This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/7d1887-e9f7-4015-a345-47f23d7af3df/1/RMmsJXmD7SmqZgqd1TEiTwmsS10.mft File: RMmsJXmD7SmqZgqd1TEiTwmsS10.mft (raw, json) Hash identifier: qMUFeihGr+pMUvYznC/CQ2j0TJ+RvOvuz+xOh/VsSdQ= Subject key identifier: 5F:5A:1B:98:DE:99:35:A5:E5:B7:D6:C3:D9:04:13:0F:51:B6:B9:8A Authority key identifier: 44:C9:AC:25:79:83:ED:29:AA:66:0A:9D:D5:31:22:4F:09:AC:4B:5D Certificate issuer: /CN=44c9ac257983ed29aa660a9dd531224f09ac4b5d Certificate serial: 019AF23FD77EFB63E4A7BA577F7B9222ADFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMmsJXmD7SmqZgqd1TEiTwmsS10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/7d1887-e9f7-4015-a345-47f23d7af3df/1/RMmsJXmD7SmqZgqd1TEiTwmsS10.mft Manifest number: 053B Signing time: Sat 06 Dec 2025 06:01:01 +0000 Manifest this update: Sat 06 Dec 2025 06:01:01 +0000 Manifest next update: Sun 07 Dec 2025 06:01:01 +0000 Files and hashes: 1: RMmsJXmD7SmqZgqd1TEiTwmsS10.crl (hash: 0j004G0cYC2uZyP5grfO5qWiV1Y4DZA4ep/hutEYbPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/7d1887-e9f7-4015-a345-47f23d7af3df/1/RMmsJXmD7SmqZgqd1TEiTwmsS10.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/7d1887-e9f7-4015-a345-47f23d7af3df/1/RMmsJXmD7SmqZgqd1TEiTwmsS10.mft rsync://rpki.ripe.net/repository/DEFAULT/RMmsJXmD7SmqZgqd1TEiTwmsS10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:d7:7e:fb:63:e4:a7:ba:57:7f:7b:92:22:ad:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44c9ac257983ed29aa660a9dd531224f09ac4b5d Validity Not Before: Dec 6 06:01:01 2025 GMT Not After : Dec 7 06:01:01 2025 GMT Subject: CN=5f5a1b98de9935a5e5b7d6c3d904130f51b6b98a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:85:af:79:80:33:c9:8b:bf:92:f2:70:b3:e4: de:49:19:55:36:e3:de:85:d5:a2:f4:3a:b2:15:2c: b1:20:1f:2d:d6:a4:a5:a5:ad:64:8d:09:6c:89:46: 06:3c:34:01:8a:7d:05:56:46:c5:7e:11:20:6a:31: 85:52:bc:cb:29:c5:92:a4:53:42:38:51:ba:04:d2: 77:3a:f8:c8:7c:e7:3a:e0:11:37:25:39:67:85:f2: 9c:57:36:18:48:8a:1c:43:8e:78:39:0c:35:ca:39: ad:d9:5f:67:bf:6d:48:40:9f:f6:ae:a9:fe:c7:2a: 7c:c1:1b:23:df:82:31:10:fa:29:44:64:6b:02:76: dc:aa:3d:4d:ad:59:da:29:60:b1:0c:b0:27:f4:a3: ec:e6:45:bd:84:ec:c9:3e:f6:ba:4e:f6:e3:66:c9: 44:0c:fa:8f:23:3f:d1:cb:f9:ef:8f:a7:b1:dd:b5: b5:85:15:f3:9d:76:59:ad:1e:51:a8:f1:e1:a3:5e: 02:fd:b5:bf:e8:49:db:14:48:5b:b0:85:e7:8f:7b: 06:ae:63:9d:87:b4:d4:43:5e:c3:cc:c9:98:fd:54: 80:1e:7e:4b:93:a5:fd:7a:e3:0a:40:8f:c1:80:32: 58:d8:48:99:e6:3c:0e:15:f6:80:fb:66:80:fa:df: a9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:5A:1B:98:DE:99:35:A5:E5:B7:D6:C3:D9:04:13:0F:51:B6:B9:8A X509v3 Authority Key Identifier: keyid:44:C9:AC:25:79:83:ED:29:AA:66:0A:9D:D5:31:22:4F:09:AC:4B:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMmsJXmD7SmqZgqd1TEiTwmsS10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/7d1887-e9f7-4015-a345-47f23d7af3df/1/RMmsJXmD7SmqZgqd1TEiTwmsS10.