This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft File: RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft (raw, json) Hash identifier: jh1OnoAJM/15GkROYvRuSvVTk80DDIqAro/Tcq5jY0o= Subject key identifier: A6:AD:60:A5:A6:AA:98:93:55:04:09:E0:C1:A5:D9:E5:E8:BE:24:79 Authority key identifier: 46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66 Certificate issuer: /CN=461258f5e3b6b94e3916dd2b5d16e342fd605966 Certificate serial: 019AF4D2A612FC11CA55E8EA5A494DD4CB50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft Manifest number: 16AA Signing time: Sat 06 Dec 2025 18:00:36 +0000 Manifest this update: Sat 06 Dec 2025 18:00:36 +0000 Manifest next update: Sun 07 Dec 2025 18:00:36 +0000 Files and hashes: 1: 9VQnH-9sd7nGshve_4r1C2nYakY.roa (hash: Z02F3WYNcnzG8yizQnWEGco/cel18dqYBCQHGg9DCTg=) 2: RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl (hash: jtcxqUUyc7ctkcH3B9CDrycz83lqVdr3orFToTWKlFU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 18:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:d2:a6:12:fc:11:ca:55:e8:ea:5a:49:4d:d4:cb:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=461258f5e3b6b94e3916dd2b5d16e342fd605966 Validity Not Before: Dec 6 18:00:36 2025 GMT Not After : Dec 7 18:00:36 2025 GMT Subject: CN=a6ad60a5a6aa9893550409e0c1a5d9e5e8be2479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c5:a3:1f:ef:bf:22:12:5e:4a:26:13:8d:07: d6:e8:1c:a5:92:22:e8:1e:1d:5d:6a:a4:ca:f7:ac: 85:f7:8a:19:8d:6b:1d:16:d9:db:60:da:a7:11:a5: fa:95:91:dd:d3:15:6e:6c:39:d2:08:35:a0:15:53: 9b:18:b7:69:ec:25:a7:ff:f9:c5:df:53:eb:4a:dc: 68:bf:da:02:9e:0a:c1:fb:e1:68:5b:f2:93:6c:fa: 01:67:db:a1:81:b6:83:e7:58:44:3c:16:76:0b:8f: ee:47:51:d0:06:b5:2a:ad:ed:d5:3f:59:ae:0f:a5: fb:af:b5:b7:a3:87:90:de:07:85:f4:b8:d2:b6:6d: e5:b4:12:1b:fe:7d:60:c2:6c:67:72:ae:9c:6f:ef: d1:02:c0:68:3a:e3:77:44:38:39:82:ff:b7:a4:e1: 19:78:ef:69:f6:e9:26:23:e6:32:ce:d6:88:4f:69: 9f:e2:5c:90:3c:96:b8:d9:41:5a:77:7f:bc:7f:92: 67:44:46:30:6b:61:08:ca:1a:ff:e8:13:16:aa:bb: f9:44:9e:06:df:1f:bd:9e:b1:c7:4b:45:aa:59:5e: c1:ae:01:2b:fb:96:66:bb:16:c7:3c:e6:25:f0:81: af:6c:58:3c:ed:f6:83:99:44:eb:20:e4:ff:63:c3: 5d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:AD:60:A5:A6:AA:98:93:55:04:09:E0:C1:A5:D9:E5:E8:BE:24:79 X509v3 Authority Key Identifier: keyid:46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:26:4a:e2:72:01:c0:7b:38:f4:01:4c:5b:19:24:f5:cf:5d: a5:cc:36:52:8a:10:14:54:51:ab:a2:a4:ab:ce:ec:4e:40:ac: 67:5f:20:43:dc:61:2a:a9:57:c1:b3:e6:80:c5:3c:d5:ba:22: 02:d1:a1:aa:71:4b:ba:61:2b:bf:af:2e:17:8a:5c:17:ca:48: 6a:22:4d:b2:78:e3:90:17:1f:f2:d2:7f:57:6a:14:31:ed:45: 07:45:9a:a2:0a:10:b0:0a:4b:c9:cb:da:55:e4:17:ac:c0:82: 34:d5:05:f0:9c:15:8d:70:45:14:55:b7:b7:c4:73:cc:e3:37: fb:29:01:dc:5c:71:41:b8:ec:35:b7:05:e5:9a:c4:42:dc:5e: 97:9c:73:be:c4:1a:dc:59:b2:bd:55:d1:16:5c:00:75:f4:f3: f0:46:2b:18:9c:f1:a5:ac:2e:f5:54:5e:65:74:3d:bb:e1:87: 4a:2f:12:ab:5a:c3:4a:aa:2f:c6:eb:1a:7d:7e:d9:f2:e5:e5: 41:50:50:6c:8c:bd:f4:2a:b1:86:f2:f0:f9:be:07:75:63:50: 3c:85:9d:19:2f:83:b0:3d:80:c4:05:2f:91:ff:1b:c6:0e:bb: 98:dd:02:3f:ec:32:49:2d:5a:01:4c:4d:5c:9b:31:4c:9b:40: b6:d4:3d:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr00qYS/BHKVejqWklN1MtQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MTI1OGY1ZTNiNmI5NGUzOTE2ZGQyYjVkMTZlMzQyZmQ2 MDU5NjYwHhcNMjUxMjA2MTgwMDM2WhcNMjUxMjA3MTgwMDM2WjAzMTEwLwYDVQQD EyhhNmFkNjBhNWE2YWE5ODkzNTUwNDA5ZTBjMWE1ZDllNWU4YmUyNDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMWjH++/IhJeSiYTjQfW6BylkiLo Hh1daqTK96yF94oZjWsdFtnbYNqnEaX6lZHd0xVubDnSCDWgFVObGLdp7CWn//nF 31PrStxov9oCngrB++FoW/KTbPoBZ9uhgbaD51hEPBZ2C4/uR1HQBrUqre3VP1mu D6X7r7W3o4eQ3geF9LjStm3ltBIb/n1gwmxncq6cb+/RAsBoOuN3RDg5gv+3pOEZ eO9p9ukmI+YyztaIT2mf4lyQPJa42UFad3+8f5JnREYwa2EIyhr/6BMWqrv5RJ4G 3x+9nrHHS0WqWV7BrgEr+5ZmuxbHPOYl8IGvbFg87faDmUTrIOT/Y8NduQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKatYKWmqpiTVQQJ4MGl2eXoviR5MB8GA1UdIwQY MBaAFEYSWPXjtrlOORbdK10W40L9YFlmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmhKWTllTzJ1VTQ1RnQwclhSYmpRdjFnV1dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lODA1NzUtOGM4Yi00OWE0LTg1ZGUt NTgzYmNlNmZiNTY3LzEvUmhKWTllTzJ1VTQ1RnQwclhSYmpRdjFnV1dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lODA1NzUtOGM4Yi00OWE0LTg1ZGUtNTgzYmNlNmZiNTY3 LzEvUmhKWTllTzJ1VTQ1RnQwclhSYmpRdjFnV1dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXCZK4nIB wHs49AFMWxkk9c9dpcw2UooQFFRRq6Kkq87sTkCsZ18gQ9xhKqlXwbPmgMU81boi AtGhqnFLumErv68uF4pcF8pIaiJNsnjjkBcf8tJ/V2oUMe1FB0WaogoQsApLycva VeQXrMCCNNUF8JwVjXBFFFW3t8RzzOM3+ykB3FxxQbjsNbcF5ZrEQtxel5xzvsQa 3FmyvVXRFlwAdfTz8EYrGJzxpawu9VReZXQ9u+GHSi8Sq1rDSqovxusafX7Z8uXl QVBQbIy99CqxhvLw+b4HdWNQPIWdGS+DsD2AxAUvkf8bxg67mN0CP+wySS1aAUxN XJsxTJtAttQ9Pw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:40:45 2025 by rpki-client