This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft File: rmgsTwopQO6oclQqYhXjVJkd60s.mft (raw, json) Hash identifier: mtZbmhrBOFmM3wzSHqyghJY2gJ5Chc9TFF4c1Xd0rU0= Subject key identifier: 16:1B:7D:80:21:16:15:D0:AE:F9:56:9A:40:B7:56:90:8D:C6:8D:33 Authority key identifier: AE:68:2C:4F:0A:29:40:EE:A8:72:54:2A:62:15:E3:54:99:1D:EB:4B Certificate issuer: /CN=ae682c4f0a2940eea872542a6215e354991deb4b Certificate serial: 019B21E2FEAF114A174F307ADE09ED806239 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft Manifest number: 1779 Signing time: Mon 15 Dec 2025 12:01:22 +0000 Manifest this update: Mon 15 Dec 2025 12:01:22 +0000 Manifest next update: Tue 16 Dec 2025 12:01:22 +0000 Files and hashes: 1: ifB7bI8Nz6a1wo-Om4qJOLNZOqU.roa (hash: G4ZTdZq0UWN0ZVqhuNwvAXhge2Xq79dXIWiLnGu1ENA=) 2: rmgsTwopQO6oclQqYhXjVJkd60s.crl (hash: 7YL75y1A71nNRkZfP9qihY7AbA6tT/ARYYLpfc7h1jY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e2:fe:af:11:4a:17:4f:30:7a:de:09:ed:80:62:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae682c4f0a2940eea872542a6215e354991deb4b Validity Not Before: Dec 15 12:01:22 2025 GMT Not After : Dec 16 12:01:22 2025 GMT Subject: CN=161b7d80211615d0aef9569a40b756908dc68d33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:07:fc:2f:f1:1e:91:4e:d4:ca:8c:7c:a6:9c: c9:35:16:32:f3:ae:41:1e:81:98:92:33:35:bc:c2: ba:e1:26:bd:e7:48:4a:73:a8:ad:6d:b8:35:f6:3f: 84:20:7c:ca:b4:08:70:15:22:f7:d3:34:61:fb:d3: 9b:24:00:51:c5:cd:7f:ff:a2:7e:5d:86:f5:2a:fd: 34:33:88:9e:8d:c8:00:b5:a2:8f:5a:40:45:6e:38: 9f:a1:e1:8d:f9:57:54:a7:25:e9:b3:18:96:d6:4d: b2:cf:ec:c7:30:bc:70:ef:d3:f9:fb:3d:0b:30:ee: aa:85:40:5f:b2:51:5a:70:78:3a:9c:13:7a:a2:e0: 99:cb:0e:37:e3:5d:e3:54:54:ad:61:e0:ae:90:95: 68:0b:72:15:97:6c:44:3b:49:1a:19:fd:a1:41:4e: 77:fb:b8:27:dc:7e:ed:9c:57:e1:6a:9e:7d:6b:4e: 65:4c:aa:5f:80:2c:c1:c8:a9:cf:3f:c8:3d:54:1b: 6b:83:df:dd:59:74:cb:39:30:2f:e5:60:d7:f9:fb: 3f:1f:b0:54:94:4a:53:6a:1d:4d:27:99:8c:76:6c: b6:a6:6c:75:7a:a8:b4:0c:05:fc:32:7a:7b:c8:9d: 3e:a7:c4:d1:99:e0:d7:87:9f:62:a6:67:5e:9a:30: 71:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:1B:7D:80:21:16:15:D0:AE:F9:56:9A:40:B7:56:90:8D:C6:8D:33 X509v3 Authority Key Identifier: keyid:AE:68:2C:4F:0A:29:40:EE:A8:72:54:2A:62:15:E3:54:99:1D:EB:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:e2:b9:06:a7:86:a9:4f:e4:93:59:de:39:58:ae:a9:19:ea: fc:db:83:f2:2f:69:70:82:37:e6:2a:b1:a6:03:8b:02:e8:ba: ba:7a:29:86:73:ac:e9:d7:c1:fd:42:01:0c:8b:9b:84:47:7a: f9:67:b9:4a:59:0b:b2:6d:d4:ca:b6:34:0d:f9:aa:3e:30:bc: b5:37:ac:ca:b8:40:f6:dd:ce:2b:07:2a:ac:c7:7a:b4:e6:a6: 79:f0:b2:ff:99:81:96:63:ee:b2:3b:eb:b2:50:ba:43:7b:26: f0:89:f7:62:50:86:7a:5f:32:84:d4:94:40:4f:0e:f3:b9:60: 20:cd:2e:a2:e7:4e:06:7c:a4:6f:cb:89:95:65:05:63:b2:e6: f2:dd:83:0c:fc:cf:b5:77:24:71:00:32:36:1f:6b:46:8a:82: 6c:4e:55:2b:06:c8:5e:a1:a6:68:3a:ae:a4:58:cd:39:e0:b0: 8e:d0:1e:93:3f:f5:b4:bb:d1:62:85:71:f7:3b:84:48:ec:c5: a0:06:77:3c:61:64:ee:bf:ad:ad:c9:c0:54:26:c2:cc:db:cd: 88:65:88:b2:8f:2a:85:82:65:06:b9:3f:70:5c:64:55:82:53: fa:ae:eb:29:26:4f:c7:5c:be:a5:8a:34:6e:5d:8e:4b:66:83: 83:7a:2b:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4v6vEUoXTzB63gntgGI5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNjgyYzRmMGEyOTQwZWVhODcyNTQyYTYyMTVlMzU0OTkx ZGViNGIwHhcNMjUxMjE1MTIwMTIyWhcNMjUxMjE2MTIwMTIyWjAzMTEwLwYDVQQD EygxNjFiN2Q4MDIxMTYxNWQwYWVmOTU2OWE0MGI3NTY5MDhkYzY4ZDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAf8L/EekU7Uyox8ppzJNRYy865B HoGYkjM1vMK64Sa950hKc6itbbg19j+EIHzKtAhwFSL30zRh+9ObJABRxc1//6J+ XYb1Kv00M4iejcgAtaKPWkBFbjifoeGN+VdUpyXpsxiW1k2yz+zHMLxw79P5+z0L MO6qhUBfslFacHg6nBN6ouCZyw43413jVFStYeCukJVoC3IVl2xEO0kaGf2hQU53 +7gn3H7tnFfhap59a05lTKpfgCzByKnPP8g9VBtrg9/dWXTLOTAv5WDX+fs/H7BU lEpTah1NJ5mMdmy2pmx1eqi0DAX8Mnp7yJ0+p8TRmeDXh59ipmdemjBxiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBYbfYAhFhXQrvlWmkC3VpCNxo0zMB8GA1UdIwQY MBaAFK5oLE8KKUDuqHJUKmIV41SZHetLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm1nc1R3b3BRTzZvY2xRcVloWGpWSmtkNjBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9jNjJjN2YtZjQ2Mi00MzQ4LWIwNjgt ZjA0OWM2NmVmODExLzEvcm1nc1R3b3BRTzZvY2xRcVloWGpWSmtkNjBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9jNjJjN2YtZjQ2Mi00MzQ4LWIwNjgtZjA0OWM2NmVmODEx LzEvcm1nc1R3b3BRTzZvY2xRcVloWGpWSmtkNjBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq+K5BqeG qU/kk1neOViuqRnq/NuD8i9pcII35iqxpgOLAui6unophnOs6dfB/UIBDIubhEd6 +We5SlkLsm3UyrY0DfmqPjC8tTesyrhA9t3OKwcqrMd6tOamefCy/5mBlmPusjvr slC6Q3sm8In3YlCGel8yhNSUQE8O87lgIM0uoudOBnykb8uJlWUFY7Lm8t2DDPzP tXckcQAyNh9rRoqCbE5VKwbIXqGmaDqupFjNOeCwjtAekz/1tLvRYoVx9zuESOzF oAZ3PGFk7r+trcnAVCbCzNvNiGWIso8qhYJlBrk/cFxkVYJT+q7rKSZPx1y+pYo0 bl2OS2aDg3orOA== -----END CERTIFICATE-----Generated at Mon Dec 15 16:51:17 2025 by rpki-client