This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft File: RmI6xd-e7899JPMXx7aUKX5PNio.mft (raw, json) Hash identifier: jTeQ0lxWT+gkdjFoR2cMHUZVcy+7nirdKW3de3HpRBY= Subject key identifier: 0C:F0:69:FB:1D:B2:56:68:A9:EE:23:EF:D9:84:EE:64:09:76:11:84 Authority key identifier: 46:62:3A:C5:DF:9E:EF:CF:7D:24:F3:17:C7:B6:94:29:7E:4F:36:2A Certificate issuer: /CN=46623ac5df9eefcf7d24f317c7b694297e4f362a Certificate serial: 019B6C57DA50436D4E74B9D3AA7CC386B464 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmI6xd-e7899JPMXx7aUKX5PNio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft Manifest number: 0888 Signing time: Mon 29 Dec 2025 23:00:55 +0000 Manifest this update: Mon 29 Dec 2025 23:00:55 +0000 Manifest next update: Tue 30 Dec 2025 23:00:55 +0000 Files and hashes: 1: RmI6xd-e7899JPMXx7aUKX5PNio.crl (hash: +LwILrkU6F0pjnWRGgVCuphqpf3MCk+v6HRzsdUaSGQ=) 2: nCIxCjPPY6DWPKx_WJ_D213f1h8.roa (hash: TAjRe+1L1yReCVm9dO/sWTs7kJtd/3RFn58xjlrbP+A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft rsync://rpki.ripe.net/repository/DEFAULT/RmI6xd-e7899JPMXx7aUKX5PNio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 23:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:57:da:50:43:6d:4e:74:b9:d3:aa:7c:c3:86:b4:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46623ac5df9eefcf7d24f317c7b694297e4f362a Validity Not Before: Dec 29 23:00:55 2025 GMT Not After : Dec 30 23:00:55 2025 GMT Subject: CN=0cf069fb1db25668a9ee23efd984ee6409761184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:86:5c:ad:b6:1f:41:39:c7:35:6b:f9:bd:91: db:01:7e:37:1a:a3:05:e3:96:ca:c2:3c:53:ca:9b: 26:92:57:ae:90:47:c8:33:d7:26:22:84:47:80:52: 7b:bf:03:34:57:0b:01:24:25:6e:ab:eb:2b:8d:87: f2:b0:f6:ee:76:9e:a1:6e:17:45:21:5c:2f:93:79: 1a:bd:45:dd:88:89:95:ff:a4:d1:ef:c8:ae:a9:ba: 4e:10:7b:0a:71:1e:ed:01:e4:35:6d:63:76:d4:fe: 9d:db:04:37:26:72:d7:ab:79:d6:75:79:44:f1:b4: 08:a5:99:1f:3e:7a:24:de:cc:7d:77:68:ba:c0:0f: 69:74:e6:63:c1:6e:c4:54:8a:06:64:a1:59:4c:bd: 6f:f9:68:d9:e7:ed:9a:48:14:7d:c0:ec:05:2d:b6: 0d:7c:26:ad:98:e4:f2:c8:fa:5d:f0:3f:66:5e:80: 82:d3:76:22:50:14:29:1e:26:1e:d9:39:0f:b1:ca: fe:fb:ff:11:cb:ed:42:1a:e0:5e:ca:88:60:ba:68: fc:21:a9:7c:8f:01:58:5b:20:d1:26:49:bc:e8:1c: de:65:85:25:74:f3:b7:6e:2d:6b:bb:14:cd:bc:59: 59:b3:5c:e6:3a:60:63:3f:21:4c:ff:b7:df:2b:47: a8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F0:69:FB:1D:B2:56:68:A9:EE:23:EF:D9:84:EE:64:09:76:11:84 X509v3 Authority Key Identifier: keyid:46:62:3A:C5:DF:9E:EF:CF:7D:24:F3:17:C7:B6:94:29:7E:4F:36:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmI6xd-e7899JPMXx7aUKX5PNio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:9d:44:07:5c:48:7f:da:2e:61:55:73:7a:24:2f:33:17:f9: 16:eb:07:d9:04:a2:a4:52:0c:a2:bc:84:80:d9:46:7d:e5:c2: c3:40:37:46:0a:ab:fe:11:b6:b8:fa:ba:9e:f7:85:6a:78:bc: 76:81:97:24:96:70:4a:0a:82:e0:01:74:be:92:3e:61:01:46: a4:2c:d2:99:02:70:a5:51:c0:ca:8f:fa:c7:55:0e:16:8d:ea: f0:35:9b:ad:ac:f7:90:e9:fd:0f:5d:3d:85:6c:45:e2:a1:79: fd:f7:ef:02:22:79:ff:ca:aa:65:82:5a:7b:6c:ee:63:91:6b: 07:7c:0e:69:63:6c:73:f9:bb:69:45:5c:cb:1e:6e:8c:5e:1b: 80:2b:c5:f8:ea:30:99:a3:aa:71:82:ea:6c:04:25:5e:b6:88: 03:0b:87:9a:32:90:aa:7f:01:82:18:8b:b9:60:34:8b:8c:25: 67:14:50:29:d0:19:0f:59:b1:c3:cd:99:91:8d:8d:6c:54:35: cf:72:29:63:31:79:cd:9f:b7:4b:9d:ed:a6:a1:8d:a6:c9:75: 41:d3:5f:7a:84:fa:f1:02:c2:2b:9b:9f:d9:09:6d:01:c8:fa: 20:3c:e5:60:24:13:36:32:99:d3:71:d3:98:50:1b:0b:9f:e5: f9:f3:7a:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsV9pQQ21OdLnTqnzDhrRkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NjIzYWM1ZGY5ZWVmY2Y3ZDI0ZjMxN2M3YjY5NDI5N2U0 ZjM2MmEwHhcNMjUxMjI5MjMwMDU1WhcNMjUxMjMwMjMwMDU1WjAzMTEwLwYDVQQD EygwY2YwNjlmYjFkYjI1NjY4YTllZTIzZWZkOTg0ZWU2NDA5NzYxMTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IZcrbYfQTnHNWv5vZHbAX43GqMF 45bKwjxTypsmkleukEfIM9cmIoRHgFJ7vwM0VwsBJCVuq+srjYfysPbudp6hbhdF IVwvk3kavUXdiImV/6TR78iuqbpOEHsKcR7tAeQ1bWN21P6d2wQ3JnLXq3nWdXlE 8bQIpZkfPnok3sx9d2i6wA9pdOZjwW7EVIoGZKFZTL1v+WjZ5+2aSBR9wOwFLbYN fCatmOTyyPpd8D9mXoCC03YiUBQpHiYe2TkPscr++/8Ry+1CGuBeyohgumj8Ial8 jwFYWyDRJkm86BzeZYUldPO3bi1ruxTNvFlZs1zmOmBjPyFM/7ffK0eo5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAzwafsdslZoqe4j79mE7mQJdhGEMB8GA1UdIwQY MBaAFEZiOsXfnu/PfSTzF8e2lCl+TzYqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm1JNnhkLWU3ODk5SlBNWHg3YVVLWDVQTmlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hNzEzZTAtZDE2NC00ZmJiLWI0YWUt N2E1OGJhM2RkZjQzLzEvUm1JNnhkLWU3ODk5SlBNWHg3YVVLWDVQTmlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9hNzEzZTAtZDE2NC00ZmJiLWI0YWUtN2E1OGJhM2RkZjQz LzEvUm1JNnhkLWU3ODk5SlBNWHg3YVVLWDVQTmlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA51EB1xI f9ouYVVzeiQvMxf5FusH2QSipFIMoryEgNlGfeXCw0A3Rgqr/hG2uPq6nveFani8 doGXJJZwSgqC4AF0vpI+YQFGpCzSmQJwpVHAyo/6x1UOFo3q8DWbraz3kOn9D109 hWxF4qF5/ffvAiJ5/8qqZYJae2zuY5FrB3wOaWNsc/m7aUVcyx5ujF4bgCvF+Oow maOqcYLqbAQlXraIAwuHmjKQqn8BghiLuWA0i4wlZxRQKdAZD1mxw82ZkY2NbFQ1 z3IpYzF5zZ+3S53tpqGNpsl1QdNfeoT68QLCK5uf2QltAcj6IDzlYCQTNjKZ03HT mFAbC5/l+fN6gw== -----END CERTIFICATE-----Generated at Tue Dec 30 08:50:31 2025 by rpki-client