This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft File: RhU-isRttc5XS6fjnoforwlsGok.mft (raw, json) Hash identifier: tpS5ye2os5+YGPOwcllUTN9mPVxnWYx7XZ1D1J8i470= Subject key identifier: A9:C5:87:99:7D:B1:C5:4B:90:91:C9:A1:49:19:44:0B:D1:E9:EC:EF Authority key identifier: 46:15:3E:8A:C4:6D:B5:CE:57:4B:A7:E3:9E:87:E8:AF:09:6C:1A:89 Certificate issuer: /CN=46153e8ac46db5ce574ba7e39e87e8af096c1a89 Certificate serial: 019AF19AFD18164FB48C0D61B7DB06360084 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft Manifest number: 0639 Signing time: Sat 06 Dec 2025 03:00:57 +0000 Manifest this update: Sat 06 Dec 2025 03:00:57 +0000 Manifest next update: Sun 07 Dec 2025 03:00:57 +0000 Files and hashes: 1: RhU-isRttc5XS6fjnoforwlsGok.crl (hash: l1rRS0czjXjuuFy1yPCdgNXjzBnMe5jakvM67x77cGU=) 2: yOFjl_Pxx0Rc441XIFCRbQAh0C8.roa (hash: xKAfXgoPQJ/4slkyXjKOtsYsgtyUmgpiHM6n61mT42s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.crl rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:fd:18:16:4f:b4:8c:0d:61:b7:db:06:36:00:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46153e8ac46db5ce574ba7e39e87e8af096c1a89 Validity Not Before: Dec 6 03:00:57 2025 GMT Not After : Dec 7 03:00:57 2025 GMT Subject: CN=a9c587997db1c54b9091c9a14919440bd1e9ecef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:99:81:a0:10:f0:93:8a:8a:07:8e:9c:bf:e7: 6b:3e:5d:3b:cb:c8:ef:25:4b:98:ac:ed:9e:ac:b5: b8:4f:18:01:e0:3a:1b:5c:ec:57:94:92:f6:e9:a5: ed:6c:2d:48:55:a5:91:b2:14:20:6a:f4:5b:56:c3: 69:b3:7c:e3:dc:16:a8:5f:af:7b:ee:27:fe:1b:d2: 44:27:0d:b9:5a:35:bf:39:0a:b9:f7:9f:04:93:f4: e6:36:3c:1c:30:20:b8:9a:b4:c8:32:27:9b:26:d0: 5c:37:31:bb:f3:e3:a7:b5:61:b6:35:86:67:6c:4d: df:1b:a5:28:2d:bc:2c:c9:03:8c:0e:d4:6d:64:4a: 53:b0:2a:ac:be:62:d4:84:19:91:d8:18:e6:a4:8c: 3b:f6:2e:ca:57:1f:4a:20:01:65:4e:88:c6:6d:97: a1:00:e1:76:c7:dc:03:b2:24:92:6c:5a:3e:f9:66: af:48:1b:4c:9e:58:98:64:50:d2:86:41:1e:76:4d: d2:75:94:84:92:ec:8b:06:bb:df:67:ff:dd:19:dc: 17:98:61:c7:71:a6:45:ff:3c:e0:71:2c:be:96:e1: 2a:91:56:aa:90:86:9b:c5:0a:ce:ab:51:6f:ca:24: 72:fe:6f:bc:91:92:1b:4b:bd:d3:ba:45:49:2b:94: 1c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C5:87:99:7D:B1:C5:4B:90:91:C9:A1:49:19:44:0B:D1:E9:EC:EF X509v3 Authority Key Identifier: keyid:46:15:3E:8A:C4:6D:B5:CE:57:4B:A7:E3:9E:87:E8:AF:09:6C:1A:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:26:53:ec:98:1c:c6:0b:10:2c:c6:29:34:03:70:3f:08:3c: 