This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.mft File: Rmz6T4hH8VYbVZcWcBZcDmi2J5k.mft (raw, json) Hash identifier: /DB3owjApXYLTkg722Dht9tkbaMfwMqzamS/bdP4aO8= Subject key identifier: 81:BE:FF:CB:FF:8F:21:BB:70:36:E0:B3:95:A7:F8:31:48:2A:4D:C9 Authority key identifier: 46:6C:FA:4F:88:47:F1:56:1B:55:97:16:70:16:5C:0E:68:B6:27:99 Certificate issuer: /CN=466cfa4f8847f1561b55971670165c0e68b62799 Certificate serial: 019B3B6BD30A40B4852CC44C12A398B345CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.mft Manifest number: 0BD4 Signing time: Sat 20 Dec 2025 11:01:20 +0000 Manifest this update: Sat 20 Dec 2025 11:01:20 +0000 Manifest next update: Sun 21 Dec 2025 11:01:20 +0000 Files and hashes: 1: Rmz6T4hH8VYbVZcWcBZcDmi2J5k.crl (hash: kR7BCC4nEANIRXwaYOvxt81vq8W5m0MsjXiP2cylSHE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.mft rsync://rpki.ripe.net/repository/DEFAULT/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:d3:0a:40:b4:85:2c:c4:4c:12:a3:98:b3:45:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=466cfa4f8847f1561b55971670165c0e68b62799 Validity Not Before: Dec 20 11:01:20 2025 GMT Not After : Dec 21 11:01:20 2025 GMT Subject: CN=81beffcbff8f21bb7036e0b395a7f831482a4dc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:59:40:c4:ef:d4:4b:5e:5a:82:75:1f:ca:59: e0:97:ef:97:ab:b5:2a:ed:8a:3f:f1:b8:75:e8:62: 52:34:eb:89:7a:24:fd:26:34:e1:53:2e:99:03:ec: d7:4d:d5:00:52:65:e4:20:9a:da:04:88:2c:dd:b5: 7b:23:d2:1e:f5:1f:b3:97:87:0b:d8:2c:bd:6b:3a: 9c:04:69:7d:9a:41:f7:a1:c9:72:7d:2c:ab:26:7a: d6:c6:39:a1:58:25:4f:f1:4f:f6:f5:88:bb:f3:93: a3:bc:60:10:69:c6:64:24:6d:20:62:b6:d4:b7:74: 75:68:bd:51:11:8e:18:8a:4d:95:4f:73:61:d0:db: 30:66:e6:bd:81:7d:fd:ad:2f:67:3a:1e:7f:b3:be: b5:85:d9:31:b5:57:2d:33:5c:9a:b6:b8:af:f3:47: 46:72:92:e1:3d:0a:22:75:6f:f0:7c:ff:5b:2d:da: ca:a6:e5:9e:c8:dd:af:28:1b:f2:a0:85:7b:66:e9: c8:29:00:d9:a7:29:50:c9:42:4e:41:bb:9f:2a:b2: de:33:e2:e7:8c:e1:a5:44:b8:e2:2e:59:e5:b1:5f: 9c:6b:63:0d:fa:2d:b3:e1:1d:1c:07:a8:fc:af:69: 4a:70:d6:ba:6c:54:0f:30:5c:fc:e9:58:83:2a:96: 7d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:BE:FF:CB:FF:8F:21:BB:70:36:E0:B3:95:A7:F8:31:48:2A:4D:C9 X509v3 Authority Key Identifier: keyid:46:6C:FA:4F:88:47:F1:56:1B:55:97:16:70:16:5C:0E:68:B6:27:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:57:68:dc:82:4a:40:e0:c1:c0:c5:b4:85:74:97:5c:27:c0: