This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft File: rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft (raw, json) Hash identifier: NWj5buD2YsfqT3c1AKPZUbC0ZVIoxuV+gki89HqlYH0= Subject key identifier: DE:1D:6A:80:BC:D7:DB:A1:F7:0E:DD:DE:C6:AA:42:1D:0D:CF:11:82 Authority key identifier: AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA Certificate issuer: /CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa Certificate serial: 019B4DE10D7EF14B37D040AE3690E2B11429 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft Manifest number: 1791 Signing time: Wed 24 Dec 2025 01:02:32 +0000 Manifest this update: Wed 24 Dec 2025 01:02:32 +0000 Manifest next update: Thu 25 Dec 2025 01:02:32 +0000 Files and hashes: 1: 5qbm6M-eiAs3Sax8KVJ3oyYfrrQ.roa (hash: wspJkKAHBhU/iiN7eXAG5eZQY0gy2K4ZxvhHdsXT2dg=) 2: KDzLGK1Ms1rQ3Sinf5MNoTfrlLk.roa (hash: bPUt0It2HOIJBVKWWo3dmSTmayPGgOml6jz8Zt5aBJ8=) 3: PfTK_laJnQS_hWcI1miH8YmD3XU.roa (hash: YfjG5i7yzO8QQ7ZO7iDAmyK16Fyt++8WwP+MEzSCTdY=) 4: ltmkR62UHp9Wf_efPpxh7HmSnT4.roa (hash: E1AG/jlqYwJrU9a3m+x6UqkYK+Xlbaxzv/rFzMbFu1E=) 5: rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl (hash: +2w4GxPTi0GuUTT5+GAF2y1JGfkSFse5Jsm6FbQxt34=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e1:0d:7e:f1:4b:37:d0:40:ae:36:90:e2:b1:14:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa Validity Not Before: Dec 24 01:02:32 2025 GMT Not After : Dec 25 01:02:32 2025 GMT Subject: CN=de1d6a80bcd7dba1f70edddec6aa421d0dcf1182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:17:bd:99:48:76:6b:c2:6c:91:9b:08:16:d2: b9:ec:59:32:aa:ba:09:50:fb:6e:4a:39:57:09:e6: b9:c9:58:bd:d2:3b:a5:60:4f:79:16:8c:4d:33:9b: d3:3f:53:51:54:ce:6d:59:03:6c:56:05:6d:78:04: 9e:1e:61:eb:d7:39:ef:fd:dd:59:7e:a6:8c:3e:44: 63:74:2e:30:cd:e7:09:a0:76:1a:b2:83:77:d4:df: 1b:35:d7:70:f5:0d:27:20:1f:7c:05:85:d8:62:aa: ba:31:7d:f9:3b:c6:5c:73:72:d0:e0:9b:a8:5f:4d: 36:6c:70:9a:17:af:00:57:ff:37:b0:84:3e:87:2d: 40:5f:c1:40:eb:6b:7f:94:fc:f8:02:8f:fb:eb:3f: 0d:bb:91:19:2b:47:2d:a5:24:c0:c6:5f:29:fa:7d: fa:1d:70:99:d6:c4:e4:0b:e5:21:5e:1f:70:89:c3: 34:d1:d2:7c:f7:21:ed:df:28:8f:ff:c0:0f:d6:40: fa:0c:ad:3b:85:92:17:90:8e:e6:d1:81:3f:cb:46: 7c:80:03:66:59:4d:e9:37:e1:c0:cf:97:19:66:7a: 21:be:28:49:1c:fe:bb:50:59:d4:dd:91:d1:50:60: cd:83:95:f7:b8:16:54:aa:a9:30:70:3e:70:8f:1a: dd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:1D:6A:80:BC:D7:DB:A1:F7:0E:DD:DE:C6:AA:42:1D:0D:CF:11:82 X509v3 Authority Key Identifier: