This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft File: AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft (raw, json) Hash identifier: OeSlQkueeaf19ZHzx1JaiPjRhxfcLh/ppMA6Hin7slc= Subject key identifier: 87:EF:47:EC:BB:2F:88:B9:4C:46:39:29:CC:07:47:AF:11:E4:EF:AD Authority key identifier: 01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29 Certificate issuer: /CN=01c2863a6438b3402752a4740e90ce42eb589129 Certificate serial: 019B10EF2DD27D5E8A486F79256E54D93EBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft Manifest number: 1107 Signing time: Fri 12 Dec 2025 05:01:08 +0000 Manifest this update: Fri 12 Dec 2025 05:01:08 +0000 Manifest next update: Sat 13 Dec 2025 05:01:08 +0000 Files and hashes: 1: AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl (hash: 9gjBE1TP+eiOfZ4dlMb9s1GLCZk30db8gCQFTsI6gSI=) 2: DVOzFfjLRaTUZyMinPqbQ4S_9DE.roa (hash: W1flvtqrAEaVVbhIS1vtvgxbygP7i6aEq71rS+R0/KY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:ef:2d:d2:7d:5e:8a:48:6f:79:25:6e:54:d9:3e:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01c2863a6438b3402752a4740e90ce42eb589129 Validity Not Before: Dec 12 05:01:08 2025 GMT Not After : Dec 13 05:01:08 2025 GMT Subject: CN=87ef47ecbb2f88b94c463929cc0747af11e4efad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ae:db:32:e2:39:f4:d2:9b:1c:a0:04:46:a8: 67:b5:83:3f:d0:84:9f:fa:85:ec:bc:8f:f6:62:c7: d3:96:62:71:e5:55:ab:be:7d:19:5b:b9:8c:e4:be: 71:9f:64:c8:f4:a5:7a:3c:70:21:d0:0f:f5:d7:74: b1:cd:16:63:93:00:ba:17:d2:3b:30:c3:88:7b:fc: 5d:1b:ae:5b:ee:ff:39:65:1f:0c:b9:57:71:50:c4: fc:ed:9b:36:ad:ae:8e:f8:bd:ef:bb:c9:02:f5:ed: 46:80:9f:02:c7:ce:7a:04:84:f6:8a:36:d7:09:54: 58:2f:ff:30:99:9c:09:e9:30:62:ef:f0:5a:8f:ae: 93:dc:20:99:82:d1:7c:d1:1d:fe:2a:45:c2:6e:8e: 5d:95:8b:51:53:e7:90:16:ad:28:92:8c:54:e6:c2: 55:25:bf:d9:64:bd:04:5f:40:bf:14:92:23:23:77: ea:ff:21:a2:f2:d0:ef:d5:61:5f:c7:0a:73:70:8c: c9:dc:91:c7:b1:d2:1e:a4:eb:41:13:b4:57:40:d0: 0c:75:a2:1b:61:82:b3:71:4e:f6:24:ed:be:9c:8a: 96:45:1e:62:58:8f:f7:df:f9:21:94:c9:27:ed:c9: cb:63:54:43:c8:51:17:ee:20:c7:3a:56:e8:f7:ba: 8a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:EF:47:EC:BB:2F:88:B9:4C:46:39:29:CC:07:47:AF:11:E4:EF:AD X509v3 Authority Key Identifier: keyid:01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:91:33:6b:8f:ca:04:ee:0a:e6:eb:30:ab:a4:d5:6e:fc:cc: 