This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft File: AcvG50Tu-cAWdAHVbB-TgO72SUg.mft (raw, json) Hash identifier: RUSyicEywPur3ypalGPgsA4V6RtMXHy3pCkhbEVWFSM= Subject key identifier: 29:AC:51:C8:53:85:0C:2F:37:8E:FA:7C:B3:2B:05:A9:A3:6C:85:51 Authority key identifier: 01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48 Certificate issuer: /CN=01cbc6e744eef9c0167401d56c1f9380eef64948 Certificate serial: 019B2BC21B01AC938D2AD815D0556A593B9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft Manifest number: 060A Signing time: Wed 17 Dec 2025 10:01:39 +0000 Manifest this update: Wed 17 Dec 2025 10:01:39 +0000 Manifest next update: Thu 18 Dec 2025 10:01:39 +0000 Files and hashes: 1: AcvG50Tu-cAWdAHVbB-TgO72SUg.crl (hash: TrZSSZ1pRdTfDx1UDCfCSCT7rPjSGNGV1vKWi52DV0c=) 2: BX2JPGJy6RMaPcWuXvWlFqwNrIA.roa (hash: u+UX2pAd1eP7HJXW9NY0JTLVGtLaRb7rjxt8LHxvOj8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c2:1b:01:ac:93:8d:2a:d8:15:d0:55:6a:59:3b:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01cbc6e744eef9c0167401d56c1f9380eef64948 Validity Not Before: Dec 17 10:01:39 2025 GMT Not After : Dec 18 10:01:39 2025 GMT Subject: CN=29ac51c853850c2f378efa7cb32b05a9a36c8551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f7:2d:f7:9c:07:19:a8:c6:e0:08:10:05:56: 02:9f:98:7d:23:c0:21:c2:2f:67:7f:3a:b1:4a:fe: 51:64:99:44:fc:78:b9:25:94:2c:3b:68:9c:36:1e: 64:5f:7d:86:44:68:96:3e:d2:de:1b:af:9b:26:37: 2c:1c:5d:95:b0:dd:d1:ea:21:85:a5:5d:88:d3:53: 0c:d5:34:38:4c:93:d4:2e:41:fc:d5:aa:65:ca:1e: 8a:6d:0d:cf:8e:21:67:5f:3d:57:72:f1:20:a2:0d: 15:d0:ef:6e:17:c9:31:22:e1:ed:cf:00:4b:15:8c: 34:48:e6:75:5f:ae:f5:23:b3:c7:dc:97:d5:f6:0e: d4:f1:31:53:f0:94:ad:97:ac:b7:5a:39:68:fc:c4: 9f:8a:75:e1:8a:bc:30:31:bf:c2:b0:97:57:5c:f2: e1:4e:a6:0d:e8:46:0c:3c:29:75:37:b4:0e:4a:e7: 1c:1c:d1:ff:91:e1:07:a2:2d:ea:72:ad:3e:64:ba: 8a:98:1c:54:13:a6:d7:99:f4:b6:77:93:70:2f:39: 84:de:01:74:b6:49:08:bf:d8:9c:22:9f:0e:ed:41: ed:30:e6:2e:b5:ac:5c:f8:1c:e6:17:d6:10:b0:82: 1a:6d:52:cb:47:91:d4:11:2d:1a:e6:ba:9c:6b:e0: 9a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:AC:51:C8:53:85:0C:2F:37:8E:FA:7C:B3:2B:05:A9:A3:6C:85:51 X509v3 Authority Key Identifier: keyid:01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:3b:ac:2e:c8:0f:b5:0e:f2:4f:1a:70:cc:1a:8f:fd:3d:e9: b9:c4:2d:40:f2:46:2c:af:19:be:0b:6d:27:87:9b:be:74:06: