This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft File: ACQ0xzoO6iLG5EEHLpPbd8foovE.mft (raw, json) Hash identifier: sojXt7LYXiuW8cUIVlVqiyGFBNuZDU9bKP0/dCEJJSA= Subject key identifier: 37:E7:6D:D1:C7:A2:73:AD:9D:4F:B1:46:CB:1D:5B:56:B4:CA:11:58 Authority key identifier: 00:24:34:C7:3A:0E:EA:22:C6:E4:41:07:2E:93:DB:77:C7:E8:A2:F1 Certificate issuer: /CN=002434c73a0eea22c6e441072e93db77c7e8a2f1 Certificate serial: 019B0E24D00DAB1FD2F9EB6309F77346F760 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft Manifest number: 1771 Signing time: Thu 11 Dec 2025 16:00:51 +0000 Manifest this update: Thu 11 Dec 2025 16:00:51 +0000 Manifest next update: Fri 12 Dec 2025 16:00:51 +0000 Files and hashes: 1: ACQ0xzoO6iLG5EEHLpPbd8foovE.crl (hash: 1gPibmIe8U4V5JE1JDBd3mViQFHpIdZIMe8ktWep5Yw=) 2: cHH8n9jIhtvEhfYf9DzKMDe1sMM.roa (hash: 24RyHXYm2+n9v+uk7dd0yGKCI/vamDa6gkuFRLODvdE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:24:d0:0d:ab:1f:d2:f9:eb:63:09:f7:73:46:f7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=002434c73a0eea22c6e441072e93db77c7e8a2f1 Validity Not Before: Dec 11 16:00:51 2025 GMT Not After : Dec 12 16:00:51 2025 GMT Subject: CN=37e76dd1c7a273ad9d4fb146cb1d5b56b4ca1158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:67:61:90:5d:de:b2:7d:c0:24:86:23:0e:df: da:2d:f1:64:a3:18:5a:23:ff:01:f9:40:4c:95:3c: b6:65:75:f4:f5:82:77:36:8c:1c:a9:e6:4a:60:7f: f8:17:de:ba:e5:f0:29:b3:f1:25:e7:d5:35:2a:5b: dc:98:98:a2:fc:68:0c:63:30:83:a9:df:f4:d5:0a: c3:af:80:d0:ee:2e:02:34:db:6a:55:36:ff:3e:d4: 6d:84:a2:91:05:ad:06:d5:8d:20:a8:68:69:53:60: 7c:94:c9:5a:f6:af:ea:54:a8:9e:2f:62:96:8e:b6: bb:4f:c4:0c:e7:33:95:c5:d4:45:ec:a2:00:8f:ea: 37:a3:22:8c:0c:e6:09:2b:86:1e:d7:48:4a:9d:24: 96:3d:22:a3:66:39:f6:4d:d7:dd:0d:d4:5b:ad:ad: fe:4d:ff:3c:dc:03:c0:46:27:f3:ad:e6:15:c1:55: ef:90:ce:1b:03:2a:99:a9:18:57:5e:0c:93:0b:f1: 6b:8d:7c:c1:4a:36:0d:ae:a5:ed:66:36:a6:7b:68: ac:96:40:a5:dd:1b:57:62:bc:c2:4c:57:d7:3c:06: c1:57:35:34:8a:c6:b0:64:0e:e0:d9:ec:92:61:2e: f6:81:2f:1e:a6:bc:88:7c:8a:70:6e:1e:0b:31:be: 2b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E7:6D:D1:C7:A2:73:AD:9D:4F:B1:46:CB:1D:5B:56:B4:CA:11:58 X509v3 Authority Key Identifier: keyid:00:24:34:C7:3A:0E:EA:22:C6:E4:41:07:2E:93:DB:77:C7:E8:A2:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:ae:34:d1:1b:51:e2:d7:90:ea:4f:de:3b:74:cb:f8:16:ab: 