This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft File: rMMoWMzalYbG2WceMQ1RwoJoxFk.mft (raw, json) Hash identifier: 0+0jCqAhXVGPKOqdkupiMYyq1GO8rVOPGYes/EOixkA= Subject key identifier: 6B:07:F1:57:16:5F:7D:A1:19:82:44:76:11:37:ED:39:DA:14:22:AB Authority key identifier: AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59 Certificate issuer: /CN=acc32858ccda9586c6d9671e310d51c28268c459 Certificate serial: 019AF2AD7892201A4B304F57F0983074B66D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft Manifest number: 16FE Signing time: Sat 06 Dec 2025 08:00:46 +0000 Manifest this update: Sat 06 Dec 2025 08:00:46 +0000 Manifest next update: Sun 07 Dec 2025 08:00:46 +0000 Files and hashes: 1: 5wpBu9lqq6Eh5bxmApWBHSmv8rU.roa (hash: OWwgDNZvQnVhoKGxoJou3ziQhvyReIZ9m1NH7rz0BqA=) 2: rMMoWMzalYbG2WceMQ1RwoJoxFk.crl (hash: k5oK1C+GUijHZXyBGzQKj+gbik+HQAHjYiWqH3/Nz60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.crl rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:78:92:20:1a:4b:30:4f:57:f0:98:30:74:b6:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acc32858ccda9586c6d9671e310d51c28268c459 Validity Not Before: Dec 6 08:00:46 2025 GMT Not After : Dec 7 08:00:46 2025 GMT Subject: CN=6b07f157165f7da1198244761137ed39da1422ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c3:a0:70:5b:f7:c2:20:09:40:da:f8:d7:3a: a0:f8:50:2c:d6:0c:cb:39:10:d9:a1:9c:1b:49:0b: 34:8b:ff:98:69:b1:67:b6:dd:cf:d2:51:77:3b:8d: 02:38:c1:6d:cb:16:4b:a6:0c:6a:6c:fb:1c:9f:81: 68:8a:58:15:d4:a5:83:f5:e5:78:fe:de:24:8a:c4: 92:ac:6b:cf:0a:51:f9:86:19:7b:50:ac:43:c8:2c: 40:8e:6a:4a:be:30:2f:1d:a4:10:70:6c:28:c0:61: b4:31:f7:14:56:d1:de:46:04:06:3b:c3:0f:10:87: 85:cc:e0:c0:c5:bc:01:c0:76:e1:64:36:09:3e:2c: d2:b9:72:70:8e:a4:8a:51:8c:27:57:7a:ce:68:dc: 10:a1:04:b0:da:b2:a9:18:5e:e4:0b:13:4a:37:59: 67:8f:c2:0f:45:3d:c1:a1:9e:dc:29:ee:9b:55:07: 12:96:2b:74:b0:5d:1e:16:13:74:f4:94:11:75:ab: b6:84:18:11:d3:96:5a:6e:53:bd:29:33:00:11:91: 55:77:07:a2:02:6c:06:fd:a1:68:93:7e:a2:ff:7a: 02:6f:6b:ec:be:21:a5:8d:c8:e4:eb:67:53:26:e7: 80:4e:b9:64:2a:db:4b:7c:72:a2:52:50:ff:8c:15: bb:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:07:F1:57:16:5F:7D:A1:19:82:44:76:11:37:ED:39:DA:14:22:AB X509v3 Authority Key Identifier: keyid:AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:d6:d0:fb:73:fd:68:00:78:44:4b:22:a6:e9:3b:12:70:5f: cf:04:8f:30:14:71:85:6d:c2:1c:a3:b7:60:77:55:57:9e:00: aa:ca:03:6f:ee:03:23:fb:1e:c9:81:03:98:85:de:fc:cb:58: 1b:3c:8c:81:f1:ea:05:3f:be:4e:32:d5:c6:43:b4:94:26:4e: 0f:61:4d:bc:d4:30:2f:10:bb:2a:ef:5b:ca:54:27:15:6e:1c: 6b:d2:0b:b7:37:25:8a:0c:85:3d:7b:2e:3b:58:ec:3c:a6:57: 7e:f0:a6:63:52:84:3e:0c:a0:31:bd:b1:31:31:92:ad:8c:96: 4a:27:50:3a:ef:c6:da:b5:44:bd:04:c7:74:72:6c:9b:70:ea: 9b:b6:0c:7d:ae:b0:7d:1a:2b:6e:e5:37:55:5b:68:29:f1:6a: 72:d8:36:0c:66:0f:ec:00:23:0b:7e:12:d4:db:04:67:88:1e: 48:ce:c9:59:1f:df:5c:31:3d:bf:d1:2d:5e:4d:3d:5f:f3:85: 5c:91:df:96:ec:05:49:62:b3:87:15:6b:e1:c6:ea:30:5a:f0: da:f8:72:3a:96:58:7e:fa:64:88:1f:cd:fe:dd:1f:c0:a3:2d: f8:16:77:b2:74:af:2d:ad:55:34:14:b0:39:2f:09:31:0e:f4: 0b:cb:c7:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrXiSIBpLME9X8JgwdLZtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYzMyODU4Y2NkYTk1ODZjNmQ5NjcxZTMxMGQ1MWMyODI2 OGM0NTkwHhcNMjUxMjA2MDgwMDQ2WhcNMjUxMjA3MDgwMDQ2WjAzMTEwLwYDVQQD Eyg2YjA3ZjE1NzE2NWY3ZGExMTk4MjQ0NzYxMTM3ZWQzOWRhMTQyMmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcOgcFv3wiAJQNr41zqg+FAs1gzL ORDZoZwbSQs0i/+YabFntt3P0lF3O40COMFtyxZLpgxqbPscn4FoilgV1KWD9eV4 /t4kisSSrGvPClH5hhl7UKxDyCxAjmpKvjAvHaQQcGwowGG0MfcUVtHeRgQGO8MP EIeFzODAxbwBwHbhZDYJPizSuXJwjqSKUYwnV3rOaNwQoQSw2rKpGF7kCxNKN1ln j8IPRT3BoZ7cKe6bVQcSlit0sF0eFhN09JQRdau2hBgR05ZablO9KTMAEZFVdwei AmwG/aFok36i/3oCb2vsviGljcjk62dTJueATrlkKttLfHKiUlD/jBW7DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGsH8VcWX32hGYJEdhE37TnaFCKrMB8GA1UdIwQY MBaAFKzDKFjM2pWGxtlnHjENUcKCaMRZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck1Nb1dNemFsWWJHMldjZU1RMVJ3b0pveEZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82Y2Y3NjktOWI1OC00ODQ3LThmMWYt ZWRjNTQwNzJhZTg5LzEvck1Nb1dNemFsWWJHMldjZU1RMVJ3b0pveEZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC82Y2Y3NjktOWI1OC00ODQ3LThmMWYtZWRjNTQwNzJhZTg5 LzEvck1Nb1dNemFsWWJHMldjZU1RMVJ3b0pveEZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEdbQ+3P9 aAB4REsipuk7EnBfzwSPMBRxhW3CHKO3YHdVV54AqsoDb+4DI/seyYEDmIXe/MtY GzyMgfHqBT++TjLVxkO0lCZOD2FNvNQwLxC7Ku9bylQnFW4ca9ILtzcligyFPXsu O1jsPKZXfvCmY1KEPgygMb2xMTGSrYyWSidQOu/G2rVEvQTHdHJsm3Dqm7YMfa6w fRorbuU3VVtoKfFqctg2DGYP7AAjC34S1NsEZ4geSM7JWR/fXDE9v9EtXk09X/OF XJHfluwFSWKzhxVr4cbqMFrw2vhyOpZYfvpkiB/N/t0fwKMt+BZ3snSvLa1VNBSw OS8JMQ70C8vH/A== -----END CERTIFICATE-----Generated at Sat Dec 6 12:26:23 2025 by rpki-client