da:a2:57:20:dc:6d:dc:7d:5f:65:e1:42:84:2d:2c:1d:47:37: d8:6e:4c:7c:14:c2:81:d2:37:94:21:12:62:cc:f9:ab:65:30: 8d:6b:3d:e2:c9:26:3e:ca:25:dd:84:03:d4:17:14:fa:15:9c: 9e:d1:f4:b0:e0:55:36:ed:f2:fd:bb:76:e2:c0:4c:ad:f0:47: ca:6c:62:eb:2f:57:cc:d3:df:b7:dd:66:43:7e:97:be:1d:d8: c4:28:ab:af:8b:1c:b4:19:32:b2:aa:e2:39:63:0a:88:5a:b5: bb:4c:22:f2:be:8f:da:58:cc:e3:28:ac:dc:6c:9b:a1:c3:5a: 26:b3:61:97:16:78:fc:f0:56:90:8d:ce:96:1a:55:ab:86:a6: f7:68:3a:bb:b0:44:c9:b9:f2:f4:ea:d8:fc:bf:7b:f4:db:66: 3a:b0:cd:19:e3:15:d0:4e:79:bb:c8:d3:9d:45:e8:39:7f:60: 93:b2:19:81:f1:59:3e:ba:14:0a:84:20:36:ef:7b:0c:d7:c9: ef:88:a7:4d:0d:26:8c:77:9e:2b:a0:4f:0e:1d:b9:1c:65:bc: 6d:4c:bd:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwhsBrJONKtgV0FVqWTuaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxY2JjNmU3NDRlZWY5YzAxNjc0MDFkNTZjMWY5MzgwZWVm NjQ5NDgwHhcNMjUxMjE3MTAwMTM5WhcNMjUxMjE4MTAwMTM5WjAzMTEwLwYDVQQD EygyOWFjNTFjODUzODUwYzJmMzc4ZWZhN2NiMzJiMDVhOWEzNmM4NTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/ct95wHGajG4AgQBVYCn5h9I8Ah wi9nfzqxSv5RZJlE/Hi5JZQsO2icNh5kX32GRGiWPtLeG6+bJjcsHF2VsN3R6iGF pV2I01MM1TQ4TJPULkH81aplyh6KbQ3PjiFnXz1XcvEgog0V0O9uF8kxIuHtzwBL FYw0SOZ1X671I7PH3JfV9g7U8TFT8JStl6y3Wjlo/MSfinXhirwwMb/CsJdXXPLh TqYN6EYMPCl1N7QOSuccHNH/keEHoi3qcq0+ZLqKmBxUE6bXmfS2d5NwLzmE3gF0 tkkIv9icIp8O7UHtMOYutaxc+BzmF9YQsIIabVLLR5HUES0a5rqca+CaNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCmsUchThQwvN476fLMrBamjbIVRMB8GA1UdIwQY MBaAFAHLxudE7vnAFnQB1Wwfk4Du9klIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWN2RzUwVHUtY0FXZEFIVmJCLVRnTzcyU1VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mNDkzYzYtMTAzYy00ZDc5LTlhZTIt OWUyZGEzN2I0MTllLzEvQWN2RzUwVHUtY0FXZEFIVmJCLVRnTzcyU1VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9mNDkzYzYtMTAzYy00ZDc5LTlhZTItOWUyZGEzN2I0MTll LzEvQWN2RzUwVHUtY0FXZEFIVmJCLVRnTzcyU1VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEDusLsgP tQ7yTxpwzBqP/T3pucQtQPJGLK8ZvgttJ4ebvnQG2qJXINxt3H1fZeFChC0sHUc3 2G5MfBTCgdI3lCESYsz5q2UwjWs94skmPsol3YQD1BcU+hWcntH0sOBVNu3y/bt2 4sBMrfBHymxi6y9XzNPft91mQ36Xvh3YxCirr4sctBkysqriOWMKiFq1u0wi8r6P 2ljM4yis3GybocNaJrNhlxZ4/PBWkI3OlhpVq4am92g6u7BEybny9OrY/L979Ntm OrDNGeMV0E55u8jTnUXoOX9gk7IZgfFZProUCoQgNu97DNfJ74inTQ0mjHeeK6BP Dh25HGW8bUy9Hw== -----END CERTIFICATE-----Generated at Wed Dec 17 18:35:22 2025 by rpki-client