This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft File: RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft (raw, json) Hash identifier: 7OjmlkSUgLF/31DuwX2QmsUc4ugm6p3z2Z9Bi5oPfaI= Subject key identifier: C4:2E:48:B3:F7:9A:E7:11:A8:E6:D6:BF:B8:43:93:43:32:D3:2A:70 Authority key identifier: 46:12:07:A3:EE:F2:B4:4F:8E:27:31:B7:B0:AC:7D:17:16:E3:55:C5 Certificate issuer: /CN=461207a3eef2b44f8e2731b7b0ac7d1716e355c5 Certificate serial: 019B2BC21845944BC4F1C5C344B4E6BD92F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft Manifest number: 1417 Signing time: Wed 17 Dec 2025 10:01:39 +0000 Manifest this update: Wed 17 Dec 2025 10:01:39 +0000 Manifest next update: Thu 18 Dec 2025 10:01:39 +0000 Files and hashes: 1: RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl (hash: eXeYxMV3eKXwzlw/cKszIX5TfiiZLe5WOS/7bjF/Vww=) 2: Y5Fkdf8lCYdQD9ZGIAjVuUbledE.roa (hash: JnnOlLV8xwOOoN+r0LJHTPSQEB+QaVe9fn2jfA8Y6mA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c2:18:45:94:4b:c4:f1:c5:c3:44:b4:e6:bd:92:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=461207a3eef2b44f8e2731b7b0ac7d1716e355c5 Validity Not Before: Dec 17 10:01:39 2025 GMT Not After : Dec 18 10:01:39 2025 GMT Subject: CN=c42e48b3f79ae711a8e6d6bfb843934332d32a70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:45:f1:99:69:a9:64:fb:dd:2b:10:fd:2d:3d: 7f:00:a2:f5:d4:61:ac:ae:fc:11:2e:47:81:31:f5: 29:db:be:33:4f:52:e7:34:7d:6d:db:7b:25:c1:8b: 99:5d:f2:37:bc:27:d2:61:99:a7:52:84:74:81:6e: dc:3e:24:45:7a:5a:8d:a0:ba:05:e4:40:40:a0:ed: 94:44:92:ad:e2:c9:3a:31:b4:ae:28:dc:6f:53:63: 6e:a6:ba:72:11:f8:35:23:ff:ae:a8:a1:76:7f:5e: 07:27:ac:4a:a7:94:a8:af:df:ac:75:05:48:da:a0: 80:d0:3e:11:78:60:d1:1f:3b:d8:bc:f7:d8:7e:0c: 88:e4:e1:6a:4f:8a:3a:80:83:7b:bd:0b:da:40:19: 7e:42:39:50:dc:43:23:3d:fe:72:fb:23:52:7e:a2: ee:55:d3:98:36:37:4b:a8:d4:c9:cf:8e:cf:71:fd: 9e:1a:8f:fb:13:f7:73:62:fa:33:e7:e1:fe:68:f7: 5a:64:bd:13:f2:3f:16:fe:95:64:05:d0:bd:69:cd: cc:04:86:3e:a3:67:e9:bb:98:02:48:e5:0c:3d:5e: de:25:96:8c:07:8b:53:31:de:c2:1f:db:79:75:a7: dc:26:d3:1d:0e:ff:24:93:c3:08:5e:13:dc:f1:f7: 70:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:2E:48:B3:F7:9A:E7:11:A8:E6:D6:BF:B8:43:93:43:32:D3:2A:70 X509v3 Authority Key Identifier: