This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.mft File: _Acu4lFaB8Zn4cXP3AIQ5lgbCXs.mft (raw, json) Hash identifier: QSB/5hGwc1OvLk/U4JRS3U7x+r8KHJuKrxLmVpfgITY= Subject key identifier: 8C:4D:E3:DD:19:3A:AB:C2:74:8D:81:FA:BF:B3:48:77:56:D8:0A:C7 Authority key identifier: FC:07:2E:E2:51:5A:07:C6:67:E1:C5:CF:DC:02:10:E6:58:1B:09:7B Certificate issuer: /CN=fc072ee2515a07c667e1c5cfdc0210e6581b097b Certificate serial: 019AF2772350BF0628F26B59B1AD200FF168 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.mft Manifest number: 14A0 Signing time: Sat 06 Dec 2025 07:01:25 +0000 Manifest this update: Sat 06 Dec 2025 07:01:25 +0000 Manifest next update: Sun 07 Dec 2025 07:01:25 +0000 Files and hashes: 1: ZmTI_BE0CxW812diBboPemqYE3k.roa (hash: 8pQSyVxeeGwYbTb0adthXkVgEKcNeH2p/++sCFVOF1Y=) 2: _Acu4lFaB8Zn4cXP3AIQ5lgbCXs.crl (hash: lrZL28JDy1cSt0wbFmhyfIthkrXbI6F98nX05LzTVwo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.mft rsync://rpki.ripe.net/repository/DEFAULT/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:23:50:bf:06:28:f2:6b:59:b1:ad:20:0f:f1:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc072ee2515a07c667e1c5cfdc0210e6581b097b Validity Not Before: Dec 6 07:01:25 2025 GMT Not After : Dec 7 07:01:25 2025 GMT Subject: CN=8c4de3dd193aabc2748d81fabfb3487756d80ac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:35:90:f6:86:9e:50:53:06:7a:e0:2b:ce:77: b0:05:e1:30:bf:36:4f:f4:bd:45:84:48:8b:f8:cc: 7c:03:ce:9c:ef:a4:c9:3a:67:36:f8:20:14:4c:d7: f1:82:47:be:4d:3c:8d:a5:3d:e1:b8:c2:25:20:e9: a1:ab:c4:98:a6:18:de:49:9a:41:1c:b3:e5:1f:fc: 4c:9b:8e:7d:24:b6:a2:59:8d:77:af:2a:de:89:9d: b7:56:04:db:24:4d:d5:54:5e:e6:70:6b:e7:96:36: ad:ee:34:5c:17:9b:4f:32:4b:6d:2e:6a:1d:22:96: fb:ef:ac:40:2a:f7:65:23:90:dd:03:c2:05:65:76: 44:c5:01:a3:03:c6:ec:e8:62:39:07:a7:57:9a:c4: 41:ff:db:bc:11:c2:3e:4c:1b:3b:5a:1c:a3:a5:25: 73:fb:27:4f:e5:5e:d9:73:3d:05:f4:fe:eb:ad:d9: c3:d8:d6:40:8d:5d:be:ac:8e:ac:bc:67:f9:73:e0: 71:13:c9:66:35:a5:51:6d:eb:b7:cc:d5:6a:9b:be: 53:da:d0:e4:20:32:af:da:fa:73:dc:7d:1b:c8:82: a4:42:f3:21:b5:54:ca:2c:41:cd:c1:69:56:ed:ec: 12:56:d0:a8:e2:23:8d:ba:2d:46:56:09:a0:35:22: 6f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:4D:E3:DD:19:3A:AB:C2:74:8D:81:FA:BF:B3:48:77:56:D8:0A:C7 X509v3 Authority Key Identifier: keyid:FC:07:2E:E2:51:5A:07:C6:67:E1:C5:CF:DC:02:10:E6:58:1B:09:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:da:0c:25:02:8b:c2:f2:0b:14:18:48:9e:39:cf:45:21:84: c6:bb:e0:95:37:1c:7e:ff:fe:83:ef:94:f4:ca:e2:87:cb:bd: 32:63:28:6f:f0:5e:24:4d:b9:5e:c4:64:c6:27:1d:29:47:4f: e7:7d:82:1d:6d:d8:59:fc:11:57:78:02:56:21:1f:82:d9:13: 41:b2:c9:d0:e8:77:f0:c0:75:1f:f4:f9:d7:ce:a6:1f:6c:d7: e0:e7:2f:75:2a:09:ec:f7:de:d0:91:1b:f4:36:6b:c0:f4:71: 3e:64:43:b4:1d:34:ab:c8:89:3c:1a:bb:1d:5c:aa:d6:cb:ea: e6:65:47:8c:1e:e8:2d:0e:60:fb:87:56:08:ec:c0:2e:e0:5b: 0f:14:6a:b4:e1:f5:c7:55:c8:e6:30:ae:63:08:ac:3a:2c:86: f7:ac:a2:b9:d9:a2:1b:40:b1:b4:ad:a2:2e:e9:68:85:44:a0: 4c:2b:46:7c:53:a2:17:26:56:38:34:e6:c5:a3:16:15:df:17: 16:b8:8c:18:2a:11:fc:97:6b:e1:43:6e:ae:f1:e0:0b:b2:84: 09:e1:14:fb:ab:54:ef:dc:95:aa:97:e8:eb:c4:20:cf:4d:10: 62:4a:15:a8:44:a1:6b:96:e4:01:5b:17:a2:79:f9:b3:68:dc: 77:38:8a:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydyNQvwYo8mtZsa0gD/FoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMDcyZWUyNTE1YTA3YzY2N2UxYzVjZmRjMDIxMGU2NTgx YjA5N2IwHhcNMjUxMjA2MDcwMTI1WhcNMjUxMjA3MDcwMTI1WjAzMTEwLwYDVQQD Eyg4YzRkZTNkZDE5M2FhYmMyNzQ4ZDgxZmFiZmIzNDg3NzU2ZDgwYWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTWQ9oaeUFMGeuArznewBeEwvzZP 9L1FhEiL+Mx8A86c76TJOmc2+CAUTNfxgke+TTyNpT3huMIlIOmhq8SYphjeSZpB HLPlH/xMm459JLaiWY13ryreiZ23VgTbJE3VVF7mcGvnljat7jRcF5tPMkttLmod Ipb776xAKvdlI5DdA8IFZXZExQGjA8bs6GI5B6dXmsRB/9u8EcI+TBs7WhyjpSVz +ydP5V7Zcz0F9P7rrdnD2NZAjV2+rI6svGf5c+BxE8lmNaVRbeu3zNVqm75T2tDk IDKv2vpz3H0byIKkQvMhtVTKLEHNwWlW7ewSVtCo4iONui1GVgmgNSJvNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIxN490ZOqvCdI2B+r+zSHdW2ArHMB8GA1UdIwQY MBaAFPwHLuJRWgfGZ+HFz9wCEOZYGwl7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0FjdTRsRmFCOFpuNGNYUDNBSVE1bGdiQ1hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xM2ZmNDktNzRhNS00ZjAxLWJjNmYt YzRiY2YxNDcxYjVhLzEvX0FjdTRsRmFCOFpuNGNYUDNBSVE1bGdiQ1hzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8xM2ZmNDktNzRhNS00ZjAxLWJjNmYtYzRiY2YxNDcxYjVh LzEvX0FjdTRsRmFCOFpuNGNYUDNBSVE1bGdiQ1hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA9oMJQKL wvILFBhInjnPRSGExrvglTccfv/+g++U9Mrih8u9MmMob/BeJE25XsRkxicdKUdP 532CHW3YWfwRV3gCViEfgtkTQbLJ0Oh38MB1H/T5186mH2zX4OcvdSoJ7Pfe0JEb 9DZrwPRxPmRDtB00q8iJPBq7HVyq1svq5mVHjB7oLQ5g+4dWCOzALuBbDxRqtOH1 x1XI5jCuYwisOiyG96yiudmiG0CxtK2iLulohUSgTCtGfFOiFyZWODTmxaMWFd8X FriMGCoR/Jdr4UNurvHgC7KECeEU+6tU79yVqpfo68Qgz00QYkoVqESha5bkAVsX onn5s2jcdziKlw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:34:49 2025 by rpki-client