This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.mft File: RwFMkm6nbVZunoqW1YYdR1fIsOo.mft (raw, json) Hash identifier: 1OM8s1BhaR7dS9cc492paIpa24nKz1Kf5DmTqFGfjnE= Subject key identifier: A8:2D:66:A0:7E:8C:A6:87:BA:BA:C6:E1:E6:B4:D2:71:37:46:90:54 Authority key identifier: 47:01:4C:92:6E:A7:6D:56:6E:9E:8A:96:D5:86:1D:47:57:C8:B0:EA Certificate issuer: /CN=47014c926ea76d566e9e8a96d5861d4757c8b0ea Certificate serial: 019B34569F032254C1795648F9BC9617999F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwFMkm6nbVZunoqW1YYdR1fIsOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.mft Manifest number: 1782 Signing time: Fri 19 Dec 2025 02:00:50 +0000 Manifest this update: Fri 19 Dec 2025 02:00:50 +0000 Manifest next update: Sat 20 Dec 2025 02:00:50 +0000 Files and hashes: 1: RwFMkm6nbVZunoqW1YYdR1fIsOo.crl (hash: kb09yDfwYPFE21aDdDGN5LNPGzJUqudVr88IdPsLwo0=) 2: pFLpzrM-iV1fQ_hTxX2xOEHMjt0.roa (hash: aLstNITfJuEBD1I0LdnhTrgtI2g65BeTn/qvRZrCSW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.mft rsync://rpki.ripe.net/repository/DEFAULT/RwFMkm6nbVZunoqW1YYdR1fIsOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:9f:03:22:54:c1:79:56:48:f9:bc:96:17:99:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47014c926ea76d566e9e8a96d5861d4757c8b0ea Validity Not Before: Dec 19 02:00:50 2025 GMT Not After : Dec 20 02:00:50 2025 GMT Subject: CN=a82d66a07e8ca687babac6e1e6b4d27137469054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e8:a8:0d:78:66:e3:58:de:ec:a7:e2:59:54: 46:75:63:e2:bb:46:67:2d:47:e3:37:49:9a:5f:0a: a3:44:2e:9b:85:4e:0b:fb:00:46:a9:84:5e:4c:fc: 24:9d:3d:b0:71:79:eb:b1:18:23:10:ea:12:8f:6c: de:af:e8:1e:e1:00:ff:bb:7a:bf:ef:ac:c6:67:26: fb:ab:6e:1c:f9:d0:b3:2b:54:b1:12:86:f8:84:a3: d0:6b:11:bc:1d:39:43:23:07:52:9d:90:98:27:bf: dc:f9:d1:0d:5c:d4:15:80:54:5c:09:4c:b4:33:a4: 49:9f:dd:97:7a:a6:3e:39:1d:1f:a4:70:10:bc:e6: 39:3b:41:e2:3f:14:61:3f:0a:28:74:34:90:0a:8c: c9:6f:2c:3a:40:cc:05:0e:75:c1:06:8e:12:70:d5: 40:6d:12:ca:76:62:4a:80:b0:9f:d9:37:b7:d9:a5: 83:cf:dd:49:f0:7e:fc:17:1b:11:f1:a6:f9:15:9d: 9b:1e:d5:d5:c9:a3:17:19:f2:3a:1f:10:c3:cc:5f: 23:45:35:5b:81:99:50:5f:17:56:42:5e:c5:c8:22: e1:f7:b0:9d:ae:ec:b1:1b:8c:87:b1:08:41:4b:40: 93:15:d5:51:bb:32:9c:57:13:41:63:e2:38:65:57: 7c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:2D:66:A0:7E:8C:A6:87:BA:BA:C6:E1:E6:B4:D2:71:37:46:90:54 X509v3 Authority Key Identifier: keyid:47:01:4C:92:6E:A7:6D:56:6E:9E:8A:96:D5:86:1D:47:57:C8:B0:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwFMkm6nbVZunoqW1YYdR1fIsOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:3c:98:2c:30:e1:be:11:26:ab:6e:a9:5c:ba:76:ce:f8:5b: 