ca:ec:aa:6d:25:34:f7:89:a6:e9:37:c2:01:bf:bb:d3:8a:89: 08:46:3e:09:7f:77:7d:63:d3:29:eb:b5:88:5a:42:31:0a:7f: 83:8f:22:af:8f:97:30:a0:c9:00:76:20:1a:a8:15:c8:18:62: e6:89:59:5f:2e:c4:cd:85:c3:b5:87:1f:8a:b1:31:19:51:3a: 5f:7d:c8:ea:2f:02:ae:0e:02:3c:39:34:5b:94:de:54:3b:81: f4:e1:a0:9d:d7:93:b2:97:af:83:4e:f0:47:3e:c4:e7:df:e2: 74:19:d2:a9:6f:c5:56:ba:15:f5:4d:0f:e4:c0:e0:08:09:7e: f8:45:c1:3c:f3:35:c1:42:2c:4e:50:a9:75:eb:28:59:4d:6b: c1:e0:56:43:a0:f8:fa:bf:20:d2:78:92:ea:8b:fb:5c:12:b2: ba:9c:00:b7:40:a1:ef:48:b3:11:b7:33:9c:5b:31:a6:a0:35: 8a:aa:ad:1e:d6:01:06:15:a1:2b:b2:9d:6b:4a:de:40:9f:a8: a1:e7:9b:31:cb:bd:13:a1:cd:33:66:10:1f:06:e3:fa:70:fb: 65:f8:18:a3:8a:e9:1b:c7:42:70:5b:ab:7f:ef:7e:91:11:99: d8:34:c1:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a9MKQLSFLMRMEqOYs0XKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NmNmYTRmODg0N2YxNTYxYjU1OTcxNjcwMTY1YzBlNjhi NjI3OTkwHhcNMjUxMjIwMTEwMTIwWhcNMjUxMjIxMTEwMTIwWjAzMTEwLwYDVQQD Eyg4MWJlZmZjYmZmOGYyMWJiNzAzNmUwYjM5NWE3ZjgzMTQ4MmE0ZGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFlAxO/US15agnUfylngl++Xq7Uq 7Yo/8bh16GJSNOuJeiT9JjThUy6ZA+zXTdUAUmXkIJraBIgs3bV7I9Ie9R+zl4cL 2Cy9azqcBGl9mkH3oclyfSyrJnrWxjmhWCVP8U/29Yi785OjvGAQacZkJG0gYrbU t3R1aL1REY4Yik2VT3Nh0NswZua9gX39rS9nOh5/s761hdkxtVctM1yatriv80dG cpLhPQoidW/wfP9bLdrKpuWeyN2vKBvyoIV7ZunIKQDZpylQyUJOQbufKrLeM+Ln jOGlRLjiLlnlsV+ca2MN+i2z4R0cB6j8r2lKcNa6bFQPMFz86ViDKpZ9MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIG+/8v/jyG7cDbgs5Wn+DFIKk3JMB8GA1UdIwQY MBaAFEZs+k+IR/FWG1WXFnAWXA5otieZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm16NlQ0aEg4VlliVlpjV2NCWmNEbWkySjVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC81MDRmZmEtMjkwNS00Nzg1LTkyOTEt NWIxMWJiMTc5YThiLzEvUm16NlQ0aEg4VlliVlpjV2NCWmNEbWkySjVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC81MDRmZmEtMjkwNS00Nzg1LTkyOTEtNWIxMWJiMTc5YThi LzEvUm16NlQ0aEg4VlliVlpjV2NCWmNEbWkySjVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfVdo3IJK QODBwMW0hXSXXCfAyuyqbSU094mm6TfCAb+704qJCEY+CX93fWPTKeu1iFpCMQp/ g48ir4+XMKDJAHYgGqgVyBhi5olZXy7EzYXDtYcfirExGVE6X33I6i8Crg4CPDk0 W5TeVDuB9OGgndeTspevg07wRz7E59/idBnSqW/FVroV9U0P5MDgCAl++EXBPPM1 wUIsTlCpdesoWU1rweBWQ6D4+r8g0niS6ov7XBKyupwAt0Ch70izEbcznFsxpqA1 iqqtHtYBBhWhK7Kda0reQJ+ooeebMcu9E6HNM2YQHwbj+nD7ZfgYo4rpG8dCcFur f+9+kRGZ2DTBdw== -----END CERTIFICATE-----Generated at Sat Dec 20 20:03:28 2025 by rpki-client