This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft File: rmRaywIXx0oP004XpT297lbwEeU.mft (raw, json) Hash identifier: WoddyWwyz4UhkZS3mMClzFCJGVKWSLvDVsNDKiDk4QM= Subject key identifier: 36:A4:B2:EB:45:DD:A4:73:EE:4C:12:83:CC:F6:DE:E0:AC:BB:66:B8 Authority key identifier: AE:64:5A:CB:02:17:C7:4A:0F:D3:4E:17:A5:3D:BD:EE:56:F0:11:E5 Certificate issuer: /CN=ae645acb0217c74a0fd34e17a53dbdee56f011e5 Certificate serial: 019B397DA924E3C1E0AE38B5C6DB8359423F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmRaywIXx0oP004XpT297lbwEeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft Manifest number: 117E Signing time: Sat 20 Dec 2025 02:01:35 +0000 Manifest this update: Sat 20 Dec 2025 02:01:35 +0000 Manifest next update: Sun 21 Dec 2025 02:01:35 +0000 Files and hashes: 1: 9gPdnlu8pzrUW3Ji0sxUHZw4ZQ4.roa (hash: tZpT15jv998HP7FRsRavbx2dzEDkME8mtW6HPMKG8Zg=) 2: rmRaywIXx0oP004XpT297lbwEeU.crl (hash: NtorR71R1tec9xUaxuRDNr4+Ku+Xz4HP9QzhmDDC7fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.crl rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft rsync://rpki.ripe.net/repository/DEFAULT/rmRaywIXx0oP004XpT297lbwEeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:a9:24:e3:c1:e0:ae:38:b5:c6:db:83:59:42:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae645acb0217c74a0fd34e17a53dbdee56f011e5 Validity Not Before: Dec 20 02:01:35 2025 GMT Not After : Dec 21 02:01:35 2025 GMT Subject: CN=36a4b2eb45dda473ee4c1283ccf6dee0acbb66b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:8e:6a:de:71:a4:56:27:45:bf:ea:fc:10:40: 56:a4:06:dc:74:d7:79:23:62:06:3e:b6:e8:50:4b: 43:7b:ac:e6:be:ec:f6:4f:1d:86:89:2f:f6:eb:3a: 44:82:7e:05:b2:ba:41:d9:e2:32:02:47:23:7c:bd: 08:e9:8f:a2:3c:54:e2:e9:7b:7c:ce:51:cf:f3:e0: a2:1f:27:68:13:32:15:5e:f5:82:8a:b5:44:39:15: 9f:9b:aa:d4:20:8b:86:bf:14:2c:e7:3f:04:e1:61: eb:63:89:c8:76:9d:80:db:5e:04:d5:5d:7e:1a:0f: a7:0b:2f:a7:09:7a:56:8b:c7:a7:6e:4f:7a:f7:1c: 9c:38:e0:85:22:df:2e:32:2e:e6:3c:57:d0:62:44: 74:66:f1:88:ec:26:92:e2:ac:6c:b9:65:0e:49:ea: 83:82:e4:e3:7a:c4:d3:e2:05:b3:67:90:46:6c:f6: fd:6c:41:5c:a9:68:2c:04:a1:d4:fd:ca:3d:81:7f: 57:d9:3c:b5:9b:e7:75:87:b1:ba:4f:ae:a1:8b:de: c4:a0:31:ff:66:f2:e6:7d:78:50:e1:59:b9:87:a2: 20:0d:19:82:f7:b0:a0:88:c9:d6:51:ce:64:d0:1b: ed:03:eb:a9:7f:4b:78:2c:01:c4:36:e9:96:bc:eb: be:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:A4:B2:EB:45:DD:A4:73:EE:4C:12:83:CC:F6:DE:E0:AC:BB:66:B8 X509v3 Authority Key Identifier: keyid:AE:64:5A:CB:02:17:C7:4A:0F:D3:4E:17:A5:3D:BD:EE:56:F0:11:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmRaywIXx0oP004XpT297lbwEeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:82:42:1e:76:89:79:41:b5:58:5e:c1:59:c0:f3:46:08:39: 2e:ee:31:12:30:44:92:1c:23:b4:81:4a:af:94:55:55:62:98: 81:90:b3:49:1a:f9:fe:99:b1:a0:92:d6:30:63:50:31:5f:9b: 98:a6:de:5f:1a:bc:cd:31:b3:a6:7f:9c:3d:a0:d8:9c:94:b7: 92:8b:2c:2c:9e:bb:bf:00:eb:22:19:a4:6c:fc:c9:ae:1c:62: 64:92:52:36:f1:80:8b:f5:c0:ef:5d:67:ee:61:aa:93:eb:58: 8b:44:b2:4b:7e:40:f9:2a:3f:01:01:97:7a:f8:97:97:59:bc: bb:b1:60:91:6d:a4:0b:57:20:0d:8c:f9:4f:6f:84:5e:90:44: a7:56:4f:cc:98:d7:bb:86:57:7e:83:9d:6d:2e:43:44:ad:ce: 20:6f:0f:8b:02:6b:16:de:f2:a6:18:07:85:e2:69:e9:f1:e1: 3f:d4:93:93:d2:d3:39:85:af:83:71:12:93:fc:a6:57:4b:d2: ac:31:73:18:54:44:26:df:ba:d2:63:01:8d:7b:6b:51:ff:5b: f6:c3:9f:fa:54:27:17:ff:62:70:62:bc:fe:58:2f:3a:39:22: 20:1e:37:1a:51:aa:a2:0f:15:46:de:d7:87:59:02:8d:35:3a: a8:6e:3f:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fakk48Hgrji1xtuDWUI/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNjQ1YWNiMDIxN2M3NGEwZmQzNGUxN2E1M2RiZGVlNTZm MDExZTUwHhcNMjUxMjIwMDIwMTM1WhcNMjUxMjIxMDIwMTM1WjAzMTEwLwYDVQQD EygzNmE0YjJlYjQ1ZGRhNDczZWU0YzEyODNjY2Y2ZGVlMGFjYmI2NmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA945q3nGkVidFv+r8EEBWpAbcdNd5 I2IGPrboUEtDe6zmvuz2Tx2GiS/26zpEgn4FsrpB2eIyAkcjfL0I6Y+iPFTi6Xt8 zlHP8+CiHydoEzIVXvWCirVEORWfm6rUIIuGvxQs5z8E4WHrY4nIdp2A214E1V1+ Gg+nCy+nCXpWi8enbk969xycOOCFIt8uMi7mPFfQYkR0ZvGI7CaS4qxsuWUOSeqD guTjesTT4gWzZ5BGbPb9bEFcqWgsBKHU/co9gX9X2Ty1m+d1h7G6T66hi97EoDH/ ZvLmfXhQ4Vm5h6IgDRmC97CgiMnWUc5k0BvtA+upf0t4LAHENumWvOu+xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDaksutF3aRz7kwSg8z23uCsu2a4MB8GA1UdIwQY MBaAFK5kWssCF8dKD9NOF6U9ve5W8BHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm1SYXl3SVh4MG9QMDA0WHBUMjk3bGJ3RWVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8wZWQzM2EtMWYxZC00MjgxLWFiMzkt NDA4OTAxMzBkZDE4LzEvcm1SYXl3SVh4MG9QMDA0WHBUMjk3bGJ3RWVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8wZWQzM2EtMWYxZC00MjgxLWFiMzktNDA4OTAxMzBkZDE4 LzEvcm1SYXl3SVh4MG9QMDA0WHBUMjk3bGJ3RWVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANYJCHnaJ eUG1WF7BWcDzRgg5Lu4xEjBEkhwjtIFKr5RVVWKYgZCzSRr5/pmxoJLWMGNQMV+b mKbeXxq8zTGzpn+cPaDYnJS3kossLJ67vwDrIhmkbPzJrhxiZJJSNvGAi/XA711n 7mGqk+tYi0SyS35A+So/AQGXeviXl1m8u7FgkW2kC1cgDYz5T2+EXpBEp1ZPzJjX u4ZXfoOdbS5DRK3OIG8PiwJrFt7yphgHheJp6fHhP9STk9LTOYWvg3ESk/ymV0vS rDFzGFREJt+60mMBjXtrUf9b9sOf+lQnF/9icGK8/lgvOjkiIB43GlGqog8VRt7X h1kCjTU6qG4/qQ== -----END CERTIFICATE-----Generated at Sat Dec 20 10:48:42 2025 by rpki-client