This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft File: ACzThauQKWJxijm7ez7JmqQE5cA.mft (raw, json) Hash identifier: M6uOiWFGHqhy4D1mYX01EXLxg9GlQAwA8sOOng7AEYg= Subject key identifier: D9:F2:F5:95:39:BA:39:9D:F5:97:B9:9C:3A:E5:90:0C:76:5A:67:F5 Authority key identifier: 00:2C:D3:85:AB:90:29:62:71:8A:39:BB:7B:3E:C9:9A:A4:04:E5:C0 Certificate issuer: /CN=002cd385ab902962718a39bb7b3ec99aa404e5c0 Certificate serial: 019AF31CA2CFB5201FDE8EADD279901F7A98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft Manifest number: 0AF3 Signing time: Sat 06 Dec 2025 10:02:11 +0000 Manifest this update: Sat 06 Dec 2025 10:02:11 +0000 Manifest next update: Sun 07 Dec 2025 10:02:11 +0000 Files and hashes: 1: ACzThauQKWJxijm7ez7JmqQE5cA.crl (hash: Q2x6ah1e7cJHDKBPUIHr0XuCcqKcSbgeKbOmlNfXGLA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:a2:cf:b5:20:1f:de:8e:ad:d2:79:90:1f:7a:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=002cd385ab902962718a39bb7b3ec99aa404e5c0 Validity Not Before: Dec 6 10:02:11 2025 GMT Not After : Dec 7 10:02:11 2025 GMT Subject: CN=d9f2f59539ba399df597b99c3ae5900c765a67f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b4:3b:d4:8d:d8:ab:e5:c3:bc:f4:c9:1b:a5: 45:ba:b5:eb:3c:c6:8c:8d:22:77:16:0b:1a:76:6a: 2e:24:66:30:3b:87:bf:6c:8c:a5:4a:ca:b5:91:e0: a1:fd:cc:ee:1c:24:b3:ba:ce:df:e5:b9:3a:b9:ce: a0:4b:90:43:76:cf:1a:cc:e5:54:14:d4:c3:7f:99: cb:a8:64:20:96:f8:ec:66:41:e3:17:c2:44:51:79: 86:33:08:f7:95:75:2f:32:cf:ad:4d:b7:d4:f6:a3: 3a:4c:95:64:1b:c8:bb:0b:8f:90:3f:93:90:96:c7: bb:d9:b5:12:a6:aa:e1:b0:a9:e9:6c:e7:e8:a5:52: c9:a7:0c:fd:f7:a3:41:35:ab:9a:16:28:4e:01:cc: 01:ce:38:91:32:07:dc:fb:28:d6:15:66:b1:db:3e: b0:8d:41:f9:95:62:e0:96:7a:fc:6d:55:ff:cb:d8: 7a:77:0e:33:e4:66:c1:68:63:17:06:b8:9e:aa:e3: b2:cf:36:0a:41:87:5b:a1:8f:38:f1:36:46:f0:16: 91:90:73:13:89:d6:57:d4:af:b3:5f:51:61:26:ae: a0:a1:5c:ee:b2:51:be:fb:bf:57:9f:49:51:68:1e: 53:d1:1b:7c:11:5e:fb:e3:62:bf:c1:10:ca:98:07: 05:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F2:F5:95:39:BA:39:9D:F5:97:B9:9C:3A:E5:90:0C:76:5A:67:F5 X509v3 Authority Key Identifier: keyid:00:2C:D3:85:AB:90:29:62:71:8A:39:BB:7B:3E:C9:9A:A4:04:E5:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:ef:a5:31:f3:f5:c8:3a:f3:d5:6f:88:7f:c9:aa:83:b0:6f: cd:74:22:9a:af:96:a3:e5:78:31:c2:df:2e:07:4d:7f:aa:11: 