This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.mft File: RwFMkm6nbVZunoqW1YYdR1fIsOo.mft (raw, json) Hash identifier: 6EjRt3NZQKOF4ji/fhCQhiPz9c96Hk/ofUZ3QqdK1Zg= Subject key identifier: 20:63:46:A4:99:97:1C:BF:3B:8B:11:5B:37:36:BE:8B:99:A2:9D:DD Authority key identifier: 47:01:4C:92:6E:A7:6D:56:6E:9E:8A:96:D5:86:1D:47:57:C8:B0:EA Certificate issuer: /CN=47014c926ea76d566e9e8a96d5861d4757c8b0ea Certificate serial: 019B2E8BC4F8220E1B48C79389D2880803C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwFMkm6nbVZunoqW1YYdR1fIsOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.mft Manifest number: 177F Signing time: Wed 17 Dec 2025 23:01:10 +0000 Manifest this update: Wed 17 Dec 2025 23:01:10 +0000 Manifest next update: Thu 18 Dec 2025 23:01:10 +0000 Files and hashes: 1: RwFMkm6nbVZunoqW1YYdR1fIsOo.crl (hash: b9H9v6zol+V1LzePxn7aOxyaziKiBELixo35nPRE3ug=) 2: pFLpzrM-iV1fQ_hTxX2xOEHMjt0.roa (hash: aLstNITfJuEBD1I0LdnhTrgtI2g65BeTn/qvRZrCSW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.mft rsync://rpki.ripe.net/repository/DEFAULT/RwFMkm6nbVZunoqW1YYdR1fIsOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 23:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:8b:c4:f8:22:0e:1b:48:c7:93:89:d2:88:08:03:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47014c926ea76d566e9e8a96d5861d4757c8b0ea Validity Not Before: Dec 17 23:01:10 2025 GMT Not After : Dec 18 23:01:10 2025 GMT Subject: CN=206346a499971cbf3b8b115b3736be8b99a29ddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:cd:5c:1b:b0:ba:56:0c:e2:26:46:3a:03:d7: 9d:d5:ea:d2:75:b8:10:dc:c0:c3:f1:b5:5b:73:0f: a4:2c:ae:a0:63:b1:03:e2:54:6a:84:2e:89:58:52: f4:43:32:d8:8a:fe:38:cb:35:9f:ac:54:0c:16:d7: 0c:70:b5:00:64:88:e5:cc:3e:c3:5f:68:9c:c8:37: 24:f1:5d:35:bb:18:c5:ec:c8:c6:3b:fb:be:73:53: 09:c1:23:b9:82:31:8f:71:8c:8e:dc:94:6c:a8:4b: 75:8f:07:f9:44:28:90:fc:d2:80:7d:cb:82:2f:ce: 02:e5:64:99:9b:b8:1a:bd:39:90:ca:43:25:bc:80: 31:a5:92:98:5d:20:71:48:55:44:27:21:a0:fd:c6: 96:b3:10:d0:c1:27:3e:d3:2a:65:91:cd:0b:de:27: 12:c9:f3:a3:e4:4c:d8:21:c4:8d:4a:24:8b:d2:26: 6b:d0:04:85:d3:ed:38:11:a6:66:9b:a0:ad:10:dc: fb:db:08:11:98:a2:61:80:a8:d8:dd:14:c8:96:f5: 43:7f:bf:2f:e0:49:4f:1f:bc:2e:39:4b:a9:f6:62: 19:18:b8:4f:a3:90:fb:20:33:12:e6:cb:d2:b1:e7: 01:d7:7e:38:63:c3:f3:3c:f8:13:54:ee:37:6c:42: ed:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:63:46:A4:99:97:1C:BF:3B:8B:11:5B:37:36:BE:8B:99:A2:9D:DD X509v3 Authority Key Identifier: keyid:47:01:4C:92:6E:A7:6D:56:6E:9E:8A:96:D5:86:1D:47:57:C8:B0:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwFMkm6nbVZunoqW1YYdR1fIsOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:e6:5f:0f:83:e7:3a:fb:a3:b4:a1:12:77:a3:95:fe:19:4f: 8c:3a:f5:17:52:01:b7:e8:0d:24:a9:a4:54:a4:91:66:ae:8b: 65:dc:6b:ea:65:37:ae:80:e0:82:d3:ea:42:52:23:5f:c7:29: 00:ac:4c:34:ec:50:ef:d5:3c:93:3c:57:16:e3:48:21:e5:0e: 14:13:a7:1c:ff:30:99:57:70:c1:44:44:6d:db:1d:18:64:5b: 41:de:3c:79:3d:f7:2f:c0:64:33:55:49:35:cf:66:91:ca:ec: 1e:3d:a3:15:17:8b:f3:75:c1:73:f4:54:cf:9f:68:65:a4:ad: 81:c7:ba:12:e4:d6:f2:70:b4:ba:c8:e2:f3:66:38:6a:aa:f2: da:d2:7c:b2:f4:26:fc:c7:e0:ce:89:f6:61:42:d3:14:98:86: 93:ec:0d:31:5b:c6:c8:f1:83:c9:7d:d3:c9:fa:8e:f6:a0:cb: da:39:92:75:f9:32:b9:25:ab:dd:59:50:80:50:43:e9:e0:61: 5f:f8:66:06:a0:22:22:4d:04:d9:ba:f6:10:95:98:38:37:bd: 78:94:60:b9:20:41:f9:d9:19:33:5e:04:f8:c8:7f:94:fa:48: f1:a4:c2:5a:d6:7e:e9:27:82:aa:c7:bf:0c:49:13:df:f0:ea: de:ef:93:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsui8T4Ig4bSMeTidKICAPCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MDE0YzkyNmVhNzZkNTY2ZTllOGE5NmQ1ODYxZDQ3NTdj OGIwZWEwHhcNMjUxMjE3MjMwMTEwWhcNMjUxMjE4MjMwMTEwWjAzMTEwLwYDVQQD EygyMDYzNDZhNDk5OTcxY2JmM2I4YjExNWIzNzM2YmU4Yjk5YTI5ZGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3M1cG7C6VgziJkY6A9ed1erSdbgQ 3MDD8bVbcw+kLK6gY7ED4lRqhC6JWFL0QzLYiv44yzWfrFQMFtcMcLUAZIjlzD7D X2icyDck8V01uxjF7MjGO/u+c1MJwSO5gjGPcYyO3JRsqEt1jwf5RCiQ/NKAfcuC L84C5WSZm7gavTmQykMlvIAxpZKYXSBxSFVEJyGg/caWsxDQwSc+0yplkc0L3icS yfOj5EzYIcSNSiSL0iZr0ASF0+04EaZmm6CtENz72wgRmKJhgKjY3RTIlvVDf78v 4ElPH7wuOUup9mIZGLhPo5D7IDMS5svSsecB1344Y8PzPPgTVO43bELtkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBjRqSZlxy/O4sRWzc2vouZop3dMB8GA1UdIwQY MBaAFEcBTJJup21Wbp6KltWGHUdXyLDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUndGTWttNm5iVlp1bm9xVzFZWWRSMWZJc09vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8zMTIzZDAtN2NhYS00ZGYzLWFkMjMt YWJhNGU2NDMwNThlLzEvUndGTWttNm5iVlp1bm9xVzFZWWRSMWZJc09vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS8zMTIzZDAtN2NhYS00ZGYzLWFkMjMtYWJhNGU2NDMwNThl LzEvUndGTWttNm5iVlp1bm9xVzFZWWRSMWZJc09vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn+ZfD4Pn OvujtKESd6OV/hlPjDr1F1IBt+gNJKmkVKSRZq6LZdxr6mU3roDggtPqQlIjX8cp AKxMNOxQ79U8kzxXFuNIIeUOFBOnHP8wmVdwwUREbdsdGGRbQd48eT33L8BkM1VJ Nc9mkcrsHj2jFReL83XBc/RUz59oZaStgce6EuTW8nC0usji82Y4aqry2tJ8svQm /Mfgzon2YULTFJiGk+wNMVvGyPGDyX3TyfqO9qDL2jmSdfkyuSWr3VlQgFBD6eBh X/hmBqAiIk0E2br2EJWYODe9eJRguSBB+dkZM14E+Mh/lPpI8aTCWtZ+6SeCqse/ DEkT3/Dq3u+TMA== -----END CERTIFICATE-----Generated at Thu Dec 18 07:05:08 2025 by rpki-client