This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.mft File: Rmz6T4hH8VYbVZcWcBZcDmi2J5k.mft (raw, json) Hash identifier: nsTnERKTdyNVC2RgP0d1Lrdr+4OYyMVqM3/QLnb0AHk= Subject key identifier: 0D:C5:79:72:89:0C:6A:45:A2:AE:08:F6:95:7C:58:49:E9:FA:FC:37 Authority key identifier: 46:6C:FA:4F:88:47:F1:56:1B:55:97:16:70:16:5C:0E:68:B6:27:99 Certificate issuer: /CN=466cfa4f8847f1561b55971670165c0e68b62799 Certificate serial: 019B3D5A0FDA77A97E9041AF09BFD1BAA405 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.mft Manifest number: 0BD5 Signing time: Sat 20 Dec 2025 20:01:10 +0000 Manifest this update: Sat 20 Dec 2025 20:01:10 +0000 Manifest next update: Sun 21 Dec 2025 20:01:10 +0000 Files and hashes: 1: Rmz6T4hH8VYbVZcWcBZcDmi2J5k.crl (hash: KZYDv9DDP5LsgXwrqSSG8F3uK+eEWjHLtDN1HRmZAKo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.mft rsync://rpki.ripe.net/repository/DEFAULT/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:0f:da:77:a9:7e:90:41:af:09:bf:d1:ba:a4:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=466cfa4f8847f1561b55971670165c0e68b62799 Validity Not Before: Dec 20 20:01:10 2025 GMT Not After : Dec 21 20:01:10 2025 GMT Subject: CN=0dc57972890c6a45a2ae08f6957c5849e9fafc37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:20:86:6e:e3:18:5d:11:56:a2:24:e5:c4:5f: 5c:a2:6a:f3:2c:ad:c8:4c:9f:7c:39:87:3d:8a:e6: cb:32:10:90:2e:88:87:71:21:e5:77:00:f4:4f:cb: 30:a7:d6:dd:9d:e2:05:b6:07:a1:c2:65:d1:33:87: 64:e1:17:6f:b5:a4:5f:a5:07:d9:af:14:12:17:9d: e4:5f:73:44:2d:94:ec:d1:90:a5:00:94:38:1c:f0: 00:20:76:3b:b3:be:3c:4c:f5:0f:e5:41:89:38:42: 45:27:97:f3:ee:61:63:06:4a:82:49:6f:5f:cb:5a: a7:d1:2d:18:25:84:d7:ae:6f:9c:90:4a:c2:c9:a4: 11:31:d6:d2:58:0f:4b:94:72:02:78:cf:da:52:18: 4b:37:26:29:41:47:86:f4:fb:5c:3d:99:74:4d:41: cb:8a:0f:46:b7:64:70:08:b6:53:6c:d5:38:f3:1f: 50:64:04:36:d4:39:b6:f4:60:9d:d3:7c:57:0a:1a: 5f:f8:8a:38:9b:d9:fa:a1:05:27:2d:fe:82:a5:2f: ed:78:e4:e6:11:0d:f2:bb:8c:87:b1:d1:bb:ac:58: 4f:3d:4b:9d:35:01:9b:6e:c2:ec:5e:4a:89:05:ff: 1f:20:0e:53:c2:eb:04:2d:60:92:71:d5:cd:6e:55: b3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C5:79:72:89:0C:6A:45:A2:AE:08:F6:95:7C:58:49:E9:FA:FC:37 X509v3 Authority Key Identifier: keyid:46:6C:FA:4F:88:47:F1:56:1B:55:97:16:70:16:5C:0E:68:B6:27:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:47:6e:8b:2e:12:cf:f2:61:44:10:89:fc:c8:0b:98:70:bd: f9:03:34:54:a5:53:56:55:35:96:57:fc:c8:6f:58:38:a3:87: 16:85:57:8c:ab:77:02:4c:22:3d:6f:5b:8b:7d:0c:69:16:48: 05:68:bc:1f:35:e9:0b:2a:7d:11:a2:79:6d:30:0a:92:6a:e0: e3:a0:45:5f:0c:49:23:11:73:ac:21:cf:18:45:d8:79:39:88: 96:4c:74:e1:5f:6e:8a:34:11:60:68:96:8f:d8:e7:0c:48:9e: 0b:cf:b1:f2:a4:30:d6:42:62:04:3a:af:9d:10:75:04:e5:66: 5e:9b:35:c8:02:a9:d3:26:97:9d:9a:a4:1c:21:4e:56:f0:bf: 5f:22:b5:9a:5c:67:56:16:62:84:30:d0:fb:5d:71:e3:57:86: 91:b6:63:1b:c2:0a:39:87:fc:f5:af:3a:3e:34:22:6b:0b:01: 88:98:af:66:a1:ed:ae:86:f9:89:4e:e1:66:62:b1:5d:73:d2: e3:a4:93:ad:42:1a:e7:f4:ba:a9:fc:0f:88:b9:f0:72:fe:81: 39:1c:b1:05:52:e1:52:f6:81:c6:e5:27:6b:76:20:54:9d:0d: 14:d3:72:e8:a4:6d:bd:77:97:f9:e2:52:77:d0:b1:e2:4e:77: 85:9c:2d:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Wg/ad6l+kEGvCb/RuqQFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NmNmYTRmODg0N2YxNTYxYjU1OTcxNjcwMTY1YzBlNjhi NjI3OTkwHhcNMjUxMjIwMjAwMTEwWhcNMjUxMjIxMjAwMTEwWjAzMTEwLwYDVQQD EygwZGM1Nzk3Mjg5MGM2YTQ1YTJhZTA4ZjY5NTdjNTg0OWU5ZmFmYzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyCGbuMYXRFWoiTlxF9comrzLK3I TJ98OYc9iubLMhCQLoiHcSHldwD0T8swp9bdneIFtgehwmXRM4dk4RdvtaRfpQfZ rxQSF53kX3NELZTs0ZClAJQ4HPAAIHY7s748TPUP5UGJOEJFJ5fz7mFjBkqCSW9f y1qn0S0YJYTXrm+ckErCyaQRMdbSWA9LlHICeM/aUhhLNyYpQUeG9PtcPZl0TUHL ig9Gt2RwCLZTbNU48x9QZAQ21Dm29GCd03xXChpf+Io4m9n6oQUnLf6CpS/teOTm EQ3yu4yHsdG7rFhPPUudNQGbbsLsXkqJBf8fIA5TwusELWCScdXNblWz6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA3FeXKJDGpFoq4I9pV8WEnp+vw3MB8GA1UdIwQY MBaAFEZs+k+IR/FWG1WXFnAWXA5otieZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm16NlQ0aEg4VlliVlpjV2NCWmNEbWkySjVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC81MDRmZmEtMjkwNS00Nzg1LTkyOTEt NWIxMWJiMTc5YThiLzEvUm16NlQ0aEg4VlliVlpjV2NCWmNEbWkySjVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC81MDRmZmEtMjkwNS00Nzg1LTkyOTEtNWIxMWJiMTc5YThi LzEvUm16NlQ0aEg4VlliVlpjV2NCWmNEbWkySjVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj0duiy4S z/JhRBCJ/MgLmHC9+QM0VKVTVlU1llf8yG9YOKOHFoVXjKt3AkwiPW9bi30MaRZI BWi8HzXpCyp9EaJ5bTAKkmrg46BFXwxJIxFzrCHPGEXYeTmIlkx04V9uijQRYGiW j9jnDEieC8+x8qQw1kJiBDqvnRB1BOVmXps1yAKp0yaXnZqkHCFOVvC/XyK1mlxn VhZihDDQ+11x41eGkbZjG8IKOYf89a86PjQiawsBiJivZqHtrob5iU7hZmKxXXPS 46STrUIa5/S6qfwPiLnwcv6BORyxBVLhUvaBxuUna3YgVJ0NFNNy6KRtvXeX+eJS d9Cx4k53hZwtYQ== -----END CERTIFICATE-----Generated at Sun Dec 21 00:58:14 2025 by rpki-client