This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft File: rmRaywIXx0oP004XpT297lbwEeU.mft (raw, json) Hash identifier: W2BWy6GhxLX3UifpmM7LpaivfvCnVS0xHwTx0ap+Nbc= Subject key identifier: 4E:2F:F7:BF:75:46:82:0E:FD:A5:54:0A:2E:A6:1E:76:75:77:F2:45 Authority key identifier: AE:64:5A:CB:02:17:C7:4A:0F:D3:4E:17:A5:3D:BD:EE:56:F0:11:E5 Certificate issuer: /CN=ae645acb0217c74a0fd34e17a53dbdee56f011e5 Certificate serial: 019B63F987F906304ACE31D2F0053481CE5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmRaywIXx0oP004XpT297lbwEeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft Manifest number: 1194 Signing time: Sun 28 Dec 2025 08:00:56 +0000 Manifest this update: Sun 28 Dec 2025 08:00:56 +0000 Manifest next update: Mon 29 Dec 2025 08:00:56 +0000 Files and hashes: 1: 9gPdnlu8pzrUW3Ji0sxUHZw4ZQ4.roa (hash: tZpT15jv998HP7FRsRavbx2dzEDkME8mtW6HPMKG8Zg=) 2: rmRaywIXx0oP004XpT297lbwEeU.crl (hash: mKk+RDdVNM6pg8T+9uPzZ9xlXK9aS9BB3wj/ydKI+Lc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.crl rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft rsync://rpki.ripe.net/repository/DEFAULT/rmRaywIXx0oP004XpT297lbwEeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:f9:87:f9:06:30:4a:ce:31:d2:f0:05:34:81:ce:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae645acb0217c74a0fd34e17a53dbdee56f011e5 Validity Not Before: Dec 28 08:00:56 2025 GMT Not After : Dec 29 08:00:56 2025 GMT Subject: CN=4e2ff7bf7546820efda5540a2ea61e767577f245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3c:fa:65:6f:c5:b5:5e:10:56:87:bf:18:ed: a3:fa:74:91:ed:e2:e2:9d:b3:f5:e1:79:ce:9c:74: 4d:2e:8b:cf:1a:8c:8b:52:9b:c9:36:3f:ec:09:8c: ea:4f:e0:8e:da:a1:e5:54:3e:3b:6a:d9:36:8d:b9: 67:6c:4b:c5:c2:10:f0:e2:ed:b8:f8:fe:29:a3:33: 41:29:66:ac:fc:cf:d4:a9:44:6b:15:f0:7b:79:93: 53:8f:a7:54:05:0c:77:2c:5c:85:3b:8e:3b:44:65: 05:f8:45:75:ac:31:bf:90:e7:e0:2e:9e:8f:3f:60: d0:93:fb:a4:88:55:f4:b4:fb:a5:9e:b1:30:af:28: 54:3b:ee:28:51:6f:ae:50:c7:a7:45:3b:95:32:f5: 69:8d:81:b0:2e:6d:1d:b9:c6:9d:fa:fb:0d:64:87: 48:51:63:42:e9:cb:68:ef:dc:47:fe:6e:bb:76:34: 4d:44:fe:46:08:bf:ea:57:03:42:bb:5a:24:7b:ae: 46:66:6f:23:3a:7d:5f:aa:fc:39:0b:1c:0b:02:a4: c6:d4:73:ff:74:68:37:64:94:d2:a1:42:04:50:94: 80:31:42:23:7e:ec:76:c6:b3:97:e5:71:b2:c5:e5: 39:74:ec:3f:a4:d4:d5:a7:04:05:45:44:8d:4f:c1: e9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:2F:F7:BF:75:46:82:0E:FD:A5:54:0A:2E:A6:1E:76:75:77:F2:45 X509v3 Authority Key Identifier: