This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.mft File: RwFMkm6nbVZunoqW1YYdR1fIsOo.mft (raw, json) Hash identifier: GauTYYBNeMX7E4/HA6P44DhONKEglC8qCCDO4KUX9Cw= Subject key identifier: 45:CD:4C:72:45:93:88:AD:A3:32:19:DF:33:DA:A8:B4:E3:89:28:15 Authority key identifier: 47:01:4C:92:6E:A7:6D:56:6E:9E:8A:96:D5:86:1D:47:57:C8:B0:EA Certificate issuer: /CN=47014c926ea76d566e9e8a96d5861d4757c8b0ea Certificate serial: 019AF2ADDBAD25F23BEBB150FD80C7016547 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwFMkm6nbVZunoqW1YYdR1fIsOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 08:01:11 +0000 Manifest this update: Sat 06 Dec 2025 08:01:11 +0000 Manifest next update: Sun 07 Dec 2025 08:01:11 +0000 Files and hashes: 1: RwFMkm6nbVZunoqW1YYdR1fIsOo.crl (hash: /Py26nv/3V2Wxag1uZ7+oQtOYCUdjM01lnWmxz1D60A=) 2: pFLpzrM-iV1fQ_hTxX2xOEHMjt0.roa (hash: aLstNITfJuEBD1I0LdnhTrgtI2g65BeTn/qvRZrCSW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.mft rsync://rpki.ripe.net/repository/DEFAULT/RwFMkm6nbVZunoqW1YYdR1fIsOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:db:ad:25:f2:3b:eb:b1:50:fd:80:c7:01:65:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47014c926ea76d566e9e8a96d5861d4757c8b0ea Validity Not Before: Dec 6 08:01:11 2025 GMT Not After : Dec 7 08:01:11 2025 GMT Subject: CN=45cd4c72459388ada33219df33daa8b4e3892815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ed:9c:d2:71:ce:1a:52:59:e2:56:ff:7f:f8: 1a:05:ad:60:ae:3a:bd:50:37:0b:1c:30:6a:e0:30: a4:53:24:96:24:dc:a8:6b:7d:33:81:bf:ed:09:18: af:42:66:aa:92:93:5c:45:02:d5:0c:22:99:a4:13: a9:98:c8:fa:21:cd:ca:6d:fc:31:8a:35:ad:c1:33: c4:96:d7:3e:e4:84:ed:0b:ae:f9:f6:f9:78:4d:1e: 6e:e5:57:74:c4:b4:85:9b:28:7d:fd:67:0e:8d:df: 64:1e:06:73:a7:fc:d2:f1:10:0b:b0:19:9c:0b:f0: 65:53:a4:55:50:27:0e:02:ba:c8:29:96:e7:2f:20: 33:c9:ba:07:9b:5d:12:7a:96:d4:20:10:29:5b:b1: 7a:8d:3f:bf:2f:5e:f0:0d:b0:94:8c:67:65:36:4b: 4c:3b:15:17:4a:1e:3d:da:47:13:61:13:8d:62:bb: 33:ea:4a:f6:4f:eb:ae:1e:ba:73:ae:b6:98:2f:ea: 4f:f6:95:82:ec:2c:5b:cc:3f:f6:f2:dc:df:b0:50: a9:bf:2d:24:72:8f:d2:f2:39:c4:db:9a:e4:89:94: 8a:68:aa:2d:c1:71:76:aa:1a:e7:e9:93:78:b7:e3: c3:9e:27:ba:f2:47:e9:17:b1:68:f1:91:17:84:3d: dd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:CD:4C:72:45:93:88:AD:A3:32:19:DF:33:DA:A8:B4:E3:89:28:15 X509v3 Authority Key Identifier: keyid:47:01:4C:92:6E:A7:6D:56:6E:9E:8A:96:D5:86:1D:47:57:C8:B0:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwFMkm6nbVZunoqW1YYdR1fIsOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:fd:b2:c9:0e:7a:aa:e1:3e:29:c9:f3:bf:4c:2f:4e:0f:ac: d2:ba:8d:d2:be:a5:07:c4:80:11:12:f5:f5:a7:24:58:3a:6a: 4e:4b:57:7d:a1:40:44:a5:6a:2e:e8:5c:9d:7d:6f:d4:ba:54: 68:7d:65:99:78:f8:f1:d3:b9:2d:ec:a6:90:a1:81:5c:21:9e: 49:b2:c9:1c:9f:ac:63:b0:f5:d7:c1:69:3b:93:dd:89:d1:fa: 05:63:46:94:f2:11:85:ce:58:27:17:38:b6:b4:f8:3f:96:a3: 07:e3:d0:de:e2:37:c9:d9:ec:f1:b7:fc:f1:2b:3e:48:3a:d3: b1:b6:f2:e2:d9:4a:33:a8:93:df:bb:d1:15:3e:73:e9:0a:87: 1c:5e:d8:f6:35:a7:fa:a5:06:39:9f:6b:47:55:4c:bd:09:78: 5a:d7:62:0f:8d:dd:18:1b:f6:c4:ef:e3:41:75:2b:8a:50:74: 76:47:03:ed:13:55:c8:1a:67:80:40:de:26:d6:4e:3c:d7:03: de:84:e9:ce:3a:b3:76:aa:df:0e:be:ac:fd:b4:52:f4:a0:eb: 2a:c9:a3:99:56:27:ca:23:f2:04:ca:c6:1b:9b:b7:1b:49:64: 39:ab:b8:31:fc:2c:08:4d:48:21:09:b6:d2:a6:32:cd:d3:9a: 70:8b:42:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrdutJfI767FQ/YDHAWVHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MDE0YzkyNmVhNzZkNTY2ZTllOGE5NmQ1ODYxZDQ3NTdj OGIwZWEwHhcNMjUxMjA2MDgwMTExWhcNMjUxMjA3MDgwMTExWjAzMTEwLwYDVQQD Eyg0NWNkNGM3MjQ1OTM4OGFkYTMzMjE5ZGYzM2RhYThiNGUzODkyODE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAju2c0nHOGlJZ4lb/f/gaBa1grjq9 UDcLHDBq4DCkUySWJNyoa30zgb/tCRivQmaqkpNcRQLVDCKZpBOpmMj6Ic3Kbfwx ijWtwTPEltc+5ITtC6759vl4TR5u5Vd0xLSFmyh9/WcOjd9kHgZzp/zS8RALsBmc C/BlU6RVUCcOArrIKZbnLyAzyboHm10SepbUIBApW7F6jT+/L17wDbCUjGdlNktM OxUXSh492kcTYRONYrsz6kr2T+uuHrpzrraYL+pP9pWC7CxbzD/28tzfsFCpvy0k co/S8jnE25rkiZSKaKotwXF2qhrn6ZN4t+PDnie68kfpF7Fo8ZEXhD3dhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEXNTHJFk4itozIZ3zPaqLTjiSgVMB8GA1UdIwQY MBaAFEcBTJJup21Wbp6KltWGHUdXyLDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUndGTWttNm5iVlp1bm9xVzFZWWRSMWZJc09vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8zMTIzZDAtN2NhYS00ZGYzLWFkMjMt YWJhNGU2NDMwNThlLzEvUndGTWttNm5iVlp1bm9xVzFZWWRSMWZJc09vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS8zMTIzZDAtN2NhYS00ZGYzLWFkMjMtYWJhNGU2NDMwNThl LzEvUndGTWttNm5iVlp1bm9xVzFZWWRSMWZJc09vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe/2yyQ56 quE+Kcnzv0wvTg+s0rqN0r6lB8SAERL19ackWDpqTktXfaFARKVqLuhcnX1v1LpU aH1lmXj48dO5LeymkKGBXCGeSbLJHJ+sY7D118FpO5PdidH6BWNGlPIRhc5YJxc4 trT4P5ajB+PQ3uI3ydns8bf88Ss+SDrTsbby4tlKM6iT37vRFT5z6QqHHF7Y9jWn +qUGOZ9rR1VMvQl4WtdiD43dGBv2xO/jQXUrilB0dkcD7RNVyBpngEDeJtZOPNcD 3oTpzjqzdqrfDr6s/bRS9KDrKsmjmVYnyiPyBMrGG5u3G0lkOau4MfwsCE1IIQm2 0qYyzdOacItCEg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:17:16 2025 by rpki-client