This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft File: rM-ri4kwEKG14lBy4dRWkEST9S0.mft (raw, json) Hash identifier: n+uiQkfust/c5gVV+Ii2pxagVhWof6jscQGF/n9+XUI= Subject key identifier: 09:88:6A:CF:A4:91:16:34:FD:22:9B:8D:05:06:5A:62:1C:36:0E:A6 Authority key identifier: AC:CF:AB:8B:89:30:10:A1:B5:E2:50:72:E1:D4:56:90:44:93:F5:2D Certificate issuer: /CN=accfab8b893010a1b5e25072e1d456904493f52d Certificate serial: 019AF164138ADC7EA592477D94BBB10937CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft Manifest number: 1025 Signing time: Sat 06 Dec 2025 02:00:58 +0000 Manifest this update: Sat 06 Dec 2025 02:00:58 +0000 Manifest next update: Sun 07 Dec 2025 02:00:58 +0000 Files and hashes: 1: 1-3Y-4ahWm1ezt431zCYGOBUyQvs.roa (hash: zupu0GMNILT7rH6BKtk5nw5qlb8oVDhhuZpZjAfbi5M=) 2: rM-ri4kwEKG14lBy4dRWkEST9S0.crl (hash: cVTIqE0BW8XRMGp1rvbY/+CEdGFBRmsvyaqQYiMd49Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.crl rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:13:8a:dc:7e:a5:92:47:7d:94:bb:b1:09:37:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=accfab8b893010a1b5e25072e1d456904493f52d Validity Not Before: Dec 6 02:00:58 2025 GMT Not After : Dec 7 02:00:58 2025 GMT Subject: CN=09886acfa4911634fd229b8d05065a621c360ea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b0:3e:1a:9e:63:af:38:6e:3a:29:2b:b0:1b: 65:6b:65:46:aa:fd:7b:c1:78:5f:67:ac:3a:cd:31: f4:99:3f:ed:fd:0d:a0:22:2a:cd:17:49:d9:5b:bd: 3d:c9:70:10:2d:3c:4c:14:be:e0:dc:9c:5b:ab:ea: d9:ea:ea:0d:d5:d5:0a:85:90:a9:cc:67:bf:f7:0e: c6:06:fb:94:dd:2a:b3:fd:b5:6a:5e:34:99:6b:b3: bb:19:7c:8e:71:ef:dc:49:33:ca:7e:2c:a2:46:5d: e9:ee:ca:84:67:d8:33:bf:4a:39:9e:64:f9:8e:f4: 38:d0:6a:f7:e1:62:7a:ba:3a:e3:c6:fe:57:12:b3: ee:15:22:03:dd:5b:c7:59:fa:5b:e0:99:43:e1:76: 0f:8b:37:ae:55:da:41:e5:10:fa:b7:78:71:5a:0f: b7:f3:fd:e6:7f:b6:4e:4b:0b:09:43:1d:eb:bb:6a: ba:b8:cd:1e:f0:0d:d1:8c:10:f9:a1:8f:ea:c7:62: a2:25:f0:42:04:fc:f9:08:3b:82:99:16:a6:5a:f7: 71:ea:81:6d:da:04:09:0e:e0:78:1c:d6:bb:71:0a: a9:b6:7e:a2:4b:8f:4e:41:0e:4d:ac:fd:59:4c:2b: 67:28:f5:19:70:5d:6b:44:59:f8:73:2d:8f:23:27: 75:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:88:6A:CF:A4:91:16:34:FD:22:9B:8D:05:06:5A:62:1C:36:0E:A6 X509v3 Authority Key Identifier: keyid:AC:CF:AB:8B:89:30:10:A1:B5:E2:50:72:E1:D4:56:90:44:93:F5:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:98:2b:40:58:41:43:87:b9:89:40:5e:2f:28:b4:64:e4:35: 