This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft File: RGMFqaHfoG26hXtD8N6eYi9JUaM.mft (raw, json) Hash identifier: G6C8ZdCaPWmnaaVpbXJ47LdDQxRU0GUxVEvaooHKzO8= Subject key identifier: 39:E4:BD:8F:6D:03:E0:0C:B2:01:3E:ED:4F:DB:5A:0F:DC:F9:C1:A2 Authority key identifier: 44:63:05:A9:A1:DF:A0:6D:BA:85:7B:43:F0:DE:9E:62:2F:49:51:A3 Certificate issuer: /CN=446305a9a1dfa06dba857b43f0de9e622f4951a3 Certificate serial: 019AF12ED6853396E834027B59E52D4C4249 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft Manifest number: 0BEF Signing time: Sat 06 Dec 2025 01:02:49 +0000 Manifest this update: Sat 06 Dec 2025 01:02:49 +0000 Manifest next update: Sun 07 Dec 2025 01:02:49 +0000 Files and hashes: 1: RGMFqaHfoG26hXtD8N6eYi9JUaM.crl (hash: wEgaYmbeBbtc/ZORs8yl1/rnjJEYwqqSL8SovswLVV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:d6:85:33:96:e8:34:02:7b:59:e5:2d:4c:42:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=446305a9a1dfa06dba857b43f0de9e622f4951a3 Validity Not Before: Dec 6 01:02:49 2025 GMT Not After : Dec 7 01:02:49 2025 GMT Subject: CN=39e4bd8f6d03e00cb2013eed4fdb5a0fdcf9c1a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:13:c2:a4:f9:44:36:ca:20:27:b3:90:61:00: e7:00:74:fa:03:56:df:c8:87:60:71:96:7e:0e:1d: 61:55:69:da:5e:20:29:d6:ac:2d:96:08:72:1e:03: fb:cc:66:c3:86:0d:c9:4c:05:4c:d5:b4:3b:71:04: 01:d6:96:0e:5c:a7:12:dc:9b:74:4e:3c:10:f1:7a: 52:0d:d2:ea:cd:2e:6f:74:01:0d:62:78:a5:2a:b1: a5:27:54:96:a1:02:ff:74:bc:8d:61:71:37:2a:b8: 4f:20:c8:d2:4f:65:e0:ca:0d:52:14:50:7a:ca:5f: 1a:d7:f1:04:61:ca:53:43:46:b0:d7:19:e2:36:0a: d2:ae:ab:28:eb:6e:68:96:a1:4f:90:b7:82:6c:1d: b5:ab:9f:17:71:74:e4:e5:80:67:f8:df:cd:37:f9: 99:86:73:64:d5:14:4b:79:40:6d:dc:aa:86:a5:3a: b1:fa:46:af:dd:8e:47:f1:56:7a:14:34:cb:0d:5a: 2b:ca:35:98:91:72:ac:89:15:25:e6:4e:3d:31:01: 1e:f1:e4:29:6d:8b:f6:36:08:88:25:72:4a:6e:e8: 56:5f:72:b9:ac:fb:f8:7d:7e:6c:41:f3:07:10:d5: ec:ad:38:8e:1b:a3:f6:0f:6c:be:8f:03:8c:4c:ce: 16:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:E4:BD:8F:6D:03:E0:0C:B2:01:3E:ED:4F:DB:5A:0F:DC:F9:C1:A2 X509v3 Authority Key Identifier: keyid:44:63:05:A9:A1:DF:A0:6D:BA:85:7B:43:F0:DE:9E:62:2F:49:51:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:74:e0:b1:97:37:c6:18:11:d5:f0:dd:a1:f0:a4:e6:4c:89: 5f:7e:19:bb:28:2b:7b:2d:95:b9:53:4c:18:ae:62:f1:b5:c0: ec:84:d6:e3:02:b4:14:7c:d3:28:e1:39:4b:91:11:fd:b9:4c: c7:fd:41:8b:bf:fe:fa:03:5b:95:a7:44:07:44:58:d6:29:e0: aa:c6:16:9c:57:06:d7:b2:c9:9c:7c:9b:d9:c8:a7:06:1d:b8: 39:cb:cd:cc:a3:c3:0c:54:e5:c7:66:1e:fd:53:32:58:b6:f2: 34:48:3b:05:0e:ea:39:8c:9a:26:d2:0e:83:97:24:57:b4:69: c8:cd:1a:a3:bc:ff:ae:42:88:14:90:0b:e8:15:f4:b1:a4:4e: ec:22:07:35:51:58:52:d4:75:cd:f2:c6:c3:44:77:03:e9:f4: 94:d9:b5:b0:3a:ed:53:21:fe:38:52:3c:1c:a4:f5:06:3d:fa: be:83:0d:a9:2a:b8:a8:82:1a:7d:58:29:4e:b7:fd:76:ab:ce: f3:c5:8b:49:c9:e8:07:29:25:b5:b1:bd:78:01:2c:b8:48:6d: ac:e4:e5:03:34:00:d5:47:e2:4e:41:ca:48:2d:3a:b7:74:15: 16:7a:16:11:f5:a2:e0:99:51:dc:1c:69:4c:00:9c:25:7a:01: dc:e0:5d:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLtaFM5boNAJ7WeUtTEJJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NjMwNWE5YTFkZmEwNmRiYTg1N2I0M2YwZGU5ZTYyMmY0 OTUxYTMwHhcNMjUxMjA2MDEwMjQ5WhcNMjUxMjA3MDEwMjQ5WjAzMTEwLwYDVQQD EygzOWU0YmQ4ZjZkMDNlMDBjYjIwMTNlZWQ0ZmRiNWEwZmRjZjljMWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRPCpPlENsogJ7OQYQDnAHT6A1bf yIdgcZZ+Dh1hVWnaXiAp1qwtlghyHgP7zGbDhg3JTAVM1bQ7cQQB1pYOXKcS3Jt0 TjwQ8XpSDdLqzS5vdAENYnilKrGlJ1SWoQL/dLyNYXE3KrhPIMjST2Xgyg1SFFB6 yl8a1/EEYcpTQ0aw1xniNgrSrqso625olqFPkLeCbB21q58XcXTk5YBn+N/NN/mZ hnNk1RRLeUBt3KqGpTqx+kav3Y5H8VZ6FDTLDVoryjWYkXKsiRUl5k49MQEe8eQp bYv2NgiIJXJKbuhWX3K5rPv4fX5sQfMHENXsrTiOG6P2D2y+jwOMTM4WswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDnkvY9tA+AMsgE+7U/bWg/c+cGiMB8GA1UdIwQY MBaAFERjBamh36BtuoV7Q/DenmIvSVGjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkdNRnFhSGZvRzI2aFh0RDhONmVZaTlKVWFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yZDQ4NTgtZGJjZi00NmQxLTg2ZDMt MGM4Njc0NTc2OTJiLzEvUkdNRnFhSGZvRzI2aFh0RDhONmVZaTlKVWFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8yZDQ4NTgtZGJjZi00NmQxLTg2ZDMtMGM4Njc0NTc2OTJi LzEvUkdNRnFhSGZvRzI2aFh0RDhONmVZaTlKVWFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbHTgsZc3 xhgR1fDdofCk5kyJX34Zuygrey2VuVNMGK5i8bXA7ITW4wK0FHzTKOE5S5ER/blM x/1Bi7/++gNbladEB0RY1ingqsYWnFcG17LJnHyb2cinBh24OcvNzKPDDFTlx2Ye /VMyWLbyNEg7BQ7qOYyaJtIOg5ckV7RpyM0ao7z/rkKIFJAL6BX0saRO7CIHNVFY UtR1zfLGw0R3A+n0lNm1sDrtUyH+OFI8HKT1Bj36voMNqSq4qIIafVgpTrf9dqvO 88WLScnoBykltbG9eAEsuEhtrOTlAzQA1UfiTkHKSC06t3QVFnoWEfWi4JlR3Bxp TACcJXoB3OBdcg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:28 2025 by rpki-client