This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft File: rMMoWMzalYbG2WceMQ1RwoJoxFk.mft (raw, json) Hash identifier: oHsNVeabKBwz96fEPNPO7V1Gzt8Yvp6udTiZFRwG59M= Subject key identifier: 53:CB:B0:15:07:A0:46:BA:3B:81:C6:A8:9A:38:78:AD:1F:BD:8E:FA Authority key identifier: AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59 Certificate issuer: /CN=acc32858ccda9586c6d9671e310d51c28268c459 Certificate serial: 019B5AF65C73E167AB5B0203F4D9083053FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft Manifest number: 1734 Signing time: Fri 26 Dec 2025 14:00:53 +0000 Manifest this update: Fri 26 Dec 2025 14:00:53 +0000 Manifest next update: Sat 27 Dec 2025 14:00:53 +0000 Files and hashes: 1: 5wpBu9lqq6Eh5bxmApWBHSmv8rU.roa (hash: OWwgDNZvQnVhoKGxoJou3ziQhvyReIZ9m1NH7rz0BqA=) 2: rMMoWMzalYbG2WceMQ1RwoJoxFk.crl (hash: PlTcclXI+dsFHkA3+xxbsX10sfJY5U6yqXP5/b5Tul4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.crl rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:5c:73:e1:67:ab:5b:02:03:f4:d9:08:30:53:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acc32858ccda9586c6d9671e310d51c28268c459 Validity Not Before: Dec 26 14:00:53 2025 GMT Not After : Dec 27 14:00:53 2025 GMT Subject: CN=53cbb01507a046ba3b81c6a89a3878ad1fbd8efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:77:39:4a:61:11:2c:57:8c:ac:09:4b:77:c9: 15:43:d1:19:b8:08:0a:42:ad:ff:c2:ec:73:63:28: 48:21:d4:6c:97:4f:6f:ec:c3:0e:38:62:11:6e:37: 3a:89:ee:aa:5d:86:4c:87:96:b0:43:60:aa:cf:8d: e0:bc:00:e2:42:ff:9e:49:9c:62:e1:e1:d5:a8:2d: a4:69:1a:95:28:84:3d:78:18:d6:4e:58:8d:f4:1d: db:be:3a:f7:4d:01:f2:b5:19:b9:33:82:95:9b:96: 26:c2:5b:72:1e:55:08:02:94:41:20:98:01:af:fb: db:04:3c:8f:a5:d7:6a:88:6a:c2:7b:33:9c:31:6d: c7:fa:1b:5f:a0:f4:e4:3e:b9:b5:47:6f:0e:33:72: 4e:c2:d2:e5:8c:14:d1:b0:93:9f:32:c0:9b:61:7f: 5d:06:2d:e5:a2:05:41:53:11:e9:d9:f9:57:8b:70: 81:3a:13:37:cd:cf:b3:de:0d:85:56:1f:01:83:8e: fc:7b:fb:23:18:5a:6d:80:5e:a3:01:2c:26:ad:a0: 0f:0b:94:76:5a:18:c6:3f:5c:17:a6:5a:0a:01:f1: 35:23:c1:9c:28:ae:f9:8f:dc:b7:7f:bc:88:39:5a: 35:fe:55:b1:ca:e4:93:01:59:73:cd:63:d5:41:af: 1f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:CB:B0:15:07:A0:46:BA:3B:81:C6:A8:9A:38:78:AD:1F:BD:8E:FA X509v3 Authority Key Identifier: keyid:AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:8f:90:30:b6:e5:ce:18:f6:eb:5c:7a:a4:03:2c:8e:f8:36: 