47:d9:a1:03:a3:02:07:82:fb:8d:9b:c5:72:7c:5d:12:5d:78: 4c:0f:d8:72:18:2a:02:07:0a:50:f0:f9:a3:e0:7d:67:b0:40: b7:15:00:96:22:7d:4d:d8:c7:cb:de:28:9b:c9:ed:7d:35:68: 52:52:85:78:d0:5c:be:3d:38:96:e1:4d:a9:a6:a0:46:e4:99: 1c:60:65:f2:00:7f:ff:d5:47:4a:ac:8e:33:2c:f2:e3:ef:57: 8a:4b:5f:aa:da:2e:d8:ae:3c:c5:d4:f7:d6:79:0e:ca:fa:f0: 93:ad:09:38:60:24:bf:77:52:e1:1d:c7:23:4a:b4:19:69:2a: e1:42:8d:68:5f:bc:7b:4f:4e:7c:e2:24:9a:9e:7b:56:81:94: ab:7c:0b:61:08:e1:51:cf:02:71:92:d5:0b:df:07:aa:db:fa: 7c:43:e7:d3:85:c8:ff:74:1b:14:2b:72:62:d5:f7:c9:67:f5: a2:8d:20:67:4c:6d:03:8f:3b:c5:3d:11:26:50:6e:93:77:d3: b7:9a:11:e0:ea:ac:eb:ec:0f:8a:7a:ef:e2:e1:80:4a:95:9a: 2e:4c:82:b9:0e:61:95:1d:bd:be:aa:99:d4:7b:fc:ac:33:2b: c3:1d:3d:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZBOK3H6lkkd9lLuxCTfNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjY2ZhYjhiODkzMDEwYTFiNWUyNTA3MmUxZDQ1NjkwNDQ5 M2Y1MmQwHhcNMjUxMjA2MDIwMDU4WhcNMjUxMjA3MDIwMDU4WjAzMTEwLwYDVQQD EygwOTg4NmFjZmE0OTExNjM0ZmQyMjliOGQwNTA2NWE2MjFjMzYwZWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLA+Gp5jrzhuOikrsBtla2VGqv17 wXhfZ6w6zTH0mT/t/Q2gIirNF0nZW709yXAQLTxMFL7g3Jxbq+rZ6uoN1dUKhZCp zGe/9w7GBvuU3Sqz/bVqXjSZa7O7GXyOce/cSTPKfiyiRl3p7sqEZ9gzv0o5nmT5 jvQ40Gr34WJ6ujrjxv5XErPuFSID3VvHWfpb4JlD4XYPizeuVdpB5RD6t3hxWg+3 8/3mf7ZOSwsJQx3ru2q6uM0e8A3RjBD5oY/qx2KiJfBCBPz5CDuCmRamWvdx6oFt 2gQJDuB4HNa7cQqptn6iS49OQQ5NrP1ZTCtnKPUZcF1rRFn4cy2PIyd1aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmIas+kkRY0/SKbjQUGWmIcNg6mMB8GA1UdIwQY MBaAFKzPq4uJMBChteJQcuHUVpBEk/UtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck0tcmk0a3dFS0cxNGxCeTRkUldrRVNUOVMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80Mjg5MTEtODgxNi00ZjExLTk3YTYt NDg4MmU2YjU2OGIyLzEvck0tcmk0a3dFS0cxNGxCeTRkUldrRVNUOVMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80Mjg5MTEtODgxNi00ZjExLTk3YTYtNDg4MmU2YjU2OGIy LzEvck0tcmk0a3dFS0cxNGxCeTRkUldrRVNUOVMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMZgrQFhB Q4e5iUBeLyi0ZOQ1R9mhA6MCB4L7jZvFcnxdEl14TA/YchgqAgcKUPD5o+B9Z7BA txUAliJ9TdjHy94om8ntfTVoUlKFeNBcvj04luFNqaagRuSZHGBl8gB//9VHSqyO Myzy4+9Xiktfqtou2K48xdT31nkOyvrwk60JOGAkv3dS4R3HI0q0GWkq4UKNaF+8 e09OfOIkmp57VoGUq3wLYQjhUc8CcZLVC98Hqtv6fEPn04XI/3QbFCtyYtX3yWf1 oo0gZ0xtA487xT0RJlBuk3fTt5oR4Oqs6+wPinrv4uGASpWaLkyCuQ5hlR29vqqZ 1Hv8rDMrwx09SQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:05 2025 by rpki-client