This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft File: RMRFXrsJGC1PvrO0Vg4giYbhriE.mft (raw, json) Hash identifier: 7cM6m9MpZvhnGhwbn73w3R7e7K4QeNXqvcQ+/WgMBtI= Subject key identifier: 6A:48:CC:94:6E:1F:C2:5C:26:C1:2B:D4:CE:94:FA:D0:87:E1:F4:95 Authority key identifier: 44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21 Certificate issuer: /CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21 Certificate serial: 019B33B1A1A76BDA52FA73CB508AB0631507 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 23:00:37 +0000 Manifest this update: Thu 18 Dec 2025 23:00:37 +0000 Manifest next update: Fri 19 Dec 2025 23:00:37 +0000 Files and hashes: 1: RMRFXrsJGC1PvrO0Vg4giYbhriE.crl (hash: iuVqYPvcO9OumEOOBSar0gCsqyEzbmPI1V+d+oDnI6c=) 2: W1HT74Ti-eehsN9aFk8FhX6Amk0.roa (hash: 3zzhU0Zo0DbhPnuXcPDdzKBUW4Glv+sVBLV3Zhd2+lU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:a1:a7:6b:da:52:fa:73:cb:50:8a:b0:63:15:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21 Validity Not Before: Dec 18 23:00:37 2025 GMT Not After : Dec 19 23:00:37 2025 GMT Subject: CN=6a48cc946e1fc25c26c12bd4ce94fad087e1f495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:35:50:a7:0e:52:fe:33:cc:4c:f5:4e:c2:80: 77:28:e7:64:58:a9:2b:db:b8:c9:37:66:d0:3a:86: bd:a7:fe:58:cf:62:1c:79:bd:80:59:0b:17:9c:3d: ac:f2:b2:80:c9:fb:39:ca:49:50:66:d3:66:94:90: 0b:7b:53:b1:74:0a:73:e8:b6:f9:6c:40:d4:18:c9: df:ed:ee:1b:19:9b:b3:17:a7:d0:15:fe:fe:94:bf: 6e:34:53:6d:79:2c:96:62:f9:0b:14:c8:c8:49:4c: a3:4f:6d:32:c5:ac:ff:8e:dc:d8:67:31:b4:f2:39: ae:bc:5a:f1:fc:d5:fe:82:e3:0d:94:f7:91:69:5a: 33:e9:e7:af:c7:2a:4d:3d:d2:7f:f7:f7:12:54:78: 4c:a7:5b:cd:91:43:8d:b6:0e:0e:84:2f:2c:3c:a4: f2:5c:8a:c3:91:50:f3:c5:0c:d9:82:d8:f1:60:75: f0:19:84:9b:6a:96:23:43:ff:2d:34:69:97:30:8d: 07:c0:59:2a:46:b3:ab:01:0c:b3:6d:f7:52:eb:4c: f1:79:47:fe:07:b4:13:c4:ac:1c:31:f9:38:e6:9f: 31:42:46:7e:83:d5:9e:8d:cd:10:c2:1e:39:60:98: 27:61:ce:db:a6:fa:88:c5:f7:32:12:23:aa:4b:a4: ce:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:48:CC:94:6E:1F:C2:5C:26:C1:2B:D4:CE:94:FA:D0:87:E1:F4:95 X509v3 Authority Key Identifier: keyid:44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:e0:a3:9d:6f:95:42:bf:d1:9e:2c:a6:c3:80:cd:e1:e2:fb: 9d:71:26:0b:e5:53:cc:f8:04:de:8c:4b:a5:f7:29:9d:b9:d5: 