This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft File: AcvG50Tu-cAWdAHVbB-TgO72SUg.mft (raw, json) Hash identifier: ABhBGs8wJQtbJQtxgF5lNbaI4mg0pZ5UlnAO/Hn12WM= Subject key identifier: 1F:7D:32:E8:11:F1:6F:E6:0C:7C:C2:C0:5D:96:BC:11:FB:DF:CA:C5 Authority key identifier: 01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48 Certificate issuer: /CN=01cbc6e744eef9c0167401d56c1f9380eef64948 Certificate serial: 019B2407E54D1A8F94943CA57AD59CF6D298 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft Manifest number: 0606 Signing time: Mon 15 Dec 2025 22:00:55 +0000 Manifest this update: Mon 15 Dec 2025 22:00:55 +0000 Manifest next update: Tue 16 Dec 2025 22:00:55 +0000 Files and hashes: 1: AcvG50Tu-cAWdAHVbB-TgO72SUg.crl (hash: APe26iQCKF/qBoeZ7//0TOeccBBfD2HNfBjVSjahz+Q=) 2: BX2JPGJy6RMaPcWuXvWlFqwNrIA.roa (hash: u+UX2pAd1eP7HJXW9NY0JTLVGtLaRb7rjxt8LHxvOj8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:07:e5:4d:1a:8f:94:94:3c:a5:7a:d5:9c:f6:d2:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01cbc6e744eef9c0167401d56c1f9380eef64948 Validity Not Before: Dec 15 22:00:55 2025 GMT Not After : Dec 16 22:00:55 2025 GMT Subject: CN=1f7d32e811f16fe60c7cc2c05d96bc11fbdfcac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:22:2e:69:91:a0:15:f3:05:c9:ab:a5:d2:7f: fa:91:b4:3f:79:7f:e2:3c:e0:f9:93:00:fd:bf:10: c6:ef:f0:56:70:10:36:a0:22:db:f2:43:e7:cd:e9: ea:6b:9d:80:5a:65:cd:d6:0e:90:ca:58:c0:9a:29: ac:82:8d:d2:41:6f:a6:0c:2e:24:e0:f2:b4:9c:d9: 20:b1:c8:38:f7:a3:38:95:ac:54:1c:c5:0a:3c:7b: 58:c0:bd:2f:ea:ec:02:8c:0a:83:8a:ce:62:be:8b: 68:d1:e2:1c:d1:3d:2d:48:8c:71:37:29:95:0d:95: 44:af:f0:03:9e:f8:48:3e:fd:ce:7d:b1:6d:f6:28: e3:d1:18:03:9c:80:75:e7:d8:c0:22:8c:cd:ff:a5: 9d:49:97:86:2f:22:c7:4d:df:12:d3:8e:bb:b0:fd: a7:42:ab:82:10:b1:a4:02:a1:57:7d:31:b3:ef:5b: b0:d4:43:69:cd:94:5b:35:1e:0c:a3:43:f3:b4:1d: ef:bf:7d:39:05:aa:33:9a:19:5b:8f:97:01:b5:af: 6d:87:bf:c6:3c:04:c7:c2:00:d6:0f:6a:28:51:68: e8:d1:b5:23:fd:ff:82:e3:4d:fa:8f:1b:e8:99:71: 00:3e:34:4b:b2:e4:6b:ca:df:c2:19:16:50:03:2d: 1f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:7D:32:E8:11:F1:6F:E6:0C:7C:C2:C0:5D:96:BC:11:FB:DF:CA:C5 X509v3 Authority Key Identifier: keyid:01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:7b:cb:54:a5:d9:25:63:c5:46:8a:4e:79:f6:c4:8a:92:40: 22:cb:73:e0:84:ce:ee:be:71:15:fa:ee:8f:67:53:6f:6d:1d: d2:30:22:19:25:fa:99:ff:f8:7b:3f:86:cd:0c:b4:48:24:d6: db:fc:3b:29:62:74:cc:8c:29:78:be:d4:99:27:86:2b:f6:ce: c8:31:bb:0e:41:e1:0a:ee:92:05:5c:26:4f:4d:0b:11:57:e7: 93:27:c6:7b:25:5c:33:81:a2:10:e4:67:32:7b:ee:01:3d:59: 26:7a:81:f4:39:11:2f:a1:79:f2:d5:54:a0:ee:fd:b4:a8:56: 94:1e:88:00:d4:42:2f:0a:6f:63:02:6c:ea:4b:39:9f:39:9b: b7:b1:92:ab:4d:55:bf:1f:30:fe:6d:1a:d4:63:0f:7f:8b:5a: 2d:fe:b4:be:3c:1c:9d:b7:6e:dc:65:50:71:9f:14:bb:98:5c: c9:ab:f8:cd:09:f9:95:7f:29:c1:76:e3:8a:f7:43:af:6a:38: 8c:56:4f:af:0f:83:8f:50:92:7d:3d:6d:d6:60:f6:93:a0:ec: 8d:b1:17:ed:e3:bc:84:ca:64:a9:a8:55:35:dc:3f:32:e6:1d: fc:43:5c:01:ce:05:78:a4:ba:96:bd:2c:99:9e:9e:93:ec:10: bf:4a:bf:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskB+VNGo+UlDyletWc9tKYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxY2JjNmU3NDRlZWY5YzAxNjc0MDFkNTZjMWY5MzgwZWVm NjQ5NDgwHhcNMjUxMjE1MjIwMDU1WhcNMjUxMjE2MjIwMDU1WjAzMTEwLwYDVQQD EygxZjdkMzJlODExZjE2ZmU2MGM3Y2MyYzA1ZDk2YmMxMWZiZGZjYWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCIuaZGgFfMFyaul0n/6kbQ/eX/i POD5kwD9vxDG7/BWcBA2oCLb8kPnzenqa52AWmXN1g6QyljAmimsgo3SQW+mDC4k 4PK0nNkgscg496M4laxUHMUKPHtYwL0v6uwCjAqDis5ivoto0eIc0T0tSIxxNymV DZVEr/ADnvhIPv3OfbFt9ijj0RgDnIB159jAIozN/6WdSZeGLyLHTd8S0467sP2n QquCELGkAqFXfTGz71uw1ENpzZRbNR4Mo0PztB3vv305Baozmhlbj5cBta9th7/G PATHwgDWD2ooUWjo0bUj/f+C4036jxvomXEAPjRLsuRryt/CGRZQAy0fCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB99MugR8W/mDHzCwF2WvBH738rFMB8GA1UdIwQY MBaAFAHLxudE7vnAFnQB1Wwfk4Du9klIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWN2RzUwVHUtY0FXZEFIVmJCLVRnTzcyU1VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mNDkzYzYtMTAzYy00ZDc5LTlhZTIt OWUyZGEzN2I0MTllLzEvQWN2RzUwVHUtY0FXZEFIVmJCLVRnTzcyU1VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9mNDkzYzYtMTAzYy00ZDc5LTlhZTItOWUyZGEzN2I0MTll LzEvQWN2RzUwVHUtY0FXZEFIVmJCLVRnTzcyU1VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIHvLVKXZ JWPFRopOefbEipJAIstz4ITO7r5xFfruj2dTb20d0jAiGSX6mf/4ez+GzQy0SCTW 2/w7KWJ0zIwpeL7UmSeGK/bOyDG7DkHhCu6SBVwmT00LEVfnkyfGeyVcM4GiEORn MnvuAT1ZJnqB9DkRL6F58tVUoO79tKhWlB6IANRCLwpvYwJs6ks5nzmbt7GSq01V vx8w/m0a1GMPf4taLf60vjwcnbdu3GVQcZ8Uu5hcyav4zQn5lX8pwXbjivdDr2o4 jFZPrw+Dj1CSfT1t1mD2k6DsjbEX7eO8hMpkqahVNdw/MuYd/ENcAc4FeKS6lr0s mZ6ek+wQv0q/7w== -----END CERTIFICATE-----Generated at Tue Dec 16 00:48:29 2025 by rpki-client