This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft File: RmI6xd-e7899JPMXx7aUKX5PNio.mft (raw, json) Hash identifier: FLWgXQiUiWVc8C5aIwXFl2dNgpSXlWh9JX2a1J3E2Pw= Subject key identifier: 8C:AD:06:CE:A3:AF:B5:5B:2F:EA:E6:E3:01:63:03:6B:9F:29:DD:9B Authority key identifier: 46:62:3A:C5:DF:9E:EF:CF:7D:24:F3:17:C7:B6:94:29:7E:4F:36:2A Certificate issuer: /CN=46623ac5df9eefcf7d24f317c7b694297e4f362a Certificate serial: 019B41DB8AF74F2828498AFD0C48CD53AF5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmI6xd-e7899JPMXx7aUKX5PNio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft Manifest number: 0872 Signing time: Sun 21 Dec 2025 17:01:05 +0000 Manifest this update: Sun 21 Dec 2025 17:01:05 +0000 Manifest next update: Mon 22 Dec 2025 17:01:05 +0000 Files and hashes: 1: RmI6xd-e7899JPMXx7aUKX5PNio.crl (hash: 39rdMAhL3ID2V6WnVK4wO1gImdjjdufx1OIk4c9NqwU=) 2: nCIxCjPPY6DWPKx_WJ_D213f1h8.roa (hash: TAjRe+1L1yReCVm9dO/sWTs7kJtd/3RFn58xjlrbP+A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft rsync://rpki.ripe.net/repository/DEFAULT/RmI6xd-e7899JPMXx7aUKX5PNio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:8a:f7:4f:28:28:49:8a:fd:0c:48:cd:53:af:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46623ac5df9eefcf7d24f317c7b694297e4f362a Validity Not Before: Dec 21 17:01:05 2025 GMT Not After : Dec 22 17:01:05 2025 GMT Subject: CN=8cad06cea3afb55b2feae6e30163036b9f29dd9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f4:c3:d7:8a:8f:9f:e7:d3:88:9e:ca:7c:d3: 56:b6:e7:39:8b:f3:e7:8e:83:6e:3a:37:62:b9:f7: c4:bf:9d:aa:9d:7d:e1:6a:6f:8e:08:87:41:25:7f: 61:53:50:78:d4:b5:9d:b7:ab:1c:11:36:06:4e:20: c2:6f:28:ea:fa:ee:80:32:c7:c5:d9:10:d1:34:b1: c4:70:84:e2:5a:a6:bf:4a:06:ff:63:e3:1a:69:da: 94:1b:d1:d7:6d:40:46:35:85:89:67:6f:eb:83:5f: fa:ba:c0:8c:5d:40:a5:2b:11:0c:2d:50:4a:db:61: 7d:e0:92:3b:bb:2c:78:f4:c0:1a:d9:47:b4:3b:16: 51:32:0b:2d:51:a0:4f:61:bd:ec:c8:51:99:c0:a3: 07:f9:27:52:ac:ea:49:e6:c3:fa:2f:97:9f:59:da: a9:38:d1:70:3a:b5:9b:09:d6:f0:e7:6c:1d:18:3d: c5:65:97:67:f8:24:25:ed:fe:36:d1:5b:b7:69:2a: 61:f3:29:7d:34:f1:c2:e0:8c:8f:95:3f:20:6e:86: 60:fc:69:a4:27:d6:fd:22:c6:54:a8:0c:62:f1:13: dc:9b:0a:b3:e1:bd:6a:58:c9:36:7b:c4:70:bd:f9: e2:9e:ef:fb:e7:aa:d6:48:1d:ca:d7:08:11:d5:16: ed:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:AD:06:CE:A3:AF:B5:5B:2F:EA:E6:E3:01:63:03:6B:9F:29:DD:9B X509v3 Authority Key Identifier: keyid:46:62:3A:C5:DF:9E:EF:CF:7D:24:F3:17:C7:B6:94:29:7E:4F:36:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmI6xd-e7899JPMXx7aUKX5PNio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:58:bf:ff:14:22:61:40:b2:a9:1f:28:f4:38:03:9f:5c:85: