This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft File: RMRFXrsJGC1PvrO0Vg4giYbhriE.mft (raw, json) Hash identifier: revRll969Gr8xclYEwNPJ/FXh5xpr6BihHGaeibOYKo= Subject key identifier: 6E:AC:2D:A8:77:EA:ED:1D:05:42:47:5E:E9:06:4A:BC:29:88:86:29 Authority key identifier: 44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21 Certificate issuer: /CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21 Certificate serial: 019AF20941576ACD6F01DFEB415BA75A8C33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 05:01:24 +0000 Manifest this update: Sat 06 Dec 2025 05:01:24 +0000 Manifest next update: Sun 07 Dec 2025 05:01:24 +0000 Files and hashes: 1: RMRFXrsJGC1PvrO0Vg4giYbhriE.crl (hash: dn/wf/wzUsKH7YEtWcwGo9sC37xMqrbQ4GymuFZz+LM=) 2: W1HT74Ti-eehsN9aFk8FhX6Amk0.roa (hash: 3zzhU0Zo0DbhPnuXcPDdzKBUW4Glv+sVBLV3Zhd2+lU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:41:57:6a:cd:6f:01:df:eb:41:5b:a7:5a:8c:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21 Validity Not Before: Dec 6 05:01:24 2025 GMT Not After : Dec 7 05:01:24 2025 GMT Subject: CN=6eac2da877eaed1d0542475ee9064abc29888629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:04:15:e0:a9:a7:bc:87:9b:fc:1e:3b:a8:84: a5:f4:93:95:b6:c4:c6:98:93:17:4a:84:70:65:09: 0a:88:d5:91:ea:78:fe:b1:3b:87:52:01:7a:ab:2b: 42:b3:7b:17:b4:fa:c5:bf:58:ab:d8:f1:cf:a3:ba: aa:b2:c9:dd:34:ff:f2:84:b9:75:00:ba:9d:6c:e5: 9d:00:85:95:2a:e1:40:7d:6e:11:df:b5:53:f2:d7: 94:34:67:e7:93:ae:86:31:19:51:80:da:05:57:a4: d3:68:3c:72:7a:f1:66:25:40:b3:ac:9f:48:b0:bc: 0f:29:1e:37:d9:b1:5b:3a:d5:50:e4:f4:0c:1f:38: 65:55:4c:15:de:f2:00:6b:b7:b2:32:a5:b2:3c:cb: b7:23:10:62:16:c5:d0:ee:fe:3e:0b:37:62:b3:4a: f7:4c:74:44:07:e7:c7:68:fc:88:14:f9:b2:bf:a3: 6f:33:8b:9c:35:f4:00:99:49:f1:51:51:13:9f:42: 5a:48:00:97:9e:11:13:20:0c:98:3f:7e:60:f7:99: 4f:3c:66:ea:27:7b:f6:07:65:95:50:d2:9c:00:02: 03:7c:53:20:bd:e7:0f:db:ef:25:6d:f4:c5:ce:9c: 42:35:e7:fc:ed:20:12:43:7b:39:04:a6:de:b1:89: 74:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:AC:2D:A8:77:EA:ED:1D:05:42:47:5E:E9:06:4A:BC:29:88:86:29 X509v3 Authority Key Identifier: keyid:44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:9d:4e:60:21:8a:7e:7f:0f:b6:7f:3a:c0:29:8b:23:dd:59: 05:a9:dd:05:28:e7:a1:63:4a:6b:75:a4:de:d1:d7:4c:d0:85: ae:be:8a:8b:31:01:3e:af:3a:66:d9:46:ce:cd:68:c2:07:46: 9f:1d:15:1a:ab:74:70:ee:28:cd:14:4b:92:74:b4:ee:63:42: 96:d6:05:b5:53:f5:2d:77:18:6b:38:2a:45:51:34:1d:07:86: de:38:26:19:02:62:8b:4d:2c:4b:4d:c5:cf:50:ee:b7:68:70: 4e:f1:63:e1:3d:e3:41:e7:33:13:fb:57:09:87:95:f7:63:e3: 2a:13:7b:20:73:a2:31:56:65:41:58:b1:77:54:9e:ff:c3:6b: 2a:90:f9:62:71:4e:f1:4c:10:23:6f:de:af:9b:ed:ec:a3:9b: 87:1d:4a:90:a5:f0:c0:b2:f9:85:b4:b0:d4:61:d7:fd:65:58: 18:d9:d1:1d:05:e7:2f:9d:77:aa:ae:ce:ef:cf:4d:50:5b:ba: a5:67:62:55:df:7b:0d:13:32:b4:fd:10:7d:ff:05:06:63:08: e5:13:63:b1:69:97:6f:a7:47:10:d6:50:1d:e6:d7:1e:ee:5a: 1f:a7:54:12:39:88:de:31:1f:34:ec:a5:ca:05:03:5e:71:56: 93:d7:18:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUFXas1vAd/rQVunWowzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YzQ0NTVlYmIwOTE4MmQ0ZmJlYjNiNDU2MGUyMDg5ODZl MWFlMjEwHhcNMjUxMjA2MDUwMTI0WhcNMjUxMjA3MDUwMTI0WjAzMTEwLwYDVQQD Eyg2ZWFjMmRhODc3ZWFlZDFkMDU0MjQ3NWVlOTA2NGFiYzI5ODg4NjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QQV4KmnvIeb/B47qISl9JOVtsTG mJMXSoRwZQkKiNWR6nj+sTuHUgF6qytCs3sXtPrFv1ir2PHPo7qqssndNP/yhLl1 ALqdbOWdAIWVKuFAfW4R37VT8teUNGfnk66GMRlRgNoFV6TTaDxyevFmJUCzrJ9I sLwPKR432bFbOtVQ5PQMHzhlVUwV3vIAa7eyMqWyPMu3IxBiFsXQ7v4+Czdis0r3 THREB+fHaPyIFPmyv6NvM4ucNfQAmUnxUVETn0JaSACXnhETIAyYP35g95lPPGbq J3v2B2WVUNKcAAIDfFMgvecP2+8lbfTFzpxCNef87SASQ3s5BKbesYl0SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG6sLah36u0dBUJHXukGSrwpiIYpMB8GA1UdIwQY MBaAFETERV67CRgtT76ztFYOIImG4a4hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk1SRlhyc0pHQzFQdnJPMFZnNGdpWWJocmlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wNWE5MDMtZDljMC00Njg5LTlhYzgt YzMyZGU5MGUzZmMzLzEvUk1SRlhyc0pHQzFQdnJPMFZnNGdpWWJocmlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8wNWE5MDMtZDljMC00Njg5LTlhYzgtYzMyZGU5MGUzZmMz LzEvUk1SRlhyc0pHQzFQdnJPMFZnNGdpWWJocmlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi51OYCGK fn8Ptn86wCmLI91ZBandBSjnoWNKa3Wk3tHXTNCFrr6KizEBPq86ZtlGzs1owgdG nx0VGqt0cO4ozRRLknS07mNCltYFtVP1LXcYazgqRVE0HQeG3jgmGQJii00sS03F z1Dut2hwTvFj4T3jQeczE/tXCYeV92PjKhN7IHOiMVZlQVixd1Se/8NrKpD5YnFO 8UwQI2/er5vt7KObhx1KkKXwwLL5hbSw1GHX/WVYGNnRHQXnL513qq7O789NUFu6 pWdiVd97DRMytP0Qff8FBmMI5RNjsWmXb6dHENZQHebXHu5aH6dUEjmI3jEfNOyl ygUDXnFWk9cYOg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:03:17 2025 by rpki-client