1e:98:06:5f:35:d6:89:dc:70:f8:e2:8d:19:44:44:ee:2f:7e: 3f:2f:52:4f:c4:78:4f:8d:27:ce:c1:24:5e:4b:1e:5f:35:18: d7:5d:14:91:18:ab:0d:6c:70:8c:49:88:47:7d:61:7a:5f:5b: e8:b0:b2:f0:35:79:a4:be:e7:d8:ac:12:47:25:76:88:93:47: 5f:b7:bc:49:0d:3b:8e:88:45:14:0c:40:cc:e6:a8:67:2d:dd: 74:d1:97:3f:49:fa:97:89:55:ed:8d:44:c6:a1:bf:1f:32:cf: e5:1a:84:3c:40:f4:36:81:9c:51:fa:5e:92:bd:af:f3:74:47: ac:d5:64:f5:84:aa:53:c8:25:e9:2a:b6:c0:c6:f4:d3:b3:18: 29:67:25:99:4d:32:8a:5e:5a:6c:8b:5e:63:16:af:60:49:77: da:c3:0a:6d:49:e5:6f:47:50:54:51:3a:86:b0:6a:2d:3c:fb: ee:dc:7f:7f:ca:ed:85:eb:3c:e5:40:54:a6:8c:90:1e:ca:a3: 71:eb:f2:3f:3d:1b:b0:6c:36:d9:f5:f5:15:a7:b9:72:42:0b: 66:3e:21:20:85:9b:91:e7:39:e6:5b:d3:57:67:fb:3e:0b:5f: ce:96:68:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9lxz4WerWwID9NkIMFP7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYzMyODU4Y2NkYTk1ODZjNmQ5NjcxZTMxMGQ1MWMyODI2 OGM0NTkwHhcNMjUxMjI2MTQwMDUzWhcNMjUxMjI3MTQwMDUzWjAzMTEwLwYDVQQD Eyg1M2NiYjAxNTA3YTA0NmJhM2I4MWM2YTg5YTM4NzhhZDFmYmQ4ZWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHc5SmERLFeMrAlLd8kVQ9EZuAgK Qq3/wuxzYyhIIdRsl09v7MMOOGIRbjc6ie6qXYZMh5awQ2Cqz43gvADiQv+eSZxi 4eHVqC2kaRqVKIQ9eBjWTliN9B3bvjr3TQHytRm5M4KVm5YmwltyHlUIApRBIJgB r/vbBDyPpddqiGrCezOcMW3H+htfoPTkPrm1R28OM3JOwtLljBTRsJOfMsCbYX9d Bi3logVBUxHp2flXi3CBOhM3zc+z3g2FVh8Bg478e/sjGFptgF6jASwmraAPC5R2 WhjGP1wXploKAfE1I8GcKK75j9y3f7yIOVo1/lWxyuSTAVlzzWPVQa8fTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFPLsBUHoEa6O4HGqJo4eK0fvY76MB8GA1UdIwQY MBaAFKzDKFjM2pWGxtlnHjENUcKCaMRZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck1Nb1dNemFsWWJHMldjZU1RMVJ3b0pveEZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82Y2Y3NjktOWI1OC00ODQ3LThmMWYt ZWRjNTQwNzJhZTg5LzEvck1Nb1dNemFsWWJHMldjZU1RMVJ3b0pveEZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC82Y2Y3NjktOWI1OC00ODQ3LThmMWYtZWRjNTQwNzJhZTg5 LzEvck1Nb1dNemFsWWJHMldjZU1RMVJ3b0pveEZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAho+QMLbl zhj261x6pAMsjvg2HpgGXzXWidxw+OKNGURE7i9+Py9ST8R4T40nzsEkXkseXzUY 110UkRirDWxwjEmIR31hel9b6LCy8DV5pL7n2KwSRyV2iJNHX7e8SQ07johFFAxA zOaoZy3ddNGXP0n6l4lV7Y1ExqG/HzLP5RqEPED0NoGcUfpekr2v83RHrNVk9YSq U8gl6Sq2wMb007MYKWclmU0yil5abIteYxavYEl32sMKbUnlb0dQVFE6hrBqLTz7 7tx/f8rthes85UBUpoyQHsqjcevyPz0bsGw22fX1Fae5ckILZj4hIIWbkec55lvT V2f7PgtfzpZoLA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:58:08 2025 by rpki-client