This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft File: AcS3hNgWbovQ9H1yD95frsFkWzQ.mft (raw, json) Hash identifier: a0Qrepe6QA/tYMGNlk9yuYhxDCVKjtRZ+PdmZP6mp/Q= Subject key identifier: E1:D3:05:9C:0A:7F:82:D3:33:9D:B2:55:32:76:E5:6C:7C:B0:EC:F8 Authority key identifier: 01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34 Certificate issuer: /CN=01c4b784d8166e8bd0f47d720fde5faec1645b34 Certificate serial: 019B48EFF474F242CCA65D4B5FF3FBB302D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft Manifest number: 178F Signing time: Tue 23 Dec 2025 02:00:43 +0000 Manifest this update: Tue 23 Dec 2025 02:00:43 +0000 Manifest next update: Wed 24 Dec 2025 02:00:43 +0000 Files and hashes: 1: AcS3hNgWbovQ9H1yD95frsFkWzQ.crl (hash: MKC30ZxD8rQemaxw1vi5xpnPo/RpJpRr8n+0D3Nie7A=) 2: TfDOBJVmJoj40V_l3LjkaTEjm8g.roa (hash: ReTHm2rRZcfjOGQDNdmXkBd+jk6YyXS+LSWab0KtASc=) 3: v50wWhyCI7hTEJpByG9mHooOhqA.roa (hash: E6PQDvh39GUQ1c6SbkD744Bu9C+vTY8Ul4lMsKxnnNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:ef:f4:74:f2:42:cc:a6:5d:4b:5f:f3:fb:b3:02:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01c4b784d8166e8bd0f47d720fde5faec1645b34 Validity Not Before: Dec 23 02:00:43 2025 GMT Not After : Dec 24 02:00:43 2025 GMT Subject: CN=e1d3059c0a7f82d3339db2553276e56c7cb0ecf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:72:7d:37:0c:c4:06:82:e1:96:e4:b8:ec:b0: 03:b7:93:30:ff:2a:91:bd:65:d2:5b:04:af:1c:33: 5b:92:8e:ae:8f:a6:33:45:27:3d:f1:81:f0:5b:6b: 05:25:75:91:1d:db:2b:68:50:a6:65:65:28:3f:b6: 4d:2f:27:33:65:91:02:9f:10:47:94:3c:b2:5f:6f: 84:aa:19:2e:4d:e9:68:6b:59:4a:6a:2f:80:fc:80: 7c:7b:26:6f:f2:01:1c:0b:5b:d1:ae:14:03:d9:96: ea:7e:9c:51:1a:87:be:bd:72:24:20:33:f8:d9:78: 3c:d3:03:f3:87:a1:8f:24:71:ff:a1:fe:aa:e6:dc: 6c:7f:c0:87:e5:e5:52:9b:ad:b3:f7:1c:a6:91:c6: 2c:e7:10:45:87:b2:f9:22:c0:78:13:b1:c0:76:4d: 87:66:92:15:6d:a9:62:d9:a5:b1:84:92:a3:fa:87: cd:b7:01:0f:7b:e7:9d:bb:e5:67:4b:a3:d7:e8:72: af:0c:fa:bf:7a:cb:f1:e8:8c:ae:8b:b9:89:2d:09: ee:7f:79:d0:2c:87:bc:28:1b:29:fd:d7:ca:ca:0c: 57:bc:e0:d8:92:1f:e4:a8:b3:02:13:b9:db:b6:9c: 80:e4:8e:2c:e9:f6:72:21:0d:df:9e:b3:d0:80:ff: 01:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D3:05:9C:0A:7F:82:D3:33:9D:B2:55:32:76:E5:6C:7C:B0:EC:F8 X509v3 Authority Key Identifier: keyid:01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:07:94:ed:f9:58:49:27:9d:58:4f:bf:52:c3:1d:51:a8:d8: 