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/7d1887-e9f7-4015-a345-47f23d7af3df/1/RMmsJXmD7SmqZgqd1TEiTwmsS10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:f9:46:be:0d:cf:f8:9b:7b:65:d3:5f:f6:24:ca:e9:13:0c: 2f:9e:80:97:88:04:78:90:43:32:b1:33:44:8a:3b:c9:94:1f: 30:43:fe:79:fd:21:37:a5:dc:71:0f:f7:77:56:97:36:bf:f2: c9:a3:4c:a5:50:9b:55:d8:ba:44:a9:fb:52:e1:c7:a9:67:1f: a1:d9:83:15:38:3f:00:84:60:5e:2c:27:6c:7d:50:44:1f:6d: 9d:09:f9:52:f1:16:34:31:e6:8e:14:48:58:fe:9e:7d:bf:5c: 63:80:d0:27:23:8b:d4:e3:63:4c:29:3a:24:9b:f4:5e:4a:b5: dd:87:ea:d6:46:7b:dc:94:34:3e:2d:1f:d4:83:09:db:1b:a1: c5:52:fe:81:89:d5:36:71:8c:dc:f2:75:b2:25:60:a3:d0:45: ff:93:50:c1:19:4b:19:64:c4:e2:f4:d7:0e:ad:8c:bb:36:29: 18:04:72:0c:c7:0d:66:90:74:38:41:33:21:6c:3e:5e:10:e9: 74:48:a1:3e:09:de:fd:80:6b:ad:bc:73:13:0e:06:1a:8d:df: 8d:71:7a:b5:d5:7f:e3:d6:7a:43:9b:a3:c9:7c:15:e8:20:cc: 52:84:77:32:fc:fe:93:e1:1a:9a:0c:cb:36:b4:04:d2:72:54: e9:ba:5a:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9d++2Pkp7pXf3uSIq36MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YzlhYzI1Nzk4M2VkMjlhYTY2MGE5ZGQ1MzEyMjRmMDlh YzRiNWQwHhcNMjUxMjA2MDYwMTAxWhcNMjUxMjA3MDYwMTAxWjAzMTEwLwYDVQQD Eyg1ZjVhMWI5OGRlOTkzNWE1ZTViN2Q2YzNkOTA0MTMwZjUxYjZiOThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IWveYAzyYu/kvJws+TeSRlVNuPe hdWi9DqyFSyxIB8t1qSlpa1kjQlsiUYGPDQBin0FVkbFfhEgajGFUrzLKcWSpFNC OFG6BNJ3OvjIfOc64BE3JTlnhfKcVzYYSIocQ454OQw1yjmt2V9nv21IQJ/2rqn+ xyp8wRsj34IxEPopRGRrAnbcqj1NrVnaKWCxDLAn9KPs5kW9hOzJPva6TvbjZslE DPqPIz/Ry/nvj6ex3bW1hRXznXZZrR5RqPHho14C/bW/6EnbFEhbsIXnj3sGrmOd h7TUQ17DzMmY/VSAHn5Lk6X9euMKQI/BgDJY2EiZ5jwOFfaA+2aA+t+p2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF9aG5jemTWl5bfWw9kEEw9RtrmKMB8GA1UdIwQY MBaAFETJrCV5g+0pqmYKndUxIk8JrEtdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk1tc0pYbUQ3U21xWmdxZDFURWlUd21zUzEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy83ZDE4ODctZTlmNy00MDE1LWEzNDUt NDdmMjNkN2FmM2RmLzEvUk1tc0pYbUQ3U21xWmdxZDFURWlUd21zUzEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy83ZDE4ODctZTlmNy00MDE1LWEzNDUtNDdmMjNkN2FmM2Rm LzEvUk1tc0pYbUQ3U21xWmdxZDFURWlUd21zUzEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATPlGvg3P +Jt7ZdNf9iTK6RMML56Al4gEeJBDMrEzRIo7yZQfMEP+ef0hN6XccQ/3d1aXNr/y yaNMpVCbVdi6RKn7UuHHqWcfodmDFTg/AIRgXiwnbH1QRB9tnQn5UvEWNDHmjhRI WP6efb9cY4DQJyOL1ONjTCk6JJv0Xkq13Yfq1kZ73JQ0Pi0f1IMJ2xuhxVL+gYnV NnGM3PJ1siVgo9BF/5NQwRlLGWTE4vTXDq2MuzYpGARyDMcNZpB0OEEzIWw+XhDp dEihPgne/YBrrbxzEw4GGo3fjXF6tdV/49Z6Q5ujyXwV6CDMUoR3Mvz+k+EamgzL NrQE0nJU6bpa0Q== -----END CERTIFICATE-----Generated at Sat Dec 6 15:53:00 2025 by rpki-client