This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.mft File: RowmemR0_LfMSc8yXQ6dzF_o0g0.mft (raw, json) Hash identifier: /T0DVBvc9GCBrAniAW25lpAW6wNC1ecBXBEFJjK3J2I= Subject key identifier: 45:00:60:8C:75:2D:F7:39:1D:A3:1C:E4:9D:0B:4A:F3:9E:13:AD:23 Authority key identifier: 46:8C:26:7A:64:74:FC:B7:CC:49:CF:32:5D:0E:9D:CC:5F:E8:D2:0D Certificate issuer: /CN=468c267a6474fcb7cc49cf325d0e9dcc5fe8d20d Certificate serial: 019B51BCC836128D8F5B06392B6179598BF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RowmemR0_LfMSc8yXQ6dzF_o0g0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.mft Manifest number: 11BA Signing time: Wed 24 Dec 2025 19:01:25 +0000 Manifest this update: Wed 24 Dec 2025 19:01:25 +0000 Manifest next update: Thu 25 Dec 2025 19:01:25 +0000 Files and hashes: 1: MZGQkRnrBwu3EiDQXovi1EtOEeQ.roa (hash: emZiRG679KNDGOj4cCA2StKFReSvhFA5nV/8wQXC5Cw=) 2: RowmemR0_LfMSc8yXQ6dzF_o0g0.crl (hash: TwtVMGw3hLVxYUJIbYV7OnQpR5QtjxWy744wc5PNG5E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.crl rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.mft rsync://rpki.ripe.net/repository/DEFAULT/RowmemR0_LfMSc8yXQ6dzF_o0g0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:c8:36:12:8d:8f:5b:06:39:2b:61:79:59:8b:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=468c267a6474fcb7cc49cf325d0e9dcc5fe8d20d Validity Not Before: Dec 24 19:01:25 2025 GMT Not After : Dec 25 19:01:25 2025 GMT Subject: CN=4500608c752df7391da31ce49d0b4af39e13ad23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bd:7d:38:17:0f:d5:b8:d0:13:a6:98:2c:60: 2a:a0:00:e4:a1:b8:00:a5:1b:02:3e:77:1f:32:ab: f4:da:cc:5e:8b:06:93:42:64:92:bd:88:c8:e0:46: 0f:df:a4:d0:0b:26:bc:9d:0c:c0:d3:52:4f:33:49: 8d:ca:6f:6c:40:8b:a9:5d:44:bd:6b:11:23:0a:88: c1:c6:22:f5:c9:97:2e:10:92:3b:52:a1:40:85:d0: 42:4f:ca:24:cf:b7:62:38:82:fc:ac:da:69:21:fa: 86:27:b7:c9:75:c6:0a:1a:fe:69:a7:d7:1b:b8:8d: ce:a2:2c:e1:4a:d2:a7:90:fc:71:14:ed:be:54:2e: 0b:6d:2b:72:cc:a3:55:08:41:48:5d:30:1d:db:1b: a0:51:10:f6:fb:58:a5:25:fb:a4:7a:d4:26:44:a5: 99:4d:5e:3d:90:c7:55:10:3a:b5:49:ca:af:92:6c: ba:ef:71:03:75:ab:04:db:e5:0e:11:fd:91:fc:7f: da:5d:83:d2:2d:29:0d:cf:7f:a4:52:e0:c2:7b:ed: 4f:60:c6:46:51:52:c7:b7:cd:df:d5:89:ab:b8:0c: 70:77:9a:aa:81:01:28:43:fe:15:7b:d0:53:c8:a0: 95:c5:5d:54:e0:8b:18:34:df:4e:82:2f:92:4f:9b: fe:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:00:60:8C:75:2D:F7:39:1D:A3:1C:E4:9D:0B:4A:F3:9E:13:AD:23 X509v3 Authority Key Identifier: keyid:46:8C:26:7A:64:74:FC:B7:CC:49:CF:32:5D:0E:9D:CC:5F:E8:D2:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RowmemR0_LfMSc8yXQ6dzF_o0g0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:23:a7:99:3b:91:12:ec:55:a4:65:6a:7f:6b:54:79:0d:6f: 5a:9f:6f:ab:47:8a:b6:b9:e2:7c:ba:ec:c8:90:d1:45:5d:8d: 1c:ba:6d:c9:a6:74:ab:c9:63:3a:cb:77:01:65:68:94:6d:e3: 04:b8:71:00:f5:cd:72:24:e1:3a:38:eb:08:e2:ed:f0:e7:9b: ac:c5:1a:ba:ee:16:72:d8:6b:b4:dc:0b:6e:95:9a:a6:fb:5f: e5:81:8d:9d:6a:04:02:24:05:02:de:f9:2d:00:74:4d:e1:93: 8c:12:90:27:7a:fd:9f:56:28:e8:ef:ef:33:e3:67:03:4a:ad: 0e:f8:5d:a0:9a:1c:a3:96:66:b5:2f:7b:55:f0:c3:87:a0:99: 84:a1:c5:85:b6:9d:51:80:3d:95:eb:74:9a:05:1c:07:bb:b6: 65:75:d4:49:bc:e4:8e:33:f3:ba:f5:9d:a6:81:8a:93:ac:d3: 15:6d:3a:6c:78:d7:8d:92:6b:5f:37:ee:28:73:22:56:6e:44: 5b:47:47:4c:75:83:85:a0:bc:70:b0:be:08:d2:5f:10:e2:f6: b4:e0:2b:3e:33:73:60:ac:ee:1b:ec:99:da:33:4c:5e:b4:e9: 4c:ea:be:a3:3b:8a:61:65:2a:55:f3:f7:22:19:72:1f:51:94: 24:ff:28:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvMg2Eo2PWwY5K2F5WYv4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2OGMyNjdhNjQ3NGZjYjdjYzQ5Y2YzMjVkMGU5ZGNjNWZl OGQyMGQwHhcNMjUxMjI0MTkwMTI1WhcNMjUxMjI1MTkwMTI1WjAzMTEwLwYDVQQD Eyg0NTAwNjA4Yzc1MmRmNzM5MWRhMzFjZTQ5ZDBiNGFmMzllMTNhZDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqr19OBcP1bjQE6aYLGAqoADkobgA pRsCPncfMqv02sxeiwaTQmSSvYjI4EYP36TQCya8nQzA01JPM0mNym9sQIupXUS9 axEjCojBxiL1yZcuEJI7UqFAhdBCT8okz7diOIL8rNppIfqGJ7fJdcYKGv5pp9cb uI3OoizhStKnkPxxFO2+VC4LbStyzKNVCEFIXTAd2xugURD2+1ilJfuketQmRKWZ TV49kMdVEDq1Scqvkmy673EDdasE2+UOEf2R/H/aXYPSLSkNz3+kUuDCe+1PYMZG UVLHt83f1YmruAxwd5qqgQEoQ/4Ve9BTyKCVxV1U4IsYNN9Ogi+ST5v+2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEUAYIx1Lfc5HaMc5J0LSvOeE60jMB8GA1UdIwQY MBaAFEaMJnpkdPy3zEnPMl0Oncxf6NINMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm93bWVtUjBfTGZNU2M4eVhRNmR6Rl9vMGcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82ZTYxNWYtNWZkNy00NWI2LThhY2It NzY5OTliZjk5OTlmLzEvUm93bWVtUjBfTGZNU2M4eVhRNmR6Rl9vMGcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC82ZTYxNWYtNWZkNy00NWI2LThhY2ItNzY5OTliZjk5OTlm LzEvUm93bWVtUjBfTGZNU2M4eVhRNmR6Rl9vMGcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACiOnmTuR EuxVpGVqf2tUeQ1vWp9vq0eKtrnifLrsyJDRRV2NHLptyaZ0q8ljOst3AWVolG3j BLhxAPXNciThOjjrCOLt8OebrMUauu4WcthrtNwLbpWapvtf5YGNnWoEAiQFAt75 LQB0TeGTjBKQJ3r9n1Yo6O/vM+NnA0qtDvhdoJoco5ZmtS97VfDDh6CZhKHFhbad UYA9let0mgUcB7u2ZXXUSbzkjjPzuvWdpoGKk6zTFW06bHjXjZJrXzfuKHMiVm5E W0dHTHWDhaC8cLC+CNJfEOL2tOArPjNzYKzuG+yZ2jNMXrTpTOq+ozuKYWUqVfP3 IhlyH1GUJP8obQ== -----END CERTIFICATE-----Generated at Wed Dec 24 20:00:23 2025 by rpki-client