49:87:41:3c:2d:c3:7e:93:46:25:c8:18:e4:a0:82:41:11:fe: ea:b1:34:c4:06:d3:ed:30:bc:58:06:14:80:86:e8:c3:a2:c7: 6e:d7:6a:a8:ff:54:07:ab:4a:5b:62:90:8e:07:93:dc:51:77: fb:7e:c0:38:cf:dc:ed:80:f4:13:8e:cf:f9:58:6f:5b:75:6a: 4d:05:1c:45:18:38:62:f9:39:ce:2e:ed:4e:79:75:5f:83:e7: fa:4d:0d:17:4a:c9:ac:27:3f:85:b8:c9:da:77:a0:0c:ff:0f: 1a:00:5e:d3:3c:3f:0b:59:c8:59:b1:d5:f3:9e:ea:6c:9a:9f: d3:a2:f3:0a:28:06:8c:73:4b:bc:31:ae:96:db:e8:d3:d4:79: 9f:71:c8:39:51:17:1e:9f:05:0b:4c:05:95:46:89:34:51:08: 3e:d6:11:aa:a8:23:ee:90:07:ec:c0:0a:4d:71:ba:f2:31:3f: ee:19:79:30:23:74:98:34:52:1d:ec:9a:3d:b5:2f:a8:df:50: a0:39:a0:61:f8:70:dc:e6:e9:92:6a:fe:07:67:b9:61:fd:20: c3:5c:39:56:2b:e2:7f:af:00:3e:36:43:a4:43:af:29:ac:84: 91:f4:b0:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI7/R08kLMpl1LX/P7swLSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxYzRiNzg0ZDgxNjZlOGJkMGY0N2Q3MjBmZGU1ZmFlYzE2 NDViMzQwHhcNMjUxMjIzMDIwMDQzWhcNMjUxMjI0MDIwMDQzWjAzMTEwLwYDVQQD EyhlMWQzMDU5YzBhN2Y4MmQzMzM5ZGIyNTUzMjc2ZTU2YzdjYjBlY2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13J9NwzEBoLhluS47LADt5Mw/yqR vWXSWwSvHDNbko6uj6YzRSc98YHwW2sFJXWRHdsraFCmZWUoP7ZNLyczZZECnxBH lDyyX2+EqhkuTeloa1lKai+A/IB8eyZv8gEcC1vRrhQD2ZbqfpxRGoe+vXIkIDP4 2Xg80wPzh6GPJHH/of6q5txsf8CH5eVSm62z9xymkcYs5xBFh7L5IsB4E7HAdk2H ZpIVbali2aWxhJKj+ofNtwEPe+edu+VnS6PX6HKvDPq/esvx6Iyui7mJLQnuf3nQ LIe8KBsp/dfKygxXvODYkh/kqLMCE7nbtpyA5I4s6fZyIQ3fnrPQgP8BsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOHTBZwKf4LTM52yVTJ25Wx8sOz4MB8GA1UdIwQY MBaAFAHEt4TYFm6L0PR9cg/eX67BZFs0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWNTM2hOZ1dib3ZROUgxeUQ5NWZyc0ZrV3pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9mMmI4NDAtMmM4NS00NjViLThiOTMt NWI1YmViMTA1MTNiLzEvQWNTM2hOZ1dib3ZROUgxeUQ5NWZyc0ZrV3pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9mMmI4NDAtMmM4NS00NjViLThiOTMtNWI1YmViMTA1MTNi LzEvQWNTM2hOZ1dib3ZROUgxeUQ5NWZyc0ZrV3pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArweU7flY SSedWE+/UsMdUajYSYdBPC3DfpNGJcgY5KCCQRH+6rE0xAbT7TC8WAYUgIbow6LH btdqqP9UB6tKW2KQjgeT3FF3+37AOM/c7YD0E47P+VhvW3VqTQUcRRg4Yvk5zi7t Tnl1X4Pn+k0NF0rJrCc/hbjJ2negDP8PGgBe0zw/C1nIWbHV857qbJqf06LzCigG jHNLvDGultvo09R5n3HIOVEXHp8FC0wFlUaJNFEIPtYRqqgj7pAH7MAKTXG68jE/ 7hl5MCN0mDRSHeyaPbUvqN9QoDmgYfhw3Obpkmr+B2e5Yf0gw1w5Vivif68APjZD pEOvKayEkfSwNA== -----END CERTIFICATE-----Generated at Tue Dec 23 05:51:22 2025 by rpki-client