This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft File: AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft (raw, json) Hash identifier: U1t8PpIO8wOB3ulap/72PFYT82dm9FY3ef699Ak5cgA= Subject key identifier: 08:A8:55:2A:E2:BC:BE:CF:06:9F:DD:0C:48:62:61:67:9D:E2:FF:1A Authority key identifier: 01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29 Certificate issuer: /CN=01c2863a6438b3402752a4740e90ce42eb589129 Certificate serial: 019B33B1AB2A371306963E67DC0C589CAFDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft Manifest number: 1119 Signing time: Thu 18 Dec 2025 23:00:40 +0000 Manifest this update: Thu 18 Dec 2025 23:00:40 +0000 Manifest next update: Fri 19 Dec 2025 23:00:40 +0000 Files and hashes: 1: AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl (hash: DaixMmKMN3KnMgHhJTqm/PzAuxvDvx055iNQWfSLboo=) 2: DVOzFfjLRaTUZyMinPqbQ4S_9DE.roa (hash: W1flvtqrAEaVVbhIS1vtvgxbygP7i6aEq71rS+R0/KY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:ab:2a:37:13:06:96:3e:67:dc:0c:58:9c:af:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01c2863a6438b3402752a4740e90ce42eb589129 Validity Not Before: Dec 18 23:00:40 2025 GMT Not After : Dec 19 23:00:40 2025 GMT Subject: CN=08a8552ae2bcbecf069fdd0c486261679de2ff1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:69:0b:b3:86:72:31:eb:dd:31:42:34:27:ec: fa:da:ec:7e:0f:df:e1:d7:f7:14:a4:76:67:c2:fd: 6a:c4:9c:ef:c9:ef:41:6e:24:f1:10:ec:3d:ae:4b: 9d:be:c6:82:78:7f:65:86:69:e4:b6:ac:c2:86:26: ce:2f:c1:ac:b7:16:2f:07:3a:09:31:7e:2b:41:46: 90:b7:f4:a7:a5:b5:a8:c5:fd:f5:e7:8e:20:8a:f9: 1b:76:dc:40:72:c5:63:4d:82:d3:da:92:3f:84:7f: 79:53:a2:8d:9e:85:97:fe:0a:c8:7d:8a:72:ca:a7: 47:e0:98:98:e4:6d:35:16:b1:31:33:94:8d:e9:23: 6d:85:d7:be:22:42:2b:67:a9:4a:7c:17:c4:e7:ee: 49:92:e5:61:a6:ab:7c:b0:7d:6d:2c:58:f8:33:e7: 35:49:d3:22:ef:ad:b6:30:7e:41:6f:4a:06:93:19: 96:37:1e:37:6e:aa:2a:b1:b4:ee:b3:6d:df:14:44: d4:a9:20:4d:4f:c9:73:26:c7:dc:12:9c:06:96:1c: da:47:95:02:11:2b:b8:6c:0f:45:b4:39:31:ae:63: e9:0b:bd:b9:62:ae:f9:16:45:f6:61:f2:48:26:8f: 44:ab:b2:7c:af:c9:9c:58:ab:a3:25:eb:16:c4:8e: be:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A8:55:2A:E2:BC:BE:CF:06:9F:DD:0C:48:62:61:67:9D:E2:FF:1A X509v3 Authority Key Identifier: keyid:01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:5a:a5:df:c8:02:d5:9c:57:65:07:14:b2:ec:34:fc:b3:11: 