This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft File: RPMwC82ETWB1L-Xfst4pmWbpuPY.mft (raw, json) Hash identifier: 4oDgqVvZinhGggUC03tWUAUzwXTM1dbpyoEWDMFpYYo= Subject key identifier: 88:07:8C:05:46:3B:1A:FC:E7:53:37:24:20:D8:F3:6E:AF:FF:77:28 Authority key identifier: 44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6 Certificate issuer: /CN=44f3300bcd844d60752fe5dfb2de299966e9b8f6 Certificate serial: 019B17CC74E8243FADE0FBA615159CEE38BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft Manifest number: 0D5F Signing time: Sat 13 Dec 2025 13:00:33 +0000 Manifest this update: Sat 13 Dec 2025 13:00:33 +0000 Manifest next update: Sun 14 Dec 2025 13:00:33 +0000 Files and hashes: 1: RPMwC82ETWB1L-Xfst4pmWbpuPY.crl (hash: JP2xGYKlw/KzIPMyJSncHS4MYysGiOxzPFsuNLtyoh4=) 2: vqjdm1KiZFUuymq7gFNn9nu1xeI.roa (hash: n5Ik+8X2gw4ASROPfXrEyi/m0Dt0d0dYMw901zfQlQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:17:cc:74:e8:24:3f:ad:e0:fb:a6:15:15:9c:ee:38:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44f3300bcd844d60752fe5dfb2de299966e9b8f6 Validity Not Before: Dec 13 13:00:33 2025 GMT Not After : Dec 14 13:00:33 2025 GMT Subject: CN=88078c05463b1afce753372420d8f36eafff7728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:da:ae:7f:4e:a6:e5:54:8b:f6:3b:67:0d:d6: 63:c5:89:1e:76:04:fd:09:45:46:e1:04:60:1c:e1: 53:73:48:15:47:2e:27:d9:39:e1:e2:64:ee:a5:94: 6a:4b:4b:0d:f6:bb:56:be:ad:61:43:07:ee:7a:3b: 7c:5e:92:37:ca:7c:1e:74:45:35:34:88:78:0d:ec: 89:5d:8e:0f:37:4d:48:e2:4e:13:5b:4c:ca:ca:eb: 94:41:63:c3:6a:dc:ec:0d:93:49:bd:52:3e:5f:91: fb:d5:bc:3c:cc:a5:6b:7c:45:f1:6d:1a:68:30:38: ea:1a:23:e1:63:d5:72:85:36:fe:73:91:05:c9:c4: 3e:2f:2b:48:46:18:d6:2b:df:ea:97:bb:62:70:a0: 97:06:6c:83:15:7d:d3:5e:59:d8:50:fa:58:b3:2a: 82:9e:a6:01:e4:5d:27:c3:0c:5a:e3:f7:25:d9:58: 7e:3a:b8:c1:50:25:61:94:8d:95:14:1b:14:56:ad: 3e:1d:2b:20:c3:e2:c3:f1:44:fa:9b:87:f7:c3:d6: d8:a6:47:93:94:dc:00:4e:26:17:bf:c9:d8:82:90: 7a:34:45:41:9c:df:89:06:24:93:17:b4:b1:64:3f: f4:26:f8:cc:91:df:5d:d0:da:84:90:42:28:64:5c: af:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:07:8C:05:46:3B:1A:FC:E7:53:37:24:20:D8:F3:6E:AF:FF:77:28 X509v3 Authority Key Identifier: keyid:44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:83:ca:9a:06:4d:13:fc:c0:8d:17:e5:7b:20:10:46:ea:12: d5:4f:ad:e9:ef:73:2a:dd:16:eb:3a:ea:52:fb:34:68:87:35: 