keyid:AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:85:9a:db:e6:8b:bc:4a:f1:f9:03:1b:c2:1d:a8:73:14:89: 6d:0b:35:6d:1b:0d:d7:06:57:e9:26:33:7f:40:f6:4a:03:6a: dd:35:56:cf:41:d6:c5:54:81:4a:29:b0:65:f2:c3:6d:1a:2e: 68:ba:ac:b4:35:c4:76:14:39:03:d8:b7:df:07:d3:85:3d:5c: d8:ba:26:1d:c8:4d:8e:6c:0c:86:8e:4e:14:1b:7e:b6:a3:91: fa:9e:06:84:83:0c:c6:bf:2c:e8:f3:e1:ba:af:35:ae:8b:27: 1a:ef:ec:a0:49:a1:d0:ec:f9:e3:31:38:45:9f:b2:2f:38:e5: 5c:2c:cc:0d:3e:a1:71:bd:33:3e:b7:4f:55:a2:ea:5d:d3:88: 45:4c:63:e1:16:b5:95:2f:29:b4:93:9b:66:2b:40:6d:88:33: b2:4d:e0:c4:68:e2:02:4b:54:88:9d:10:5d:dc:ac:db:1b:fb: b9:3a:b3:26:38:4b:81:50:09:6d:37:a1:7a:a3:62:e1:70:39: cb:66:2b:9d:69:a9:2b:44:fe:e6:c9:81:08:7b:78:83:81:e7: ba:ad:93:32:fc:75:e0:e3:ca:a1:74:c9:36:32:34:31:fe:0b: e2:45:8c:6f:21:4e:28:d2:fc:5d:f2:74:96:b5:30:05:10:36: cb:ed:d3:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4Q1+8Us30ECuNpDisRQpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNjY0YjkyNGU0ZWEwMjdjMWMzYTA3NzBkZjFmZjgwYjFk NTY4ZmEwHhcNMjUxMjI0MDEwMjMyWhcNMjUxMjI1MDEwMjMyWjAzMTEwLwYDVQQD EyhkZTFkNmE4MGJjZDdkYmExZjcwZWRkZGVjNmFhNDIxZDBkY2YxMTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRe9mUh2a8JskZsIFtK57FkyqroJ UPtuSjlXCea5yVi90julYE95FoxNM5vTP1NRVM5tWQNsVgVteASeHmHr1znv/d1Z fqaMPkRjdC4wzecJoHYasoN31N8bNddw9Q0nIB98BYXYYqq6MX35O8Zcc3LQ4Juo X002bHCaF68AV/83sIQ+hy1AX8FA62t/lPz4Ao/76z8Nu5EZK0ctpSTAxl8p+n36 HXCZ1sTkC+UhXh9wicM00dJ89yHt3yiP/8AP1kD6DK07hZIXkI7m0YE/y0Z8gANm WU3pN+HAz5cZZnohvihJHP67UFnU3ZHRUGDNg5X3uBZUqqkwcD5wjxrdIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4daoC819uh9w7d3saqQh0NzxGCMB8GA1UdIwQY MBaAFK5mS5JOTqAnwcOgdw3x/4Cx1Wj6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm1aTGtrNU9vQ2ZCdzZCM0RmSF9nTEhWYVBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9lMmY4NDYtODU4Mi00MDkzLWFlOTMt MDRjNTM5N2ZlNWY4LzEvcm1aTGtrNU9vQ2ZCdzZCM0RmSF9nTEhWYVBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9lMmY4NDYtODU4Mi00MDkzLWFlOTMtMDRjNTM5N2ZlNWY4 LzEvcm1aTGtrNU9vQ2ZCdzZCM0RmSF9nTEhWYVBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdoWa2+aL vErx+QMbwh2ocxSJbQs1bRsN1wZX6SYzf0D2SgNq3TVWz0HWxVSBSimwZfLDbRou aLqstDXEdhQ5A9i33wfThT1c2LomHchNjmwMho5OFBt+tqOR+p4GhIMMxr8s6PPh uq81rosnGu/soEmh0Oz54zE4RZ+yLzjlXCzMDT6hcb0zPrdPVaLqXdOIRUxj4Ra1 lS8ptJObZitAbYgzsk3gxGjiAktUiJ0QXdys2xv7uTqzJjhLgVAJbTeheqNi4XA5 y2YrnWmpK0T+5smBCHt4g4Hnuq2TMvx14OPKoXTJNjI0Mf4L4kWMbyFOKNL8XfJ0 lrUwBRA2y+3T1g== -----END CERTIFICATE-----Generated at Wed Dec 24 08:47:32 2025 by rpki-client