This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.mft File: Rmz6T4hH8VYbVZcWcBZcDmi2J5k.mft (raw, json) Hash identifier: jnijJUz1Lq5knj8LNt7Z89evhcVwmU1Ld87xEBUmZA0= Subject key identifier: 21:44:43:8F:3C:B5:BA:E3:89:5B:52:99:82:B3:76:6D:23:C5:BB:9A Authority key identifier: 46:6C:FA:4F:88:47:F1:56:1B:55:97:16:70:16:5C:0E:68:B6:27:99 Certificate issuer: /CN=466cfa4f8847f1561b55971670165c0e68b62799 Certificate serial: 019AF208BBB5ED29D095ED1FCA2D747B93AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.mft Manifest number: 0BAE Signing time: Sat 06 Dec 2025 05:00:49 +0000 Manifest this update: Sat 06 Dec 2025 05:00:49 +0000 Manifest next update: Sun 07 Dec 2025 05:00:49 +0000 Files and hashes: 1: Rmz6T4hH8VYbVZcWcBZcDmi2J5k.crl (hash: 4QUB4KovXiRY4xOp4S6jL4giFZgUcHnU+XWHPfpP8jc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.mft rsync://rpki.ripe.net/repository/DEFAULT/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:bb:b5:ed:29:d0:95:ed:1f:ca:2d:74:7b:93:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=466cfa4f8847f1561b55971670165c0e68b62799 Validity Not Before: Dec 6 05:00:49 2025 GMT Not After : Dec 7 05:00:49 2025 GMT Subject: CN=2144438f3cb5bae3895b529982b3766d23c5bb9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:27:43:37:51:36:35:86:54:02:f8:4d:68:a6: c5:08:4d:8b:78:50:da:3e:d8:5e:6e:91:bd:b7:76: e7:49:a8:d0:a7:f4:54:08:01:50:40:bf:d5:61:00: ba:a0:c7:3b:79:41:8e:17:10:ca:fd:55:a4:01:a9: 77:41:ba:95:dd:e1:b1:3c:c4:60:fc:35:2b:39:ad: 1d:d9:a4:5c:9d:1b:f1:b0:25:fa:27:e8:78:d5:1a: 50:fd:e2:33:ce:19:de:59:6e:5c:93:04:41:67:94: be:4a:04:f2:14:5b:f8:3b:21:d1:df:a7:ac:ce:73: 4c:1b:09:d4:4f:cd:09:1e:14:7c:e9:fd:fc:71:88: 3b:76:ac:1a:74:5e:8b:19:78:5f:0b:71:77:66:46: ef:2a:74:1b:35:dc:54:ea:52:c1:ca:bc:70:65:d2: ce:c4:d6:13:09:34:f1:a3:ff:76:16:9f:26:43:ea: b8:94:ae:30:68:db:3a:fa:f4:75:c4:49:36:e7:44: c8:8e:77:57:40:9e:4c:9e:5d:d4:6d:bf:b9:66:b7: de:0a:e3:18:09:ab:9b:90:44:e4:c5:05:f9:86:6e: af:6f:d4:66:ab:b7:8c:e4:b8:31:1f:93:23:0b:93: 7e:ef:fa:e3:36:71:eb:42:70:f5:5f:92:75:06:04: 28:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:44:43:8F:3C:B5:BA:E3:89:5B:52:99:82:B3:76:6D:23:C5:BB:9A X509v3 Authority Key Identifier: keyid:46:6C:FA:4F:88:47:F1:56:1B:55:97:16:70:16:5C:0E:68:B6:27:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:1e:58:4a:38:8a:ad:53:cc:96:04:86:9f:16:0b:c4:33:da: 