This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft File: RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft (raw, json) Hash identifier: tjtXdVTslDS2iL9E6f856WvXtFITNk/s8/XhvcmYuFo= Subject key identifier: C3:6F:05:AC:0F:59:F2:39:45:DB:0A:5F:42:9A:8A:7A:C7:CF:EB:2C Authority key identifier: 46:12:07:A3:EE:F2:B4:4F:8E:27:31:B7:B0:AC:7D:17:16:E3:55:C5 Certificate issuer: /CN=461207a3eef2b44f8e2731b7b0ac7d1716e355c5 Certificate serial: 019AF1D1B027065802F7A6988333F1B9FCBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft Manifest number: 13F9 Signing time: Sat 06 Dec 2025 04:00:42 +0000 Manifest this update: Sat 06 Dec 2025 04:00:42 +0000 Manifest next update: Sun 07 Dec 2025 04:00:42 +0000 Files and hashes: 1: RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl (hash: Haa+1W7NkYvOKDilF4KN52vo/5FAVbu9dhuQxxeHPy0=) 2: Y5Fkdf8lCYdQD9ZGIAjVuUbledE.roa (hash: JnnOlLV8xwOOoN+r0LJHTPSQEB+QaVe9fn2jfA8Y6mA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:b0:27:06:58:02:f7:a6:98:83:33:f1:b9:fc:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=461207a3eef2b44f8e2731b7b0ac7d1716e355c5 Validity Not Before: Dec 6 04:00:42 2025 GMT Not After : Dec 7 04:00:42 2025 GMT Subject: CN=c36f05ac0f59f23945db0a5f429a8a7ac7cfeb2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cf:b9:17:ba:ce:9b:57:60:ae:55:18:f7:7e: a4:c6:2c:3d:89:8b:5f:1a:49:c7:98:bc:70:39:3e: d8:26:e3:34:ab:da:b1:4e:2d:ed:f1:6e:b4:03:c8: bb:50:85:a5:f7:59:a6:1d:eb:04:61:6e:bd:aa:ca: 64:86:77:d8:f5:e9:bb:e8:98:24:cf:a3:ab:a3:f8: 64:a1:02:c5:f0:75:78:00:57:06:56:39:8d:cc:93: 47:28:d6:71:1a:cc:52:5b:91:3f:3e:8f:c2:f4:2a: 02:5b:0a:0c:a6:1b:9b:6c:a2:ac:d2:1c:84:a6:07: f5:61:3a:0a:dc:3a:b9:30:ea:21:d7:73:85:0c:24: 20:0c:00:db:fb:cd:cc:96:d9:61:02:9e:b3:e3:e3: 99:42:eb:e6:b8:17:cf:f6:30:be:bf:02:0a:2c:8f: 06:f6:74:00:c8:25:b2:72:50:11:c3:e7:2d:c9:59: 03:63:80:02:82:1a:7e:95:f0:b5:9e:9e:4a:6b:24: 9f:bc:5e:cc:ee:be:59:f3:1b:5f:94:f2:9f:8b:12: 84:9f:7f:ae:03:75:86:86:31:7d:31:e4:73:7c:2f: 93:0e:38:d8:bd:96:a2:34:51:2f:36:7d:9d:cc:c6: 52:5c:c0:db:db:be:87:f2:5b:b1:10:1a:4d:63:bb: 91:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:6F:05:AC:0F:59:F2:39:45:DB:0A:5F:42:9A:8A:7A:C7:CF:EB:2C X509v3 Authority Key Identifier: keyid:46:12:07:A3:EE:F2:B4:4F:8E:27:31:B7:B0:AC:7D:17:16:E3:55:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:02:1c:64:03:d2:56:c0:06:0a:c6:c7:97:aa:d5:ba:ab:de: