This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft File: RsmLLko-Bg3vRavGLA40X6qAtew.mft (raw, json) Hash identifier: DECfqHG4N+qQY5exGcE8Jr7Y5FgmVqIbOmXInGvN+M4= Subject key identifier: 65:A0:E2:01:DC:5C:62:50:0D:CA:E4:8C:9D:D7:24:B0:3D:AB:BE:6A Authority key identifier: 46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC Certificate issuer: /CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec Certificate serial: 019B12034EC841481E7B7839D4E92F7BAA13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft Manifest number: 176F Signing time: Fri 12 Dec 2025 10:02:44 +0000 Manifest this update: Fri 12 Dec 2025 10:02:44 +0000 Manifest next update: Sat 13 Dec 2025 10:02:44 +0000 Files and hashes: 1: L0dTKkQLJ3uzLHQGVfykgpUct-Y.roa (hash: 5V6u+yE0dUBJcNB/BjBYWG3G1jW8CFnCJRPOVXm/+Pc=) 2: MQbRmyMiZ7drfjUV2srkSRdezP4.roa (hash: gjEdlX/wGs/3ibPMlMpi8lsSgsJHw2rwLC0B8NaMJ5Y=) 3: QZzbQhQ_hTZIcpg_dJkoU6Xnnto.roa (hash: ldOsJ7e5BAcbKryAIK3bxjb3zV/1t/RqgjAXr4tG6fc=) 4: RkiK4rh0-E_-W_HqKwRMEYj0Jsc.roa (hash: gqhP/twOb4neptA72hsuXyc44XyhAEB7mRcgXtdjn0o=) 5: RsmLLko-Bg3vRavGLA40X6qAtew.crl (hash: 34kjFjKM+Z8E9ocHY+fxag1b7dGmssM73JpV4N6kKCA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:03:4e:c8:41:48:1e:7b:78:39:d4:e9:2f:7b:aa:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec Validity Not Before: Dec 12 10:02:44 2025 GMT Not After : Dec 13 10:02:44 2025 GMT Subject: CN=65a0e201dc5c62500dcae48c9dd724b03dabbe6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e1:aa:54:9e:80:aa:10:68:e6:a6:62:c3:55: e0:c0:f1:42:00:29:ce:29:1e:2f:71:cc:b1:43:11: 7c:6e:c5:f8:4e:50:e6:89:8f:46:1d:3c:c5:2b:d4: e9:c9:e6:56:7c:58:30:5d:8a:a6:97:1c:48:2c:5c: cd:fc:35:53:13:9f:f7:65:ff:73:84:f9:96:1c:44: 35:9d:0d:3c:ba:f7:30:01:7b:c2:a6:3a:ef:ee:6c: 00:0e:8d:f4:c7:1b:c1:05:6d:f3:79:04:25:83:c9: 8f:c4:8d:22:1f:68:88:5d:8a:8e:3f:57:ed:a3:e8: f7:cc:88:9b:47:eb:57:24:a3:e1:b6:36:a0:ac:df: e5:50:30:4e:c0:c0:4a:9f:b1:8e:23:8e:af:ce:2d: ec:84:34:e1:29:30:31:85:e1:10:64:e9:b3:e2:5c: c0:f6:c9:cf:0b:f2:80:7b:3f:55:b6:6f:a0:52:db: b4:4c:2b:c0:58:e1:85:4c:2e:ab:f5:a6:9f:0e:39: 47:4c:c0:fb:d7:0c:a3:e1:c1:fe:0d:07:0a:aa:52: 87:8f:95:1f:30:fb:f0:46:c5:be:60:05:d0:21:05: 04:97:98:d8:e6:f2:7c:fe:71:18:cb:35:b6:7e:c9: 6d:09:03:97:8c:b8:10:3b:5f:6a:d7:fe:17:fd:9a: 6c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:A0:E2:01:DC:5C:62:50:0D:CA:E4:8C:9D:D7:24:B0:3D:AB:BE:6A X509v3 Authority Key Identifier: