This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft File: AcvG50Tu-cAWdAHVbB-TgO72SUg.mft (raw, json) Hash identifier: Qjl0c6s4y4QXWookF86eS94jtKxrsAeFfVNA35993Do= Subject key identifier: 3F:FD:11:B1:75:84:8B:2F:3F:71:14:D0:B8:63:6E:F5:59:27:F3:55 Authority key identifier: 01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48 Certificate issuer: /CN=01cbc6e744eef9c0167401d56c1f9380eef64948 Certificate serial: 019B2DB02B613F10E3049CA6B3CBE96BED08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft Manifest number: 060B Signing time: Wed 17 Dec 2025 19:01:18 +0000 Manifest this update: Wed 17 Dec 2025 19:01:18 +0000 Manifest next update: Thu 18 Dec 2025 19:01:18 +0000 Files and hashes: 1: AcvG50Tu-cAWdAHVbB-TgO72SUg.crl (hash: kqEHodTH5Y/wNivMPW5CAF0vqUnHpf0Y+1cYUbwNfEU=) 2: BX2JPGJy6RMaPcWuXvWlFqwNrIA.roa (hash: u+UX2pAd1eP7HJXW9NY0JTLVGtLaRb7rjxt8LHxvOj8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:b0:2b:61:3f:10:e3:04:9c:a6:b3:cb:e9:6b:ed:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01cbc6e744eef9c0167401d56c1f9380eef64948 Validity Not Before: Dec 17 19:01:18 2025 GMT Not After : Dec 18 19:01:18 2025 GMT Subject: CN=3ffd11b175848b2f3f7114d0b8636ef55927f355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5a:93:45:96:23:2f:4c:91:95:19:ef:23:03: 74:20:6e:58:cd:f0:b5:83:66:2d:82:b5:17:c3:97: 2d:c3:d3:00:3f:cb:d3:3d:df:eb:df:eb:97:17:d5: 43:20:e4:4e:07:fb:9e:e2:cf:0e:75:29:0f:aa:76: 1f:8e:59:a6:89:e4:e5:bf:ba:08:42:8e:d6:ec:c8: f1:23:a3:ab:8e:81:ca:c0:9b:e6:4d:d3:bd:00:73: 1b:32:e5:04:b7:c0:83:d0:17:cf:e0:d4:ee:b3:77: 5f:9a:96:2c:3d:da:e7:f5:db:6b:50:d3:8a:08:d5: 71:4d:0a:e0:6d:20:7b:80:cb:95:78:cd:bc:2b:55: 31:cc:46:8f:68:64:8c:93:73:30:47:f6:31:a6:f2: 4c:69:0f:bf:9d:09:34:84:55:65:f8:5e:25:3e:8a: 02:14:82:ab:43:bb:1c:bb:6a:0c:83:7e:c9:37:5b: 9e:24:84:e7:da:77:66:ae:82:1d:4d:ae:f2:4b:fe: bd:a0:d5:a9:fa:6b:94:3d:5a:f7:f1:63:53:09:70: 47:96:c6:38:c7:49:09:36:d5:4e:6b:d0:9b:5f:20: ae:d0:53:5c:29:b9:12:85:d7:94:18:62:8d:ec:09: 02:4a:10:30:be:83:b9:be:5b:ac:b0:0e:ba:c2:9d: d2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:FD:11:B1:75:84:8B:2F:3F:71:14:D0:B8:63:6E:F5:59:27:F3:55 X509v3 Authority Key Identifier: keyid:01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:a1:c2:cb:92:2a:eb:49:5a:7e:f7:4c:d9:7e:73:eb:2f:80: 8e:e9:c4:ac:76:21:18:40:e9:67:32:7a:a9:ae:46:c4:02:fc: 