This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft File: rmjJUYwq1UwKy4IUaMhuRboWHBg.mft (raw, json) Hash identifier: u+XYNd7dbahjozH/7qYJW5txR2pwVBKmf/vEgyFg52E= Subject key identifier: 4D:1D:42:62:60:57:AC:FA:36:A7:3A:1B:26:36:A3:8E:B4:20:8D:8C Authority key identifier: AE:68:C9:51:8C:2A:D5:4C:0A:CB:82:14:68:C8:6E:45:BA:16:1C:18 Certificate issuer: /CN=ae68c9518c2ad54c0acb821468c86e45ba161c18 Certificate serial: 019B4249B9048612562FDCE917E33968D2E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft Manifest number: 0656 Signing time: Sun 21 Dec 2025 19:01:26 +0000 Manifest this update: Sun 21 Dec 2025 19:01:26 +0000 Manifest next update: Mon 22 Dec 2025 19:01:26 +0000 Files and hashes: 1: PwlcQaBPeu72jRxpS1TyAFafqIs.roa (hash: zweRMxR6GdWC0C5ngJnRInvOkWHsboI5uvSiYLo2X20=) 2: rmjJUYwq1UwKy4IUaMhuRboWHBg.crl (hash: INmq7I+REvhyAVbcm/cxKRDdh+ajfmjOtQnTdNNQKVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft rsync://rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:b9:04:86:12:56:2f:dc:e9:17:e3:39:68:d2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae68c9518c2ad54c0acb821468c86e45ba161c18 Validity Not Before: Dec 21 19:01:26 2025 GMT Not After : Dec 22 19:01:26 2025 GMT Subject: CN=4d1d42626057acfa36a73a1b2636a38eb4208d8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7f:82:fd:ce:fb:73:bf:97:38:8b:09:ba:a9: dd:ab:d0:62:f0:a0:3b:99:a1:3f:00:6f:74:3c:98: db:eb:34:d6:9e:61:d7:4f:b7:a3:0d:5d:77:21:5f: 6e:50:3d:5a:19:b5:2e:46:84:6c:a3:67:4c:6a:42: 20:d6:94:2a:3c:0f:e6:5b:6b:84:ea:cc:2d:7b:95: e9:e6:5b:01:88:c2:58:13:2e:8b:49:07:7c:52:18: e3:a3:56:24:ce:45:dc:71:66:18:31:dd:27:02:a0: 0f:6b:f3:32:a8:02:ae:fa:9b:d8:53:e2:19:7c:97: dd:6a:ee:3b:ac:1f:c3:05:ee:9f:0e:33:d5:98:9c: a4:75:12:db:9f:83:88:34:cc:7a:c8:2e:ee:35:90: 59:27:a0:1c:99:29:7c:b1:48:81:ff:61:53:8a:26: a7:0a:b6:14:17:a0:c5:55:58:57:eb:bc:4c:5a:d2: 04:ef:55:1b:f5:e3:04:13:e0:af:44:c5:80:ec:f4: 2f:c4:a7:c1:8d:09:65:bc:35:10:f3:2b:53:52:6b: 6a:35:45:89:bd:40:e6:06:67:57:53:0c:63:a8:47: ca:41:06:18:65:ba:72:29:5a:44:46:aa:3a:60:12: c3:8f:c8:1e:b4:1f:42:62:53:20:9d:e3:d8:7b:64: a5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:1D:42:62:60:57:AC:FA:36:A7:3A:1B:26:36:A3:8E:B4:20:8D:8C X509v3 Authority Key Identifier: keyid:AE:68:C9:51:8C:2A:D5:4C:0A:CB:82:14:68:C8:6E:45:BA:16:1C:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:53:88:50:b8:07:42:f2:cf:9f:32:04:fe:16:ae:6c:2b:44: 