This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft File: AcOKBqObILjaQACSN9dqzdKOcaU.mft (raw, json) Hash identifier: cEh9awO8iPJnohNaIKffdxftRivx9RrUR7kSMLMt4lE= Subject key identifier: D2:F9:19:B1:E9:09:1A:04:F3:ED:1A:DD:4C:05:1A:D3:BD:88:D7:9F Authority key identifier: 01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5 Certificate issuer: /CN=01c38a06a39b20b8da40009237d76acdd28e71a5 Certificate serial: 019B38A18A49AE102A749D13019F48BF29A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft Manifest number: 17B3 Signing time: Fri 19 Dec 2025 22:01:09 +0000 Manifest this update: Fri 19 Dec 2025 22:01:09 +0000 Manifest next update: Sat 20 Dec 2025 22:01:09 +0000 Files and hashes: 1: 5GwPbo7__4TJOwvRCe73j2O6xPU.roa (hash: 24uofXG+x5P8v+OHdd1JuXbfxl5UDoLkFS3hRtXAGVU=) 2: AcOKBqObILjaQACSN9dqzdKOcaU.crl (hash: mOG8wX1a7rzPBgTRwO8Eaayv+GnR1dJQCLCwyt27U6c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:8a:49:ae:10:2a:74:9d:13:01:9f:48:bf:29:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01c38a06a39b20b8da40009237d76acdd28e71a5 Validity Not Before: Dec 19 22:01:09 2025 GMT Not After : Dec 20 22:01:09 2025 GMT Subject: CN=d2f919b1e9091a04f3ed1add4c051ad3bd88d79f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cf:2d:6e:f7:b8:f5:87:12:f2:36:87:2e:38: d5:7d:23:84:df:da:a9:d6:d0:1b:59:d1:18:8c:01: 58:6c:fa:f5:84:3b:2b:da:64:8a:2e:1b:f1:f5:7f: c0:ef:2c:15:5a:ab:7c:c4:2e:33:58:f7:19:ee:36: c9:e5:a7:2a:2c:70:89:97:04:ef:85:d9:d5:5e:7a: f7:a9:af:b9:03:fc:57:c0:6c:66:c3:f1:d4:81:6c: f7:0d:5a:23:45:35:01:01:35:61:de:6d:61:7a:06: c9:ab:79:fd:92:bd:d3:c7:13:28:59:cf:cf:fc:5e: e9:b6:3e:21:f3:47:a7:29:dc:c3:bf:51:8d:48:67: f8:8c:be:23:30:5a:16:7f:e6:1d:19:c5:71:89:54: 5e:5b:95:8d:a2:89:4f:36:25:82:f2:c1:62:c3:ac: 8d:e2:34:c9:70:53:bd:d2:bd:f7:39:14:a2:58:c3: 70:f9:eb:55:a2:cc:d6:5b:53:f3:7a:50:b3:1b:79: f4:7d:4c:a6:24:1d:00:79:1f:f7:4f:6b:91:07:01: f6:c9:f9:c1:75:bb:39:f9:04:55:42:3e:e5:da:95: d0:8e:83:12:66:db:ac:c1:b9:bb:8b:38:c3:54:34: 12:5b:5c:87:aa:ed:f4:94:ad:8a:6d:6f:fc:3a:25: a9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F9:19:B1:E9:09:1A:04:F3:ED:1A:DD:4C:05:1A:D3:BD:88:D7:9F X509v3 Authority Key Identifier: keyid:01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:a1:9d:a2:8f:0c:9d:ea:c3:c9:74:06:ea:d8:c8:ba:eb:a7: d7:1e:a3:ca:82:46:fc:38:f9:96:d9:52:fd:6d:58:94:05:10: 