This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft File: Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft (raw, json) Hash identifier: ImX/IPBQkt5QZbvqhO0LIgKE3k2TcncTOlOsBtmjl08= Subject key identifier: 2A:A8:69:3A:F0:E9:E2:0E:B8:34:28:51:63:D6:EF:5A:C3:64:65:E4 Authority key identifier: 46:38:7C:56:B3:31:FF:84:BC:10:D8:AC:90:E1:E2:C1:6F:17:23:45 Certificate issuer: /CN=46387c56b331ff84bc10d8ac90e1e2c16f172345 Certificate serial: 019AF31B5611745E2F4A550098A051B4EA5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 10:00:46 +0000 Manifest this update: Sat 06 Dec 2025 10:00:46 +0000 Manifest next update: Sun 07 Dec 2025 10:00:46 +0000 Files and hashes: 1: Rjh8VrMx_4S8ENiskOHiwW8XI0U.crl (hash: Gm57SR/lWKtcoFCgUt8dME+91WdzWg2f52xiW6k603w=) 2: xAHFWshzCwZ9iWzPHD319yAWavE.roa (hash: LAjKykzMh8QraV6MgCdF6nP15mOVTD1M9V0STezqNjY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.crl rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft rsync://rpki.ripe.net/repository/DEFAULT/Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:56:11:74:5e:2f:4a:55:00:98:a0:51:b4:ea:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46387c56b331ff84bc10d8ac90e1e2c16f172345 Validity Not Before: Dec 6 10:00:46 2025 GMT Not After : Dec 7 10:00:46 2025 GMT Subject: CN=2aa8693af0e9e20eb834285163d6ef5ac36465e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7c:c8:32:ac:31:c5:4b:da:9a:4e:13:14:43: 5e:20:d0:65:2d:3a:46:22:ec:33:b3:09:cf:89:80: a0:94:a9:89:71:7b:c9:dc:e2:9c:10:94:50:2a:f6: fa:21:35:88:38:3c:07:6a:75:e9:52:c2:77:1a:71: 5e:97:bd:63:d5:56:e2:71:a1:08:66:c0:6b:20:04: 2b:8e:37:4e:4d:3f:a3:82:4d:c9:75:31:2b:3f:2d: 70:ad:70:20:f3:4d:dd:5b:21:29:39:b5:ee:75:cd: 31:08:63:42:36:79:05:0f:5a:e9:4d:55:c3:69:d9: 9f:3c:bc:d7:71:3d:fe:7e:38:78:a7:38:8d:52:05: 0d:30:26:c1:18:54:e1:75:cb:14:24:b1:e1:72:85: ef:42:96:1e:38:5d:e0:24:7f:c9:a4:ef:28:e3:62: 3d:27:a9:2e:76:46:77:e3:61:ab:f2:06:d4:ef:f1: 82:be:39:4a:87:f8:e1:78:25:60:fb:fe:a8:7d:8a: 9c:65:3a:6e:18:3c:7a:01:11:0f:a0:8e:99:3a:62: 9d:05:27:98:9e:05:e5:e4:a8:a2:17:98:73:33:aa: 98:e1:8a:e4:49:00:d6:c2:1e:c0:6f:bf:9e:90:e7: b1:76:8c:df:2c:f6:73:5d:45:14:95:66:aa:d9:78: 68:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A8:69:3A:F0:E9:E2:0E:B8:34:28:51:63:D6:EF:5A:C3:64:65:E4 X509v3 Authority Key Identifier: keyid:46:38:7C:56:B3:31:FF:84:BC:10:D8:AC:90:E1:E2:C1:6F:17:23:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:d2:e7:06:a3:5d:2e:23:b6:f1:09:0e:45:f3:4d:5a:8d:c9: 