This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft File: rM-ri4kwEKG14lBy4dRWkEST9S0.mft (raw, json) Hash identifier: CCOwqfaETV/0q5MWQkneo5CyxveL0IOkm6atGU8Lmj0= Subject key identifier: 6F:95:C4:BB:56:A6:73:AF:BF:6D:F5:2A:8D:0D:14:E7:DB:4E:B6:49 Authority key identifier: AC:CF:AB:8B:89:30:10:A1:B5:E2:50:72:E1:D4:56:90:44:93:F5:2D Certificate issuer: /CN=accfab8b893010a1b5e25072e1d456904493f52d Certificate serial: 019B465D025C854A5241EEF6B3A59E94E881 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft Manifest number: 1051 Signing time: Mon 22 Dec 2025 14:00:59 +0000 Manifest this update: Mon 22 Dec 2025 14:00:59 +0000 Manifest next update: Tue 23 Dec 2025 14:00:59 +0000 Files and hashes: 1: 1-3Y-4ahWm1ezt431zCYGOBUyQvs.roa (hash: zupu0GMNILT7rH6BKtk5nw5qlb8oVDhhuZpZjAfbi5M=) 2: rM-ri4kwEKG14lBy4dRWkEST9S0.crl (hash: m0Km4BLEcP86xBll6PLIxEg773vMRYDiLyuaZ2mhnHY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.crl rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 14:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:5d:02:5c:85:4a:52:41:ee:f6:b3:a5:9e:94:e8:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=accfab8b893010a1b5e25072e1d456904493f52d Validity Not Before: Dec 22 14:00:59 2025 GMT Not After : Dec 23 14:00:59 2025 GMT Subject: CN=6f95c4bb56a673afbf6df52a8d0d14e7db4eb649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:47:3f:62:00:8f:ad:52:a0:3d:c1:f4:ca:39: 8a:c8:50:15:d8:44:c2:ed:8a:d2:9f:b4:93:4c:e1: 02:42:33:be:1e:b8:5c:50:94:f2:32:ae:b9:4a:34: 56:f9:19:cf:9e:7d:ca:5b:68:ff:84:43:0e:18:1a: f4:e5:4e:0c:b8:7c:b7:a1:99:2f:44:a2:4a:a8:af: dd:2e:cc:c0:7b:ae:40:07:69:2f:6c:f0:cc:ef:b2: 47:61:61:78:a3:c1:aa:60:ab:1a:46:f5:15:e1:fc: 3e:a9:a5:f2:5d:0f:ef:b4:a8:c7:b8:33:a5:50:3d: f0:d4:b6:37:ac:2b:e5:ae:0a:4e:ab:f6:46:eb:4f: fd:6d:6d:6d:5e:2d:f5:e2:a0:22:31:99:9b:aa:09: 49:86:a9:c1:19:ae:21:de:5b:72:9b:59:4d:08:b0: 51:29:fd:b4:3b:fe:51:bf:97:02:6e:da:13:88:ba: 2f:e9:ec:02:82:03:1f:c7:00:a6:e6:6a:fe:2d:8d: 18:b3:c2:b4:76:9d:af:b3:4a:d1:07:ce:ed:22:2c: 2d:48:3d:4a:3b:56:d6:1c:55:15:ea:45:59:3a:2b: 58:e1:dc:c2:df:e3:52:4e:60:3b:d2:8f:33:95:66: d6:5a:fb:ad:51:28:ba:e4:33:7d:c3:85:9c:08:bb: 06:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:95:C4:BB:56:A6:73:AF:BF:6D:F5:2A:8D:0D:14:E7:DB:4E:B6:49 X509v3 Authority Key Identifier: keyid:AC:CF:AB:8B:89:30:10:A1:B5:E2:50:72:E1:D4:56:90:44:93:F5:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:de:fe:4d:47:d8:28:9c:5b:7f:81:81:af:ed:b2:58:20:4f: 