67:50:3d:0c:69:90:38:31:f9:ad:70:3e:18:c9:0d:ae:c5:c8: 7c:f7:fd:f7:00:a1:98:b1:e3:af:c1:a1:43:67:40:c2:f2:b6: ef:89:d6:44:bd:ff:ea:3e:02:fc:c3:c7:ca:ca:48:10:c9:0f: e9:2f:82:65:70:b8:af:8b:ca:5f:53:5f:ed:19:47:ab:a2:8a: eb:4b:8c:d3:72:2a:4e:d0:da:97:f3:07:fc:80:c4:dd:30:fe: fc:d6:b0:da:03:01:20:4c:29:51:e2:7a:46:bd:b8:5a:8f:e8: 53:c1:87:78:1c:17:aa:bd:e2:99:2e:91:52:45:bf:06:0b:c2: 8d:e5:99:61:85:0b:76:7d:e1:10:70:aa:54:23:a7:26:87:18: ba:b1:13:16:46:32:1b:a0:8f:d6:c0:ad:3a:67:39:e2:c1:34: f8:84:36:b7:40:81:b0:29:33:98:c3:c4:5f:67:02:a9:0a:a4: 9f:97:70:9b:a1:95:c5:60:ac:ca:40:43:e3:0b:f1:5a:96:bb: e8:5c:15:a2:f7:23:9b:80:3b:8d:45:69:d6:1f:6e:7e:f6:7c: 92:09:b2:bf:33:21:12:6f:d1:4a:38:42:1d:45:25:58:b0:76: a5:a6:1c:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsasqNxMGlj5n3AxYnK/fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxYzI4NjNhNjQzOGIzNDAyNzUyYTQ3NDBlOTBjZTQyZWI1 ODkxMjkwHhcNMjUxMjE4MjMwMDQwWhcNMjUxMjE5MjMwMDQwWjAzMTEwLwYDVQQD EygwOGE4NTUyYWUyYmNiZWNmMDY5ZmRkMGM0ODYyNjE2NzlkZTJmZjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2kLs4ZyMevdMUI0J+z62ux+D9/h 1/cUpHZnwv1qxJzvye9BbiTxEOw9rkudvsaCeH9lhmnktqzChibOL8GstxYvBzoJ MX4rQUaQt/SnpbWoxf31544givkbdtxAcsVjTYLT2pI/hH95U6KNnoWX/grIfYpy yqdH4JiY5G01FrExM5SN6SNthde+IkIrZ6lKfBfE5+5JkuVhpqt8sH1tLFj4M+c1 SdMi7622MH5Bb0oGkxmWNx43bqoqsbTus23fFETUqSBNT8lzJsfcEpwGlhzaR5UC ESu4bA9FtDkxrmPpC725Yq75FkX2YfJIJo9Eq7J8r8mcWKujJesWxI6+iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAioVSrivL7PBp/dDEhiYWed4v8aMB8GA1UdIwQY MBaAFAHChjpkOLNAJ1KkdA6QzkLrWJEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWNLR09tUTRzMEFuVXFSMERwRE9RdXRZa1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yNTIzN2UtY2U2YS00MzAyLWI2YTQt YjU0MDU4MzRmMGM1LzEvQWNLR09tUTRzMEFuVXFSMERwRE9RdXRZa1NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8yNTIzN2UtY2U2YS00MzAyLWI2YTQtYjU0MDU4MzRmMGM1 LzEvQWNLR09tUTRzMEFuVXFSMERwRE9RdXRZa1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi1ql38gC 1ZxXZQcUsuw0/LMRZ1A9DGmQODH5rXA+GMkNrsXIfPf99wChmLHjr8GhQ2dAwvK2 74nWRL3/6j4C/MPHyspIEMkP6S+CZXC4r4vKX1Nf7RlHq6KK60uM03IqTtDal/MH /IDE3TD+/Naw2gMBIEwpUeJ6Rr24Wo/oU8GHeBwXqr3imS6RUkW/BgvCjeWZYYUL dn3hEHCqVCOnJocYurETFkYyG6CP1sCtOmc54sE0+IQ2t0CBsCkzmMPEX2cCqQqk n5dwm6GVxWCsykBD4wvxWpa76FwVovcjm4A7jUVp1h9ufvZ8kgmyvzMhEm/RSjhC HUUlWLB2paYcpQ== -----END CERTIFICATE-----Generated at Fri Dec 19 04:52:06 2025 by rpki-client