This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft File: RmSbV7gX7BQ93LfXcSwiux8orHU.mft (raw, json) Hash identifier: J5xQNdcFlU9dZ5hGVSD8sWFwzjkldPbIDujUGSZzfko= Subject key identifier: A1:24:F9:D2:B2:8B:54:84:BA:CA:9F:21:59:C0:30:EF:57:1F:52:BE Authority key identifier: 46:64:9B:57:B8:17:EC:14:3D:DC:B7:D7:71:2C:22:BB:1F:28:AC:75 Certificate issuer: /CN=46649b57b817ec143ddcb7d7712c22bb1f28ac75 Certificate serial: 019B597657F709C4FA9103D68FC5458ED5BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft Manifest number: 1771 Signing time: Fri 26 Dec 2025 07:01:26 +0000 Manifest this update: Fri 26 Dec 2025 07:01:26 +0000 Manifest next update: Sat 27 Dec 2025 07:01:26 +0000 Files and hashes: 1: E48fxMRuF9_usgkv-wBA_GtkkY8.roa (hash: TJ/B+8gZ2LSJEkkPcBk2s1l74WkEA3d0hjUzJQAQi8w=) 2: RmSbV7gX7BQ93LfXcSwiux8orHU.crl (hash: HehsHx9VSLHK8J4BaEwkS+A/yf/o2olpIiAF8G+n60E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:57:f7:09:c4:fa:91:03:d6:8f:c5:45:8e:d5:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46649b57b817ec143ddcb7d7712c22bb1f28ac75 Validity Not Before: Dec 26 07:01:26 2025 GMT Not After : Dec 27 07:01:26 2025 GMT Subject: CN=a124f9d2b28b5484baca9f2159c030ef571f52be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:db:7c:bb:34:ac:6d:5d:cf:c0:14:3a:97:cb: a7:b0:bd:d1:7a:57:ed:c4:af:b8:33:37:83:c4:7b: 8c:7d:d8:91:48:40:91:6f:c8:18:21:6c:4d:cc:60: ed:43:b0:2b:6a:66:d3:42:92:ad:5d:2f:25:32:7f: 55:3a:d0:82:87:93:8d:16:0a:b3:6a:e1:ad:7a:1c: 16:a0:5d:aa:83:50:47:98:5f:11:68:4d:2f:d8:fa: d9:cb:a9:cc:85:ac:a9:e7:6b:7f:83:b4:44:b8:74: 7c:3d:2c:4c:52:6a:46:f5:46:b5:15:bc:4e:66:63: 34:16:48:b0:4d:b5:9f:7b:f0:52:e6:1e:2a:94:91: 6e:95:c4:d4:5e:32:71:0d:28:4c:e5:09:cd:cb:5d: 53:27:a9:1b:c0:a0:42:e5:12:6c:b1:7d:25:3a:a3: ed:be:c9:93:8a:30:89:53:ad:f1:04:bb:6f:b3:1c: b4:d4:38:a9:d8:a2:a3:63:f1:e1:5c:ad:ea:52:0b: 92:a9:f0:df:6f:28:b9:79:4c:3d:02:88:0c:06:41: 2f:23:51:c0:d9:c9:98:9e:29:43:01:f2:98:83:76: 0c:6a:51:96:65:5f:17:cf:b6:cf:12:4f:7f:3f:4a: ae:4a:3e:c1:3a:bd:28:bf:1d:be:d8:c3:12:26:ec: 81:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:24:F9:D2:B2:8B:54:84:BA:CA:9F:21:59:C0:30:EF:57:1F:52:BE X509v3 Authority Key Identifier: keyid:46:64:9B:57:B8:17:EC:14:3D:DC:B7:D7:71:2C:22:BB:1F:28:AC:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:f1:32:75:8a:a7:9e:ea:8e:b0:10:36:50:b1:03:f9:5e:2e: