This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
File: RmJSHrWLRbDFosy-ODMVznnX7qU.mft (raw, json)
Hash identifier: yX19mbA1Ab293c97XBST9wRyzWQX3sdzMQoqqNs3Xoc=
Subject key identifier: 49:09:DA:CC:76:EF:8B:60:7E:01:6F:56:31:D2:02:74:69:E0:D0:E9
Authority key identifier: 46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5
Certificate issuer: /CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5
Certificate serial: 019B44A566A294843E94AE7D7D2B162D559B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
Manifest number: 05E4
Signing time: Mon 22 Dec 2025 06:00:48 +0000
Manifest this update: Mon 22 Dec 2025 06:00:48 +0000
Manifest next update: Tue 23 Dec 2025 06:00:48 +0000
Files and hashes: 1: FMOrAvuXC1st0AxiGEbiYaRYpDg.roa (hash: OmIWmIcqWrtJmv8GjH0kjZnCnt6Sjb2fVpbncWqIDDs=)
2: RmJSHrWLRbDFosy-ODMVznnX7qU.crl (hash: ueDPrhIpCg5WRFKz7h5lB4/FlJLOuRjKvRtB/cLe1KU=)
3: Rn8OIh8zHAwmG50kXHn-kNbTEto.roa (hash: RiLsXz+R4XXCz86+60MDV16LzwORDjEzlHMC7VSLj30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Dec 2025 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:44:a5:66:a2:94:84:3e:94:ae:7d:7d:2b:16:2d:55:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5
Validity
Not Before: Dec 22 06:00:48 2025 GMT
Not After : Dec 23 06:00:48 2025 GMT
Subject: CN=4909dacc76ef8b607e016f5631d2027469e0d0e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:04:92:e2:56:3e:cb:0f:63:01:d5:b4:96:2c:
09:9e:82:0a:87:b4:39:a0:cb:6f:7c:da:5f:37:75:
bb:29:c1:91:0c:85:a7:07:b6:d9:89:14:94:cc:74:
46:de:b6:b5:42:ea:38:63:9b:0d:a6:b2:09:06:ab:
e5:0f:14:f2:d5:9f:16:36:9b:2f:1f:af:9a:63:5d:
91:5b:67:fa:b8:78:2a:30:f7:a4:9a:97:e3:28:b8:
32:a4:7f:1c:da:6c:a8:7b:6f:0e:71:c3:54:2f:3e:
f3:f3:63:46:3d:b2:bc:a4:9c:3a:f7:11:fc:41:a4:
a9:6c:4c:95:e3:97:41:84:3d:5f:7c:c7:c0:e4:e4:
36:8a:40:9a:18:1a:75:95:3b:51:39:ea:a8:50:62:
f7:cf:49:3b:b6:28:b7:39:73:a3:66:04:49:eb:1c:
cc:2b:04:ed:c1:d2:52:87:91:f5:b0:40:73:7b:16:
28:40:aa:59:ac:43:43:06:7f:54:4f:94:a1:a6:2d:
90:27:fa:07:94:4d:22:cc:c0:8f:16:f4:c9:6c:34:
ba:05:ea:18:e2:08:81:14:0a:f6:50:7b:26:05:98:
0a:05:89:f5:d7:e4:5c:9b:13:35:32:82:e9:78:90:
63:65:9a:d8:37:b2:79:67:0f:77:07:b7:ed:6d:67:
3c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:09:DA:CC:76:EF:8B:60:7E:01:6F:56:31:D2:02:74:69:E0:D0:E9
X509v3 Authority Key Identifier:
keyid:46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:81:f1:42:8d:eb:2b:4c:b0:0f:e8:87:d4:b9:ee:a3:80:c4:
