This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft File: AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft (raw, json) Hash identifier: yP4vDtU8jJY/2Hiy1XL32+6/eeVZ1r/KCoCdBJsy0Ac= Subject key identifier: D5:D4:84:8F:A2:4F:90:F8:59:C4:17:01:A7:CE:99:3D:9D:3F:0B:E2 Authority key identifier: 01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29 Certificate issuer: /CN=01c2863a6438b3402752a4740e90ce42eb589129 Certificate serial: 019AF209218B748E31A762ED6EFC479BCA87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft Manifest number: 10F7 Signing time: Sat 06 Dec 2025 05:01:15 +0000 Manifest this update: Sat 06 Dec 2025 05:01:15 +0000 Manifest next update: Sun 07 Dec 2025 05:01:15 +0000 Files and hashes: 1: AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl (hash: EzejOKai+vjwSWtc5IPJo20ItbzIRIEsG56oPNz8YFA=) 2: DVOzFfjLRaTUZyMinPqbQ4S_9DE.roa (hash: W1flvtqrAEaVVbhIS1vtvgxbygP7i6aEq71rS+R0/KY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:21:8b:74:8e:31:a7:62:ed:6e:fc:47:9b:ca:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01c2863a6438b3402752a4740e90ce42eb589129 Validity Not Before: Dec 6 05:01:15 2025 GMT Not After : Dec 7 05:01:15 2025 GMT Subject: CN=d5d4848fa24f90f859c41701a7ce993d9d3f0be2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:26:c9:89:65:3e:a3:6e:fd:e9:25:f8:46:b3: db:1f:24:c4:14:9c:7b:2f:cb:ae:77:82:0f:80:39: 43:56:d2:ac:5c:23:cb:44:4d:b5:88:34:7a:4d:e0: 58:40:30:b4:04:c2:23:83:79:05:56:cb:4d:70:71: 59:b2:77:de:ed:7c:be:35:b5:fb:a4:b6:45:35:70: 86:42:5f:53:20:e3:7c:50:78:d1:87:3e:69:8a:b8: 46:b8:0c:f8:a6:7d:d7:53:52:a5:a4:fb:a7:90:3b: c3:d5:99:54:c6:3f:c9:be:37:22:a9:0b:de:5d:1e: 3b:fd:e6:c4:ed:da:7c:cd:8f:6f:fe:b7:51:de:18: 08:e7:9a:c0:13:5d:c3:d1:98:5c:76:b8:b5:bf:a1: 82:dd:e1:81:86:da:d7:4b:f5:32:bf:35:83:29:03: 4e:27:a5:8b:52:92:5d:d3:06:61:1e:b0:d4:c5:6f: 90:b1:c5:8e:d2:0d:1a:07:8f:06:dd:5d:86:7e:d1: 7a:bb:a0:8a:2c:6b:20:73:13:22:dd:94:67:00:3d: 6a:6b:e9:45:3f:77:e0:bb:a9:f4:5a:35:e4:e5:bb: 09:57:8d:cc:df:d7:a5:da:35:87:8e:50:b9:ab:cd: 03:03:52:f5:3b:1d:c0:69:d7:e6:6f:ef:d4:5b:ef: 51:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D4:84:8F:A2:4F:90:F8:59:C4:17:01:A7:CE:99:3D:9D:3F:0B:E2 X509v3 Authority Key Identifier: keyid:01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:a1:65:29:09:b3:09:8f:78:a9:21:ed:78:77:8d:3f:88:36: 