This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft File: Ac8qcbLHv1QcbMBBUc0CB402mSY.mft (raw, json) Hash identifier: ZlBc3FKk6lOSE8Q4DJ5e1++k3nSMeK1j3H27hEUIVGI= Subject key identifier: C3:1B:85:D9:C0:E6:DD:68:88:90:A2:77:D5:4F:BF:D1:92:B6:57:C4 Authority key identifier: 01:CF:2A:71:B2:C7:BF:54:1C:6C:C0:41:51:CD:02:07:8D:36:99:26 Certificate issuer: /CN=01cf2a71b2c7bf541c6cc04151cd02078d369926 Certificate serial: 019AF42DC17C425A85B5FDBEFE84FF6407F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft Manifest number: 0469 Signing time: Sat 06 Dec 2025 15:00:30 +0000 Manifest this update: Sat 06 Dec 2025 15:00:30 +0000 Manifest next update: Sun 07 Dec 2025 15:00:30 +0000 Files and hashes: 1: Ac8qcbLHv1QcbMBBUc0CB402mSY.crl (hash: DDxjTsU2zrfoWvSqM2qfsZ0dt5CWf6YF9dx9zCoAluM=) 2: rygZTFCBNWEkh81f14PWqNNI1kI.roa (hash: Nw/ZIl2uHVeZMov8V5+Nv9xGTV5/WVlGxw5x2u+Et/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:c1:7c:42:5a:85:b5:fd:be:fe:84:ff:64:07:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01cf2a71b2c7bf541c6cc04151cd02078d369926 Validity Not Before: Dec 6 15:00:30 2025 GMT Not After : Dec 7 15:00:30 2025 GMT Subject: CN=c31b85d9c0e6dd688890a277d54fbfd192b657c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fe:1f:87:78:df:0b:0b:00:45:db:7a:9b:c7: 9c:38:08:c7:e1:34:d1:7a:3f:11:a7:f1:31:34:41: 7a:e6:35:29:31:31:bd:f4:fa:9f:16:4e:54:11:64: 0c:2e:43:a2:00:a2:72:6d:21:12:45:c1:5d:4c:8b: cc:71:1e:f8:58:a6:fb:72:c3:50:72:2c:11:00:f4: 12:91:87:59:0c:12:42:aa:d5:fc:23:47:fd:ac:96: d0:82:33:80:d9:b5:13:ce:b4:f8:66:49:da:85:66: 36:70:89:3e:2f:f5:b2:ba:aa:29:f5:66:97:62:24: 5c:c9:f1:75:d0:32:03:3d:18:5a:58:42:f1:5d:08: 18:bf:38:9d:fd:56:e6:49:22:97:16:00:51:66:8c: 98:92:9b:af:ee:df:73:12:c6:e9:d4:5f:0c:ff:0c: da:28:63:56:56:77:c0:65:1c:99:1a:dc:4d:d4:e6: 4e:2e:2c:34:d5:d5:c1:89:f5:79:71:42:ac:88:21: 1e:1b:d9:14:3a:17:75:59:25:d5:8c:58:22:6c:21: 82:bd:bb:6a:b5:11:18:99:cb:cf:76:d6:c6:e0:b8: 35:04:ca:bb:a5:27:f5:ed:68:17:22:9b:40:e8:75: 08:80:6a:4c:17:0a:8a:70:35:93:f9:17:b7:e5:fc: e2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:1B:85:D9:C0:E6:DD:68:88:90:A2:77:D5:4F:BF:D1:92:B6:57:C4 X509v3 Authority Key Identifier: keyid:01:CF:2A:71:B2:C7:BF:54:1C:6C:C0:41:51:CD:02:07:8D:36:99:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:7c:98:a4:26:26:b0:63:c0:ff:e5:6f:ec:45:ed:76:64:6b: 