89:5c:01:72:ab:2d:27:7c:30:ed:6b:fa:0b:9b:fe:eb:b9:3e: dd:eb:a1:bf:86:0f:2b:c9:9a:1a:71:c3:91:05:8a:ec:8b:94: 03:38:dc:cb:c0:3e:1e:13:43:a0:6a:cc:23:8b:ed:26:74:d7: ba:e4:a3:36:a0:05:44:07:46:65:b4:52:f1:fc:1a:8d:07:02: 4b:ea:76:39:db:53:58:c4:05:e5:4e:df:18:ed:6f:9b:00:3d: b2:12:25:91:da:97:f0:c4:a8:e9:8f:50:31:38:3c:8e:ab:bc: 71:b2:1a:94:6f:f2:40:16:a3:23:a3:be:24:35:7d:de:78:34: 28:5e:f4:4c:d6:e0:d2:62:7c:09:36:53:7d:c9:1e:d6:af:31: e2:b4:fc:94:b3:a2:e4:66:af:c3:64:f4:89:ee:9f:23:d3:df: 03:f4:c6:6d:b3:7b:03:64:73:09:97:c7:9f:61:d9:8b:7e:25: bd:76:4e:72:78:1c:c6:bf:f3:f4:b7:90:c7:f7:d5:90:79:54: 15:cc:97:a2:5f:93:d1:81:9e:fb:87:8c:06:35:f7:03:aa:2e: 98:7d:4c:7c:82:2f:d8:03:20:e0:f5:a8:4c:d9:eb:b8:0c:a8: bf:b0:28:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJNANqx/S+etjCfdzRvdgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMjQzNGM3M2EwZWVhMjJjNmU0NDEwNzJlOTNkYjc3Yzdl OGEyZjEwHhcNMjUxMjExMTYwMDUxWhcNMjUxMjEyMTYwMDUxWjAzMTEwLwYDVQQD EygzN2U3NmRkMWM3YTI3M2FkOWQ0ZmIxNDZjYjFkNWI1NmI0Y2ExMTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWdhkF3esn3AJIYjDt/aLfFkoxha I/8B+UBMlTy2ZXX09YJ3NowcqeZKYH/4F9665fAps/El59U1KlvcmJii/GgMYzCD qd/01QrDr4DQ7i4CNNtqVTb/PtRthKKRBa0G1Y0gqGhpU2B8lMla9q/qVKieL2KW jra7T8QM5zOVxdRF7KIAj+o3oyKMDOYJK4Ye10hKnSSWPSKjZjn2TdfdDdRbra3+ Tf883APARifzreYVwVXvkM4bAyqZqRhXXgyTC/FrjXzBSjYNrqXtZjame2islkCl 3RtXYrzCTFfXPAbBVzU0isawZA7g2eySYS72gS8epryIfIpwbh4LMb4rbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDfnbdHHonOtnU+xRssdW1a0yhFYMB8GA1UdIwQY MBaAFAAkNMc6DuoixuRBBy6T23fH6KLxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUNRMHh6b082aUxHNUVFSExwUGJkOGZvb3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi80MDNkZGQtYzJkNS00YjU0LTk3M2Et MmI3YTc5NGQ1Nzk1LzEvQUNRMHh6b082aUxHNUVFSExwUGJkOGZvb3ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi80MDNkZGQtYzJkNS00YjU0LTk3M2EtMmI3YTc5NGQ1Nzk1 LzEvQUNRMHh6b082aUxHNUVFSExwUGJkOGZvb3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIq400RtR 4teQ6k/eO3TL+BariVwBcqstJ3ww7Wv6C5v+67k+3euhv4YPK8maGnHDkQWK7IuU Azjcy8A+HhNDoGrMI4vtJnTXuuSjNqAFRAdGZbRS8fwajQcCS+p2OdtTWMQF5U7f GO1vmwA9shIlkdqX8MSo6Y9QMTg8jqu8cbIalG/yQBajI6O+JDV93ng0KF70TNbg 0mJ8CTZTfcke1q8x4rT8lLOi5Gavw2T0ie6fI9PfA/TGbbN7A2RzCZfHn2HZi34l vXZOcngcxr/z9LeQx/fVkHlUFcyXol+T0YGe+4eMBjX3A6oumH1MfIIv2AMg4PWo TNnruAyov7AoWA== -----END CERTIFICATE-----Generated at Fri Dec 12 00:09:13 2025 by rpki-client