bb:35:5d:65:ee:a1:8b:e5:34:c7:a7:39:2d:ed:2b:d2:0a:24: 88:cf:54:c4:37:25:8b:25:8a:b4:a6:49:26:68:df:31:b8:e0: c1:fe:5d:3d:15:dc:2d:2c:f0:36:45:24:10:6e:1d:e4:11:fc: 0c:58:4e:c9:63:d0:bd:0a:c9:b8:74:52:85:e3:56:b2:5c:6d: 38:c9:c6:6d:bc:b5:8b:8f:52:11:41:62:f6:8f:34:4f:36:31: 76:8b:ad:eb:48:ff:33:35:2f:eb:d1:1f:8e:e6:8d:88:40:d4: e8:47:28:d0:93:8c:ca:76:12:8e:96:1a:02:1f:38:ee:10:af: d4:70:90:17:52:90:57:5b:7a:33:db:9e:df:8b:b1:12:b0:51: b9:7b:2a:2a:12:5a:9c:37:6f:f8:bb:4b:45:f5:9a:c5:87:41: 3b:1f:a1:b3:ed:fb:b0:cb:59:09:a9:1f:6c:bd:d0:1f:02:5f: 00:8d:83:54:f0:d4:bd:63:0e:57:eb:c8:bd:d1:bc:53:47:41: 2b:13:4e:54:57:02:aa:e4:e9:f5:9c:1a:84:a7:81:9d:cd:a8: 2e:1b:df:28:7c:a2:55:4c:1b:91:08:e1:65:23:de:11:e0:42: 5e:03:4b:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdlf3CcT6kQPWj8VFjtW+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NjQ5YjU3YjgxN2VjMTQzZGRjYjdkNzcxMmMyMmJiMWYy OGFjNzUwHhcNMjUxMjI2MDcwMTI2WhcNMjUxMjI3MDcwMTI2WjAzMTEwLwYDVQQD EyhhMTI0ZjlkMmIyOGI1NDg0YmFjYTlmMjE1OWMwMzBlZjU3MWY1MmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dt8uzSsbV3PwBQ6l8unsL3Relft xK+4MzeDxHuMfdiRSECRb8gYIWxNzGDtQ7ArambTQpKtXS8lMn9VOtCCh5ONFgqz auGtehwWoF2qg1BHmF8RaE0v2PrZy6nMhayp52t/g7REuHR8PSxMUmpG9Ua1FbxO ZmM0FkiwTbWfe/BS5h4qlJFulcTUXjJxDShM5QnNy11TJ6kbwKBC5RJssX0lOqPt vsmTijCJU63xBLtvsxy01Dip2KKjY/HhXK3qUguSqfDfbyi5eUw9AogMBkEvI1HA 2cmYnilDAfKYg3YMalGWZV8Xz7bPEk9/P0quSj7BOr0ovx2+2MMSJuyBEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEk+dKyi1SEusqfIVnAMO9XH1K+MB8GA1UdIwQY MBaAFEZkm1e4F+wUPdy313EsIrsfKKx1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm1TYlY3Z1g3QlE5M0xmWGNTd2l1eDhvckhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy84NTg0NTQtYTE4ZC00MDQwLWFiM2Mt Y2E4ZmJhNTk1ZDRmLzEvUm1TYlY3Z1g3QlE5M0xmWGNTd2l1eDhvckhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy84NTg0NTQtYTE4ZC00MDQwLWFiM2MtY2E4ZmJhNTk1ZDRm LzEvUm1TYlY3Z1g3QlE5M0xmWGNTd2l1eDhvckhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABfEydYqn nuqOsBA2ULED+V4uuzVdZe6hi+U0x6c5Le0r0gokiM9UxDcliyWKtKZJJmjfMbjg wf5dPRXcLSzwNkUkEG4d5BH8DFhOyWPQvQrJuHRSheNWslxtOMnGbby1i49SEUFi 9o80TzYxdout60j/MzUv69EfjuaNiEDU6Eco0JOMynYSjpYaAh847hCv1HCQF1KQ V1t6M9ue34uxErBRuXsqKhJanDdv+LtLRfWaxYdBOx+hs+37sMtZCakfbL3QHwJf AI2DVPDUvWMOV+vIvdG8U0dBKxNOVFcCquTp9ZwahKeBnc2oLhvfKHyiVUwbkQjh ZSPeEeBCXgNLUQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:23 2025 by rpki-client