78:84:2c:79:a4:ee:7b:38:48:6c:79:a0:a1:18:85:9b:da:0a: 45:c3:f2:83:27:00:0a:dc:f4:fc:84:8a:23:d3:46:22:99:32: 4a:16:76:44:6f:15:c4:ad:a9:5f:9b:bf:da:d8:77:e3:1f:7d: 35:e5:7d:23:8c:69:6f:9d:7b:d5:4a:0b:e0:c9:a3:c8:18:6b: 61:51:37:03:30:24:d7:5d:53:fd:4b:19:cf:9e:10:2d:45:81: e3:bf:f4:9b:9d:f8:89:ee:32:98:8f:5b:7b:91:23:a6:9d:84: 66:aa:88:28:dc:06:4b:14:d7:57:f5:16:22:6d:c8:f9:8d:30: e0:a7:24:11:db:b5:0a:25:c3:8d:75:a0:f7:1f:e6:c6:78:b9: 17:34:88:10:b1:73:29:26:d1:f7:45:5e:91:00:4c:4c:4a:a0: fa:f9:6c:e8:5f:7b:34:49:bd:4e:c0:ad:40:fc:8a:4d:9d:18: c5:32:fa:e8:d4:31:d1:c7:e6:7b:38:cb:fd:f2:2a:f9:ec:56: b3:1a:d6:68:2d:a3:7a:15:0c:b6:86:29:d5:87:76:9c:35:c5: bc:53:39:77:64:fe:23:7a:ff:67:fb:0f:dc:9a:94:b7:40:9e: 7f:41:94:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LcF8QlqFtf2+/oT/ZAfzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxY2YyYTcxYjJjN2JmNTQxYzZjYzA0MTUxY2QwMjA3OGQz Njk5MjYwHhcNMjUxMjA2MTUwMDMwWhcNMjUxMjA3MTUwMDMwWjAzMTEwLwYDVQQD EyhjMzFiODVkOWMwZTZkZDY4ODg5MGEyNzdkNTRmYmZkMTkyYjY1N2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvP4fh3jfCwsARdt6m8ecOAjH4TTR ej8Rp/ExNEF65jUpMTG99PqfFk5UEWQMLkOiAKJybSESRcFdTIvMcR74WKb7csNQ ciwRAPQSkYdZDBJCqtX8I0f9rJbQgjOA2bUTzrT4ZknahWY2cIk+L/Wyuqop9WaX YiRcyfF10DIDPRhaWELxXQgYvzid/VbmSSKXFgBRZoyYkpuv7t9zEsbp1F8M/wza KGNWVnfAZRyZGtxN1OZOLiw01dXBifV5cUKsiCEeG9kUOhd1WSXVjFgibCGCvbtq tREYmcvPdtbG4Lg1BMq7pSf17WgXIptA6HUIgGpMFwqKcDWT+Re35fzi2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMMbhdnA5t1oiJCid9VPv9GStlfEMB8GA1UdIwQY MBaAFAHPKnGyx79UHGzAQVHNAgeNNpkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWM4cWNiTEh2MVFjYk1CQlVjMENCNDAybVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jMjRlZTEtMmNiMi00OTA3LTgwNDgt YjBmNGZiZTI2YjYxLzEvQWM4cWNiTEh2MVFjYk1CQlVjMENCNDAybVNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9jMjRlZTEtMmNiMi00OTA3LTgwNDgtYjBmNGZiZTI2YjYx LzEvQWM4cWNiTEh2MVFjYk1CQlVjMENCNDAybVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdXyYpCYm sGPA/+Vv7EXtdmRreIQseaTuezhIbHmgoRiFm9oKRcPygycACtz0/ISKI9NGIpky ShZ2RG8VxK2pX5u/2th34x99NeV9I4xpb5171UoL4MmjyBhrYVE3AzAk111T/UsZ z54QLUWB47/0m534ie4ymI9be5Ejpp2EZqqIKNwGSxTXV/UWIm3I+Y0w4KckEdu1 CiXDjXWg9x/mxni5FzSIELFzKSbR90VekQBMTEqg+vls6F97NEm9TsCtQPyKTZ0Y xTL66NQx0cfmezjL/fIq+exWsxrWaC2jehUMtoYp1Yd2nDXFvFM5d2T+I3r/Z/sP 3JqUt0Cef0GUCA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:43:38 2025 by rpki-client