keyid:46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:4f:85:ec:42:f5:a6:fd:69:f9:c0:b3:b4:6b:37:da:08:51: 9b:ce:2c:fe:67:08:30:1b:33:85:2a:1a:52:ce:41:bf:29:cd: 6d:9c:bf:c1:df:c0:c1:d0:06:c3:f1:7b:ab:7a:4c:f4:38:fd: 63:0b:79:af:07:f0:1f:db:a9:04:0d:36:ef:2c:69:90:89:53: 98:87:ad:5f:b8:49:02:66:9a:83:b1:83:ff:8a:ac:05:2d:53: 93:6a:4f:cb:3a:27:a8:e6:3f:be:19:3d:6f:9e:01:8c:96:cd: 1a:6e:03:6e:c2:0e:e0:c9:35:6d:83:d9:a3:a6:b9:4b:38:63: cb:09:89:d1:f9:dd:54:35:58:17:9c:b5:3b:89:b5:9f:40:86: 95:bc:0a:24:7f:d0:d5:4d:b1:4e:da:f8:cd:6f:64:7c:84:5e: 16:22:76:fd:08:b9:c8:3b:ee:dd:90:4b:7d:3f:de:8a:9d:7d: 4b:a0:75:43:22:47:dc:09:05:00:39:fe:0f:da:85:d9:0f:52: 9e:43:ee:14:f7:31:dd:6e:f1:58:f9:55:38:ca:eb:46:56:06: 1d:b1:44:5f:42:43:c7:db:dc:51:4d:94:27:fb:b4:54:4f:99: 1f:ce:cd:06:ad:f2:b8:e2:bc:5d:00:63:db:45:2b:41:bb:da: 06:43:b8:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSA07IQUgee3g51Okve6oTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2Yzk4YjJlNGEzZTA2MGRlZjQ1YWJjNjJjMGUzNDVmYWE4 MGI1ZWMwHhcNMjUxMjEyMTAwMjQ0WhcNMjUxMjEzMTAwMjQ0WjAzMTEwLwYDVQQD Eyg2NWEwZTIwMWRjNWM2MjUwMGRjYWU0OGM5ZGQ3MjRiMDNkYWJiZTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuGqVJ6AqhBo5qZiw1XgwPFCACnO KR4vccyxQxF8bsX4TlDmiY9GHTzFK9TpyeZWfFgwXYqmlxxILFzN/DVTE5/3Zf9z hPmWHEQ1nQ08uvcwAXvCpjrv7mwADo30xxvBBW3zeQQlg8mPxI0iH2iIXYqOP1ft o+j3zIibR+tXJKPhtjagrN/lUDBOwMBKn7GOI46vzi3shDThKTAxheEQZOmz4lzA 9snPC/KAez9Vtm+gUtu0TCvAWOGFTC6r9aafDjlHTMD71wyj4cH+DQcKqlKHj5Uf MPvwRsW+YAXQIQUEl5jY5vJ8/nEYyzW2fsltCQOXjLgQO19q1/4X/ZpsHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGWg4gHcXGJQDcrkjJ3XJLA9q75qMB8GA1UdIwQY MBaAFEbJiy5KPgYN70WrxiwONF+qgLXsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnNtTExrby1CZzN2UmF2R0xBNDBYNnFBdGV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yYWE4ZDEtY2I3MS00OTA0LWE1OTEt MzQ0OTUyMjcxMGU3LzEvUnNtTExrby1CZzN2UmF2R0xBNDBYNnFBdGV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8yYWE4ZDEtY2I3MS00OTA0LWE1OTEtMzQ0OTUyMjcxMGU3 LzEvUnNtTExrby1CZzN2UmF2R0xBNDBYNnFBdGV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHk+F7EL1 pv1p+cCztGs32ghRm84s/mcIMBszhSoaUs5BvynNbZy/wd/AwdAGw/F7q3pM9Dj9 Ywt5rwfwH9upBA027yxpkIlTmIetX7hJAmaag7GD/4qsBS1Tk2pPyzonqOY/vhk9 b54BjJbNGm4DbsIO4Mk1bYPZo6a5SzhjywmJ0fndVDVYF5y1O4m1n0CGlbwKJH/Q 1U2xTtr4zW9kfIReFiJ2/Qi5yDvu3ZBLfT/eip19S6B1QyJH3AkFADn+D9qF2Q9S nkPuFPcx3W7xWPlVOMrrRlYGHbFEX0JDx9vcUU2UJ/u0VE+ZH87NBq3yuOK8XQBj 20UrQbvaBkO4Gw== -----END CERTIFICATE-----Generated at Fri Dec 12 15:45:44 2025 by rpki-client