2d:a5:94:59:10:1c:95:2b:ae:d7:34:24:42:24:b1:2a:d0:3d: 9d:e2:a0:29:17:e8:1b:2b:8b:17:a7:87:a6:cc:38:90:37:2f: 32:16:85:90:ec:5c:0d:9e:e2:7e:04:8d:ad:65:c8:6c:d8:c7: 16:c7:3b:04:09:d9:90:7f:5e:35:f4:f4:a2:e7:28:90:02:0f: e9:70:c5:6c:e5:e4:8e:20:bf:17:f6:25:6e:6b:03:60:38:f0: 88:c5:91:47:ab:fd:c1:e0:72:71:24:45:73:b0:cd:6e:8e:de: f3:d4:7b:c3:e0:07:5c:0b:71:aa:fa:e7:9f:82:b4:4c:30:1f: 59:e2:4a:19:96:7d:e8:d0:f4:54:53:b9:d5:8d:72:67:86:60: 3c:79:e1:6c:95:40:97:21:b3:6d:28:ef:9b:44:83:af:db:a8: c6:6e:86:98:aa:cc:91:40:07:57:1d:2d:d3:32:37:5c:df:8f: 80:bc:26:36:ff:2a:81:f2:ae:7c:76:50:76:79:6a:90:6e:58: 64:3a:a0:b2:f8:2d:af:fe:cd:49:05:1f:f3:8c:6a:3d:b6:79: a1:05:65:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstsCthPxDjBJyms8vpa+0IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxY2JjNmU3NDRlZWY5YzAxNjc0MDFkNTZjMWY5MzgwZWVm NjQ5NDgwHhcNMjUxMjE3MTkwMTE4WhcNMjUxMjE4MTkwMTE4WjAzMTEwLwYDVQQD EygzZmZkMTFiMTc1ODQ4YjJmM2Y3MTE0ZDBiODYzNmVmNTU5MjdmMzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFqTRZYjL0yRlRnvIwN0IG5YzfC1 g2YtgrUXw5ctw9MAP8vTPd/r3+uXF9VDIOROB/ue4s8OdSkPqnYfjlmmieTlv7oI Qo7W7MjxI6OrjoHKwJvmTdO9AHMbMuUEt8CD0BfP4NTus3dfmpYsPdrn9dtrUNOK CNVxTQrgbSB7gMuVeM28K1UxzEaPaGSMk3MwR/YxpvJMaQ+/nQk0hFVl+F4lPooC FIKrQ7scu2oMg37JN1ueJITn2ndmroIdTa7yS/69oNWp+muUPVr38WNTCXBHlsY4 x0kJNtVOa9CbXyCu0FNcKbkShdeUGGKN7AkCShAwvoO5vlussA66wp3SwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/9EbF1hIsvP3EU0LhjbvVZJ/NVMB8GA1UdIwQY MBaAFAHLxudE7vnAFnQB1Wwfk4Du9klIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWN2RzUwVHUtY0FXZEFIVmJCLVRnTzcyU1VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mNDkzYzYtMTAzYy00ZDc5LTlhZTIt OWUyZGEzN2I0MTllLzEvQWN2RzUwVHUtY0FXZEFIVmJCLVRnTzcyU1VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9mNDkzYzYtMTAzYy00ZDc5LTlhZTItOWUyZGEzN2I0MTll LzEvQWN2RzUwVHUtY0FXZEFIVmJCLVRnTzcyU1VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGaHCy5Iq 60lafvdM2X5z6y+AjunErHYhGEDpZzJ6qa5GxAL8LaWUWRAclSuu1zQkQiSxKtA9 neKgKRfoGyuLF6eHpsw4kDcvMhaFkOxcDZ7ifgSNrWXIbNjHFsc7BAnZkH9eNfT0 oucokAIP6XDFbOXkjiC/F/YlbmsDYDjwiMWRR6v9weBycSRFc7DNbo7e89R7w+AH XAtxqvrnn4K0TDAfWeJKGZZ96ND0VFO51Y1yZ4ZgPHnhbJVAlyGzbSjvm0SDr9uo xm6GmKrMkUAHVx0t0zI3XN+PgLwmNv8qgfKufHZQdnlqkG5YZDqgsvgtr/7NSQUf 84xqPbZ5oQVlJg== -----END CERTIFICATE-----Generated at Thu Dec 18 05:07:48 2025 by rpki-client