This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft File: RsmLLko-Bg3vRavGLA40X6qAtew.mft (raw, json) Hash identifier: p+wJ8Bdl1x9lwehZ2//WbY3xs9UmvtKBFbjNih/hXEw= Subject key identifier: 4A:65:67:78:79:3B:1D:8E:CC:F4:6E:E5:34:84:FB:BC:69:53:E4:38 Authority key identifier: 46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC Certificate issuer: /CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec Certificate serial: 019B729250F52D208BBBDC0C764AAA427A77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft Manifest number: 17A1 Signing time: Wed 31 Dec 2025 04:02:30 +0000 Manifest this update: Wed 31 Dec 2025 04:02:30 +0000 Manifest next update: Thu 01 Jan 2026 04:02:30 +0000 Files and hashes: 1: L0dTKkQLJ3uzLHQGVfykgpUct-Y.roa (hash: 5V6u+yE0dUBJcNB/BjBYWG3G1jW8CFnCJRPOVXm/+Pc=) 2: MQbRmyMiZ7drfjUV2srkSRdezP4.roa (hash: gjEdlX/wGs/3ibPMlMpi8lsSgsJHw2rwLC0B8NaMJ5Y=) 3: QZzbQhQ_hTZIcpg_dJkoU6Xnnto.roa (hash: ldOsJ7e5BAcbKryAIK3bxjb3zV/1t/RqgjAXr4tG6fc=) 4: RkiK4rh0-E_-W_HqKwRMEYj0Jsc.roa (hash: gqhP/twOb4neptA72hsuXyc44XyhAEB7mRcgXtdjn0o=) 5: RsmLLko-Bg3vRavGLA40X6qAtew.crl (hash: escO9N2ocyctH3k1/nhnbhr3Aufg5Jjs6En8zhTd1KA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 04:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:92:50:f5:2d:20:8b:bb:dc:0c:76:4a:aa:42:7a:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec Validity Not Before: Dec 31 04:02:30 2025 GMT Not After : Jan 1 04:02:30 2026 GMT Subject: CN=4a656778793b1d8eccf46ee53484fbbc6953e438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2d:7d:b8:b8:6d:b7:fe:eb:75:d9:91:2b:db: 05:e6:15:5c:5d:2e:e4:3f:1e:7c:a1:a4:ff:58:5d: 33:8c:cd:8e:e5:d2:1b:11:5d:ab:b3:af:64:4d:57: 58:5e:2b:5c:ce:f4:05:9a:2e:df:fa:23:02:e5:6c: 54:8a:0d:70:b5:40:a4:47:4c:ec:47:3f:e8:de:a4: 80:7a:56:8d:8f:4a:81:ea:0f:83:14:09:5b:5b:2e: 6d:8b:d2:3c:ec:3f:3d:4c:db:b9:fd:5a:e4:d7:62: f4:93:26:2d:36:ca:a3:52:0b:67:43:01:5a:cc:7f: 04:f8:ed:f8:66:04:d3:88:3b:83:01:51:fc:5c:87: 9c:8b:d7:3e:93:8d:c4:66:bf:40:ff:15:df:75:13: 10:ea:fd:ef:05:14:bb:c9:67:e8:bb:b2:99:33:55: de:48:8f:e9:58:01:19:43:6a:3c:eb:e9:62:4e:4f: 05:de:37:bf:8b:c4:72:25:01:07:1a:c6:96:cb:3d: ce:42:24:57:0c:30:77:40:cd:44:65:f8:41:12:da: 0d:99:22:89:68:56:2d:19:ec:a1:ba:cc:e3:9c:47: 78:73:39:48:41:c5:6a:1c:8f:1c:46:b1:4f:5c:2c: 02:34:2c:5f:10:34:ad:dd:32:db:bf:ce:21:97:b6: fa:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:65:67:78:79:3B:1D:8E:CC:F4:6E:E5:34:84:FB:BC:69:53:E4:38 X509v3 Authority Key Identifier: keyid:46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:32:79:4c:14:28:81:21:be:0a:49:0d:6c:4b:d4:89:38:d6: 1c:16:bc:be:18:0a:14:aa:3b:a8:d7:49:31:c5:61:c2:d0:61: 88:6e:17:f5:23:be:6b:30:dc:6c:32:66:4e:f0:65:8a:18:20: 85:67:98:b9:a3:5d:a9:d8:76:98:13:2e:0b:9a:6f:e6:74:15: 47:9d:8e:11:7c:f6:b6:ea:a6:dc:44:23:7f:1f:ad:62:3b:48: e9:01:85:02:ee:32:8c:d4:61:64:cf:09:cf:49:dc:0b:1c:d9: 1a:fe:7d:f7:48:e0:5e:77:80:ba:f8:ad:bd:b6:bc:a5:60:ae: 77:60:b4:76:36:10:ce:43:ce:3d:b5:84:38:9e:e3:66:23:70: b5:75:fd:16:e4:88:72:f0:ec:ad:4c:53:c1:54:81:aa:2f:82: 7d:5d:05:d0:c5:b4:35:3d:ef:7a:db:b3:76:9d:a0:c9:c1:14: 3f:7b:7f:47:43:32:d8:70:bb:23:fc:33:a0:26:08:15:62:52: 22:3f:d5:ef:f4:8f:f7:ea:d3:7c:4b:5c:6d:6c:7a:54:e0:4d: 8f:db:be:17:03:b8:8f:53:f5:9a:f2:ba:ef:14:ac:4e:cf:0f: c6:01:a3:e0:9d:db:e7:38:91:33:1e:21:a2:ef:01:08:b8:d9: 31:49:54:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtyklD1LSCLu9wMdkqqQnp3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2Yzk4YjJlNGEzZTA2MGRlZjQ1YWJjNjJjMGUzNDVmYWE4 MGI1ZWMwHhcNMjUxMjMxMDQwMjMwWhcNMjYwMTAxMDQwMjMwWjAzMTEwLwYDVQQD Eyg0YTY1Njc3ODc5M2IxZDhlY2NmNDZlZTUzNDg0ZmJiYzY5NTNlNDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyi19uLhtt/7rddmRK9sF5hVcXS7k Px58oaT/WF0zjM2O5dIbEV2rs69kTVdYXitczvQFmi7f+iMC5WxUig1wtUCkR0zs Rz/o3qSAelaNj0qB6g+DFAlbWy5ti9I87D89TNu5/Vrk12L0kyYtNsqjUgtnQwFa zH8E+O34ZgTTiDuDAVH8XIeci9c+k43EZr9A/xXfdRMQ6v3vBRS7yWfou7KZM1Xe SI/pWAEZQ2o86+liTk8F3je/i8RyJQEHGsaWyz3OQiRXDDB3QM1EZfhBEtoNmSKJ aFYtGeyhuszjnEd4czlIQcVqHI8cRrFPXCwCNCxfEDSt3TLbv84hl7b6GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEplZ3h5Ox2OzPRu5TSE+7xpU+Q4MB8GA1UdIwQY MBaAFEbJiy5KPgYN70WrxiwONF+qgLXsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnNtTExrby1CZzN2UmF2R0xBNDBYNnFBdGV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yYWE4ZDEtY2I3MS00OTA0LWE1OTEt MzQ0OTUyMjcxMGU3LzEvUnNtTExrby1CZzN2UmF2R0xBNDBYNnFBdGV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8yYWE4ZDEtY2I3MS00OTA0LWE1OTEtMzQ0OTUyMjcxMGU3 LzEvUnNtTExrby1CZzN2UmF2R0xBNDBYNnFBdGV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcjJ5TBQo gSG+CkkNbEvUiTjWHBa8vhgKFKo7qNdJMcVhwtBhiG4X9SO+azDcbDJmTvBlihgg hWeYuaNdqdh2mBMuC5pv5nQVR52OEXz2tuqm3EQjfx+tYjtI6QGFAu4yjNRhZM8J z0ncCxzZGv5990jgXneAuvitvba8pWCud2C0djYQzkPOPbWEOJ7jZiNwtXX9FuSI cvDsrUxTwVSBqi+CfV0F0MW0NT3vetuzdp2gycEUP3t/R0My2HC7I/wzoCYIFWJS Ij/V7/SP9+rTfEtcbWx6VOBNj9u+FwO4j1P1mvK67xSsTs8PxgGj4J3b5ziRMx4h ou8BCLjZMUlUvg== -----END CERTIFICATE-----Generated at Wed Dec 31 11:21:22 2025 by rpki-client