keyid:AE:64:5A:CB:02:17:C7:4A:0F:D3:4E:17:A5:3D:BD:EE:56:F0:11:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmRaywIXx0oP004XpT297lbwEeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:d4:65:49:ba:2a:1c:5b:5d:6d:b4:7d:d3:94:90:b4:6a:f9: 83:99:bd:8a:44:bc:23:38:75:1f:a4:d5:71:21:27:c4:68:e4: 9a:47:36:4d:6c:f1:51:9d:59:f4:09:48:57:94:93:05:11:68: cf:78:4d:20:80:3d:40:66:ae:67:1e:76:38:fa:53:df:ab:bc: e5:f8:a1:aa:85:01:9f:ea:53:27:ee:4d:41:9e:ef:c3:bf:f9: 68:bb:9d:fe:c4:69:da:99:0f:2c:bb:44:2c:10:49:e4:56:f8: dd:ea:4f:60:d7:4a:3c:ec:00:66:b5:d5:71:33:ba:47:17:03: 1f:77:e1:0a:9c:6c:63:de:e9:b0:c5:c2:b3:00:cc:b1:2f:34: ed:31:91:af:59:12:e5:9c:64:1f:8f:78:d9:24:4a:30:81:9b: dc:de:de:fa:85:b3:09:57:cf:9d:e2:a4:ab:20:4c:fa:3e:3e: 9c:62:90:71:9d:1d:03:11:8f:01:de:a4:9f:d4:7d:1b:30:5d: 17:95:a8:97:a5:c5:16:72:19:4d:7b:d1:78:1e:7c:8d:f6:75: 8b:7d:f1:ad:bb:c8:39:17:58:f8:85:73:01:ef:9a:78:fa:45: eb:a4:af:07:ab:e5:7f:d4:34:1d:68:7d:e9:ef:55:2e:14:fa: d6:9f:32:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtj+Yf5BjBKzjHS8AU0gc5fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNjQ1YWNiMDIxN2M3NGEwZmQzNGUxN2E1M2RiZGVlNTZm MDExZTUwHhcNMjUxMjI4MDgwMDU2WhcNMjUxMjI5MDgwMDU2WjAzMTEwLwYDVQQD Eyg0ZTJmZjdiZjc1NDY4MjBlZmRhNTU0MGEyZWE2MWU3Njc1NzdmMjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTz6ZW/FtV4QVoe/GO2j+nSR7eLi nbP14XnOnHRNLovPGoyLUpvJNj/sCYzqT+CO2qHlVD47atk2jblnbEvFwhDw4u24 +P4pozNBKWas/M/UqURrFfB7eZNTj6dUBQx3LFyFO447RGUF+EV1rDG/kOfgLp6P P2DQk/ukiFX0tPulnrEwryhUO+4oUW+uUMenRTuVMvVpjYGwLm0ducad+vsNZIdI UWNC6cto79xH/m67djRNRP5GCL/qVwNCu1oke65GZm8jOn1fqvw5CxwLAqTG1HP/ dGg3ZJTSoUIEUJSAMUIjfux2xrOX5XGyxeU5dOw/pNTVpwQFRUSNT8HpmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE4v9791RoIO/aVUCi6mHnZ1d/JFMB8GA1UdIwQY MBaAFK5kWssCF8dKD9NOF6U9ve5W8BHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm1SYXl3SVh4MG9QMDA0WHBUMjk3bGJ3RWVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8wZWQzM2EtMWYxZC00MjgxLWFiMzkt NDA4OTAxMzBkZDE4LzEvcm1SYXl3SVh4MG9QMDA0WHBUMjk3bGJ3RWVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8wZWQzM2EtMWYxZC00MjgxLWFiMzktNDA4OTAxMzBkZDE4 LzEvcm1SYXl3SVh4MG9QMDA0WHBUMjk3bGJ3RWVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT9RlSboq HFtdbbR905SQtGr5g5m9ikS8Izh1H6TVcSEnxGjkmkc2TWzxUZ1Z9AlIV5STBRFo z3hNIIA9QGauZx52OPpT36u85fihqoUBn+pTJ+5NQZ7vw7/5aLud/sRp2pkPLLtE LBBJ5Fb43epPYNdKPOwAZrXVcTO6RxcDH3fhCpxsY97psMXCswDMsS807TGRr1kS 5ZxkH4942SRKMIGb3N7e+oWzCVfPneKkqyBM+j4+nGKQcZ0dAxGPAd6kn9R9GzBd F5Wol6XFFnIZTXvReB58jfZ1i33xrbvIORdY+IVzAe+aePpF66SvB6vlf9Q0HWh9 6e9VLhT61p8y+w== -----END CERTIFICATE-----Generated at Sun Dec 28 09:42:09 2025 by rpki-client