0d:0a:04:26:c8:4d:0e:1c:81:59:2c:cf:4f:f1:8d:27:7c:17: 7a:49:f8:cc:06:d2:47:01:00:12:36:29:b0:96:08:b3:c1:e1: 08:6d:e5:d7:9d:f1:ea:ef:46:3d:a5:10:de:19:62:a6:41:96: c8:4b:ad:ec:f6:b2:ac:4b:b6:a4:e9:75:a9:c0:51:43:c0:b3: 74:6d:45:4f:8e:a7:d6:d4:e9:b0:83:99:fb:70:17:22:70:d8: 5a:31:84:56:b2:70:e4:fe:fa:43:8f:5d:64:50:ae:36:14:74: dd:42:5c:87:d6:2c:8a:75:4e:8d:6b:05:14:a7:af:0d:5f:55: 45:07:b7:1a:a3:87:ae:b9:42:01:2a:47:c9:6e:85:9a:bf:e3: e0:54:e7:33:ee:80:cd:8b:9b:ca:f4:3f:29:e4:88:6c:48:79: eb:68:ee:d2:2b:f5:df:ab:69:63:4d:6a:55:dc:69:2f:79:af: 68:98:ea:3c:c8:62:92:45:21:2b:10:b1:fb:c2:5a:9e:89:75: 62:97:07:2b:59:e0:72:23:ba:25:7a:ed:ae:fd:b0:00:c7:8d: 73:41:74:ef:88:d0:01:b3:22:81:c0:17:b2:23:73:ad:df:b3: 8b:ae:2f:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGXQJchUpSQe72s6WelOiBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjY2ZhYjhiODkzMDEwYTFiNWUyNTA3MmUxZDQ1NjkwNDQ5 M2Y1MmQwHhcNMjUxMjIyMTQwMDU5WhcNMjUxMjIzMTQwMDU5WjAzMTEwLwYDVQQD Eyg2Zjk1YzRiYjU2YTY3M2FmYmY2ZGY1MmE4ZDBkMTRlN2RiNGViNjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6kc/YgCPrVKgPcH0yjmKyFAV2ETC 7YrSn7STTOECQjO+HrhcUJTyMq65SjRW+RnPnn3KW2j/hEMOGBr05U4MuHy3oZkv RKJKqK/dLszAe65AB2kvbPDM77JHYWF4o8GqYKsaRvUV4fw+qaXyXQ/vtKjHuDOl UD3w1LY3rCvlrgpOq/ZG60/9bW1tXi314qAiMZmbqglJhqnBGa4h3ltym1lNCLBR Kf20O/5Rv5cCbtoTiLov6ewCggMfxwCm5mr+LY0Ys8K0dp2vs0rRB87tIiwtSD1K O1bWHFUV6kVZOitY4dzC3+NSTmA70o8zlWbWWvutUSi65DN9w4WcCLsGnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG+VxLtWpnOvv231Ko0NFOfbTrZJMB8GA1UdIwQY MBaAFKzPq4uJMBChteJQcuHUVpBEk/UtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck0tcmk0a3dFS0cxNGxCeTRkUldrRVNUOVMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80Mjg5MTEtODgxNi00ZjExLTk3YTYt NDg4MmU2YjU2OGIyLzEvck0tcmk0a3dFS0cxNGxCeTRkUldrRVNUOVMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80Mjg5MTEtODgxNi00ZjExLTk3YTYtNDg4MmU2YjU2OGIy LzEvck0tcmk0a3dFS0cxNGxCeTRkUldrRVNUOVMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG97+TUfY KJxbf4GBr+2yWCBPDQoEJshNDhyBWSzPT/GNJ3wXekn4zAbSRwEAEjYpsJYIs8Hh CG3l153x6u9GPaUQ3hlipkGWyEut7PayrEu2pOl1qcBRQ8CzdG1FT46n1tTpsIOZ +3AXInDYWjGEVrJw5P76Q49dZFCuNhR03UJch9YsinVOjWsFFKevDV9VRQe3GqOH rrlCASpHyW6Fmr/j4FTnM+6AzYubyvQ/KeSIbEh562ju0iv136tpY01qVdxpL3mv aJjqPMhikkUhKxCx+8Janol1YpcHK1ngciO6JXrtrv2wAMeNc0F074jQAbMigcAX siNzrd+zi64v5w== -----END CERTIFICATE-----Generated at Mon Dec 22 20:31:36 2025 by rpki-client