9c:9f:98:ac:d5:a5:6f:23:f8:56:de:63:c2:2a:1f:1b:43:36: 2b:01:f1:4b:dd:97:95:72:7c:51:54:79:ec:ec:79:6c:1f:73: 34:d3:21:2f:18:85:cc:3c:c4:73:6e:87:96:5d:f2:c5:c4:2e: af:eb:24:22:11:f1:f5:66:f6:5b:48:2e:8e:81:53:1d:34:65: 88:31:8f:93:1a:b1:8b:72:7e:d2:55:0a:d4:fd:06:b6:a8:ad: 2e:41:64:a4:0c:de:63:93:40:65:08:dd:9a:bc:94:71:b4:fb: c6:3c:9d:d6:d4:79:f1:c4:32:12:a2:ee:a0:e1:a3:3a:44:ca: 6b:e4:e6:14:f0:77:35:42:19:dc:f3:8c:dd:31:d6:6e:f5:30: 00:64:10:6b:d8:d1:3a:aa:eb:eb:c9:87:78:84:27:e4:d2:9c: 2a:a9:3c:03:c1:55:2e:3c:92:70:ca:f3:15:1c:8c:09:16:8b: ae:5c:f7:47:5e:06:aa:8b:a0:4b:8a:a0:db:72:3f:a1:97:c9: bc:22:d4:14:ce:19:e6:ec:74:6a:cd:3f:fa:b1:02:87:97:b0: 4f:58:f3:10:ed:7f:c2:11:db:22:30:76:3a:71:88:29:d5:0a: 0a:9a:3a:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQ7y3SfV6KSG95JW5U2T66MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxYzI4NjNhNjQzOGIzNDAyNzUyYTQ3NDBlOTBjZTQyZWI1 ODkxMjkwHhcNMjUxMjEyMDUwMTA4WhcNMjUxMjEzMDUwMTA4WjAzMTEwLwYDVQQD Eyg4N2VmNDdlY2JiMmY4OGI5NGM0NjM5MjljYzA3NDdhZjExZTRlZmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2q7bMuI59NKbHKAERqhntYM/0ISf +oXsvI/2YsfTlmJx5VWrvn0ZW7mM5L5xn2TI9KV6PHAh0A/113SxzRZjkwC6F9I7 MMOIe/xdG65b7v85ZR8MuVdxUMT87Zs2ra6O+L3vu8kC9e1GgJ8Cx856BIT2ijbX CVRYL/8wmZwJ6TBi7/Baj66T3CCZgtF80R3+KkXCbo5dlYtRU+eQFq0okoxU5sJV Jb/ZZL0EX0C/FJIjI3fq/yGi8tDv1WFfxwpzcIzJ3JHHsdIepOtBE7RXQNAMdaIb YYKzcU72JO2+nIqWRR5iWI/33/khlMkn7cnLY1RDyFEX7iDHOlbo97qK0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfvR+y7L4i5TEY5KcwHR68R5O+tMB8GA1UdIwQY MBaAFAHChjpkOLNAJ1KkdA6QzkLrWJEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWNLR09tUTRzMEFuVXFSMERwRE9RdXRZa1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yNTIzN2UtY2U2YS00MzAyLWI2YTQt YjU0MDU4MzRmMGM1LzEvQWNLR09tUTRzMEFuVXFSMERwRE9RdXRZa1NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8yNTIzN2UtY2U2YS00MzAyLWI2YTQtYjU0MDU4MzRmMGM1 LzEvQWNLR09tUTRzMEFuVXFSMERwRE9RdXRZa1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT5Eza4/K BO4K5uswq6TVbvzMnJ+YrNWlbyP4Vt5jwiofG0M2KwHxS92XlXJ8UVR57Ox5bB9z NNMhLxiFzDzEc26Hll3yxcQur+skIhHx9Wb2W0gujoFTHTRliDGPkxqxi3J+0lUK 1P0GtqitLkFkpAzeY5NAZQjdmryUcbT7xjyd1tR58cQyEqLuoOGjOkTKa+TmFPB3 NUIZ3POM3THWbvUwAGQQa9jROqrr68mHeIQn5NKcKqk8A8FVLjyScMrzFRyMCRaL rlz3R14GqougS4qg23I/oZfJvCLUFM4Z5ux0as0/+rECh5ewT1jzEO1/whHbIjB2 OnGIKdUKCpo6vQ== -----END CERTIFICATE-----Generated at Fri Dec 12 08:44:19 2025 by rpki-client