This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft File: RMO0TLvE89paS0KFyW6jy1DU0HM.mft (raw, json) Hash identifier: oEu/r2QWG3flzuZnUuy13m4zgHUG4ftEz+9S+LQWUTY= Subject key identifier: 5B:10:81:C0:F9:4B:6B:0F:72:35:D5:EE:6F:8B:5B:79:06:7B:AC:F1 Authority key identifier: 44:C3:B4:4C:BB:C4:F3:DA:5A:4B:42:85:C9:6E:A3:CB:50:D4:D0:73 Certificate issuer: /CN=44c3b44cbbc4f3da5a4b4285c96ea3cb50d4d073 Certificate serial: 019AF72FA1C33B57E1D1BC86A5381BB48A6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft Manifest number: 0DE2 Signing time: Sun 07 Dec 2025 05:01:25 +0000 Manifest this update: Sun 07 Dec 2025 05:01:25 +0000 Manifest next update: Mon 08 Dec 2025 05:01:25 +0000 Files and hashes: 1: Bfc7EUchdTgGElUv3uM8P6L_JN4.roa (hash: zmd7LnQJEMvAXNDrVc3GmLiOfsPuEL2IoD+oEByUhjA=) 2: RMO0TLvE89paS0KFyW6jy1DU0HM.crl (hash: Nf+qOfiKtGNVht9UfYic9hOAil++WaaeCfBt9hiniVU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 05:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:2f:a1:c3:3b:57:e1:d1:bc:86:a5:38:1b:b4:8a:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44c3b44cbbc4f3da5a4b4285c96ea3cb50d4d073 Validity Not Before: Dec 7 05:01:25 2025 GMT Not After : Dec 8 05:01:25 2025 GMT Subject: CN=5b1081c0f94b6b0f7235d5ee6f8b5b79067bacf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:dd:a8:4f:84:1f:1d:bd:94:a7:ca:67:4a:35: eb:7b:3b:91:27:34:e3:e9:d0:79:1f:f1:f2:c0:18: 3b:ee:48:3b:ba:87:b3:4f:ab:c7:6d:fe:d3:ae:c3: bd:ea:3b:05:95:45:68:23:e7:b0:b2:f5:fd:f1:08: 19:77:a6:52:dd:44:da:51:06:8a:9a:de:7f:18:6a: c0:5d:08:08:ec:91:bd:8e:27:80:f6:14:66:fa:98: 8f:3e:3e:4e:13:14:cc:34:2e:29:3f:ef:7e:e6:c1: 66:ba:83:00:77:ce:b6:68:8f:cd:7e:ee:57:cb:60: cd:73:f3:3d:60:d3:59:91:29:f3:26:6b:b2:61:f6: e4:92:9b:58:72:24:59:a0:bb:1b:84:82:4f:73:80: 49:87:71:1c:82:21:a3:60:8a:7b:00:30:82:c1:e6: 5b:3b:62:1d:f1:bf:b8:dc:f3:54:2d:ac:5a:e6:fc: ea:26:7f:ce:f4:c9:c5:f8:df:27:91:cf:d0:77:ff: f9:00:e6:18:f2:53:4b:ed:56:b6:74:54:31:b3:ad: 13:10:eb:71:6b:8e:e8:28:60:13:59:ab:3d:03:a2: ed:2e:68:bb:0d:67:bf:4b:99:64:f8:c3:31:96:21: e5:a1:bd:c1:92:c0:51:2d:cb:2f:a6:43:7a:8e:61: c5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:10:81:C0:F9:4B:6B:0F:72:35:D5:EE:6F:8B:5B:79:06:7B:AC:F1 X509v3 Authority Key Identifier: keyid:44:C3:B4:4C:BB:C4:F3:DA:5A:4B:42:85:C9:6E:A3:CB:50:D4:D0:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:18:f8:8d:ef:6c:9b:3d:1b:0b:a3:1a:70:d4:82:ab:7b:6d: 