66:87:a4:1e:c6:14:c1:3a:f9:3d:53:19:28:06:3d:1a:55:ff: 3c:be:5b:40:5e:b9:88:e4:be:d3:c2:c4:3a:5c:bd:34:4f:9c: 09:ec:31:cd:6d:24:e5:06:38:d4:28:c3:e3:64:5d:be:3f:0e: 59:d3:3d:1d:15:36:aa:e9:f0:04:1e:06:60:40:fa:e3:7d:62: 91:5e:51:21:5d:99:7a:5a:af:fd:a9:0f:0d:18:e0:c7:39:2e: b5:65:9a:14:60:73:c1:3b:97:a4:d1:3e:65:16:d1:26:23:65: 22:2d:67:a9:fa:19:60:6a:bf:8f:bd:b0:08:d5:2a:d4:64:1b: 59:d0:25:71:4f:65:55:9e:b2:60:a0:3d:15:92:3a:ab:f6:68: 82:78:91:96:88:7b:65:a6:7d:d6:32:23:21:9e:b5:83:93:4a: 63:04:ae:46:77:04:a5:3c:fd:85:a4:f6:97:ea:ab:56:56:49: 74:f1:e1:15:a6:70:6d:d4:5c:79:f3:e3:64:90:a5:06:b2:01: 86:dd:32:4a:1e:4c:5c:e2:8d:43:c6:55:1c:cc:09:5b:38:97: 1f:15:b2:de:17:81:67:d3:0f:ad:79:69:81:4b:47:7b:46:9c: ba:23:64:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmv0YFk+0jA1ht9sGNgCEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MTUzZThhYzQ2ZGI1Y2U1NzRiYTdlMzllODdlOGFmMDk2 YzFhODkwHhcNMjUxMjA2MDMwMDU3WhcNMjUxMjA3MDMwMDU3WjAzMTEwLwYDVQQD EyhhOWM1ODc5OTdkYjFjNTRiOTA5MWM5YTE0OTE5NDQwYmQxZTllY2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZmBoBDwk4qKB46cv+drPl07y8jv JUuYrO2erLW4TxgB4DobXOxXlJL26aXtbC1IVaWRshQgavRbVsNps3zj3BaoX697 7if+G9JEJw25WjW/OQq5958Ek/TmNjwcMCC4mrTIMiebJtBcNzG78+OntWG2NYZn bE3fG6UoLbwsyQOMDtRtZEpTsCqsvmLUhBmR2BjmpIw79i7KVx9KIAFlTojGbZeh AOF2x9wDsiSSbFo++WavSBtMnliYZFDShkEedk3SdZSEkuyLBrvfZ//dGdwXmGHH caZF/zzgcSy+luEqkVaqkIabxQrOq1FvyiRy/m+8kZIbS73TukVJK5QcWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKnFh5l9scVLkJHJoUkZRAvR6ezvMB8GA1UdIwQY MBaAFEYVPorEbbXOV0un456H6K8JbBqJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmhVLWlzUnR0YzVYUzZmam5vZm9yd2xzR29rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8wZDExNzItNGJiMi00OTJjLWI1MTEt NzhkYzdiMmMzZTg4LzEvUmhVLWlzUnR0YzVYUzZmam5vZm9yd2xzR29rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8wZDExNzItNGJiMi00OTJjLWI1MTEtNzhkYzdiMmMzZTg4 LzEvUmhVLWlzUnR0YzVYUzZmam5vZm9yd2xzR29rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASSZT7Jgc xgsQLMYpNANwPwg8ZoekHsYUwTr5PVMZKAY9GlX/PL5bQF65iOS+08LEOly9NE+c CewxzW0k5QY41CjD42Rdvj8OWdM9HRU2qunwBB4GYED6431ikV5RIV2Zelqv/akP DRjgxzkutWWaFGBzwTuXpNE+ZRbRJiNlIi1nqfoZYGq/j72wCNUq1GQbWdAlcU9l VZ6yYKA9FZI6q/ZogniRloh7ZaZ91jIjIZ61g5NKYwSuRncEpTz9haT2l+qrVlZJ dPHhFaZwbdRcefPjZJClBrIBht0ySh5MXOKNQ8ZVHMwJWziXHxWy3heBZ9MPrXlp gUtHe0acuiNktQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:15:33 2025 by rpki-client