This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.mft File: RowmemR0_LfMSc8yXQ6dzF_o0g0.mft (raw, json) Hash identifier: quM6LYhacbBMn/gWzkmYvoIObf0wNpsvISLHNmHHOkI= Subject key identifier: 8E:5C:9F:AB:10:28:90:1C:62:6D:6C:BA:5F:5F:ED:DC:7D:F4:63:EA Authority key identifier: 46:8C:26:7A:64:74:FC:B7:CC:49:CF:32:5D:0E:9D:CC:5F:E8:D2:0D Certificate issuer: /CN=468c267a6474fcb7cc49cf325d0e9dcc5fe8d20d Certificate serial: 019B53AB21CA11DD03F80FE179163BC1CC16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RowmemR0_LfMSc8yXQ6dzF_o0g0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.mft Manifest number: 11BB Signing time: Thu 25 Dec 2025 04:01:22 +0000 Manifest this update: Thu 25 Dec 2025 04:01:22 +0000 Manifest next update: Fri 26 Dec 2025 04:01:22 +0000 Files and hashes: 1: MZGQkRnrBwu3EiDQXovi1EtOEeQ.roa (hash: emZiRG679KNDGOj4cCA2StKFReSvhFA5nV/8wQXC5Cw=) 2: RowmemR0_LfMSc8yXQ6dzF_o0g0.crl (hash: ly1hOWHArcL13Gktf4b5C5/60mC3hx7app5ECAB07yY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.crl rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.mft rsync://rpki.ripe.net/repository/DEFAULT/RowmemR0_LfMSc8yXQ6dzF_o0g0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ab:21:ca:11:dd:03:f8:0f:e1:79:16:3b:c1:cc:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=468c267a6474fcb7cc49cf325d0e9dcc5fe8d20d Validity Not Before: Dec 25 04:01:22 2025 GMT Not After : Dec 26 04:01:22 2025 GMT Subject: CN=8e5c9fab1028901c626d6cba5f5feddc7df463ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cb:87:b8:3d:6b:e4:f3:26:25:cc:42:7f:97: 62:18:f4:3c:47:8c:3f:17:cb:ae:be:b0:f8:69:89: 4c:cc:58:41:de:82:4a:c1:d2:30:99:49:41:cf:07: 22:12:da:76:f5:9b:f4:e2:c8:e9:63:a0:4d:ec:e2: 22:47:0b:06:b1:9b:ef:44:10:8b:90:c6:0a:98:37: a4:a7:c5:f3:54:31:6a:1e:1b:25:17:dc:f4:96:12: 50:47:17:bf:88:68:39:fb:4f:53:dd:62:ab:9f:f9: 90:3a:61:af:be:84:00:27:9c:83:36:4a:1d:1f:81: 1c:9c:c0:a4:18:94:23:7c:e7:7a:a3:da:ee:d8:96: 25:df:2c:7d:42:0c:d3:3b:8d:28:a2:8d:7d:bf:c2: 81:0d:74:ba:d9:21:d7:62:ae:2d:c3:96:e5:63:52: 6b:06:ee:c9:4d:6e:2c:be:d2:66:b0:3d:b9:0c:c7: 2f:78:a9:ec:bb:ce:cf:03:d7:ce:b5:c0:b7:ae:4a: d8:bd:a1:cf:8e:f0:8e:e6:7d:9b:18:58:d9:e8:f8: 6a:8b:46:d2:fd:3e:03:a1:cc:2e:85:63:5c:f6:72: e0:32:50:56:45:5d:99:a9:0a:43:e7:cf:ce:b2:cc: 43:44:b7:de:2d:d5:ec:28:d5:b9:0b:8c:93:16:91: 82:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:5C:9F:AB:10:28:90:1C:62:6D:6C:BA:5F:5F:ED:DC:7D:F4:63:EA X509v3 Authority Key Identifier: keyid:46:8C:26:7A:64:74:FC:B7:CC:49:CF:32:5D:0E:9D:CC:5F:E8:D2:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RowmemR0_LfMSc8yXQ6dzF_o0g0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:0e:c1:43:da:64:c9:ed:c0:79:9d:54:5e:e2:ed:28:4a:94: 75:2f:45:7f:11:7e:76:4d:e3:12:12:a1:08:67:bd:74:bf:ee: 48:dc:ca:62:4c:5c:7a:46:91:67:7c:a0:93:09:0c:48:ff:b4: 98:25:6b:a0:9d:fd:0e:a2:4d:47:a8:f4:86:07:55:c2:ec:de: a4:ae:64:04:1b:fd:f0:20:20:d6:ca:8d:32:22:60:2c:c0:15: e2:74:74:c1:b7:a8:9c:0b:ee:63:5f:a1:36:6a:e6:ee:77:92: 1e:ac:8b:cc:66:de:09:c7:5b:40:88:bc:db:1f:ed:4a:3f:2a: f3:9a:2d:7f:60:76:0b:f1:37:ad:36:2a:27:94:63:12:8a:ce: 62:6f:ed:e1:4b:70:4d:f5:cd:79:7e:71:48:8a:6f:ef:33:cb: 5d:1b:5f:86:9b:83:e7:6f:3f:0d:84:f1:1c:c0:8f:6f:16:02: f9:8c:68:4e:ec:95:db:6d:14:7f:a3:d1:01:da:48:45:f9:14: 33:0a:54:21:ec:ea:ad:8c:7b:6b:a2:f0:00:57:21:08:69:0e: 55:80:92:ba:4d:53:2c:e7:68:ca:bc:04:c9:be:87:ab:92:4e: c7:4f:58:c6:09:d6:54:14:d1:09:d0:43:08:f3:e0:62:38:8e: 1c:b5:3d:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTqyHKEd0D+A/heRY7wcwWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2OGMyNjdhNjQ3NGZjYjdjYzQ5Y2YzMjVkMGU5ZGNjNWZl OGQyMGQwHhcNMjUxMjI1MDQwMTIyWhcNMjUxMjI2MDQwMTIyWjAzMTEwLwYDVQQD Eyg4ZTVjOWZhYjEwMjg5MDFjNjI2ZDZjYmE1ZjVmZWRkYzdkZjQ2M2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsuHuD1r5PMmJcxCf5diGPQ8R4w/ F8uuvrD4aYlMzFhB3oJKwdIwmUlBzwciEtp29Zv04sjpY6BN7OIiRwsGsZvvRBCL kMYKmDekp8XzVDFqHhslF9z0lhJQRxe/iGg5+09T3WKrn/mQOmGvvoQAJ5yDNkod H4EcnMCkGJQjfOd6o9ru2JYl3yx9QgzTO40ooo19v8KBDXS62SHXYq4tw5blY1Jr Bu7JTW4svtJmsD25DMcveKnsu87PA9fOtcC3rkrYvaHPjvCO5n2bGFjZ6Phqi0bS /T4DocwuhWNc9nLgMlBWRV2ZqQpD58/OssxDRLfeLdXsKNW5C4yTFpGCLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI5cn6sQKJAcYm1sul9f7dx99GPqMB8GA1UdIwQY MBaAFEaMJnpkdPy3zEnPMl0Oncxf6NINMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm93bWVtUjBfTGZNU2M4eVhRNmR6Rl9vMGcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82ZTYxNWYtNWZkNy00NWI2LThhY2It NzY5OTliZjk5OTlmLzEvUm93bWVtUjBfTGZNU2M4eVhRNmR6Rl9vMGcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC82ZTYxNWYtNWZkNy00NWI2LThhY2ItNzY5OTliZjk5OTlm LzEvUm93bWVtUjBfTGZNU2M4eVhRNmR6Rl9vMGcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkQ7BQ9pk ye3AeZ1UXuLtKEqUdS9FfxF+dk3jEhKhCGe9dL/uSNzKYkxcekaRZ3ygkwkMSP+0 mCVroJ39DqJNR6j0hgdVwuzepK5kBBv98CAg1sqNMiJgLMAV4nR0wbeonAvuY1+h Nmrm7neSHqyLzGbeCcdbQIi82x/tSj8q85otf2B2C/E3rTYqJ5RjEorOYm/t4Utw TfXNeX5xSIpv7zPLXRtfhpuD528/DYTxHMCPbxYC+YxoTuyV220Uf6PRAdpIRfkU MwpUIezqrYx7a6LwAFchCGkOVYCSuk1TLOdoyrwEyb6Hq5JOx09YxgnWVBTRCdBD CPPgYjiOHLU99w== -----END CERTIFICATE-----Generated at Thu Dec 25 13:05:18 2025 by rpki-client