43:58:75:9c:1e:28:e0:a8:be:4f:71:ad:55:87:c7:03:15:f4: 14:2f:99:96:6a:9e:93:a2:8b:e0:b1:15:6e:07:4f:e5:b9:c1: e9:59:15:a9:25:86:0b:71:c8:43:14:9e:8f:d2:70:6a:39:a0: 33:d4:05:0c:7e:e4:8e:a0:a5:6d:65:f4:05:bb:6f:b9:99:64: d3:81:9b:bd:d7:12:6d:1c:74:26:33:f4:7a:24:bd:6d:4c:13: 8b:68:03:45:0d:bf:22:cf:83:48:d1:3a:7d:b5:86:f1:d2:49: f8:64:4d:ad:84:29:e5:2b:5e:89:8d:d2:73:ad:7d:59:89:aa: 5d:16:08:ce:c9:ba:24:18:2f:15:6d:3a:cc:ce:1e:82:5f:f9: 45:e4:11:90:2e:28:ad:07:37:0d:fc:10:60:fe:1e:b3:f9:ae: 0e:ea:54:be:dc:81:9f:85:2a:f1:f0:12:e0:bb:ec:c8:8c:45: 67:0f:d7:b7:d0:66:23:09:e0:76:e7:4a:63:a4:3b:b8:56:25: e9:e5:39:0e:c1:b1:3f:3e:2d:2f:f7:11:0f:e5:92:a4:d5:66: f7:87:f9:f2:fd:9a:e7:c5:5b:58:ab:57:be:99:79:9e:d8:fa: 1e:36:d9:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCSGLdI4xp2LtbvxHm8qHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxYzI4NjNhNjQzOGIzNDAyNzUyYTQ3NDBlOTBjZTQyZWI1 ODkxMjkwHhcNMjUxMjA2MDUwMTE1WhcNMjUxMjA3MDUwMTE1WjAzMTEwLwYDVQQD EyhkNWQ0ODQ4ZmEyNGY5MGY4NTljNDE3MDFhN2NlOTkzZDlkM2YwYmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSbJiWU+o2796SX4RrPbHyTEFJx7 L8uud4IPgDlDVtKsXCPLRE21iDR6TeBYQDC0BMIjg3kFVstNcHFZsnfe7Xy+NbX7 pLZFNXCGQl9TION8UHjRhz5pirhGuAz4pn3XU1KlpPunkDvD1ZlUxj/JvjciqQve XR47/ebE7dp8zY9v/rdR3hgI55rAE13D0Zhcdri1v6GC3eGBhtrXS/UyvzWDKQNO J6WLUpJd0wZhHrDUxW+QscWO0g0aB48G3V2GftF6u6CKLGsgcxMi3ZRnAD1qa+lF P3fgu6n0WjXk5bsJV43M39el2jWHjlC5q80DA1L1Ox3Aadfmb+/UW+9RcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNXUhI+iT5D4WcQXAafOmT2dPwviMB8GA1UdIwQY MBaAFAHChjpkOLNAJ1KkdA6QzkLrWJEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWNLR09tUTRzMEFuVXFSMERwRE9RdXRZa1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yNTIzN2UtY2U2YS00MzAyLWI2YTQt YjU0MDU4MzRmMGM1LzEvQWNLR09tUTRzMEFuVXFSMERwRE9RdXRZa1NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8yNTIzN2UtY2U2YS00MzAyLWI2YTQtYjU0MDU4MzRmMGM1 LzEvQWNLR09tUTRzMEFuVXFSMERwRE9RdXRZa1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABaFlKQmz CY94qSHteHeNP4g2Q1h1nB4o4Ki+T3GtVYfHAxX0FC+Zlmqek6KL4LEVbgdP5bnB 6VkVqSWGC3HIQxSej9JwajmgM9QFDH7kjqClbWX0BbtvuZlk04GbvdcSbRx0JjP0 eiS9bUwTi2gDRQ2/Is+DSNE6fbWG8dJJ+GRNrYQp5SteiY3Sc619WYmqXRYIzsm6 JBgvFW06zM4egl/5ReQRkC4orQc3DfwQYP4es/muDupUvtyBn4Uq8fAS4LvsyIxF Zw/Xt9BmIwngdudKY6Q7uFYl6eU5DsGxPz4tL/cRD+WSpNVm94f58v2a58VbWKtX vpl5ntj6HjbZzg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:32:25 2025 by rpki-client