This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft File: RmSbV7gX7BQ93LfXcSwiux8orHU.mft (raw, json) Hash identifier: /qugiRdq76hax0dN91JIEeq47iX5ougePifsDZ2nL0o= Subject key identifier: 0A:95:89:48:BF:A6:AD:5B:46:0A:79:60:6F:A3:BC:74:3A:38:B1:03 Authority key identifier: 46:64:9B:57:B8:17:EC:14:3D:DC:B7:D7:71:2C:22:BB:1F:28:AC:75 Certificate issuer: /CN=46649b57b817ec143ddcb7d7712c22bb1f28ac75 Certificate serial: 019AF50A7A53E50EE8EA3176F13A22BDD2BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft Manifest number: 173D Signing time: Sat 06 Dec 2025 19:01:35 +0000 Manifest this update: Sat 06 Dec 2025 19:01:35 +0000 Manifest next update: Sun 07 Dec 2025 19:01:35 +0000 Files and hashes: 1: E48fxMRuF9_usgkv-wBA_GtkkY8.roa (hash: TJ/B+8gZ2LSJEkkPcBk2s1l74WkEA3d0hjUzJQAQi8w=) 2: RmSbV7gX7BQ93LfXcSwiux8orHU.crl (hash: OxgWi8R27daa0xtXtd/v6DIZuguiBOkQuyJs09bpuGQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:7a:53:e5:0e:e8:ea:31:76:f1:3a:22:bd:d2:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46649b57b817ec143ddcb7d7712c22bb1f28ac75 Validity Not Before: Dec 6 19:01:35 2025 GMT Not After : Dec 7 19:01:35 2025 GMT Subject: CN=0a958948bfa6ad5b460a79606fa3bc743a38b103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2a:52:29:e6:e1:0c:49:a9:e8:3e:21:e5:f3: c3:83:0f:10:16:ba:fa:2d:e2:14:2d:d6:e8:21:16: f6:87:75:3c:9f:d3:71:cd:51:5a:8b:70:09:ca:07: ef:40:6e:56:16:ef:38:f8:0b:98:25:a6:a2:91:f4: 6b:ed:8c:b3:79:a8:09:cf:1a:b8:fc:08:0f:97:e9: 35:5c:3a:6e:95:6f:17:a4:d7:64:20:65:3d:93:09: 02:78:1d:53:ed:f9:4f:48:d4:8b:d1:cf:64:25:25: 75:85:c5:35:69:4a:f5:87:df:3f:d9:f2:16:6a:71: 54:d8:06:0b:1e:b6:a3:a3:83:39:11:b0:2b:9e:c1: 9f:9f:84:35:da:6c:21:f6:e3:00:88:25:41:76:9e: e1:b8:5d:f3:dc:1c:0d:f4:fa:81:70:f9:35:38:58: 71:b9:1f:eb:01:29:cb:4f:d7:f0:54:80:ea:30:d4: ec:6d:77:4d:e6:19:26:d6:aa:2a:f2:e8:dc:52:f3: 34:de:22:34:7c:bb:63:ec:68:b1:1b:77:03:57:49: 25:c2:78:23:29:7a:52:0e:0d:a4:4e:d9:b7:80:0a: 04:86:34:e8:b9:24:8d:c1:c3:3b:62:f7:ff:36:96: d5:5f:fb:38:d9:27:90:d4:0b:cf:6f:23:4f:f7:13: b5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:95:89:48:BF:A6:AD:5B:46:0A:79:60:6F:A3:BC:74:3A:38:B1:03 X509v3 Authority Key Identifier: keyid:46:64:9B:57:B8:17:EC:14:3D:DC:B7:D7:71:2C:22:BB:1F:28:AC:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:cc:06:f8:1f:fa:68:3c:67:75:60:aa:bb:e0:45:24:40:c6: 