d2:cd:bb:df:8e:2a:5e:be:64:22:7f:be:97:86:fd:3f:24:61: cf:0a:c2:9a:78:ca:20:a6:9d:ff:cd:f7:55:d0:94:9c:6c:b5: c3:cc:36:16:d8:72:57:14:f1:dd:b1:b0:e4:22:8c:67:fc:70: 39:85:54:15:d0:07:7b:e7:4c:1f:17:61:a2:68:c4:88:59:f4: 2e:5b:06:26:4d:6e:4f:bd:cf:6f:5b:e4:fd:dd:ae:b3:49:d7: 38:78:8c:2b:6d:8c:10:7c:20:cd:03:80:95:a0:ab:c9:79:6a: 3c:ce:fe:24:60:74:b5:b9:4d:37:cc:bf:1f:ca:8f:99:54:d7: 3d:55:13:4f:0c:2b:e9:74:ed:e4:d7:69:41:cb:db:1b:5f:1a: 06:51:8f:01:42:ee:1a:37:c7:b5:35:0d:30:aa:d4:83:5a:f1: bc:b1:61:27:3d:da:77:80:8a:2d:01:ee:d6:0f:35:71:d9:38: da:bf:be:e5:09:64:31:a1:48:77:c3:8a:aa:83:e2:94:8b:6e: af:c1:f2:ad:9e:9a:a4:63:3c:f4:ad:f9:c5:8d:d9:be:42:4c: c0:05:ce:9d:ba:95:83:ac:5b:a9:85:eb:85:23:b2:04:0d:ef: b6:a2:5b:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0bAnBlgC96aYgzPxufy+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MTIwN2EzZWVmMmI0NGY4ZTI3MzFiN2IwYWM3ZDE3MTZl MzU1YzUwHhcNMjUxMjA2MDQwMDQyWhcNMjUxMjA3MDQwMDQyWjAzMTEwLwYDVQQD EyhjMzZmMDVhYzBmNTlmMjM5NDVkYjBhNWY0MjlhOGE3YWM3Y2ZlYjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8+5F7rOm1dgrlUY936kxiw9iYtf GknHmLxwOT7YJuM0q9qxTi3t8W60A8i7UIWl91mmHesEYW69qspkhnfY9em76Jgk z6Oro/hkoQLF8HV4AFcGVjmNzJNHKNZxGsxSW5E/Po/C9CoCWwoMphubbKKs0hyE pgf1YToK3Dq5MOoh13OFDCQgDADb+83MltlhAp6z4+OZQuvmuBfP9jC+vwIKLI8G 9nQAyCWyclARw+ctyVkDY4ACghp+lfC1np5KaySfvF7M7r5Z8xtflPKfixKEn3+u A3WGhjF9MeRzfC+TDjjYvZaiNFEvNn2dzMZSXMDb276H8luxEBpNY7uRQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMNvBawPWfI5RdsKX0KainrHz+ssMB8GA1UdIwQY MBaAFEYSB6Pu8rRPjicxt7CsfRcW41XFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmhJSG8tN3l0RS1PSnpHM3NLeDlGeGJqVmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zOGMxOTgtMGYxYi00YzU5LTgxZmUt MWM4Y2U3YzMzYWMwLzEvUmhJSG8tN3l0RS1PSnpHM3NLeDlGeGJqVmNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8zOGMxOTgtMGYxYi00YzU5LTgxZmUtMWM4Y2U3YzMzYWMw LzEvUmhJSG8tN3l0RS1PSnpHM3NLeDlGeGJqVmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALgIcZAPS VsAGCsbHl6rVuqve0s27344qXr5kIn++l4b9PyRhzwrCmnjKIKad/833VdCUnGy1 w8w2FthyVxTx3bGw5CKMZ/xwOYVUFdAHe+dMHxdhomjEiFn0LlsGJk1uT73Pb1vk /d2us0nXOHiMK22MEHwgzQOAlaCryXlqPM7+JGB0tblNN8y/H8qPmVTXPVUTTwwr 6XTt5NdpQcvbG18aBlGPAULuGjfHtTUNMKrUg1rxvLFhJz3ad4CKLQHu1g81cdk4 2r++5QlkMaFId8OKqoPilItur8HyrZ6apGM89K35xY3ZvkJMwAXOnbqVg6xbqYXr hSOyBA3vtqJb8A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:36:48 2025 by rpki-client