13:60:9b:18:ea:73:d3:cf:f3:cd:41:97:ce:04:67:6d:45:b1: bc:20:d6:b8:5d:59:7e:ca:2c:7b:7c:dc:8e:cd:70:11:54:ca: 5f:2f:89:c3:09:46:7a:aa:52:25:ca:4a:73:fa:19:c6:dc:59: 7d:c8:b3:42:07:55:dc:3a:a9:dd:1b:d1:59:08:54:9b:be:13: fd:0e:12:da:47:6c:2c:ae:43:15:69:29:5b:41:e0:5e:5d:47: f1:4d:f7:93:69:65:84:f5:1a:af:25:33:d5:16:6d:86:5f:61: 9a:31:2e:f8:95:1f:f4:08:5c:91:27:b0:5b:0a:ea:0a:7a:aa: d9:f9:2d:2c:29:61:5d:df:0e:0b:9a:3c:c8:02:67:d3:bc:9e: c3:3a:27:24:06:27:1f:8f:c2:dc:f0:c2:d6:79:18:61:2f:63: c1:79:4b:ef:c8:c9:1c:e2:c4:4f:4f:57:9a:1f:c7:f9:93:21: ef:9a:ec:42:a0:7b:06:6a:53:35:c6:5d:15:21:e6:10:5f:1a: d0:7c:81:e0:40:04:12:e9:4b:21:a2:89:0d:ac:f4:51:f7:0d: 55:2b:fa:d9:2b:61:4c:d6:59:1a:d0:5f:56:0f:20:10:2a:30: fe:2c:7f:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0Vp8DIlTBeVZI+byWF5mfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MDE0YzkyNmVhNzZkNTY2ZTllOGE5NmQ1ODYxZDQ3NTdj OGIwZWEwHhcNMjUxMjE5MDIwMDUwWhcNMjUxMjIwMDIwMDUwWjAzMTEwLwYDVQQD EyhhODJkNjZhMDdlOGNhNjg3YmFiYWM2ZTFlNmI0ZDI3MTM3NDY5MDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOioDXhm41je7KfiWVRGdWPiu0Zn LUfjN0maXwqjRC6bhU4L+wBGqYReTPwknT2wcXnrsRgjEOoSj2zer+ge4QD/u3q/ 76zGZyb7q24c+dCzK1SxEob4hKPQaxG8HTlDIwdSnZCYJ7/c+dENXNQVgFRcCUy0 M6RJn92XeqY+OR0fpHAQvOY5O0HiPxRhPwoodDSQCozJbyw6QMwFDnXBBo4ScNVA bRLKdmJKgLCf2Te32aWDz91J8H78FxsR8ab5FZ2bHtXVyaMXGfI6HxDDzF8jRTVb gZlQXxdWQl7FyCLh97CdruyxG4yHsQhBS0CTFdVRuzKcVxNBY+I4ZVd8nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKgtZqB+jKaHurrG4ea00nE3RpBUMB8GA1UdIwQY MBaAFEcBTJJup21Wbp6KltWGHUdXyLDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUndGTWttNm5iVlp1bm9xVzFZWWRSMWZJc09vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8zMTIzZDAtN2NhYS00ZGYzLWFkMjMt YWJhNGU2NDMwNThlLzEvUndGTWttNm5iVlp1bm9xVzFZWWRSMWZJc09vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS8zMTIzZDAtN2NhYS00ZGYzLWFkMjMtYWJhNGU2NDMwNThl LzEvUndGTWttNm5iVlp1bm9xVzFZWWRSMWZJc09vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcTyYLDDh vhEmq26pXLp2zvhbE2CbGOpz08/zzUGXzgRnbUWxvCDWuF1Zfsose3zcjs1wEVTK Xy+JwwlGeqpSJcpKc/oZxtxZfcizQgdV3Dqp3RvRWQhUm74T/Q4S2kdsLK5DFWkp W0HgXl1H8U33k2llhPUaryUz1RZthl9hmjEu+JUf9AhckSewWwrqCnqq2fktLClh Xd8OC5o8yAJn07yewzonJAYnH4/C3PDC1nkYYS9jwXlL78jJHOLET09Xmh/H+ZMh 75rsQqB7BmpTNcZdFSHmEF8a0HyB4EAEEulLIaKJDaz0UfcNVSv62SthTNZZGtBf Vg8gECow/ix/7Q== -----END CERTIFICATE-----Generated at Fri Dec 19 08:27:31 2025 by rpki-client