This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft File: rmgsTwopQO6oclQqYhXjVJkd60s.mft (raw, json) Hash identifier: GcPpUrobpnGDb7t2ntJfLDBbXoEFJ+t1u5AzZnX+fCM= Subject key identifier: AB:6C:66:2E:24:74:4C:21:A5:9D:42:40:09:0F:28:3E:22:85:B3:51 Authority key identifier: AE:68:2C:4F:0A:29:40:EE:A8:72:54:2A:62:15:E3:54:99:1D:EB:4B Certificate issuer: /CN=ae682c4f0a2940eea872542a6215e354991deb4b Certificate serial: 019B6B44AF9F6663F56AA78053D1BDB1DDCF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft Manifest number: 179F Signing time: Mon 29 Dec 2025 18:00:22 +0000 Manifest this update: Mon 29 Dec 2025 18:00:22 +0000 Manifest next update: Tue 30 Dec 2025 18:00:22 +0000 Files and hashes: 1: ifB7bI8Nz6a1wo-Om4qJOLNZOqU.roa (hash: G4ZTdZq0UWN0ZVqhuNwvAXhge2Xq79dXIWiLnGu1ENA=) 2: rmgsTwopQO6oclQqYhXjVJkd60s.crl (hash: jyzQdFjNXjg9hoLqV7nDMj1WduaPJr9giOuCsKkpz4s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 18:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:44:af:9f:66:63:f5:6a:a7:80:53:d1:bd:b1:dd:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae682c4f0a2940eea872542a6215e354991deb4b Validity Not Before: Dec 29 18:00:22 2025 GMT Not After : Dec 30 18:00:22 2025 GMT Subject: CN=ab6c662e24744c21a59d4240090f283e2285b351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1e:a4:69:2f:8e:d6:1a:c6:57:fb:c4:26:c0: f0:37:69:62:d4:a6:9f:67:97:48:6c:35:90:5a:39: 1d:7a:6a:14:cd:66:e2:a2:d0:a0:60:c1:a8:6b:2f: 91:ba:25:c3:2c:24:54:b7:2b:97:1a:70:50:19:b9: a9:dd:2d:08:66:4a:91:50:62:33:26:d4:42:05:39: a2:32:e9:41:81:83:e6:f3:57:07:dd:b0:51:8e:b2: 34:e9:b3:59:7f:df:48:e5:37:bb:b8:21:a9:31:d7: 8a:3b:c6:83:b9:43:4c:e2:fc:21:8f:7a:64:08:97: 1f:42:d6:fa:2b:d2:4e:ab:d8:9c:41:11:53:e6:ef: 1f:82:9b:6b:6a:ea:96:36:c7:63:21:8d:82:f1:1c: 69:cc:cd:af:ba:d0:e5:09:db:ef:81:92:61:a8:c1: 4a:f3:3c:1f:4f:d4:64:fb:68:3c:2f:29:dc:d9:93: e1:16:19:4c:f3:b0:55:b5:20:4d:ef:14:48:41:f1: aa:08:f1:e8:aa:e9:d1:1a:2f:1e:30:46:60:51:b5: ef:58:29:4d:e8:10:63:ce:1c:a0:e0:b7:1e:f2:48: 81:4f:57:0f:c7:c9:a5:fb:81:27:0c:97:b2:cd:a2: 2a:91:a4:e6:3b:53:e6:8f:42:34:fe:5e:9a:65:54: 94:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:6C:66:2E:24:74:4C:21:A5:9D:42:40:09:0F:28:3E:22:85:B3:51 X509v3 Authority Key Identifier: keyid:AE:68:2C:4F:0A:29:40:EE:A8:72:54:2A:62:15:E3:54:99:1D:EB:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:68:47:30:0f:86:70:26:0e:ca:9e:ab:ea:b0:2a:03:b5:13: ec:96:ad:88:d2:fd:07:b8:cd:f8:ae:78:c5:e7:9f:71:a0:47: 58:e1:6e:d2:d3:ba:a2:42:4c:2f:7d:ff:61:58:2e:af:15:09: 04:c1:bb:9b:a8:3f:73:82:96:20:a4:79:f2:65:76:46:f4:3e: 9f:62:cb:2f:d7:6a:2c:6d:dc:7f:f8:ec:27:68:26:ff:7a:ae: a3:6c:3b:f1:74:b2:28:89:7f:94:8f:6e:41:55:13:94:b9:d0: 90:7e:53:41:51:b1:01:8a:c3:3f:5d:25:9b:e2:f4:81:3e:14: 58:2e:05:15:17:2d:6f:27:6a:59:59:49:9e:57:a9:5a:9e:9d: de:fe:2d:8f:32:fd:cc:3f:38:d6:b9:a8:d3:c7:11:16:a6:d2: 6e:e3:94:4c:27:ed:0b:89:62:30:95:4b:ff:02:92:3c:40:6d: 5d:24:17:e8:65:bd:5c:56:37:21:f8:fa:ea:0a:8d:92:f2:3f: 74:dd:31:cd:a7:8c:4f:04:6d:c5:2e:42:a2:0f:34:a7:73:65: 87:a0:f3:0a:40:e5:33:90:52:33:01:c7:05:cd:2b:35:2d:e7: f3:2a:e4:6c:c2:55:b5:89:71:ea:3f:f0:3b:ba:8d:af:b0:8b: e8:b0:72:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrRK+fZmP1aqeAU9G9sd3PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNjgyYzRmMGEyOTQwZWVhODcyNTQyYTYyMTVlMzU0OTkx ZGViNGIwHhcNMjUxMjI5MTgwMDIyWhcNMjUxMjMwMTgwMDIyWjAzMTEwLwYDVQQD EyhhYjZjNjYyZTI0NzQ0YzIxYTU5ZDQyNDAwOTBmMjgzZTIyODViMzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxB6kaS+O1hrGV/vEJsDwN2li1Kaf Z5dIbDWQWjkdemoUzWbiotCgYMGoay+RuiXDLCRUtyuXGnBQGbmp3S0IZkqRUGIz JtRCBTmiMulBgYPm81cH3bBRjrI06bNZf99I5Te7uCGpMdeKO8aDuUNM4vwhj3pk CJcfQtb6K9JOq9icQRFT5u8fgptrauqWNsdjIY2C8RxpzM2vutDlCdvvgZJhqMFK 8zwfT9Rk+2g8Lync2ZPhFhlM87BVtSBN7xRIQfGqCPHoqunRGi8eMEZgUbXvWClN 6BBjzhyg4Lce8kiBT1cPx8ml+4EnDJeyzaIqkaTmO1Pmj0I0/l6aZVSU9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKtsZi4kdEwhpZ1CQAkPKD4ihbNRMB8GA1UdIwQY MBaAFK5oLE8KKUDuqHJUKmIV41SZHetLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm1nc1R3b3BRTzZvY2xRcVloWGpWSmtkNjBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9jNjJjN2YtZjQ2Mi00MzQ4LWIwNjgt ZjA0OWM2NmVmODExLzEvcm1nc1R3b3BRTzZvY2xRcVloWGpWSmtkNjBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9jNjJjN2YtZjQ2Mi00MzQ4LWIwNjgtZjA0OWM2NmVmODEx LzEvcm1nc1R3b3BRTzZvY2xRcVloWGpWSmtkNjBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgGhHMA+G cCYOyp6r6rAqA7UT7JatiNL9B7jN+K54xeefcaBHWOFu0tO6okJML33/YVgurxUJ BMG7m6g/c4KWIKR58mV2RvQ+n2LLL9dqLG3cf/jsJ2gm/3quo2w78XSyKIl/lI9u QVUTlLnQkH5TQVGxAYrDP10lm+L0gT4UWC4FFRctbydqWVlJnlepWp6d3v4tjzL9 zD841rmo08cRFqbSbuOUTCftC4liMJVL/wKSPEBtXSQX6GW9XFY3Ifj66gqNkvI/ dN0xzaeMTwRtxS5Cog80p3Nlh6DzCkDlM5BSMwHHBc0rNS3n8yrkbMJVtYlx6j/w O7qNr7CL6LByFg== -----END CERTIFICATE-----Generated at Tue Dec 30 01:35:30 2025 by rpki-client