This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft File: RmSbV7gX7BQ93LfXcSwiux8orHU.mft (raw, json) Hash identifier: 19tVFlNUDUt/gKMYtBGMjJiwGyNarV7Pt7Pd0e8K8Fc= Subject key identifier: 59:0C:8A:9E:90:2A:38:7A:F9:48:8B:B4:46:F2:20:C5:18:E3:AE:64 Authority key identifier: 46:64:9B:57:B8:17:EC:14:3D:DC:B7:D7:71:2C:22:BB:1F:28:AC:75 Certificate issuer: /CN=46649b57b817ec143ddcb7d7712c22bb1f28ac75 Certificate serial: 019B68E96FDA9EA00BC0634C23161396DB2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft Manifest number: 1779 Signing time: Mon 29 Dec 2025 07:01:27 +0000 Manifest this update: Mon 29 Dec 2025 07:01:27 +0000 Manifest next update: Tue 30 Dec 2025 07:01:27 +0000 Files and hashes: 1: E48fxMRuF9_usgkv-wBA_GtkkY8.roa (hash: TJ/B+8gZ2LSJEkkPcBk2s1l74WkEA3d0hjUzJQAQi8w=) 2: RmSbV7gX7BQ93LfXcSwiux8orHU.crl (hash: 5c+DMVmyP0k5Znrrt+rwG20q3cnMVM29GbFDJcmlYrQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 07:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:e9:6f:da:9e:a0:0b:c0:63:4c:23:16:13:96:db:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46649b57b817ec143ddcb7d7712c22bb1f28ac75 Validity Not Before: Dec 29 07:01:27 2025 GMT Not After : Dec 30 07:01:27 2025 GMT Subject: CN=590c8a9e902a387af9488bb446f220c518e3ae64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3b:cc:58:3a:2b:d1:9d:f5:f4:3a:64:05:03: 3d:97:de:d5:39:86:a7:af:7d:fd:e5:35:16:5d:a2: 81:66:38:0a:37:ab:a0:40:b3:62:fa:c9:db:9d:d7: 39:82:6e:ef:e3:44:9d:17:e2:3a:39:4c:67:c6:fa: 9e:1a:f1:8c:d7:10:dc:ac:ef:79:eb:ba:3c:6d:5d: 4d:83:a7:0b:55:cd:0f:29:3f:2e:7f:d4:fa:96:a5: 4b:62:60:f5:c4:b3:3d:f6:86:fe:d4:2b:f4:f3:1a: 91:98:22:c9:fd:ae:e5:e2:00:42:b6:8d:24:f6:c0: b3:e5:7e:92:ca:f0:3d:93:2d:d9:a8:e6:fa:7d:31: 1d:ec:14:e8:ec:46:29:ad:a8:8c:69:92:d2:80:94: 97:1e:db:de:00:f4:37:bb:d2:81:c7:e9:65:be:9b: 70:ae:7a:e5:af:03:21:34:92:68:46:2d:c9:76:5c: 14:49:00:a7:a8:f3:22:3a:39:0d:ce:19:04:d9:af: 63:24:bf:48:ef:aa:7b:7f:e2:db:89:75:e1:8f:49: dd:e0:63:1c:59:f7:e6:34:e5:20:a7:3a:0f:18:a9: 06:65:b3:89:b1:50:18:1b:35:0f:4b:82:d1:82:b0: 6e:17:73:5b:4e:22:34:d7:a8:04:84:7f:68:20:8c: 7c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:0C:8A:9E:90:2A:38:7A:F9:48:8B:B4:46:F2:20:C5:18:E3:AE:64 X509v3 Authority Key Identifier: keyid:46:64:9B:57:B8:17:EC:14:3D:DC:B7:D7:71:2C:22:BB:1F:28:AC:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:80:e0:50:32:66:c6:55:70:5e:ba:75:54:a0:2c:7c:c1:96: 