This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft File: ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft (raw, json) Hash identifier: GypPhy8BJy5XONo++ttjg6CZFYAii2WegEuUysuQpGI= Subject key identifier: 44:8D:7A:DC:D7:19:C9:C6:25:BB:3D:7E:FE:8E:F8:78:46:3C:2C:B0 Authority key identifier: 00:2C:88:65:BC:2A:07:E4:AC:FE:B2:63:B4:D9:CF:62:46:0F:D5:23 Certificate issuer: /CN=002c8865bc2a07e4acfeb263b4d9cf62460fd523 Certificate serial: 019B59774BA386A233551F50669A1E34C000 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft Manifest number: 0DC7 Signing time: Fri 26 Dec 2025 07:02:28 +0000 Manifest this update: Fri 26 Dec 2025 07:02:28 +0000 Manifest next update: Sat 27 Dec 2025 07:02:28 +0000 Files and hashes: 1: ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl (hash: gegwzP87Q35WHHiZ54m9iYt+5mRCwMwFYtlTtX1ALRA=) 2: F8t05KMRne3MsUcmQpBcGXGBMI8.roa (hash: d6IcpYMjJ62EgVhlSLiumFte8BB2LXTHsEgOP/d/Rss=) 3: FXe_JPwCxokWG0F8sL8Vx_t96gE.roa (hash: 9THWoynL84G88vnVxVYdONxnlu6uMlCDE+r39l01xOU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:4b:a3:86:a2:33:55:1f:50:66:9a:1e:34:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=002c8865bc2a07e4acfeb263b4d9cf62460fd523 Validity Not Before: Dec 26 07:02:28 2025 GMT Not After : Dec 27 07:02:28 2025 GMT Subject: CN=448d7adcd719c9c625bb3d7efe8ef878463c2cb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b0:74:e4:40:78:d9:74:be:78:76:89:2f:0d: 23:cf:54:78:ba:87:03:68:3c:ac:b8:d3:14:eb:0a: 82:fd:e8:65:96:9f:c1:ab:91:80:9b:c2:3e:8b:02: 45:50:13:dd:92:b7:e0:85:b1:4a:d4:88:c5:d5:52: dc:7b:a4:64:2a:01:4d:95:13:16:c2:70:13:2c:26: c1:3b:2a:31:d8:95:dd:ab:1f:82:ae:05:44:fc:e3: 35:a1:64:86:55:10:e2:d1:04:1d:5d:4b:12:ec:81: 27:92:13:6d:a5:e5:d1:49:68:34:aa:f6:03:95:28: ec:79:9b:93:fd:f8:33:5d:da:a9:1d:2c:ad:3d:79: bc:15:d6:e5:38:c3:69:8b:08:eb:01:ad:8e:78:b2: 7a:bc:72:63:3e:12:ab:8d:e4:69:83:8d:db:6b:02: fa:5f:34:bc:a9:93:26:42:46:43:af:9c:7f:01:d9: 14:7f:c0:c5:d5:33:17:51:93:b4:04:d9:4b:05:02: 09:af:8c:b3:15:f3:e4:ee:17:cf:0e:ee:8f:54:e0: 32:e8:e1:b9:03:c7:19:d7:02:3f:20:0e:55:4e:21: 93:7c:38:21:21:e4:d7:17:d3:4e:7d:ce:a0:de:e2: 1c:2d:d4:e4:0a:62:c8:11:38:9d:65:45:a0:4a:99: e1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:8D:7A:DC:D7:19:C9:C6:25:BB:3D:7E:FE:8E:F8:78:46:3C:2C:B0 X509v3 Authority Key Identifier: keyid:00:2C:88:65:BC:2A:07:E4:AC:FE:B2:63:B4:D9:CF:62:46:0F:D5:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:88:b0:6d:45:55:0e:3e:31:35:71:5b:34:29:ba:cc:f8:0e: 