This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft File: AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft (raw, json) Hash identifier: tuHWfAHwT2EVD2v3RU5MQtY2173EDt4Hhil/Y2OStKU= Subject key identifier: 51:D7:ED:1C:8B:9C:50:BD:AE:8B:96:B7:12:6F:91:5C:AA:0A:87:45 Authority key identifier: 01:C3:52:11:8F:D5:F7:54:54:CF:C6:1B:E6:1A:42:AB:EF:4D:C4:F8 Certificate issuer: /CN=01c352118fd5f75454cfc61be61a42abef4dc4f8 Certificate serial: 019B5AF60C77E62DA9688D2AC5CE3ACF054B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft Manifest number: 112A Signing time: Fri 26 Dec 2025 14:00:33 +0000 Manifest this update: Fri 26 Dec 2025 14:00:33 +0000 Manifest next update: Sat 27 Dec 2025 14:00:33 +0000 Files and hashes: 1: AcNSEY_V91RUz8Yb5hpCq-9NxPg.crl (hash: 79+btNzQHzdRODp+oKl2oTxOBV8CT/fhBW+jYku6ouY=) 2: lnFBPEwYXwbrEbBc_1U4hqBIiD0.roa (hash: pkORWbBvX/TB59ufAxJ53BtkrDGiG+iuAuMuYoIsXog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:0c:77:e6:2d:a9:68:8d:2a:c5:ce:3a:cf:05:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01c352118fd5f75454cfc61be61a42abef4dc4f8 Validity Not Before: Dec 26 14:00:33 2025 GMT Not After : Dec 27 14:00:33 2025 GMT Subject: CN=51d7ed1c8b9c50bdae8b96b7126f915caa0a8745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4c:34:00:82:22:00:1d:ba:ce:74:06:8f:ac: 7c:38:4e:6e:bf:13:82:87:20:36:ed:5e:b3:40:b4: af:f6:d8:55:7b:e6:81:e6:25:67:9e:8d:3a:b3:00: be:d4:eb:99:f1:ec:22:10:00:16:71:e6:12:aa:40: 34:8d:44:80:91:ab:90:79:e4:f4:22:9b:b1:0e:8c: 17:42:be:b1:5f:02:ee:1e:4c:86:fc:40:79:c6:62: 85:cb:26:c1:1e:c4:48:2c:3a:4e:89:32:bc:43:a5: f4:67:d6:b5:96:2d:e2:da:6c:ea:30:29:59:d8:8e: ff:f9:30:a7:b0:94:d8:b2:47:70:cb:0e:04:00:b1: 00:91:a2:3b:63:4e:36:f6:49:3a:0d:d8:45:11:e7: bd:d9:b0:e2:64:1c:a9:fe:84:b6:1c:56:88:a4:04: 00:7d:37:96:71:f7:da:4d:d0:bf:3e:4d:fc:7c:14: df:65:22:cc:12:ff:c6:d5:83:32:ad:dc:d0:30:1b: 2d:ae:7e:5b:35:81:c3:1f:5d:f3:0e:69:2e:4b:73: b2:d5:c3:70:15:c2:55:81:61:47:12:b7:06:bf:98: 46:c6:d2:13:c9:64:99:e4:50:8a:98:97:ad:03:a6: e7:8a:9d:86:e8:72:c4:dc:98:16:2e:4c:d4:7f:ad: 88:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:D7:ED:1C:8B:9C:50:BD:AE:8B:96:B7:12:6F:91:5C:AA:0A:87:45 X509v3 Authority Key Identifier: keyid:01:C3:52:11:8F:D5:F7:54:54:CF:C6:1B:E6:1A:42:AB:EF:4D:C4:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:a1:3b:b5:87:8c:9e:01:dd:ac:9c:9a:d1:6d:46:45:11:83: 