This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft File: AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft (raw, json) Hash identifier: 1IXJteZonrzhr0Q2BdddzyVO9E2Oq9QmM7sBJshXXC4= Subject key identifier: B4:5A:25:B4:A2:50:07:CB:A3:40:05:7F:87:12:2D:17:68:F7:E3:46 Authority key identifier: 01:C3:52:11:8F:D5:F7:54:54:CF:C6:1B:E6:1A:42:AB:EF:4D:C4:F8 Certificate issuer: /CN=01c352118fd5f75454cfc61be61a42abef4dc4f8 Certificate serial: 019AF49BDCE19C6CCDC003CC0E84401F96CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft Manifest number: 10F5 Signing time: Sat 06 Dec 2025 17:00:46 +0000 Manifest this update: Sat 06 Dec 2025 17:00:46 +0000 Manifest next update: Sun 07 Dec 2025 17:00:46 +0000 Files and hashes: 1: AcNSEY_V91RUz8Yb5hpCq-9NxPg.crl (hash: gKpmwkeD4q1X2z1TYnsrnV03/Qh5bfzlHU80VSy95YU=) 2: lnFBPEwYXwbrEbBc_1U4hqBIiD0.roa (hash: pkORWbBvX/TB59ufAxJ53BtkrDGiG+iuAuMuYoIsXog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:dc:e1:9c:6c:cd:c0:03:cc:0e:84:40:1f:96:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01c352118fd5f75454cfc61be61a42abef4dc4f8 Validity Not Before: Dec 6 17:00:46 2025 GMT Not After : Dec 7 17:00:46 2025 GMT Subject: CN=b45a25b4a25007cba340057f87122d1768f7e346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:18:35:cf:a8:7e:75:31:17:26:6d:dc:af:af: 8a:b2:f7:f1:02:30:75:ed:95:f4:dc:d4:ab:26:7f: 02:a8:c6:f3:bd:d5:7f:63:c6:4f:a3:ac:41:61:e6: ca:21:4a:73:d7:81:c4:2b:bf:2f:ce:e8:57:3a:14: af:ed:91:51:d5:63:8b:f2:7d:92:b8:f2:6f:c5:d2: b5:9b:2b:4a:92:a9:bf:42:56:8d:c2:f8:06:15:29: 87:d8:3f:27:c1:30:f6:81:9b:87:ae:f3:1b:0a:88: 40:69:2e:38:d1:64:5d:86:cb:26:ba:dd:b6:9f:dd: 73:ba:88:3a:2b:9e:8b:2e:45:51:9d:7b:0c:d0:e5: 23:dc:86:0b:13:be:30:b5:60:6f:8d:71:33:74:cc: 24:40:4f:8f:bc:66:9b:69:d4:5c:8f:6e:7c:bf:88: 86:b5:c6:41:82:fd:14:16:fa:da:ff:f7:6a:0a:ec: dd:70:a7:cc:99:38:56:bd:ee:b7:9e:f9:ab:6e:0e: 49:c3:4a:04:3b:25:b5:34:ed:4c:10:4e:25:2f:6b: 3f:29:5e:5b:a3:77:9b:cf:c9:33:da:b4:e0:71:ba: 94:bb:11:db:82:a4:75:62:de:35:d7:0e:e5:a4:5c: d9:fe:c6:41:a5:f8:99:6a:47:59:53:eb:88:a9:ac: 1f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:5A:25:B4:A2:50:07:CB:A3:40:05:7F:87:12:2D:17:68:F7:E3:46 X509v3 Authority Key Identifier: keyid:01:C3:52:11:8F:D5:F7:54:54:CF:C6:1B:E6:1A:42:AB:EF:4D:C4:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:74:12:dd:37:80:79:11:0c:d3:de:09:40:73:d7:a0:ef:9b: b8:b5:f0:ca:e7:9a:7a:c0:26:a8:e5:39:23:52:90:fd:68:e2: d2:54:66:50:8d:42:5c:74:2c:83:01:6c:45:c7:70:38:58:37: c2:62:4f:6d:75:a2:94:bd:84:1f:59:77:55:b5:1b:2b:1b:71: f8:3f:80:f6:88:ec:af:91:41:45:b5:7f:e1:ea:ba:e8:02:38: 67:88:7d:33:dc:79:fc:59:3b:75:12:0b:51:92:ff:30:13:e2: e5:d7:2c:09:e1:5b:02:cf:5a:9f:7f:1a:7e:ea:9e:f7:32:67: a6:46:10:da:3c:23:b5:be:02:a4:c0:f2:2a:89:c1:af:f4:bd: 68:e5:ea:6f:ba:24:59:33:ba:3e:f2:e2:d8:b7:88:bf:1e:42: 73:d3:00:f1:85:12:ef:d5:46:3c:3c:be:80:f2:72:d9:44:50: 3a:3e:f6:11:db:9a:4c:c2:a1:25:94:d1:f2:cf:af:a5:1a:f4: 3e:9e:c6:3c:64:9c:78:64:0e:7f:79:99:9d:c1:73:36:18:30: 88:f1:b9:20:b3:2e:82:0b:bb:36:ee:55:aa:73:a9:78:f0:4c: d8:a2:3f:58:81:ad:5e:c3:e2:f7:1a:e3:6e:e3:34:b6:bc:b6: d2:af:fe:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m9zhnGzNwAPMDoRAH5bMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxYzM1MjExOGZkNWY3NTQ1NGNmYzYxYmU2MWE0MmFiZWY0 ZGM0ZjgwHhcNMjUxMjA2MTcwMDQ2WhcNMjUxMjA3MTcwMDQ2WjAzMTEwLwYDVQQD EyhiNDVhMjViNGEyNTAwN2NiYTM0MDA1N2Y4NzEyMmQxNzY4ZjdlMzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhg1z6h+dTEXJm3cr6+KsvfxAjB1 7ZX03NSrJn8CqMbzvdV/Y8ZPo6xBYebKIUpz14HEK78vzuhXOhSv7ZFR1WOL8n2S uPJvxdK1mytKkqm/QlaNwvgGFSmH2D8nwTD2gZuHrvMbCohAaS440WRdhssmut22 n91zuog6K56LLkVRnXsM0OUj3IYLE74wtWBvjXEzdMwkQE+PvGabadRcj258v4iG tcZBgv0UFvra//dqCuzdcKfMmThWve63nvmrbg5Jw0oEOyW1NO1MEE4lL2s/KV5b o3ebz8kz2rTgcbqUuxHbgqR1Yt411w7lpFzZ/sZBpfiZakdZU+uIqawfmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLRaJbSiUAfLo0AFf4cSLRdo9+NGMB8GA1UdIwQY MBaAFAHDUhGP1fdUVM/GG+YaQqvvTcT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWNOU0VZX1Y5MVJVejhZYjVocENxLTlOeFBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi81ZThhMmEtNDU3My00MzZiLTkwMmEt ZWYwMWUxZGM3ZGFjLzEvQWNOU0VZX1Y5MVJVejhZYjVocENxLTlOeFBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi81ZThhMmEtNDU3My00MzZiLTkwMmEtZWYwMWUxZGM3ZGFj LzEvQWNOU0VZX1Y5MVJVejhZYjVocENxLTlOeFBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATHQS3TeA eREM094JQHPXoO+buLXwyueaesAmqOU5I1KQ/Wji0lRmUI1CXHQsgwFsRcdwOFg3 wmJPbXWilL2EH1l3VbUbKxtx+D+A9ojsr5FBRbV/4eq66AI4Z4h9M9x5/Fk7dRIL UZL/MBPi5dcsCeFbAs9an38afuqe9zJnpkYQ2jwjtb4CpMDyKonBr/S9aOXqb7ok WTO6PvLi2LeIvx5Cc9MA8YUS79VGPDy+gPJy2URQOj72EduaTMKhJZTR8s+vpRr0 Pp7GPGSceGQOf3mZncFzNhgwiPG5ILMuggu7Nu5VqnOpePBM2KI/WIGtXsPi9xrj buM0try20q/+aQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:39:39 2025 by rpki-client