e4:67:ce:ae:c2:41:25:12:a7:b0:12:ac:5d:a1:34:c3:1a:4c: 4d:02:fc:18:5e:f2:28:9b:06:cd:fe:3a:33:2f:94:9b:1b:47: 79:26:3b:ce:65:21:e5:31:1c:6e:fb:7e:a9:4b:a8:72:c5:ae: 76:04:80:1e:02:bc:a8:5c:33:5e:1f:e6:a7:95:73:a1:5a:52: 55:2e:90:ab:b7:83:f0:c3:ac:89:3b:c2:a7:1f:eb:61:c6:d2: f9:09:12:64:a6:ec:14:4e:53:4b:af:64:69:c0:ec:35:af:e0: 82:94:c7:53:dd:34:5d:50:f1:89:bc:94:f2:02:38:e3:1d:33: 71:10:70:b2:e8:73:b0:ea:2b:6b:eb:ce:d9:82:a0:84:69:d2: 38:80:49:cf:cb:f0:81:f4:41:a2:64:f0:05:68:72:1b:e9:88: 8f:07:a5:e6:08:8a:fc:b3:c5:2d:58:49:85:11:34:da:1e:72: 05:bd:39:33:40:d4:34:42:2f:c9:5f:6b:bf:77:7f:9b:ff:59: 3e:a8:1c:c5:39:ed:6b:52:61:c6:5f:ca:00:30:df:60:9d:3b: 41:15:39:d1:8f:9c:22:7c:56:ac:1b:57:8b:c1:39:23:18:04: 25:c1:88:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB24r3TygoSYr9DEjNU69cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NjIzYWM1ZGY5ZWVmY2Y3ZDI0ZjMxN2M3YjY5NDI5N2U0 ZjM2MmEwHhcNMjUxMjIxMTcwMTA1WhcNMjUxMjIyMTcwMTA1WjAzMTEwLwYDVQQD Eyg4Y2FkMDZjZWEzYWZiNTViMmZlYWU2ZTMwMTYzMDM2YjlmMjlkZDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofTD14qPn+fTiJ7KfNNWtuc5i/Pn joNuOjdiuffEv52qnX3ham+OCIdBJX9hU1B41LWdt6scETYGTiDCbyjq+u6AMsfF 2RDRNLHEcITiWqa/Sgb/Y+MaadqUG9HXbUBGNYWJZ2/rg1/6usCMXUClKxEMLVBK 22F94JI7uyx49MAa2Ue0OxZRMgstUaBPYb3syFGZwKMH+SdSrOpJ5sP6L5efWdqp ONFwOrWbCdbw52wdGD3FZZdn+CQl7f420Vu3aSph8yl9NPHC4IyPlT8gboZg/Gmk J9b9IsZUqAxi8RPcmwqz4b1qWMk2e8Rwvfninu/756rWSB3K1wgR1Rbt7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIytBs6jr7VbL+rm4wFjA2ufKd2bMB8GA1UdIwQY MBaAFEZiOsXfnu/PfSTzF8e2lCl+TzYqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm1JNnhkLWU3ODk5SlBNWHg3YVVLWDVQTmlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hNzEzZTAtZDE2NC00ZmJiLWI0YWUt N2E1OGJhM2RkZjQzLzEvUm1JNnhkLWU3ODk5SlBNWHg3YVVLWDVQTmlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9hNzEzZTAtZDE2NC00ZmJiLWI0YWUtN2E1OGJhM2RkZjQz LzEvUm1JNnhkLWU3ODk5SlBNWHg3YVVLWDVQTmlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdVi//xQi YUCyqR8o9DgDn1yF5GfOrsJBJRKnsBKsXaE0wxpMTQL8GF7yKJsGzf46My+UmxtH eSY7zmUh5TEcbvt+qUuocsWudgSAHgK8qFwzXh/mp5VzoVpSVS6Qq7eD8MOsiTvC px/rYcbS+QkSZKbsFE5TS69kacDsNa/ggpTHU900XVDxibyU8gI44x0zcRBwsuhz sOora+vO2YKghGnSOIBJz8vwgfRBomTwBWhyG+mIjwel5giK/LPFLVhJhRE02h5y Bb05M0DUNEIvyV9rv3d/m/9ZPqgcxTnta1Jhxl/KADDfYJ07QRU50Y+cInxWrBtX i8E5IxgEJcGIZA== -----END CERTIFICATE-----Generated at Sun Dec 21 19:19:52 2025 by rpki-client