This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
File: RsmLLko-Bg3vRavGLA40X6qAtew.mft (raw, json)
Hash identifier: EfjM+Uf9W+SHhkfH1WIhK8+mh6J2VOuFLFW4T4UeFe0=
Subject key identifier: 5E:48:F0:51:7C:C5:0F:6D:0E:7F:D5:0D:61:09:B6:C1:F7:92:CB:03
Authority key identifier: 46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC
Certificate issuer: /CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
Certificate serial: 019B047E916FC3F2C2B0CBB467ECD3BE0302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
Manifest number: 1768
Signing time: Tue 09 Dec 2025 19:02:42 +0000
Manifest this update: Tue 09 Dec 2025 19:02:42 +0000
Manifest next update: Wed 10 Dec 2025 19:02:42 +0000
Files and hashes: 1: L0dTKkQLJ3uzLHQGVfykgpUct-Y.roa (hash: 5V6u+yE0dUBJcNB/BjBYWG3G1jW8CFnCJRPOVXm/+Pc=)
2: MQbRmyMiZ7drfjUV2srkSRdezP4.roa (hash: gjEdlX/wGs/3ibPMlMpi8lsSgsJHw2rwLC0B8NaMJ5Y=)
3: QZzbQhQ_hTZIcpg_dJkoU6Xnnto.roa (hash: ldOsJ7e5BAcbKryAIK3bxjb3zV/1t/RqgjAXr4tG6fc=)
4: RkiK4rh0-E_-W_HqKwRMEYj0Jsc.roa (hash: gqhP/twOb4neptA72hsuXyc44XyhAEB7mRcgXtdjn0o=)
5: RsmLLko-Bg3vRavGLA40X6qAtew.crl (hash: N20KLzkpfhRt50TJrLOsuQeQ8Az4GcNe5Hit+gfGmmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Dec 2025 16:15:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:04:7e:91:6f:c3:f2:c2:b0:cb:b4:67:ec:d3:be:03:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
Validity
Not Before: Dec 9 19:02:42 2025 GMT
Not After : Dec 10 19:02:42 2025 GMT
Subject: CN=5e48f0517cc50f6d0e7fd50d6109b6c1f792cb03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:70:ae:cf:e2:cb:89:24:78:f1:12:4e:6e:81:
8c:44:09:f2:08:a3:74:ab:be:99:9e:09:e7:2e:9f:
5f:19:42:1b:fb:fd:94:9f:c4:61:97:11:f9:96:ba:
39:f4:5c:ac:43:b9:b8:05:6c:4b:b4:93:0f:5c:3c:
2f:72:90:03:ea:ac:37:35:17:1c:37:fc:bd:2b:c1:
e4:6f:9e:eb:7c:59:d4:bc:2c:84:9f:6e:08:18:27:
1b:5d:1d:95:79:86:67:e0:dd:2c:25:a2:f9:ab:02:
0b:54:ad:6f:a7:b4:16:cd:1d:31:ef:dc:5e:62:3f:
8d:c5:ba:5a:9e:fe:f9:50:6a:b7:4a:c1:f1:6f:e3:
ad:9c:41:d6:fd:7c:a6:22:98:a2:52:5b:89:70:33:
94:0f:78:95:88:6c:ce:87:6b:67:d7:8c:79:4f:45:
86:36:a8:a4:fa:9f:95:14:e8:97:74:7f:c0:6c:f5:
d1:13:cc:c3:26:ba:1b:cf:bb:cb:0b:17:25:75:a0:
a9:6b:f0:82:5b:8a:e3:ae:d5:67:11:4c:42:46:56:
ba:df:69:16:62:0c:10:d3:c8:71:b8:cc:7d:49:95:
68:67:68:2c:e6:1c:56:88:ec:a4:41:4b:81:c9:29:
d8:de:e8:20:fc:0b:5b:c5:24:35:21:d5:83:f5:1f:
f9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:48:F0:51:7C:C5:0F:6D:0E:7F:D5:0D:61:09:B6:C1:F7:92:CB:03
X509v3 Authority Key Identifier:
keyid:46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:82:44:09:5b:86:f5:3f:a2:f8:13:f6:9f:25:ff:a9:23:19:
54:ad:9a:d2:9a:46:85:29:a3:e2:e8:c8:5e:45:db:c9:a0:d8:
46:5c:6a:67:8f:c2:54:04:fd:4c:4f:56:ef:92:9b:17:c3:a4:
e2:22:30:b5:70:1d:07:02:38:68:bd:db:e1:b5:21:47:c6:fa:
28:9e:0a:b7:eb:01:db:95:fa:b4:3a:ed:70:cd:77:e8:db:2c:
c2:4a:6b:fe:91:3f:ae:cf:ce:b4:45:9d:fe:79:d2:5d:6d:c1:
51:07:41:eb:19:97:b4:9a:c7:b8:97:ac:42:fe:d1:ba:0a:d4:
13:e2:16:05:20:62:3d:97:b6:16:42:6f:28:98:00:3b:07:e4:
ac:e9:45:12:a1:02:bf:4d:88:ee:24:08:86:a6:7d:34:f9:43:
44:1f:c4:4c:0c:a5:74:4e:49:8d:39:2f:84:27:23:67:1a:13:
76:b4:e9:54:b0:c8:70:13:f5:43:ba:df:f7:e9:c1:31:19:a5:
e9:16:73:5b:45:c9:4f:1b:8e:ea:72:e3:e0:5d:65:96:17:2b:
33:e0:4a:3d:1e:4c:c5:68:ac:81:1a:a7:27:b2:26:bd:91:96:
5d:48:f0:b1:25:a3:28:f3:bb:a9:48:1b:05:8c:7e:fc:b9:ba:
18:f1:30:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 23:36:15 2025 by rpki-client