8a:09:3d:25:ff:93:6b:b0:be:76:04:da:0c:e9:c9:5a:1e:ad: 89:8e:e2:4e:5b:26:61:ac:b1:40:6e:fc:46:49:03:7d:bc:68: b0:bb:0c:0e:28:45:92:51:6d:b3:3a:e8:cb:73:49:7d:1a:f4: 06:4a:3d:c0:b9:ee:68:c5:57:f0:aa:d2:f1:42:5b:0c:a0:68: 9b:61:cc:2f:e0:f5:80:9b:d9:40:47:c8:8a:57:b0:ad:e6:2d: 0d:78:17:2c:14:50:9b:05:7f:f7:ca:4f:21:37:84:3f:60:f5: 9a:0d:d7:a4:8e:06:5b:64:74:79:9e:08:35:d3:ea:a0:eb:3e: 32:3c:37:f3:e1:c1:ec:83:5c:a5:e6:c8:03:67:31:cd:39:bf: 24:6c:1b:b2:e7:28:3d:f4:a0:a9:b1:e1:3f:83:87:db:64:74: 8a:8f:c4:ff:e8:1a:ad:0d:fe:5a:4a:c7:54:c8:67:ae:ba:95: 31:13:6e:5a:2e:c4:29:3f:d3:3e:bf:0e:70:85:28:be:73:2a: 04:e6:31:5b:83:62:e9:15:d3:75:5a:77:f9:d3:a0:64:14:90: 95:a3:37:f5:40:8d:ef:cf:59:9b:e7:fb:76:00:ac:2c:b3:93: e9:11:1b:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd0ujhqIzVR9QZpoeNMAAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMmM4ODY1YmMyYTA3ZTRhY2ZlYjI2M2I0ZDljZjYyNDYw ZmQ1MjMwHhcNMjUxMjI2MDcwMjI4WhcNMjUxMjI3MDcwMjI4WjAzMTEwLwYDVQQD Eyg0NDhkN2FkY2Q3MTljOWM2MjViYjNkN2VmZThlZjg3ODQ2M2MyY2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLB05EB42XS+eHaJLw0jz1R4uocD aDysuNMU6wqC/ehllp/Bq5GAm8I+iwJFUBPdkrfghbFK1IjF1VLce6RkKgFNlRMW wnATLCbBOyox2JXdqx+CrgVE/OM1oWSGVRDi0QQdXUsS7IEnkhNtpeXRSWg0qvYD lSjseZuT/fgzXdqpHSytPXm8FdblOMNpiwjrAa2OeLJ6vHJjPhKrjeRpg43bawL6 XzS8qZMmQkZDr5x/AdkUf8DF1TMXUZO0BNlLBQIJr4yzFfPk7hfPDu6PVOAy6OG5 A8cZ1wI/IA5VTiGTfDghIeTXF9NOfc6g3uIcLdTkCmLIETidZUWgSpnhNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFESNetzXGcnGJbs9fv6O+HhGPCywMB8GA1UdIwQY MBaAFAAsiGW8KgfkrP6yY7TZz2JGD9UjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUN5SVpid3FCLVNzX3JKanROblBZa1lQMVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9kN2ZhZGMtMWViZi00MmRhLTliMjIt YTYwYzIwYzhmNzE3LzEvQUN5SVpid3FCLVNzX3JKanROblBZa1lQMVNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9kN2ZhZGMtMWViZi00MmRhLTliMjItYTYwYzIwYzhmNzE3 LzEvQUN5SVpid3FCLVNzX3JKanROblBZa1lQMVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVoiwbUVV Dj4xNXFbNCm6zPgOigk9Jf+Ta7C+dgTaDOnJWh6tiY7iTlsmYayxQG78RkkDfbxo sLsMDihFklFtszroy3NJfRr0Bko9wLnuaMVX8KrS8UJbDKBom2HML+D1gJvZQEfI ilewreYtDXgXLBRQmwV/98pPITeEP2D1mg3XpI4GW2R0eZ4INdPqoOs+Mjw38+HB 7INcpebIA2cxzTm/JGwbsucoPfSgqbHhP4OH22R0io/E/+garQ3+WkrHVMhnrrqV MRNuWi7EKT/TPr8OcIUovnMqBOYxW4Ni6RXTdVp3+dOgZBSQlaM39UCN789Zm+f7 dgCsLLOT6REbWg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:54 2025 by rpki-client