19:d5:c4:7c:e3:84:eb:0f:34:45:02:0d:7f:9e:fe:ac:0c:73:
e5:67:fb:29:60:72:0d:f6:5b:6c:c2:28:81:d2:d8:83:20:55:
7f:b4:da:be:1c:80:f4:51:e6:66:02:c0:ea:bd:fd:38:db:97:
7b:6a:fe:33:a6:64:10:6d:14:0b:e9:67:bc:17:7d:83:ef:d7:
36:25:70:58:5f:cc:8c:7d:a1:84:6f:d3:a3:28:a8:36:2e:1d:
38:5c:2d:fd:d1:15:cc:6e:3b:8e:f8:06:b3:2c:26:3e:5b:7a:
70:32:d0:d8:05:d2:d3:c8:29:e0:23:ec:4e:f6:2b:3b:87:41:
ba:89:a3:b4:b0:d7:3c:ce:23:14:a8:03:01:89:ad:ce:1a:02:
fb:8a:54:fb:f8:c6:8f:06:ca:90:8f:1f:76:21:61:28:57:09:
95:c0:f2:29:e0:38:14:42:37:79:12:ba:eb:9b:15:9b:bb:74:
69:e9:c3:c8:4c:1f:49:1e:56:1b:17:0d:19:e7:ae:7c:aa:45:
17:33:1f:56:67:cb:e9:c4:a4:84:bb:54:7b:e4:a7:98:31:cf:
a4:f3:c2:2b:a1:c7:a9:25:6f:02:5b:a2:0d:96:11:02:5f:bd:
82:39:f2:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtEpWailIQ+lK59fSsWLVWbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NjI1MjFlYjU4YjQ1YjBjNWEyY2NiZTM4MzMxNWNlNzlk
N2VlYTUwHhcNMjUxMjIyMDYwMDQ4WhcNMjUxMjIzMDYwMDQ4WjAzMTEwLwYDVQQD
Eyg0OTA5ZGFjYzc2ZWY4YjYwN2UwMTZmNTYzMWQyMDI3NDY5ZTBkMGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwSS4lY+yw9jAdW0liwJnoIKh7Q5
oMtvfNpfN3W7KcGRDIWnB7bZiRSUzHRG3ra1Quo4Y5sNprIJBqvlDxTy1Z8WNpsv
H6+aY12RW2f6uHgqMPekmpfjKLgypH8c2myoe28OccNULz7z82NGPbK8pJw69xH8
QaSpbEyV45dBhD1ffMfA5OQ2ikCaGBp1lTtROeqoUGL3z0k7tii3OXOjZgRJ6xzM
KwTtwdJSh5H1sEBzexYoQKpZrENDBn9UT5Shpi2QJ/oHlE0izMCPFvTJbDS6BeoY
4giBFAr2UHsmBZgKBYn11+RcmxM1MoLpeJBjZZrYN7J5Zw93B7ftbWc8mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEkJ2sx274tgfgFvVjHSAnRp4NDpMB8GA1UdIwQY
MBaAFEZiUh61i0WwxaLMvjgzFc551+6lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm1KU0hyV0xSYkRGb3N5LU9ETVZ6bm5YN3FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi83MmM5ODQtMTQxMC00NWVjLTg2YzUt
OGFiODY5Mzc0MTBhLzEvUm1KU0hyV0xSYkRGb3N5LU9ETVZ6bm5YN3FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi83MmM5ODQtMTQxMC00NWVjLTg2YzUtOGFiODY5Mzc0MTBh
LzEvUm1KU0hyV0xSYkRGb3N5LU9ETVZ6bm5YN3FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANYHxQo3r
K0ywD+iH1Lnuo4DEGdXEfOOE6w80RQINf57+rAxz5Wf7KWByDfZbbMIogdLYgyBV
f7TavhyA9FHmZgLA6r39ONuXe2r+M6ZkEG0UC+lnvBd9g+/XNiVwWF/MjH2hhG/T
oyioNi4dOFwt/dEVzG47jvgGsywmPlt6cDLQ2AXS08gp4CPsTvYrO4dBuomjtLDX
PM4jFKgDAYmtzhoC+4pU+/jGjwbKkI8fdiFhKFcJlcDyKeA4FEI3eRK665sVm7t0
aenDyEwfSR5WGxcNGeeufKpFFzMfVmfL6cSkhLtUe+SnmDHPpPPCK6HHqSVvAlui
DZYRAl+9gjnydw==
-----END CERTIFICATE-----
Generated at Mon Dec 22 14:29:47 2025 by rpki-client