This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft File: RmI6xd-e7899JPMXx7aUKX5PNio.mft (raw, json) Hash identifier: 8vmhCEHGl1fh8NDWos6RMgyf+krAt2Me7If1YhpXblc= Subject key identifier: 02:84:2C:B2:A3:70:4D:5C:E4:53:F2:41:90:86:3F:EC:BE:51:9B:18 Authority key identifier: 46:62:3A:C5:DF:9E:EF:CF:7D:24:F3:17:C7:B6:94:29:7E:4F:36:2A Certificate issuer: /CN=46623ac5df9eefcf7d24f317c7b694297e4f362a Certificate serial: 019AF2ADF593E9A94262794E5278714F6A0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmI6xd-e7899JPMXx7aUKX5PNio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft Manifest number: 0849 Signing time: Sat 06 Dec 2025 08:01:17 +0000 Manifest this update: Sat 06 Dec 2025 08:01:17 +0000 Manifest next update: Sun 07 Dec 2025 08:01:17 +0000 Files and hashes: 1: RmI6xd-e7899JPMXx7aUKX5PNio.crl (hash: Z8/rutcSvcxIY+iqxuonK6cydXcZ2HLn0f8n4Exlayo=) 2: nCIxCjPPY6DWPKx_WJ_D213f1h8.roa (hash: TAjRe+1L1yReCVm9dO/sWTs7kJtd/3RFn58xjlrbP+A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft rsync://rpki.ripe.net/repository/DEFAULT/RmI6xd-e7899JPMXx7aUKX5PNio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:f5:93:e9:a9:42:62:79:4e:52:78:71:4f:6a:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46623ac5df9eefcf7d24f317c7b694297e4f362a Validity Not Before: Dec 6 08:01:17 2025 GMT Not After : Dec 7 08:01:17 2025 GMT Subject: CN=02842cb2a3704d5ce453f24190863fecbe519b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ac:cc:f2:84:31:a0:e0:00:f5:71:93:58:3c: c0:af:04:a1:88:a5:f6:1f:1f:88:14:61:9b:d8:0e: ad:92:90:3a:69:eb:90:3c:48:d1:7c:9a:30:dd:3f: a7:f4:4a:f2:18:37:5a:88:55:6b:d6:67:95:e3:7c: e9:8a:1e:50:d4:f6:06:be:52:10:7b:56:04:cc:9f: 7a:4d:df:7b:9c:ae:8d:d7:1c:ed:c2:03:d5:ed:c1: 91:9c:71:9f:c4:88:6c:d9:f9:cb:ad:b0:4b:db:79: b0:39:c2:69:cb:b1:ff:1e:df:b9:f0:cf:fd:ac:7b: 22:8c:66:d7:6d:67:03:9e:0b:5d:27:7b:6d:a5:15: b6:ec:50:43:7f:75:40:8d:2f:e9:1f:f5:ef:6f:dc: ea:9a:4e:57:a8:1c:b2:b4:8d:01:07:28:24:ff:c8: 0f:33:8a:4e:f0:79:47:e3:a2:cc:fc:af:a4:dc:9f: b7:0c:15:f2:2e:70:0c:e8:6d:b5:d2:c5:0b:89:96: f8:0e:1b:6e:3c:ea:98:c5:dd:87:3f:f3:c4:51:dc: 30:fa:04:72:72:46:19:1a:d8:f3:3f:f4:57:36:43: 65:b4:e9:b4:80:fb:ca:32:28:f4:d5:48:00:30:81: 15:10:95:dd:0f:7a:8b:63:15:2e:11:fa:bc:a1:8f: f8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:84:2C:B2:A3:70:4D:5C:E4:53:F2:41:90:86:3F:EC:BE:51:9B:18 X509v3 Authority Key Identifier: keyid:46:62:3A:C5:DF:9E:EF:CF:7D:24:F3:17:C7:B6:94:29:7E:4F:36:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmI6xd-e7899JPMXx7aUKX5PNio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:67:a8:4b:61:f3:46:d5:59:07:6b:35:b8:36:f5:35:2a:53: 02:d8:76:de:a1:78:4c:04:e2:6c:6a:eb:87:96:f7:df:de:14: 01:77:98:e3:b6:53:57:dc:f1:32:e7:fc:89:4c:45:78:61:0d: aa:0f:ef:e0:b1:96:9e:76:fd:bf:d1:17:d6:fa:4a:f7:a4:ed: 56:0d:3e:ce:1e:8a:aa:23:25:67:8f:b6:a0:a7:e0:7c:5d:d9: c5:11:a2:bf:5a:75:bd:80:e6:8a:e9:c2:c8:90:66:f8:f3:e4: ca:c1:60:d3:ab:75:63:15:83:49:b0:11:ac:a3:56:a8:8b:3b: 8c:a7:21:98:29:de:e2:03:64:c3:08:8f:03:08:9c:2c:30:c4: 64:51:3d:cf:8f:96:a0:98:33:67:fd:53:bc:2b:93:04:42:02: 45:1d:74:5a:4c:66:01:68:3d:45:1e:53:67:e0:25:af:46:94: 8a:f3:20:7d:44:dd:85:8a:f8:20:0e:d8:2f:37:50:d1:f2:f7: e4:99:60:60:49:da:d6:c2:f0:7d:87:3c:10:af:28:ea:37:59: 4a:12:e0:bd:d7:7b:2d:bf:f2:9d:35:8d:9a:b4:64:3d:01:45: 74:24:80:53:ed:de:e6:49:8b:eb:e8:32:b9:ea:23:82:ce:70: cd:cf:db:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrfWT6alCYnlOUnhxT2oPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NjIzYWM1ZGY5ZWVmY2Y3ZDI0ZjMxN2M3YjY5NDI5N2U0 ZjM2MmEwHhcNMjUxMjA2MDgwMTE3WhcNMjUxMjA3MDgwMTE3WjAzMTEwLwYDVQQD EygwMjg0MmNiMmEzNzA0ZDVjZTQ1M2YyNDE5MDg2M2ZlY2JlNTE5YjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6zM8oQxoOAA9XGTWDzArwShiKX2 Hx+IFGGb2A6tkpA6aeuQPEjRfJow3T+n9EryGDdaiFVr1meV43zpih5Q1PYGvlIQ e1YEzJ96Td97nK6N1xztwgPV7cGRnHGfxIhs2fnLrbBL23mwOcJpy7H/Ht+58M/9 rHsijGbXbWcDngtdJ3ttpRW27FBDf3VAjS/pH/Xvb9zqmk5XqByytI0BBygk/8gP M4pO8HlH46LM/K+k3J+3DBXyLnAM6G210sULiZb4DhtuPOqYxd2HP/PEUdww+gRy ckYZGtjzP/RXNkNltOm0gPvKMij01UgAMIEVEJXdD3qLYxUuEfq8oY/4yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAKELLKjcE1c5FPyQZCGP+y+UZsYMB8GA1UdIwQY MBaAFEZiOsXfnu/PfSTzF8e2lCl+TzYqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm1JNnhkLWU3ODk5SlBNWHg3YVVLWDVQTmlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hNzEzZTAtZDE2NC00ZmJiLWI0YWUt N2E1OGJhM2RkZjQzLzEvUm1JNnhkLWU3ODk5SlBNWHg3YVVLWDVQTmlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9hNzEzZTAtZDE2NC00ZmJiLWI0YWUtN2E1OGJhM2RkZjQz LzEvUm1JNnhkLWU3ODk5SlBNWHg3YVVLWDVQTmlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEmeoS2Hz RtVZB2s1uDb1NSpTAth23qF4TATibGrrh5b3394UAXeY47ZTV9zxMuf8iUxFeGEN qg/v4LGWnnb9v9EX1vpK96TtVg0+zh6KqiMlZ4+2oKfgfF3ZxRGiv1p1vYDmiunC yJBm+PPkysFg06t1YxWDSbARrKNWqIs7jKchmCne4gNkwwiPAwicLDDEZFE9z4+W oJgzZ/1TvCuTBEICRR10WkxmAWg9RR5TZ+Alr0aUivMgfUTdhYr4IA7YLzdQ0fL3 5JlgYEna1sLwfYc8EK8o6jdZShLgvdd7Lb/ynTWNmrRkPQFFdCSAU+3e5kmL6+gy ueojgs5wzc/b3g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:35 2025 by rpki-client