82:af:17:16:8e:e7:8a:65:0b:36:fd:e3:1f:7a:2f:c2:f8:b3: 68:2c:f4:83:31:ed:09:28:65:39:b3:0c:c7:3b:c9:04:a4:bb: 41:db:41:a3:22:a7:48:be:c0:a5:91:7e:72:1b:e4:41:07:0e: 74:b9:32:e7:83:0f:41:21:d3:54:a5:65:1b:56:8f:6e:e5:ea: 1b:aa:7b:24:2b:f3:43:6d:f8:c2:7d:f2:a1:92:ce:3e:75:ad: 27:7e:95:60:b5:f6:09:61:c4:83:55:b8:e5:a5:e8:57:bc:ea: f4:ab:5a:9c:f8:e7:b9:07:98:f5:4a:88:68:aa:4b:cd:89:f7: 58:7d:2a:04:7a:2a:5c:a9:54:fa:05:81:09:3d:4d:11:bb:8f: 57:19:70:5a:ba:4e:52:02:b5:6c:8c:df:42:1f:10:97:84:30: 93:85:b3:ee:1e:45:36:1c:dc:32:8a:94:0b:3f:46:e9:e0:44: 5d:09:63:c7:25:23:75:f6:f1:96:eb:84:f6:15:e4:e8:05:3d: 63:b7:45:37:54:c5:fa:2e:dc:f9:e0:14:55:84:e0:bb:fd:ca: 1c:ac:b3:ae:7b:36:56:c2:b3:64:fe:1e:3f:89:d3:4a:4d:7a: 87:ca:d5:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9gx35i2paI0qxc46zwVLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxYzM1MjExOGZkNWY3NTQ1NGNmYzYxYmU2MWE0MmFiZWY0 ZGM0ZjgwHhcNMjUxMjI2MTQwMDMzWhcNMjUxMjI3MTQwMDMzWjAzMTEwLwYDVQQD Eyg1MWQ3ZWQxYzhiOWM1MGJkYWU4Yjk2YjcxMjZmOTE1Y2FhMGE4NzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUw0AIIiAB26znQGj6x8OE5uvxOC hyA27V6zQLSv9thVe+aB5iVnno06swC+1OuZ8ewiEAAWceYSqkA0jUSAkauQeeT0 IpuxDowXQr6xXwLuHkyG/EB5xmKFyybBHsRILDpOiTK8Q6X0Z9a1li3i2mzqMClZ 2I7/+TCnsJTYskdwyw4EALEAkaI7Y0429kk6DdhFEee92bDiZByp/oS2HFaIpAQA fTeWcffaTdC/Pk38fBTfZSLMEv/G1YMyrdzQMBstrn5bNYHDH13zDmkuS3Oy1cNw FcJVgWFHErcGv5hGxtITyWSZ5FCKmJetA6bnip2G6HLE3JgWLkzUf62I5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFHX7RyLnFC9rouWtxJvkVyqCodFMB8GA1UdIwQY MBaAFAHDUhGP1fdUVM/GG+YaQqvvTcT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWNOU0VZX1Y5MVJVejhZYjVocENxLTlOeFBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi81ZThhMmEtNDU3My00MzZiLTkwMmEt ZWYwMWUxZGM3ZGFjLzEvQWNOU0VZX1Y5MVJVejhZYjVocENxLTlOeFBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi81ZThhMmEtNDU3My00MzZiLTkwMmEtZWYwMWUxZGM3ZGFj LzEvQWNOU0VZX1Y5MVJVejhZYjVocENxLTlOeFBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASaE7tYeM ngHdrJya0W1GRRGDgq8XFo7nimULNv3jH3ovwvizaCz0gzHtCShlObMMxzvJBKS7 QdtBoyKnSL7ApZF+chvkQQcOdLky54MPQSHTVKVlG1aPbuXqG6p7JCvzQ234wn3y oZLOPnWtJ36VYLX2CWHEg1W45aXoV7zq9KtanPjnuQeY9UqIaKpLzYn3WH0qBHoq XKlU+gWBCT1NEbuPVxlwWrpOUgK1bIzfQh8Ql4Qwk4Wz7h5FNhzcMoqUCz9G6eBE XQljxyUjdfbxluuE9hXk6AU9Y7dFN1TF+i7c+eAUVYTgu/3KHKyzrns2VsKzZP4e P4nTSk16h8rVTA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:05:44 2025 by rpki-client