ad:6b:95:40:0a:f7:e6:82:e0:81:c0: e0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D4:76:68:49:23:78:74:B5:4C:5A:FF:66:B5:6D:D9:55:3A:26:1A X509v3 Authority Key Identifier: keyid:00:2C:88:65:BC:2A:07:E4:AC:FE:B2:63:B4:D9:CF:62:46:0F:D5:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:3c:1d:5f:26:dd:3d:e5:31:62:de:1c:c8:a5:07:f7:7e:07: f2:d4:76:81:77:b3:78:c4:01:0c:b5:38:c8:6b:c8:61:7c:1f: c0:ed:06:4d:a9:73:ac:8e:83:23:90:b5:2d:2d:0d:85:4f:b3: 6b:76:ba:c1:ec:c0:d7:cc:25:f6:cf:e7:9d:f7:26:d0:2b:9f: 9e:6d:ec:31:0f:f8:22:bc:71:52:f5:6b:3b:86:7d:f5:3d:ea: cc:ac:82:3d:6d:5a:84:09:9f:7a:4a:3d:a6:f2:6c:1e:1f:ed: d5:63:c9:f6:b0:4f:3c:c5:1c:1e:c8:f0:d2:ad:82:45:fd:78: b5:2f:e2:4f:09:a3:82:72:af:77:a8:ca:e8:81:89:da:5b:2c: bb:37:a5:7f:97:ae:77:5d:53:8c:79:f8:a5:ac:74:05:4b:e3: e7:c2:f9:b9:0f:75:ea:21:76:ac:8c:7a:eb:4e:e1:55:7b:49: be:7c:89:68:f7:31:a6:88:3c:c5:34:21:9b:da:ba:ff:37:69: ec:87:8f:07:e7:6b:7d:c5:98:d7:87:2d:47:62:05:cc:47:6c: 61:f4:06:f0:c3:c4:e9:20:a9:10:eb:9d:aa:46:00:b1:fd:f2: 8e:d2:a9:20:e1:82:7f:dd:40:d9:08:b2:a2:a7:fc:66:ae:63: 39:26:da:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspLy3Jv3yQWTFyBGMN7NuxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMmM4ODY1YmMyYTA3ZTRhY2ZlYjI2M2I0ZDljZjYyNDYw ZmQ1MjMwHhcNMjUxMjE2MjIwMTU2WhcNMjUxMjE3MjIwMTU2WjAzMTEwLwYDVQQD EygyZGQ0NzY2ODQ5MjM3ODc0YjU0YzVhZmY2NmI1NmRkOTU1M2EyNjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/ZQCrRkjquPhN+dR7HU6fCUH7Yg 8DzZVwhHNQ/ijp7enh5xpKUwKG7bgVZmTR8g2Z1bHi6sDe8OPdQQt/XjvRslghUJ /Ah1yzOCk86gihLwRWVF4J5qr0jm0/sLIjbGhqoFA9ye8WzQKBMLm82NkvJB/vC9 QQSa+NLgtEwjyGrSTuP9S5ih7wt/ETuhgkjdfk8sxMhWZuX4pqba3EdW+fmKJRSM /Jx02+T+gM28PqhEc/8F4CvsiG53kNWSvRjeZai4KGi7o0JWfW4vxZTk4QZQ3KRe 29trAXRoE3l7DQckhCgyq27BSXEkukHSP6TVZbytrWuVQAr35oLggcDgOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3UdmhJI3h0tUxa/2a1bdlVOiYaMB8GA1UdIwQY MBaAFAAsiGW8KgfkrP6yY7TZz2JGD9UjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUN5SVpid3FCLVNzX3JKanROblBZa1lQMVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9kN2ZhZGMtMWViZi00MmRhLTliMjIt YTYwYzIwYzhmNzE3LzEvQUN5SVpid3FCLVNzX3JKanROblBZa1lQMVNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9kN2ZhZGMtMWViZi00MmRhLTliMjItYTYwYzIwYzhmNzE3 LzEvQUN5SVpid3FCLVNzX3JKanROblBZa1lQMVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMDwdXybd PeUxYt4cyKUH934H8tR2gXezeMQBDLU4yGvIYXwfwO0GTalzrI6DI5C1LS0NhU+z a3a6wezA18wl9s/nnfcm0Cufnm3sMQ/4IrxxUvVrO4Z99T3qzKyCPW1ahAmfeko9 pvJsHh/t1WPJ9rBPPMUcHsjw0q2CRf14tS/iTwmjgnKvd6jK6IGJ2lssuzelf5eu d11TjHn4pax0BUvj58L5uQ916iF2rIx6607hVXtJvnyJaPcxpog8xTQhm9q6/zdp 7IePB+drfcWY14ctR2IFzEdsYfQG8MPE6SCpEOudqkYAsf3yjtKpIOGCf91A2Qiy oqf8Zq5jOSbamg== -----END CERTIFICATE-----Generated at Wed Dec 17 03:05:16 2025 by rpki-client