8e:fd:99:bb:29:20:c9:c7:2f:ac:04:61:fa:47:7d:b2:7a:a7: a2:95:07:66:0f:48:9d:d3:44:50:26:ae:ff:55:99:cf:c2:c8: d1:06:3c:b2:1a:1c:b9:ae:86:80:fa:f5:85:c1:65:68:43:48: 04:67:8e:1e:bf:27:28:da:ee:58:ae:d0:4e:0e:b0:d5:7f:2d: 85:3c:5f:d5:cb:a8:05:13:df:13:b2:98:f4:4f:88:e8:37:ed: 32:e7:cc:38:2d:f3:cb:cc:df:59:37:a9:f8:d2:49:23:72:e6: 9b:6d:f0:86:91:97:32:86:c8:60:64:ce:09:d2:35:90:93:f5: 4d:10:68:57:1b:05:2c:9f:16:7b:d7:f9:88:1c:65:2f:91:d1: 58:a7:f7:e5:d0:0c:b4:e7:b5:9f:31:29:09:ee:11:ea:0b:d7: cc:4b:cd:eb:8d:7a:11:5b:c1:c9:27:16:3e:96:49:dc:b3:1b: a0:67:e2:4d:81:0a:4b:b1:8f:2f:c3:51:3c:9a:c4:3c:2a:40: ad:31:4b:da:4d:4f:c4:81:e5:f8:e1:ba:6d:7b:76:84:0f:fb: b9:f9:77:8e:86:6b:8f:be:17:2c:45:04:29:87:bf:6f:01:7e: fd:8e:d5:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSbkEhhJWL9zpF+M5aNLgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNjhjOTUxOGMyYWQ1NGMwYWNiODIxNDY4Yzg2ZTQ1YmEx NjFjMTgwHhcNMjUxMjIxMTkwMTI2WhcNMjUxMjIyMTkwMTI2WjAzMTEwLwYDVQQD Eyg0ZDFkNDI2MjYwNTdhY2ZhMzZhNzNhMWIyNjM2YTM4ZWI0MjA4ZDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2X+C/c77c7+XOIsJuqndq9Bi8KA7 maE/AG90PJjb6zTWnmHXT7ejDV13IV9uUD1aGbUuRoRso2dMakIg1pQqPA/mW2uE 6swte5Xp5lsBiMJYEy6LSQd8Uhjjo1YkzkXccWYYMd0nAqAPa/MyqAKu+pvYU+IZ fJfdau47rB/DBe6fDjPVmJykdRLbn4OINMx6yC7uNZBZJ6AcmSl8sUiB/2FTiian CrYUF6DFVVhX67xMWtIE71Ub9eMEE+CvRMWA7PQvxKfBjQllvDUQ8ytTUmtqNUWJ vUDmBmdXUwxjqEfKQQYYZbpyKVpERqo6YBLDj8getB9CYlMgnePYe2SlJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0dQmJgV6z6Nqc6GyY2o460II2MMB8GA1UdIwQY MBaAFK5oyVGMKtVMCsuCFGjIbkW6FhwYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm1qSlVZd3ExVXdLeTRJVWFNaHVSYm9XSEJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS83YjQyYjQtMWQxMi00MmNmLWE4ZjAt MTZiNmJlZGE4N2QwLzEvcm1qSlVZd3ExVXdLeTRJVWFNaHVSYm9XSEJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS83YjQyYjQtMWQxMi00MmNmLWE4ZjAtMTZiNmJlZGE4N2Qw LzEvcm1qSlVZd3ExVXdLeTRJVWFNaHVSYm9XSEJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGVOIULgH QvLPnzIE/haubCtEjv2ZuykgyccvrARh+kd9snqnopUHZg9IndNEUCau/1WZz8LI 0QY8shocua6GgPr1hcFlaENIBGeOHr8nKNruWK7QTg6w1X8thTxf1cuoBRPfE7KY 9E+I6DftMufMOC3zy8zfWTep+NJJI3Lmm23whpGXMobIYGTOCdI1kJP1TRBoVxsF LJ8We9f5iBxlL5HRWKf35dAMtOe1nzEpCe4R6gvXzEvN6416EVvByScWPpZJ3LMb oGfiTYEKS7GPL8NRPJrEPCpArTFL2k1PxIHl+OG6bXt2hA/7ufl3joZrj74XLEUE KYe/bwF+/Y7Vmg== -----END CERTIFICATE-----Generated at Mon Dec 22 02:50:13 2025 by rpki-client