20:10:ad:50:b8:71:7e:f0:5e:71:b9:f8:6d:d3:09:11:09:55: e6:c2:a7:0f:d6:a4:d0:f0:9b:e0:f5:84:99:16:a7:56:8a:74: 72:eb:83:c8:54:e4:31:0e:ad:ea:80:96:59:ae:8f:f5:c1:68: a1:8f:99:e9:5e:c3:7c:c9:88:5b:d3:ed:8d:36:8c:6f:24:8a: 57:03:b1:75:6f:58:b9:80:e2:fc:b5:fa:52:73:dd:67:50:32: 48:e6:96:ec:7a:e7:2d:43:6f:21:3d:54:1e:74:f0:a1:0f:50: 4a:70:59:b1:05:30:4b:f1:1d:c4:d2:2e:44:d3:b9:ce:32:24: 8b:74:60:6c:78:2d:1f:dd:01:f0:6e:71:07:fb:35:b0:46:64: 34:bb:bd:93:5d:72:e9:32:96:e2:e5:78:92:e6:41:67:50:e9: e1:59:6d:76:39:d8:c5:55:4a:43:a3:57:df:37:a4:75:65:2a: 41:34:53:9c:14:7e:b6:41:c7:06:5c:c8:4f:84:68:51:45:2b: bf:fc:34:93:1f:61:62:35:9b:06:1c:39:75:a1:59:b1:c8:1e: 58:a3:48:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHKLPtSAf3o6t0nmQH3qYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMmNkMzg1YWI5MDI5NjI3MThhMzliYjdiM2VjOTlhYTQw NGU1YzAwHhcNMjUxMjA2MTAwMjExWhcNMjUxMjA3MTAwMjExWjAzMTEwLwYDVQQD EyhkOWYyZjU5NTM5YmEzOTlkZjU5N2I5OWMzYWU1OTAwYzc2NWE2N2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7Q71I3Yq+XDvPTJG6VFurXrPMaM jSJ3FgsadmouJGYwO4e/bIylSsq1keCh/czuHCSzus7f5bk6uc6gS5BDds8azOVU FNTDf5nLqGQglvjsZkHjF8JEUXmGMwj3lXUvMs+tTbfU9qM6TJVkG8i7C4+QP5OQ lse72bUSpqrhsKnpbOfopVLJpwz996NBNauaFihOAcwBzjiRMgfc+yjWFWax2z6w jUH5lWLglnr8bVX/y9h6dw4z5GbBaGMXBriequOyzzYKQYdboY848TZG8BaRkHMT idZX1K+zX1FhJq6goVzuslG++79Xn0lRaB5T0Rt8EV7742K/wRDKmAcFKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNny9ZU5ujmd9Ze5nDrlkAx2Wmf1MB8GA1UdIwQY MBaAFAAs04WrkClicYo5u3s+yZqkBOXAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUN6VGhhdVFLV0p4aWptN2V6N0ptcVFFNWNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9jZjVmMzAtZTdkMC00YWQzLTg5ODct ZTIzNWQ5MGY2NDcxLzEvQUN6VGhhdVFLV0p4aWptN2V6N0ptcVFFNWNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9jZjVmMzAtZTdkMC00YWQzLTg5ODctZTIzNWQ5MGY2NDcx LzEvQUN6VGhhdVFLV0p4aWptN2V6N0ptcVFFNWNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv++lMfP1 yDrz1W+If8mqg7BvzXQimq+Wo+V4McLfLgdNf6oRIBCtULhxfvBecbn4bdMJEQlV 5sKnD9ak0PCb4PWEmRanVop0cuuDyFTkMQ6t6oCWWa6P9cFooY+Z6V7DfMmIW9Pt jTaMbySKVwOxdW9YuYDi/LX6UnPdZ1AySOaW7HrnLUNvIT1UHnTwoQ9QSnBZsQUw S/EdxNIuRNO5zjIki3RgbHgtH90B8G5xB/s1sEZkNLu9k11y6TKW4uV4kuZBZ1Dp 4VltdjnYxVVKQ6NX3zekdWUqQTRTnBR+tkHHBlzIT4RoUUUrv/w0kx9hYjWbBhw5 daFZscgeWKNIKA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:16:54 2025 by rpki-client