31:33:2d:2b:5c:b5:38:f6:39:3f:47:2e:d1:bf:2e:9e:79:3e: b0:60:88:23:28:80:19:61:91:6e:c3:7c:1a:0f:ca:8e:38:22: ae:e2:18:7b:ec:57:b6:0d:98:45:fb:96:49:a7:c9:08:fa:06: 92:40:e2:79:52:1b:f3:76:77:22:5b:11:c8:5c:05:b3:7a:63: 8d:0e:44:ab:14:ad:a7:09:20:1b:11:e7:29:90:7e:55:10:fe: 66:53:56:60:bd:61:b7:86:49:75:53:54:51:1e:bb:b6:c7:45: ed:8f:ee:f1:2e:7b:6c:3c:61:23:f4:23:0b:02:8b:c2:72:f8: 65:c9:d1:17:5f:fc:a1:bb:5b:73:a3:7d:25:91:72:58:49:2d: a1:5d:2b:b7:e1:8f:c9:49:28:de:d4:8e:ff:9d:74:e6:05:4a: 7d:bc:81:df:f2:65:7a:20:36:49:6f:de:02:cd:9b:cb:e8:d9: 2a:8b:be:e1:33:8a:7d:c0:7d:75:50:0d:09:6f:6f:fa:72:80: dc:63:16:e8:22:f3:46:fa:36:14:00:e5:c1:64:c6:85:a6:18: 91:3d:49:a5:1e:3a:57:f5:c5:46:98:c5:03:26:04:91:44:f7: 93:34:80:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZto6W/anqALwGNMIxYTltsqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NjQ5YjU3YjgxN2VjMTQzZGRjYjdkNzcxMmMyMmJiMWYy OGFjNzUwHhcNMjUxMjI5MDcwMTI3WhcNMjUxMjMwMDcwMTI3WjAzMTEwLwYDVQQD Eyg1OTBjOGE5ZTkwMmEzODdhZjk0ODhiYjQ0NmYyMjBjNTE4ZTNhZTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDvMWDor0Z319DpkBQM9l97VOYan r3395TUWXaKBZjgKN6ugQLNi+snbndc5gm7v40SdF+I6OUxnxvqeGvGM1xDcrO95 67o8bV1Ng6cLVc0PKT8uf9T6lqVLYmD1xLM99ob+1Cv08xqRmCLJ/a7l4gBCto0k 9sCz5X6SyvA9ky3ZqOb6fTEd7BTo7EYpraiMaZLSgJSXHtveAPQ3u9KBx+llvptw rnrlrwMhNJJoRi3JdlwUSQCnqPMiOjkNzhkE2a9jJL9I76p7f+LbiXXhj0nd4GMc WffmNOUgpzoPGKkGZbOJsVAYGzUPS4LRgrBuF3NbTiI016gEhH9oIIx84wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFkMip6QKjh6+UiLtEbyIMUY465kMB8GA1UdIwQY MBaAFEZkm1e4F+wUPdy313EsIrsfKKx1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm1TYlY3Z1g3QlE5M0xmWGNTd2l1eDhvckhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy84NTg0NTQtYTE4ZC00MDQwLWFiM2Mt Y2E4ZmJhNTk1ZDRmLzEvUm1TYlY3Z1g3QlE5M0xmWGNTd2l1eDhvckhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy84NTg0NTQtYTE4ZC00MDQwLWFiM2MtY2E4ZmJhNTk1ZDRm LzEvUm1TYlY3Z1g3QlE5M0xmWGNTd2l1eDhvckhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhIDgUDJm xlVwXrp1VKAsfMGWMTMtK1y1OPY5P0cu0b8unnk+sGCIIyiAGWGRbsN8Gg/Kjjgi ruIYe+xXtg2YRfuWSafJCPoGkkDieVIb83Z3IlsRyFwFs3pjjQ5EqxStpwkgGxHn KZB+VRD+ZlNWYL1ht4ZJdVNUUR67tsdF7Y/u8S57bDxhI/QjCwKLwnL4ZcnRF1/8 obtbc6N9JZFyWEktoV0rt+GPyUko3tSO/5105gVKfbyB3/JleiA2SW/eAs2by+jZ Kou+4TOKfcB9dVANCW9v+nKA3GMW6CLzRvo2FADlwWTGhaYYkT1JpR46V/XFRpjF AyYEkUT3kzSAQg== -----END CERTIFICATE-----Generated at Mon Dec 29 14:58:15 2025 by rpki-client