50:6a:36:1c:3c:3c:f7:22:7a:7e:ab:d3:82:ce:8b:4f:af:5e: 56:ac:c6:9a:82:8a:b5:9b:0b:29:9c:1e:df:77:d2:31:0f:2f: 39:d1:28:32:98:24:35:65:12:56:ae:22:02:61:73:16:69:71: d3:22:48:91:79:bd:92:d3:d3:20:7c:51:6e:da:18:6b:d0:0e: c3:36:4c:5b:1c:d1:22:64:b0:d6:98:39:4e:8e:9b:b2:e0:37: ac:5f:ab:35:e2:fb:79:68:b7:35:3f:fa:ee:54:59:66:49:de: a6:05:94:0a:e6:e1:20:df:55:71:3c:99:b0:de:8f:d8:80:56: 96:86:7a:3d:16:ae:0c:a6:5e:2a:72:a1:cc:c0:1e:d7:cc:be: b2:07:87:3e:a9:e5:4a:64:30:43:1b:03:40:12:13:20:4c:e9: 60:7c:12:22:19:01:4f:f9:90:34:52:01:bd:1d:69:06:32:e6: 28:df:ac:d8:f3:8c:99:13:84:73:10:70:ce:ee:ea:fc:80:82: 7e:46:84:50:60:88:b1:77:70:bf:7d:67:1c:c3:ba:62:76:0f: 96:2f:cf:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsaGna9pS+nPLUIqwYxUHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YzQ0NTVlYmIwOTE4MmQ0ZmJlYjNiNDU2MGUyMDg5ODZl MWFlMjEwHhcNMjUxMjE4MjMwMDM3WhcNMjUxMjE5MjMwMDM3WjAzMTEwLwYDVQQD Eyg2YTQ4Y2M5NDZlMWZjMjVjMjZjMTJiZDRjZTk0ZmFkMDg3ZTFmNDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzVQpw5S/jPMTPVOwoB3KOdkWKkr 27jJN2bQOoa9p/5Yz2Iceb2AWQsXnD2s8rKAyfs5yklQZtNmlJALe1OxdApz6Lb5 bEDUGMnf7e4bGZuzF6fQFf7+lL9uNFNteSyWYvkLFMjISUyjT20yxaz/jtzYZzG0 8jmuvFrx/NX+guMNlPeRaVoz6eevxypNPdJ/9/cSVHhMp1vNkUONtg4OhC8sPKTy XIrDkVDzxQzZgtjxYHXwGYSbapYjQ/8tNGmXMI0HwFkqRrOrAQyzbfdS60zxeUf+ B7QTxKwcMfk45p8xQkZ+g9Wejc0Qwh45YJgnYc7bpvqIxfcyEiOqS6TOhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGpIzJRuH8JcJsEr1M6U+tCH4fSVMB8GA1UdIwQY MBaAFETERV67CRgtT76ztFYOIImG4a4hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk1SRlhyc0pHQzFQdnJPMFZnNGdpWWJocmlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wNWE5MDMtZDljMC00Njg5LTlhYzgt YzMyZGU5MGUzZmMzLzEvUk1SRlhyc0pHQzFQdnJPMFZnNGdpWWJocmlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8wNWE5MDMtZDljMC00Njg5LTlhYzgtYzMyZGU5MGUzZmMz LzEvUk1SRlhyc0pHQzFQdnJPMFZnNGdpWWJocmlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+CjnW+V Qr/Rniymw4DN4eL7nXEmC+VTzPgE3oxLpfcpnbnVUGo2HDw89yJ6fqvTgs6LT69e VqzGmoKKtZsLKZwe33fSMQ8vOdEoMpgkNWUSVq4iAmFzFmlx0yJIkXm9ktPTIHxR btoYa9AOwzZMWxzRImSw1pg5To6bsuA3rF+rNeL7eWi3NT/67lRZZknepgWUCubh IN9VcTyZsN6P2IBWloZ6PRauDKZeKnKhzMAe18y+sgeHPqnlSmQwQxsDQBITIEzp YHwSIhkBT/mQNFIBvR1pBjLmKN+s2POMmROEcxBwzu7q/ICCfkaEUGCIsXdwv31n HMO6YnYPli/PNQ== -----END CERTIFICATE-----Generated at Fri Dec 19 02:23:10 2025 by rpki-client