05:6c:52:35:c8:cb:af:df:6b:4d:26:54:d8:ef:44:f4:64:9b: e0:d0:6d:e4:6e:56:47:8c:69:13:42:84:5b:28:20:00:20:b5: 27:f9:e5:2b:f7:d3:6d:24:71:06:3e:f0:40:23:02:1b:46:7e: d1:c2:58:cb:64:f7:92:b2:94:ac:c8:91:47:c3:a2:ff:8b:b4: 56:c7:b0:22:ff:08:35:c2:88:68:ec:c5:b1:b3:c6:3f:9c:e5: b4:36:f0:be:6c:13:3a:ea:84:9c:70:ae:60:fb:85:a2:3e:49: 55:6d:ef:ab:c2:b4:b8:0a:66:5b:d5:9f:63:9a:f6:66:4d:af: 95:a9:89:9a:b3:07:60:d4:0e:62:7d:c8:a0:de:2c:b4:d1:66: 14:50:8a:31:11:74:d0:90:e3:11:87:7f:4e:f8:e1:88:75:40: 25:5c:81:55:7d:6b:f3:4d:1c:28:c1:cb:63:bc:bf:26:59:90: 55:95:b4:8d:f2:d7:a4:0d:ab:3e:34:83:5e:30:70:ee:8d:02: fe:bc:b7:a2:b6:b7:99:86:df:85:5b:52:4e:e1:b2:e1:e9:b8: e5:10:6d:6a:2b:ca:07:b3:6b:86:b6:8e:47:c5:7b:5c:26:d0: 9a:3c:c0:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG1YRdF4vSlUAmKBRtOpfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2Mzg3YzU2YjMzMWZmODRiYzEwZDhhYzkwZTFlMmMxNmYx NzIzNDUwHhcNMjUxMjA2MTAwMDQ2WhcNMjUxMjA3MTAwMDQ2WjAzMTEwLwYDVQQD EygyYWE4NjkzYWYwZTllMjBlYjgzNDI4NTE2M2Q2ZWY1YWMzNjQ2NWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnzIMqwxxUvamk4TFENeINBlLTpG IuwzswnPiYCglKmJcXvJ3OKcEJRQKvb6ITWIODwHanXpUsJ3GnFel71j1VbicaEI ZsBrIAQrjjdOTT+jgk3JdTErPy1wrXAg803dWyEpObXudc0xCGNCNnkFD1rpTVXD admfPLzXcT3+fjh4pziNUgUNMCbBGFThdcsUJLHhcoXvQpYeOF3gJH/JpO8o42I9 J6kudkZ342Gr8gbU7/GCvjlKh/jheCVg+/6ofYqcZTpuGDx6AREPoI6ZOmKdBSeY ngXl5KiiF5hzM6qY4YrkSQDWwh7Ab7+ekOexdozfLPZzXUUUlWaq2XhoewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCqoaTrw6eIOuDQoUWPW71rDZGXkMB8GA1UdIwQY MBaAFEY4fFazMf+EvBDYrJDh4sFvFyNFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmpoOFZyTXhfNFM4RU5pc2tPSGl3VzhYSTBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8xYjQwZmYtYjFlMS00OTUxLTkxNjUt MjNiYjM5YTgzNDgxLzEvUmpoOFZyTXhfNFM4RU5pc2tPSGl3VzhYSTBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8xYjQwZmYtYjFlMS00OTUxLTkxNjUtMjNiYjM5YTgzNDgx LzEvUmpoOFZyTXhfNFM4RU5pc2tPSGl3VzhYSTBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPtLnBqNd LiO28QkORfNNWo3JBWxSNcjLr99rTSZU2O9E9GSb4NBt5G5WR4xpE0KEWyggACC1 J/nlK/fTbSRxBj7wQCMCG0Z+0cJYy2T3krKUrMiRR8Oi/4u0VsewIv8INcKIaOzF sbPGP5zltDbwvmwTOuqEnHCuYPuFoj5JVW3vq8K0uApmW9WfY5r2Zk2vlamJmrMH YNQOYn3IoN4stNFmFFCKMRF00JDjEYd/TvjhiHVAJVyBVX1r800cKMHLY7y/JlmQ VZW0jfLXpA2rPjSDXjBw7o0C/ry3ora3mYbfhVtSTuGy4em45RBtaivKB7NrhraO R8V7XCbQmjzAEw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:42:36 2025 by rpki-client