72:2e:86:ce:08:80:d6:87:7e:90:12:a5:af:d5:8f:52:dc:c5: 61:42:56:c5:e2:49:3e:09:73:55:63:17:61:1c:fe:e5:7f:58: 8b:c6:3c:e8:bb:f2:80:3e:27:5a:32:0f:d8:d7:05:56:e6:ce: d5:b5:11:d4:7e:4d:34:a1:d4:4e:67:b4:78:6d:0f:9c:8f:ba: b6:7f:84:df:88:07:a6:d0:54:3a:00:14:78:04:1d:42:ed:7c: c5:b0:f1:fe:78:74:66:92:9a:08:d3:f6:d7:ae:85:8c:05:d5: ca:ad:69:6b:30:8a:cc:59:52:15:33:4b:83:23:3f:7a:a1:e0: 2e:48:12:5c:99:f5:15:d1:e3:08:b9:fe:29:63:2f:5b:69:c3: 56:0a:9a:72:18:72:10:52:66:0e:33:12:01:66:cf:b6:d3:46: 4f:62:0f:1e:24:4f:aa:6d:b0:18:12:5c:15:19:8d:e6:66:f3: b5:11:67:a2:e5:6c:e4:f1:03:7e:b0:6b:f8:98:1b:1c:1e:68: 6b:1a:f0:0d:e3:0f:48:5c:91:8d:9b:6f:b4:b6:25:b4:d5:ba: 15:1e:31:b3:e7:51:80:9d:d3:16:9d:79:bd:bf:6a:67:1a:49: a8:cd:1d:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLu17SnQle0fyi10e5OsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NmNmYTRmODg0N2YxNTYxYjU1OTcxNjcwMTY1YzBlNjhi NjI3OTkwHhcNMjUxMjA2MDUwMDQ5WhcNMjUxMjA3MDUwMDQ5WjAzMTEwLwYDVQQD EygyMTQ0NDM4ZjNjYjViYWUzODk1YjUyOTk4MmIzNzY2ZDIzYzViYjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0idDN1E2NYZUAvhNaKbFCE2LeFDa PthebpG9t3bnSajQp/RUCAFQQL/VYQC6oMc7eUGOFxDK/VWkAal3QbqV3eGxPMRg /DUrOa0d2aRcnRvxsCX6J+h41RpQ/eIzzhneWW5ckwRBZ5S+SgTyFFv4OyHR36es znNMGwnUT80JHhR86f38cYg7dqwadF6LGXhfC3F3ZkbvKnQbNdxU6lLByrxwZdLO xNYTCTTxo/92Fp8mQ+q4lK4waNs6+vR1xEk250TIjndXQJ5Mnl3Ubb+5ZrfeCuMY CaubkETkxQX5hm6vb9Rmq7eM5LgxH5MjC5N+7/rjNnHrQnD1X5J1BgQoywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFEQ488tbrjiVtSmYKzdm0jxbuaMB8GA1UdIwQY MBaAFEZs+k+IR/FWG1WXFnAWXA5otieZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm16NlQ0aEg4VlliVlpjV2NCWmNEbWkySjVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC81MDRmZmEtMjkwNS00Nzg1LTkyOTEt NWIxMWJiMTc5YThiLzEvUm16NlQ0aEg4VlliVlpjV2NCWmNEbWkySjVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC81MDRmZmEtMjkwNS00Nzg1LTkyOTEtNWIxMWJiMTc5YThi LzEvUm16NlQ0aEg4VlliVlpjV2NCWmNEbWkySjVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArh5YSjiK rVPMlgSGnxYLxDPaci6GzgiA1od+kBKlr9WPUtzFYUJWxeJJPglzVWMXYRz+5X9Y i8Y86LvygD4nWjIP2NcFVubO1bUR1H5NNKHUTme0eG0PnI+6tn+E34gHptBUOgAU eAQdQu18xbDx/nh0ZpKaCNP2166FjAXVyq1pazCKzFlSFTNLgyM/eqHgLkgSXJn1 FdHjCLn+KWMvW2nDVgqachhyEFJmDjMSAWbPttNGT2IPHiRPqm2wGBJcFRmN5mbz tRFnouVs5PEDfrBr+JgbHB5oaxrwDeMPSFyRjZtvtLYltNW6FR4xs+dRgJ3TFp15 vb9qZxpJqM0d7w== -----END CERTIFICATE-----Generated at Sat Dec 6 12:26:37 2025 by rpki-client