8d:e9:ad:16:bb:f6:2f:ac:8e:07:e8:66:57:14:d2:fc:84:76: 92:06:5d:0c:98:82:e1:ff:e2:58:f2:c6:de:3a:f9:f4:c7:a1: 33:05:8d:c5:40:60:4f:ed:cf:67:5b:70:44:b6:d9:34:0a:92: 2d:88:80:d2:30:13:3f:ca:d8:b4:2c:b1:c0:18:59:4a:1f:86: aa:fd:6b:b2:f9:f7:7e:4c:c4:ec:dc:d3:a9:4e:53:d2:31:93: 57:33:c5:e3:a6:63:2c:6a:e4:5e:14:ca:7e:2f:76:3a:d1:06: 3c:f7:a5:7d:69:5f:ad:de:ed:7f:38:33:73:1c:f6:7d:94:e4: e0:07:22:4f:8b:32:dc:62:8e:cd:30:db:17:97:c6:a4:c1:0a: 2d:92:ca:f7:29:0c:c1:79:bc:d3:02:75:3f:31:21:cb:0e:5d: a8:ba:2f:c3:56:16:fd:fb:dd:8c:e0:6e:67:4b:21:72:88:80: 0d:74:cd:3f:5f:9a:1f:55:15:93:9d:e9:76:fd:4c:4c:d2:7f: a5:6a:08:93:34:09:1f:97:ff:4d:78:90:b0:87:7c:d0:23:6b: 40:2b:a4:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsXzHToJD+t4PumFRWc7ji7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZjMzMDBiY2Q4NDRkNjA3NTJmZTVkZmIyZGUyOTk5NjZl OWI4ZjYwHhcNMjUxMjEzMTMwMDMzWhcNMjUxMjE0MTMwMDMzWjAzMTEwLwYDVQQD Eyg4ODA3OGMwNTQ2M2IxYWZjZTc1MzM3MjQyMGQ4ZjM2ZWFmZmY3NzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtquf06m5VSL9jtnDdZjxYkedgT9 CUVG4QRgHOFTc0gVRy4n2Tnh4mTupZRqS0sN9rtWvq1hQwfuejt8XpI3ynwedEU1 NIh4DeyJXY4PN01I4k4TW0zKyuuUQWPDatzsDZNJvVI+X5H71bw8zKVrfEXxbRpo MDjqGiPhY9VyhTb+c5EFycQ+LytIRhjWK9/ql7ticKCXBmyDFX3TXlnYUPpYsyqC nqYB5F0nwwxa4/cl2Vh+OrjBUCVhlI2VFBsUVq0+HSsgw+LD8UT6m4f3w9bYpkeT lNwATiYXv8nYgpB6NEVBnN+JBiSTF7SxZD/0JvjMkd9d0NqEkEIoZFyvswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIgHjAVGOxr851M3JCDY826v/3coMB8GA1UdIwQY MBaAFETzMAvNhE1gdS/l37LeKZlm6bj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlBNd0M4MkVUV0IxTC1YZnN0NHBtV2JwdVBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jNDgzNDEtYjhmMC00MGU5LTlhYTMt ODE0ODRmN2E3OWJhLzEvUlBNd0M4MkVUV0IxTC1YZnN0NHBtV2JwdVBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jNDgzNDEtYjhmMC00MGU5LTlhYTMtODE0ODRmN2E3OWJh LzEvUlBNd0M4MkVUV0IxTC1YZnN0NHBtV2JwdVBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArYPKmgZN E/zAjRfleyAQRuoS1U+t6e9zKt0W6zrqUvs0aIc1jemtFrv2L6yOB+hmVxTS/IR2 kgZdDJiC4f/iWPLG3jr59MehMwWNxUBgT+3PZ1twRLbZNAqSLYiA0jATP8rYtCyx wBhZSh+Gqv1rsvn3fkzE7NzTqU5T0jGTVzPF46ZjLGrkXhTKfi92OtEGPPelfWlf rd7tfzgzcxz2fZTk4AciT4sy3GKOzTDbF5fGpMEKLZLK9ykMwXm80wJ1PzEhyw5d qLovw1YW/fvdjOBuZ0shcoiADXTNP1+aH1UVk53pdv1MTNJ/pWoIkzQJH5f/TXiQ sId80CNrQCukCA== -----END CERTIFICATE-----Generated at Sat Dec 13 18:55:43 2025 by rpki-client