This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft File: RmSgU4XAYmgVApGX6xUGSF09bRw.mft (raw, json) Hash identifier: yGth+35NAxYVCEVHxxZLGC+AC+W+LO9dgP0IksgMNZo= Subject key identifier: C2:A7:17:56:86:67:27:2A:89:9C:15:CF:E4:52:44:55:83:27:4F:4C Authority key identifier: 46:64:A0:53:85:C0:62:68:15:02:91:97:EB:15:06:48:5D:3D:6D:1C Certificate issuer: /CN=4664a05385c0626815029197eb1506485d3d6d1c Certificate serial: 019AF08874BA75FDAD30E042B681B48C3A0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmSgU4XAYmgVApGX6xUGSF09bRw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft Manifest number: 08B6 Signing time: Fri 05 Dec 2025 22:01:05 +0000 Manifest this update: Fri 05 Dec 2025 22:01:05 +0000 Manifest next update: Sat 06 Dec 2025 22:01:05 +0000 Files and hashes: 1: RmSgU4XAYmgVApGX6xUGSF09bRw.crl (hash: S0oLAjKkVCxGxop1DViv3jJ6ts+8brvbasWHCVPHS6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft rsync://rpki.ripe.net/repository/DEFAULT/RmSgU4XAYmgVApGX6xUGSF09bRw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:74:ba:75:fd:ad:30:e0:42:b6:81:b4:8c:3a:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4664a05385c0626815029197eb1506485d3d6d1c Validity Not Before: Dec 5 22:01:05 2025 GMT Not After : Dec 6 22:01:05 2025 GMT Subject: CN=c2a717568667272a899c15cfe452445583274f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:aa:8f:6d:82:b6:b2:9c:b3:3f:1c:d2:c1:42: dd:b8:d0:ac:94:55:2e:ba:6a:c5:ae:60:8b:cb:7e: 79:ac:b5:bb:85:f2:52:2b:3f:2b:16:b5:22:79:df: 40:2f:a3:74:a3:f2:e6:6d:06:19:43:5f:83:b7:28: ef:59:74:1e:8b:39:c3:05:94:71:e8:4f:7f:3c:2b: 4f:88:85:08:7b:22:7e:79:3e:c5:a0:03:f0:b3:e4: dd:c0:bb:e3:f8:59:88:bb:eb:87:4b:d0:a5:4b:6c: 17:37:e2:35:49:b1:0a:21:83:49:1a:ac:bb:51:4a: 09:9a:b8:2b:fa:73:90:1a:7d:a3:9d:21:3b:6d:21: a6:65:a8:17:e3:a4:f8:26:56:08:41:59:f0:bd:72: a5:f9:47:ab:55:09:a2:bf:bb:a6:60:70:e6:db:94: 3f:66:16:03:6a:d7:27:51:3d:32:97:e0:14:28:e8: 56:fe:dc:01:72:b6:1a:d3:da:c7:17:09:3b:75:36: 84:f6:bb:f7:0f:39:4c:3d:28:10:58:6c:da:ed:a5: 35:b9:b3:4b:31:6c:c6:0e:f3:05:0c:2f:2f:30:4a: ce:fc:cf:67:1b:51:8a:fa:7e:d6:d1:be:90:8f:44: 62:43:a1:57:b9:3b:c5:b9:bc:cd:65:b6:1f:d1:36: 8f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A7:17:56:86:67:27:2A:89:9C:15:CF:E4:52:44:55:83:27:4F:4C X509v3 Authority Key Identifier: keyid:46:64:A0:53:85:C0:62:68:15:02:91:97:EB:15:06:48:5D:3D:6D:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmSgU4XAYmgVApGX6xUGSF09bRw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:8e:4e:4c:15:bd:47:ec:41:9e:3c:97:68:d5:cb:fc:e1:7f: 