This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft File: AcS3hNgWbovQ9H1yD95frsFkWzQ.mft (raw, json) Hash identifier: pogJmBhYVDdm15ZcZ4Q4F+N7GmDae8bt0Hq5nLsBGso= Subject key identifier: 73:0F:15:2F:2F:80:60:EB:91:89:8B:05:AC:53:D5:79:B2:CB:BB:22 Authority key identifier: 01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34 Certificate issuer: /CN=01c4b784d8166e8bd0f47d720fde5faec1645b34 Certificate serial: 019AF5E59AC051900B7FB5642E0A0CAF5640 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 23:00:56 +0000 Manifest this update: Sat 06 Dec 2025 23:00:56 +0000 Manifest next update: Sun 07 Dec 2025 23:00:56 +0000 Files and hashes: 1: AcS3hNgWbovQ9H1yD95frsFkWzQ.crl (hash: vxA18HR2xyaDVTU0fGTEJknyOsS82YEJZu/PIWlmvoM=) 2: TfDOBJVmJoj40V_l3LjkaTEjm8g.roa (hash: ReTHm2rRZcfjOGQDNdmXkBd+jk6YyXS+LSWab0KtASc=) 3: v50wWhyCI7hTEJpByG9mHooOhqA.roa (hash: E6PQDvh39GUQ1c6SbkD744Bu9C+vTY8Ul4lMsKxnnNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:9a:c0:51:90:0b:7f:b5:64:2e:0a:0c:af:56:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01c4b784d8166e8bd0f47d720fde5faec1645b34 Validity Not Before: Dec 6 23:00:56 2025 GMT Not After : Dec 7 23:00:56 2025 GMT Subject: CN=730f152f2f8060eb91898b05ac53d579b2cbbb22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:77:cc:ad:b0:e7:8e:51:89:b9:b5:e3:e2:21: e7:b9:d8:ab:3d:ff:ca:3d:82:e6:02:27:50:0a:7b: 82:53:46:f3:41:6f:87:ec:1b:e7:bb:88:f0:5d:12: 10:b3:8e:54:7f:d9:44:00:8d:6f:a5:82:eb:39:f4: ef:3c:09:b0:d1:e5:bf:05:5c:97:c1:a2:05:d5:de: 29:32:bc:63:45:0d:5e:a3:f8:f1:15:86:78:b2:85: 85:96:2d:ac:45:ce:22:e7:94:4b:82:f9:2f:b2:10: 87:d4:bb:94:49:dc:5c:11:7b:b4:2b:f7:47:e3:4c: d2:84:5e:e8:1c:a1:1d:16:8a:fc:8e:62:23:6c:18: e7:a9:c4:0c:0b:16:12:f2:a1:7b:e3:e8:bf:f8:6b: 86:34:b0:5d:bf:c3:a7:05:fa:74:94:2e:d2:f3:f4: 96:a5:7b:cd:46:ff:73:3e:b7:76:57:f8:28:cf:42: 0a:26:d1:10:e6:3b:86:3c:1e:f1:c9:ad:c6:da:fc: 46:97:d3:8e:cb:33:c7:b1:df:dd:ed:22:44:5c:78: 4e:91:e4:be:8c:e6:e4:b7:e1:1c:df:9e:43:b2:88: c2:02:a9:d9:a3:82:b7:91:ec:6f:9f:70:06:63:e7: 73:dc:0e:81:80:25:07:15:16:1d:bf:cd:22:52:69: f2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:0F:15:2F:2F:80:60:EB:91:89:8B:05:AC:53:D5:79:B2:CB:BB:22 X509v3 Authority Key Identifier: keyid:01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:25:a4:1e:07:c7:76:d6:87:5d:80:08:49:67:f8:bb:7b:f4: 2a:5b:54:9a:51:ef:b1:63:45:d7:04:a2:e4:68:e9:92:ac:8c: c5:57:33:5d:98:54:a2:b3:1f:48:5b:c6:7b:c5:85:1e:4e:34: 9f:20:f8:58:01:82:2b:eb:21:14:bb:24:4e:0e:3e:9a:5d:4b: 84:3e:72:3f:ec:ed:d4:b0:56:50:d9:d2:97:86:eb:84:3e:46: 13:9d:a9:91:28:b6:98:85:c1:5e:bb:55:0f:16:09:57:06:d5: 69:2a:ba:b0:61:1c:5c:44:79:10:06:19:f9:d9:db:22:14:e7: e8:6a:e7:97:8f:09:0d:9f:49:d0:50:29:4b:08:aa:93:13:c8: 14:d5:08:7d:2f:ba:40:7c:b0:0b:0a:f4:ea:e5:dd:ec:0e:ee: 2d:53:7c:b8:53:7d:2d:a3:57:ef:6d:c9:0e:df:24:39:30:4f: c9:bd:af:26:98:64:15:b5:a6:12:ec:1a:2c:e6:f4:78:97:fd: b3:97:ba:a6:86:5a:c3:65:bb:4e:c7:be:29:fc:39:1b:aa:74: e1:54:c7:8f:8d:38:1e:ab:26:97:89:9e:60:e5:81:22:13:54: e8:ae:bf:e2:3a:2d:0c:55:3b:06:76:36:f7:37:da:a6:8c:40: 29:1d:af:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15ZrAUZALf7VkLgoMr1ZAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxYzRiNzg0ZDgxNjZlOGJkMGY0N2Q3MjBmZGU1ZmFlYzE2 NDViMzQwHhcNMjUxMjA2MjMwMDU2WhcNMjUxMjA3MjMwMDU2WjAzMTEwLwYDVQQD Eyg3MzBmMTUyZjJmODA2MGViOTE4OThiMDVhYzUzZDU3OWIyY2JiYjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHfMrbDnjlGJubXj4iHnudirPf/K PYLmAidQCnuCU0bzQW+H7Bvnu4jwXRIQs45Uf9lEAI1vpYLrOfTvPAmw0eW/BVyX waIF1d4pMrxjRQ1eo/jxFYZ4soWFli2sRc4i55RLgvkvshCH1LuUSdxcEXu0K/dH 40zShF7oHKEdFor8jmIjbBjnqcQMCxYS8qF74+i/+GuGNLBdv8OnBfp0lC7S8/SW pXvNRv9zPrd2V/goz0IKJtEQ5juGPB7xya3G2vxGl9OOyzPHsd/d7SJEXHhOkeS+ jObkt+Ec355DsojCAqnZo4K3kexvn3AGY+dz3A6BgCUHFRYdv80iUmny0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHMPFS8vgGDrkYmLBaxT1Xmyy7siMB8GA1UdIwQY MBaAFAHEt4TYFm6L0PR9cg/eX67BZFs0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWNTM2hOZ1dib3ZROUgxeUQ5NWZyc0ZrV3pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9mMmI4NDAtMmM4NS00NjViLThiOTMt NWI1YmViMTA1MTNiLzEvQWNTM2hOZ1dib3ZROUgxeUQ5NWZyc0ZrV3pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9mMmI4NDAtMmM4NS00NjViLThiOTMtNWI1YmViMTA1MTNi LzEvQWNTM2hOZ1dib3ZROUgxeUQ5NWZyc0ZrV3pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGyWkHgfH dtaHXYAISWf4u3v0KltUmlHvsWNF1wSi5GjpkqyMxVczXZhUorMfSFvGe8WFHk40 nyD4WAGCK+shFLskTg4+ml1LhD5yP+zt1LBWUNnSl4brhD5GE52pkSi2mIXBXrtV DxYJVwbVaSq6sGEcXER5EAYZ+dnbIhTn6Grnl48JDZ9J0FApSwiqkxPIFNUIfS+6 QHywCwr06uXd7A7uLVN8uFN9LaNX723JDt8kOTBPyb2vJphkFbWmEuwaLOb0eJf9 s5e6poZaw2W7Tse+Kfw5G6p04VTHj404Hqsml4meYOWBIhNU6K6/4jotDFU7BnY2 9zfapoxAKR2vHw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:48:19 2025 by rpki-client