This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/777321-1bd6-40db-8e80-33928d3fa12d/1/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.mft File: rmu6rb4-eH3O7iPbI6Mguh4vv4Y.mft (raw, json) Hash identifier: nM0Gg4Ueg/e2ASpohXoQxxbJsYPH1cjfp+q7d5oou+0= Subject key identifier: 15:9E:D8:10:F3:71:80:99:C4:8F:B0:BC:ED:4E:BC:5E:84:8F:E3:C3 Authority key identifier: AE:6B:BA:AD:BE:3E:78:7D:CE:EE:23:DB:23:A3:20:BA:1E:2F:BF:86 Certificate issuer: /CN=ae6bbaadbe3e787dceee23db23a320ba1e2fbf86 Certificate serial: 019AF31CE03750219AAD58F50E94E76213EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/777321-1bd6-40db-8e80-33928d3fa12d/1/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.mft Manifest number: 0646 Signing time: Sat 06 Dec 2025 10:02:27 +0000 Manifest this update: Sat 06 Dec 2025 10:02:27 +0000 Manifest next update: Sun 07 Dec 2025 10:02:27 +0000 Files and hashes: 1: rmu6rb4-eH3O7iPbI6Mguh4vv4Y.crl (hash: ndMA8GMpG+EOEMGRCJrhqSHSIJCi3rhfmJc9WB2mS0Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/777321-1bd6-40db-8e80-33928d3fa12d/1/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/777321-1bd6-40db-8e80-33928d3fa12d/1/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.mft rsync://rpki.ripe.net/repository/DEFAULT/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:e0:37:50:21:9a:ad:58:f5:0e:94:e7:62:13:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae6bbaadbe3e787dceee23db23a320ba1e2fbf86 Validity Not Before: Dec 6 10:02:27 2025 GMT Not After : Dec 7 10:02:27 2025 GMT Subject: CN=159ed810f3718099c48fb0bced4ebc5e848fe3c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:49:62:b1:ca:6f:13:07:f9:d1:01:d9:80:f0: 10:4b:f1:06:24:8a:74:aa:1f:df:36:9c:15:ad:31: 58:74:56:6c:2c:8f:17:a3:71:51:6d:d8:41:50:5b: d7:61:13:f7:44:41:cf:36:91:fb:85:8d:6d:ca:b3: 29:bb:85:c3:33:1d:23:1e:49:c4:0f:e2:eb:f3:3e: 1d:60:8d:ed:b4:78:b7:2c:bc:a1:be:2b:34:6e:5c: e4:43:10:b0:6c:c4:5f:44:31:5b:f0:70:bd:66:b7: ff:70:75:48:39:1e:cb:bb:4f:24:4f:02:69:68:cb: d7:11:ee:4d:62:5a:93:ff:8a:3e:6f:c2:41:c4:89: 57:7a:68:87:cc:87:dd:af:8b:7a:72:03:a0:2a:9d: 57:c4:e4:64:e9:b2:74:75:06:3d:cb:b5:98:ee:e8: e3:1c:f7:35:1e:cf:6a:70:36:5c:72:43:63:0e:8d: 63:9c:ce:6e:4b:61:f9:bd:3e:d3:a8:a8:86:47:ac: 5b:9d:a9:cb:48:35:f6:d6:26:c6:97:d9:66:af:f4: d4:db:85:1a:1f:fb:03:64:75:7f:89:cf:d5:47:e9: 7e:2e:e2:92:f3:f1:51:15:39:bb:f4:b9:e2:80:d9: af:1f:f8:57:3e:8e:b6:80:f9:5d:78:bb:21:76:00: ad:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:9E:D8:10:F3:71:80:99:C4:8F:B0:BC:ED:4E:BC:5E:84:8F:E3:C3 X509v3 Authority Key Identifier: keyid:AE:6B:BA:AD:BE:3E:78:7D:CE:EE:23:DB:23:A3:20:BA:1E:2F:BF:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/777321-1bd6-40db-8e80-33928d3fa12d/1/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/777321-1bd6-40db-8e80-33928d3fa12d/1/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:12:ad:3b:31:66:30:41:5c:bd:4f:90:3a:80:6b:01:94:07: 3d:0c:6c:af:0b:18:46:09:88:c4:35:63:19:b4:f2:47:61:79: 86:da:4b:b4:ed:c9:7b:eb:67:1f:3a:33:2c:25:88:90:72:d8: 56:5b:6e:60:01:e6:c5:10:5e:91:af:60:12:d9:6a:f3:c5:99: 29:95:00:28:01:75:79:b3:87:5e:df:0c:49:d3:35:7a:be:48: 18:e6:59:66:93:72:d2:47:d5:0a:44:a2:05:5b:2c:c3:21:9b: ce:31:6a:5b:ff:4a:62:71:a8:67:69:ed:a9:e5:fb:16:e2:7b: 88:ea:65:d7:96:67:1c:dc:23:80:e1:fb:2d:ea:eb:af:77:a3: d6:7a:8c:ca:7a:d5:eb:10:1b:06:f6:66:c4:61:7e:42:c4:dc: 24:48:f0:97:b1:93:94:4a:c9:cc:4b:07:34:dc:c2:a8:92:a2: ac:a5:af:89:73:a8:3c:f7:8c:48:bf:4a:28:1c:34:c9:3c:eb: 21:1e:ee:a8:1d:4d:09:18:dd:3d:fd:84:7c:9a:cf:93:59:de: cf:95:be:ed:45:23:18:38:3f:5a:0a:3f:71:15:81:b5:39:26: 1a:4d:ae:0c:b4:29:ec:5b:18:50:ad:ff:84:3e:30:e1:06:86: 6d:67:61:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHOA3UCGarVj1DpTnYhPuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNmJiYWFkYmUzZTc4N2RjZWVlMjNkYjIzYTMyMGJhMWUy ZmJmODYwHhcNMjUxMjA2MTAwMjI3WhcNMjUxMjA3MTAwMjI3WjAzMTEwLwYDVQQD EygxNTllZDgxMGYzNzE4MDk5YzQ4ZmIwYmNlZDRlYmM1ZTg0OGZlM2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kliscpvEwf50QHZgPAQS/EGJIp0 qh/fNpwVrTFYdFZsLI8Xo3FRbdhBUFvXYRP3REHPNpH7hY1tyrMpu4XDMx0jHknE D+Lr8z4dYI3ttHi3LLyhvis0blzkQxCwbMRfRDFb8HC9Zrf/cHVIOR7Lu08kTwJp aMvXEe5NYlqT/4o+b8JBxIlXemiHzIfdr4t6cgOgKp1XxORk6bJ0dQY9y7WY7ujj HPc1Hs9qcDZcckNjDo1jnM5uS2H5vT7TqKiGR6xbnanLSDX21ibGl9lmr/TU24Ua H/sDZHV/ic/VR+l+LuKS8/FRFTm79LnigNmvH/hXPo62gPldeLshdgCtJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBWe2BDzcYCZxI+wvO1OvF6Ej+PDMB8GA1UdIwQY MBaAFK5ruq2+Pnh9zu4j2yOjILoeL7+GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm11NnJiNC1lSDNPN2lQYkk2TWd1aDR2djRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi83NzczMjEtMWJkNi00MGRiLThlODAt MzM5MjhkM2ZhMTJkLzEvcm11NnJiNC1lSDNPN2lQYkk2TWd1aDR2djRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi83NzczMjEtMWJkNi00MGRiLThlODAtMzM5MjhkM2ZhMTJk LzEvcm11NnJiNC1lSDNPN2lQYkk2TWd1aDR2djRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbxKtOzFm MEFcvU+QOoBrAZQHPQxsrwsYRgmIxDVjGbTyR2F5htpLtO3Je+tnHzozLCWIkHLY VltuYAHmxRBeka9gEtlq88WZKZUAKAF1ebOHXt8MSdM1er5IGOZZZpNy0kfVCkSi BVsswyGbzjFqW/9KYnGoZ2ntqeX7FuJ7iOpl15ZnHNwjgOH7Lerrr3ej1nqMynrV 6xAbBvZmxGF+QsTcJEjwl7GTlErJzEsHNNzCqJKirKWviXOoPPeMSL9KKBw0yTzr IR7uqB1NCRjdPf2EfJrPk1nez5W+7UUjGDg/Wgo/cRWBtTkmGk2uDLQp7FsYUK3/ hD4w4QaGbWdhkw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:59:08 2025 by rpki-client