This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft File: RsmLLko-Bg3vRavGLA40X6qAtew.mft (raw, json) Hash identifier: UMh8+EVVRP9ASp8ga9Vyb1GgL4np5C2ldB55vKYugBo= Subject key identifier: B8:FA:52:68:10:32:0B:33:04:E5:CD:D9:70:E6:44:4E:48:92:51:E1 Authority key identifier: 46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC Certificate issuer: /CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec Certificate serial: 019AAD96C4B0059D88271EC491B781F1A780 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft Manifest number: 173B Signing time: Sat 22 Nov 2025 22:02:10 +0000 Manifest this update: Sat 22 Nov 2025 22:02:10 +0000 Manifest next update: Sun 23 Nov 2025 22:02:10 +0000 Files and hashes: 1: L0dTKkQLJ3uzLHQGVfykgpUct-Y.roa (hash: 5V6u+yE0dUBJcNB/BjBYWG3G1jW8CFnCJRPOVXm/+Pc=) 2: MQbRmyMiZ7drfjUV2srkSRdezP4.roa (hash: gjEdlX/wGs/3ibPMlMpi8lsSgsJHw2rwLC0B8NaMJ5Y=) 3: QZzbQhQ_hTZIcpg_dJkoU6Xnnto.roa (hash: ldOsJ7e5BAcbKryAIK3bxjb3zV/1t/RqgjAXr4tG6fc=) 4: RkiK4rh0-E_-W_HqKwRMEYj0Jsc.roa (hash: gqhP/twOb4neptA72hsuXyc44XyhAEB7mRcgXtdjn0o=) 5: RsmLLko-Bg3vRavGLA40X6qAtew.crl (hash: oG8sXG3wT3nc9LvMfsmtTbuszj7GBVIGqia1DPKEIbk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 21:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ad:96:c4:b0:05:9d:88:27:1e:c4:91:b7:81:f1:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec Validity Not Before: Nov 22 22:02:10 2025 GMT Not After : Nov 23 22:02:10 2025 GMT Subject: CN=b8fa526810320b3304e5cdd970e6444e489251e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3e:60:fd:4b:89:01:73:9b:ec:b1:6f:f3:c4: 13:d5:2c:ff:37:f6:65:cb:a0:5a:5c:4d:9a:05:c2: 2a:9d:5b:09:3f:d4:20:bd:1d:f2:2d:11:ed:55:b1: cb:19:ba:49:9f:16:f3:e9:5a:68:9f:7d:3a:8a:01: 7f:13:37:60:24:55:f8:03:37:06:4b:bd:11:a7:31: 7f:88:ad:5f:e3:f0:4f:ae:65:36:12:2f:16:25:77: 2e:31:4a:d5:d5:31:2c:98:3e:b6:19:20:7d:84:be: e3:5c:9d:6e:30:23:dd:95:c8:67:9d:ea:ba:77:dd: d5:bf:2f:a6:34:81:66:e9:e7:c6:b4:55:d8:b0:c6: ad:29:f5:ab:82:41:ec:ae:ad:69:c1:d3:57:9b:7f: 0c:9b:84:a6:6f:9f:fc:19:c6:fb:26:04:c7:61:97: d8:fe:eb:b5:35:18:9e:ec:9f:f9:f5:7a:36:8a:49: c7:8a:34:94:c3:55:52:e7:e3:e1:b6:06:d9:59:80: 3e:60:bf:93:8f:8d:45:9b:c3:eb:74:db:48:c4:29: 6c:2b:6d:fa:32:9f:0e:f1:8e:24:c4:5b:75:01:4c: ec:93:b0:49:ed:5c:58:87:a2:02:ee:6f:48:56:8e: ff:cb:d4:32:20:38:74:d9:7c:88:eb:35:1f:82:e5: 01:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:FA:52:68:10:32:0B:33:04:E5:CD:D9:70:E6:44:4E:48:92:51:E1 X509v3 Authority Key Identifier: keyid:46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:e4:a9:ee:55:63:a0:b8:c8:97:57:4b:23:87:19:8b:2b:9a: 5e:3b:24:d6:dd:d5:33:e8:d7:06:b0:70:7c:74:19:9e:f0:19: 39:ac:3d:35:66:d4:d9:35:4c:be:e2:63:97:04:c5:cd:f5:83: f9:c8:ac:55:00:f7:33:ee:c3:59:01:33:fa:d0:1a:f3:3c:ca: 25:5f:51:12:34:7c:c2:a6:82:85:fa:4b:1e:00:0c:08:b0:2b: 04:37:10:b0:6b:d0:a6:44:ab:71:65:82:6e:37:e1:27:d7:d8: de:5a:34:c3:a7:a9:8a:ef:7d:39:4c:8d:d5:74:ac:e6:06:a9: 43:cd:55:de:f4:e7:89:7f:f6:9d:cf:5b:83:8b:00:b0:91:02: ab:2c:5c:07:04:30:a9:91:30:d2:b1:b5:45:ab:26:6e:c4:e2: 12:1f:78:5f:ce:68:ae:85:a5:ad:53:6b:2d:8c:20:f4:c8:8c: f3:39:58:96:a6:32:a3:be:ec:9b:1e:c6:f4:a7:07:45:ce:b2: 69:61:4a:c0:18:cb:4e:11:b7:90:0d:90:d1:00:27:20:7e:93: 6b:d9:a1:67:64:45:23:94:42:6f:66:3f:80:cd:e3:ac:55:4f: b6:20:7f:11:c8:58:bb:43:04:fc:c9:e9:33:cd:d7:75:2a:42: 60:11:8a:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqtlsSwBZ2IJx7EkbeB8aeAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2Yzk4YjJlNGEzZTA2MGRlZjQ1YWJjNjJjMGUzNDVmYWE4 MGI1ZWMwHhcNMjUxMTIyMjIwMjEwWhcNMjUxMTIzMjIwMjEwWjAzMTEwLwYDVQQD EyhiOGZhNTI2ODEwMzIwYjMzMDRlNWNkZDk3MGU2NDQ0ZTQ4OTI1MWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz5g/UuJAXOb7LFv88QT1Sz/N/Zl y6BaXE2aBcIqnVsJP9QgvR3yLRHtVbHLGbpJnxbz6Vpon306igF/EzdgJFX4AzcG S70RpzF/iK1f4/BPrmU2Ei8WJXcuMUrV1TEsmD62GSB9hL7jXJ1uMCPdlchnneq6 d93Vvy+mNIFm6efGtFXYsMatKfWrgkHsrq1pwdNXm38Mm4Smb5/8Gcb7JgTHYZfY /uu1NRie7J/59Xo2iknHijSUw1VS5+PhtgbZWYA+YL+Tj41Fm8PrdNtIxClsK236 Mp8O8Y4kxFt1AUzsk7BJ7VxYh6IC7m9IVo7/y9QyIDh02XyI6zUfguUBuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLj6UmgQMgszBOXN2XDmRE5IklHhMB8GA1UdIwQY MBaAFEbJiy5KPgYN70WrxiwONF+qgLXsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnNtTExrby1CZzN2UmF2R0xBNDBYNnFBdGV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yYWE4ZDEtY2I3MS00OTA0LWE1OTEt MzQ0OTUyMjcxMGU3LzEvUnNtTExrby1CZzN2UmF2R0xBNDBYNnFBdGV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8yYWE4ZDEtY2I3MS00OTA0LWE1OTEtMzQ0OTUyMjcxMGU3 LzEvUnNtTExrby1CZzN2UmF2R0xBNDBYNnFBdGV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQOSp7lVj oLjIl1dLI4cZiyuaXjsk1t3VM+jXBrBwfHQZnvAZOaw9NWbU2TVMvuJjlwTFzfWD +cisVQD3M+7DWQEz+tAa8zzKJV9REjR8wqaChfpLHgAMCLArBDcQsGvQpkSrcWWC bjfhJ9fY3lo0w6epiu99OUyN1XSs5gapQ81V3vTniX/2nc9bg4sAsJECqyxcBwQw qZEw0rG1RasmbsTiEh94X85oroWlrVNrLYwg9MiM8zlYlqYyo77smx7G9KcHRc6y aWFKwBjLThG3kA2Q0QAnIH6Ta9mhZ2RFI5RCb2Y/gM3jrFVPtiB/EchYu0ME/Mnp M83XdSpCYBGK2Q== -----END CERTIFICATE-----Generated at Sun Nov 23 05:22:32 2025 by rpki-client