41:aa:9c:87:61:e9:57:1e:e5:23:91:8e:5a:b1:31:47:1e:a1: 58:22:fb:cf:67:2d:78:6d:61:f3:45:90:df:1c:75:56:cd:fc: 34:db:c1:01:9e:47:c3:94:71:41:00:9d:36:8b:2d:43:d9:bc: 73:a5:28:8b:d2:93:86:69:a9:43:fc:c8:b5:bd:06:43:da:f4: 87:d8:cc:2e:75:69:a6:2d:bc:02:4f:92:83:af:5e:2e:23:e4: 58:e4:09:b7:10:25:5f:24:eb:c7:a2:11:93:7f:86:e1:62:42: bb:37:57:c3:95:0f:d3:5f:80:e7:6d:5d:96:c0:c9:24:76:73: 10:67:60:b4:31:43:bf:45:70:36:7c:d6:c4:2d:20:b3:77:a6: 59:b5:02:6a:df:b6:88:b6:fe:c0:60:84:82:18:33:61:bc:13: 08:f4:49:74:08:e9:8e:3d:f3:3d:e2:e3:f1:c5:f5:f6:e7:ef: e2:61:29:c1:02:29:38:ab:53:45:5a:fc:54:3e:8d:9f:13:32: 31:ed:04:b7:ba:8f:30:5e:b2:36:0e:60:05:74:6f:77:ec:5d: 94:1c:5c:45:2e:26:35:41:5d:aa:66:2c:f9:99:4f:a7:13:56: 8f:ee:55:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3L6HDO1fh0byGpTgbtIpqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YzNiNDRjYmJjNGYzZGE1YTRiNDI4NWM5NmVhM2NiNTBk NGQwNzMwHhcNMjUxMjA3MDUwMTI1WhcNMjUxMjA4MDUwMTI1WjAzMTEwLwYDVQQD Eyg1YjEwODFjMGY5NGI2YjBmNzIzNWQ1ZWU2ZjhiNWI3OTA2N2JhY2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsN2oT4QfHb2Up8pnSjXrezuRJzTj 6dB5H/HywBg77kg7uoezT6vHbf7TrsO96jsFlUVoI+ewsvX98QgZd6ZS3UTaUQaK mt5/GGrAXQgI7JG9jieA9hRm+piPPj5OExTMNC4pP+9+5sFmuoMAd862aI/Nfu5X y2DNc/M9YNNZkSnzJmuyYfbkkptYciRZoLsbhIJPc4BJh3EcgiGjYIp7ADCCweZb O2Id8b+43PNULaxa5vzqJn/O9MnF+N8nkc/Qd//5AOYY8lNL7Va2dFQxs60TEOtx a47oKGATWas9A6LtLmi7DWe/S5lk+MMxliHlob3BksBRLcsvpkN6jmHFRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFsQgcD5S2sPcjXV7m+LW3kGe6zxMB8GA1UdIwQY MBaAFETDtEy7xPPaWktChcluo8tQ1NBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk1PMFRMdkU4OXBhUzBLRnlXNmp5MURVMEhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9iMjg0YTMtYzJmMS00MjA1LWIxZDUt NDc5Nzc2Njk5NThkLzEvUk1PMFRMdkU4OXBhUzBLRnlXNmp5MURVMEhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC9iMjg0YTMtYzJmMS00MjA1LWIxZDUtNDc5Nzc2Njk5NThk LzEvUk1PMFRMdkU4OXBhUzBLRnlXNmp5MURVMEhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHhj4je9s mz0bC6MacNSCq3ttQaqch2HpVx7lI5GOWrExRx6hWCL7z2cteG1h80WQ3xx1Vs38 NNvBAZ5Hw5RxQQCdNostQ9m8c6Uoi9KThmmpQ/zItb0GQ9r0h9jMLnVppi28Ak+S g69eLiPkWOQJtxAlXyTrx6IRk3+G4WJCuzdXw5UP01+A521dlsDJJHZzEGdgtDFD v0VwNnzWxC0gs3emWbUCat+2iLb+wGCEghgzYbwTCPRJdAjpjj3zPeLj8cX19ufv 4mEpwQIpOKtTRVr8VD6NnxMyMe0Et7qPMF6yNg5gBXRvd+xdlBxcRS4mNUFdqmYs +ZlPpxNWj+5VrA== -----END CERTIFICATE-----Generated at Sun Dec 7 12:03:00 2025 by rpki-client