24:19:cb:a5:07:dd:9d:ed:3c:ec:61:6c:27:28:e8:81:a7:49: 05:6c:d0:97:73:a6:b3:33:40:b2:f2:78:fb:06:73:08:1c:5b: fa:c9:49:c8:ff:4a:af:fa:77:f8:f1:fa:4f:7e:96:cc:30:c2: 15:0c:e1:c6:11:06:f6:a5:a7:dc:bb:d5:3a:8f:fc:ad:a4:92: 52:fe:c1:53:cc:33:65:5f:94:92:21:5d:bd:5a:f3:e4:2f:ad: 0b:1f:ea:36:4b:90:2e:c6:fb:e1:71:8b:36:b6:b8:f7:86:fa: fb:a7:01:75:ac:16:c8:f4:34:6f:3b:c5:bc:0b:e7:4e:8f:3d: 02:23:b9:9c:55:c6:da:b2:d2:37:e0:19:e6:28:b6:72:8a:81: 8c:83:70:c1:de:ae:e1:07:cc:ac:58:da:7c:ab:4c:98:e0:17: 5a:46:0a:0a:c1:92:e8:21:a4:58:df:08:ab:b5:63:c3:b0:0c: 9d:14:99:dc:ef:31:72:43:f2:4e:e3:a3:57:64:f6:2c:8e:0f: 9a:45:f3:84:19:5d:08:78:5d:69:71:52:74:29:e9:9a:cd:25: 12:f1:2e:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oYpJrhAqdJ0TAZ9IvymkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxYzM4YTA2YTM5YjIwYjhkYTQwMDA5MjM3ZDc2YWNkZDI4 ZTcxYTUwHhcNMjUxMjE5MjIwMTA5WhcNMjUxMjIwMjIwMTA5WjAzMTEwLwYDVQQD EyhkMmY5MTliMWU5MDkxYTA0ZjNlZDFhZGQ0YzA1MWFkM2JkODhkNzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM8tbve49YcS8jaHLjjVfSOE39qp 1tAbWdEYjAFYbPr1hDsr2mSKLhvx9X/A7ywVWqt8xC4zWPcZ7jbJ5acqLHCJlwTv hdnVXnr3qa+5A/xXwGxmw/HUgWz3DVojRTUBATVh3m1hegbJq3n9kr3TxxMoWc/P /F7ptj4h80enKdzDv1GNSGf4jL4jMFoWf+YdGcVxiVReW5WNoolPNiWC8sFiw6yN 4jTJcFO90r33ORSiWMNw+etVoszWW1PzelCzG3n0fUymJB0AeR/3T2uRBwH2yfnB dbs5+QRVQj7l2pXQjoMSZtuswbm7izjDVDQSW1yHqu30lK2KbW/8OiWpoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNL5GbHpCRoE8+0a3UwFGtO9iNefMB8GA1UdIwQY MBaAFAHDigajmyC42kAAkjfXas3SjnGlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWNPS0JxT2JJTGphUUFDU045ZHF6ZEtPY2FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS82YThlNWUtMzliNi00N2UzLWJiYjAt YjI5ZjEwY2MwMzI4LzEvQWNPS0JxT2JJTGphUUFDU045ZHF6ZEtPY2FVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS82YThlNWUtMzliNi00N2UzLWJiYjAtYjI5ZjEwY2MwMzI4 LzEvQWNPS0JxT2JJTGphUUFDU045ZHF6ZEtPY2FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApKGdoo8M nerDyXQG6tjIuuun1x6jyoJG/Dj5ltlS/W1YlAUQJBnLpQfdne087GFsJyjogadJ BWzQl3OmszNAsvJ4+wZzCBxb+slJyP9Kr/p3+PH6T36WzDDCFQzhxhEG9qWn3LvV Oo/8raSSUv7BU8wzZV+UkiFdvVrz5C+tCx/qNkuQLsb74XGLNra494b6+6cBdawW yPQ0bzvFvAvnTo89AiO5nFXG2rLSN+AZ5ii2coqBjINwwd6u4QfMrFjafKtMmOAX WkYKCsGS6CGkWN8Iq7Vjw7AMnRSZ3O8xckPyTuOjV2T2LI4PmkXzhBldCHhdaXFS dCnpms0lEvEuhw== -----END CERTIFICATE-----Generated at Sat Dec 20 02:01:47 2025 by rpki-client