09:c2:2a:96:0e:64:b0:a2:a2:e6:88:65:53:7f:88:99:50:cf: 3a:2f:86:30:6d:cc:81:07:20:f1:c1:ed:66:32:a5:dd:a5:6a: 35:de:cd:12:cd:ed:2e:c5:31:51:3c:db:aa:d4:ec:c3:41:c6: 04:8a:5f:39:19:75:5f:fc:46:e8:74:d4:d7:21:06:c6:c5:b1: 56:a8:ae:00:bd:a7:24:c3:4b:bd:5a:15:bb:1a:52:c2:aa:9a: 20:07:34:6e:09:e0:82:6a:06:ba:62:f0:bb:bd:79:0e:81:ea: a9:07:d1:9a:eb:b4:49:76:1b:b6:12:dd:fc:3d:2b:d1:e6:ef: 64:d5:d1:ac:bd:a8:30:c0:0a:ac:bc:6f:84:05:36:e1:5f:cf: 1c:6c:bf:ad:a8:e1:ff:c7:49:a6:6f:5f:cc:5b:c5:75:3c:e8: cf:78:0f:51:67:e7:ce:9b:ab:32:4b:72:90:87:85:39:1b:00: 6a:d1:cf:f4:e9:ee:ce:13:e6:10:85:c4:b2:c7:d4:f5:ca:0e: 02:b0:fa:80:10:f8:3b:51:b7:a2:e2:f7:85:de:e1:a4:a5:4f: e8:34:c6:61:97:3b:89:e1:46:b6:99:f8:f2:4d:36:d6:54:11: be:ac:c5:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CnpT5Q7o6jF28ToivdK8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NjQ5YjU3YjgxN2VjMTQzZGRjYjdkNzcxMmMyMmJiMWYy OGFjNzUwHhcNMjUxMjA2MTkwMTM1WhcNMjUxMjA3MTkwMTM1WjAzMTEwLwYDVQQD EygwYTk1ODk0OGJmYTZhZDViNDYwYTc5NjA2ZmEzYmM3NDNhMzhiMTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSpSKebhDEmp6D4h5fPDgw8QFrr6 LeIULdboIRb2h3U8n9NxzVFai3AJygfvQG5WFu84+AuYJaaikfRr7YyzeagJzxq4 /AgPl+k1XDpulW8XpNdkIGU9kwkCeB1T7flPSNSL0c9kJSV1hcU1aUr1h98/2fIW anFU2AYLHrajo4M5EbArnsGfn4Q12mwh9uMAiCVBdp7huF3z3BwN9PqBcPk1OFhx uR/rASnLT9fwVIDqMNTsbXdN5hkm1qoq8ujcUvM03iI0fLtj7GixG3cDV0klwngj KXpSDg2kTtm3gAoEhjTouSSNwcM7Yvf/NpbVX/s42SeQ1AvPbyNP9xO1PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAqViUi/pq1bRgp5YG+jvHQ6OLEDMB8GA1UdIwQY MBaAFEZkm1e4F+wUPdy313EsIrsfKKx1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm1TYlY3Z1g3QlE5M0xmWGNTd2l1eDhvckhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy84NTg0NTQtYTE4ZC00MDQwLWFiM2Mt Y2E4ZmJhNTk1ZDRmLzEvUm1TYlY3Z1g3QlE5M0xmWGNTd2l1eDhvckhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy84NTg0NTQtYTE4ZC00MDQwLWFiM2MtY2E4ZmJhNTk1ZDRm LzEvUm1TYlY3Z1g3QlE5M0xmWGNTd2l1eDhvckhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWcwG+B/6 aDxndWCqu+BFJEDGCcIqlg5ksKKi5ohlU3+ImVDPOi+GMG3MgQcg8cHtZjKl3aVq Nd7NEs3tLsUxUTzbqtTsw0HGBIpfORl1X/xG6HTU1yEGxsWxVqiuAL2nJMNLvVoV uxpSwqqaIAc0bgnggmoGumLwu715DoHqqQfRmuu0SXYbthLd/D0r0ebvZNXRrL2o MMAKrLxvhAU24V/PHGy/rajh/8dJpm9fzFvFdTzoz3gPUWfnzpurMktykIeFORsA atHP9OnuzhPmEIXEssfU9coOArD6gBD4O1G3ouL3hd7hpKVP6DTGYZc7ieFGtpn4 8k021lQRvqzFqg== -----END CERTIFICATE-----Generated at Sun Dec 7 00:11:41 2025 by rpki-client