83:ab:79:fa:59:d6:cb:d9:30:f3:ca:d6:9c:be:fc:be:5d:6c: 23:9a:b4:d9:ee:f4:f4:ae:c3:be:bf:f0:e0:a2:c6:7a:6b:73: a7:6f:56:3f:f2:7b:5c:02:05:54:d7:d3:25:27:69:e2:6c:b3: b6:14:31:7a:06:55:98:5c:fc:4e:15:4e:22:78:a9:40:7a:fd: 68:a0:a9:f5:60:22:8c:0f:b5:5b:50:94:e8:ae:f5:b0:49:39: 64:a9:17:fe:9b:3b:a5:e9:90:a5:35:78:3f:bf:ed:c3:a6:33: 73:76:0a:55:34:fd:e4:38:bd:5d:92:cd:04:ee:ed:a9:fc:b9: de:7e:a3:23:3f:35:87:b3:f0:34:95:08:d0:82:30:23:52:d1: 04:b7:59:62:56:3e:24:b7:61:2f:68:b4:76:44:b5:43:ef:7b: e3:a9:50:37:a8:db:d6:9a:04:8f:e8:61:56:84:29:9f:e2:b5: 19:4f:16:5f:65:d2:69:b1:c2:4a:cf:e6:30:d3:52:4f:91:6b: 7a:25:e7:93:a9:38:01:1d:c6:47:3d:0a:a9:42:7a:b3:03:82: 71:74:42:ff:09:e2:6e:91:a6:58:f5:39:47:75:b8:ce:be:fe: 1e:6b:22:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiHS6df2tMOBCtoG0jDoOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NjRhMDUzODVjMDYyNjgxNTAyOTE5N2ViMTUwNjQ4NWQz ZDZkMWMwHhcNMjUxMjA1MjIwMTA1WhcNMjUxMjA2MjIwMTA1WjAzMTEwLwYDVQQD EyhjMmE3MTc1Njg2NjcyNzJhODk5YzE1Y2ZlNDUyNDQ1NTgzMjc0ZjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KqPbYK2spyzPxzSwULduNCslFUu umrFrmCLy355rLW7hfJSKz8rFrUied9AL6N0o/LmbQYZQ1+DtyjvWXQeiznDBZRx 6E9/PCtPiIUIeyJ+eT7FoAPws+TdwLvj+FmIu+uHS9ClS2wXN+I1SbEKIYNJGqy7 UUoJmrgr+nOQGn2jnSE7bSGmZagX46T4JlYIQVnwvXKl+UerVQmiv7umYHDm25Q/ ZhYDatcnUT0yl+AUKOhW/twBcrYa09rHFwk7dTaE9rv3DzlMPSgQWGza7aU1ubNL MWzGDvMFDC8vMErO/M9nG1GK+n7W0b6Qj0RiQ6FXuTvFubzNZbYf0TaPZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMKnF1aGZycqiZwVz+RSRFWDJ09MMB8GA1UdIwQY MBaAFEZkoFOFwGJoFQKRl+sVBkhdPW0cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm1TZ1U0WEFZbWdWQXBHWDZ4VUdTRjA5YlJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9iZDc2NDYtYWRkOS00ODU5LTlkZTkt OWM4NDg1NDgzZDU5LzEvUm1TZ1U0WEFZbWdWQXBHWDZ4VUdTRjA5YlJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9iZDc2NDYtYWRkOS00ODU5LTlkZTktOWM4NDg1NDgzZDU5 LzEvUm1TZ1U0WEFZbWdWQXBHWDZ4VUdTRjA5YlJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQY5OTBW9 R+xBnjyXaNXL/OF/g6t5+lnWy9kw88rWnL78vl1sI5q02e709K7Dvr/w4KLGemtz p29WP/J7XAIFVNfTJSdp4myzthQxegZVmFz8ThVOInipQHr9aKCp9WAijA+1W1CU 6K71sEk5ZKkX/ps7pemQpTV4P7/tw6Yzc3YKVTT95Di9XZLNBO7tqfy53n6jIz81 h7PwNJUI0IIwI1LRBLdZYlY+JLdhL2i0dkS1Q+9746lQN6jb1poEj+hhVoQpn+K1 GU8WX2XSabHCSs/mMNNST5FreiXnk6k4AR3GRz0KqUJ6swOCcXRC/wnibpGmWPU5 R3W4zr7+HmsisQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:03 2025 by rpki-client