keyid:46:12:07:A3:EE:F2:B4:4F:8E:27:31:B7:B0:AC:7D:17:16:E3:55:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:75:3f:a1:6f:cf:ca:ad:a2:84:bd:0d:ea:2e:46:6b:d2:e6: 6c:05:7d:ae:9d:2f:f3:76:6a:6f:8b:bd:e0:51:b4:62:ab:c3: 47:22:d4:32:d2:28:7e:18:9b:a0:8a:cf:17:2b:c7:b8:a1:42: 3b:6f:70:43:4b:e4:92:8b:de:40:ae:85:95:df:29:93:5d:6b: 74:50:21:ae:56:0b:f7:0b:e7:57:72:42:86:4b:01:a9:89:f0: 65:6d:ce:71:82:2e:67:03:4e:f0:3a:24:0a:c4:9d:4e:fe:e5: 18:7b:6f:a8:3f:74:a5:2d:dd:0c:22:a1:51:04:ea:cd:0f:9c: fc:2d:55:0a:c0:d4:6e:5c:6f:6c:c1:64:1d:3b:dc:1c:3e:52: f9:82:1c:da:9c:7e:ed:1b:82:3a:67:cb:7f:15:8f:a8:89:b1: e0:84:33:7c:64:52:8d:66:46:f3:b1:03:46:d9:6e:82:a8:73: ae:36:51:98:5b:5e:b4:e7:2e:b3:62:a1:4f:21:6e:da:1e:ed: 01:fa:b3:f5:ed:96:d0:3a:1b:4a:4f:60:90:45:c6:ad:e9:87: cd:c1:0c:9e:eb:dd:d5:72:48:43:53:6b:fd:00:8f:63:54:58: a7:4b:22:2b:b9:d0:c8:8d:c0:32:73:14:6e:2d:8b:97:28:c3: 3f:a2:62:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwhhFlEvE8cXDRLTmvZL5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MTIwN2EzZWVmMmI0NGY4ZTI3MzFiN2IwYWM3ZDE3MTZl MzU1YzUwHhcNMjUxMjE3MTAwMTM5WhcNMjUxMjE4MTAwMTM5WjAzMTEwLwYDVQQD EyhjNDJlNDhiM2Y3OWFlNzExYThlNmQ2YmZiODQzOTM0MzMyZDMyYTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6EXxmWmpZPvdKxD9LT1/AKL11GGs rvwRLkeBMfUp274zT1LnNH1t23slwYuZXfI3vCfSYZmnUoR0gW7cPiRFelqNoLoF 5EBAoO2URJKt4sk6MbSuKNxvU2NuprpyEfg1I/+uqKF2f14HJ6xKp5Sor9+sdQVI 2qCA0D4ReGDRHzvYvPfYfgyI5OFqT4o6gIN7vQvaQBl+QjlQ3EMjPf5y+yNSfqLu VdOYNjdLqNTJz47Pcf2eGo/7E/dzYvoz5+H+aPdaZL0T8j8W/pVkBdC9ac3MBIY+ o2fpu5gCSOUMPV7eJZaMB4tTMd7CH9t5dafcJtMdDv8kk8MIXhPc8fdw4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQuSLP3mucRqObWv7hDk0My0ypwMB8GA1UdIwQY MBaAFEYSB6Pu8rRPjicxt7CsfRcW41XFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmhJSG8tN3l0RS1PSnpHM3NLeDlGeGJqVmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zOGMxOTgtMGYxYi00YzU5LTgxZmUt MWM4Y2U3YzMzYWMwLzEvUmhJSG8tN3l0RS1PSnpHM3NLeDlGeGJqVmNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8zOGMxOTgtMGYxYi00YzU5LTgxZmUtMWM4Y2U3YzMzYWMw LzEvUmhJSG8tN3l0RS1PSnpHM3NLeDlGeGJqVmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkXU/oW/P yq2ihL0N6i5Ga9LmbAV9rp0v83Zqb4u94FG0YqvDRyLUMtIofhiboIrPFyvHuKFC O29wQ0vkkoveQK6Fld8pk11rdFAhrlYL9wvnV3JChksBqYnwZW3OcYIuZwNO8Dok CsSdTv7lGHtvqD90pS3dDCKhUQTqzQ+c/C1VCsDUblxvbMFkHTvcHD5S+YIc2px+ 7RuCOmfLfxWPqImx4IQzfGRSjWZG87EDRtlugqhzrjZRmFtetOcus2KhTyFu2h7t Afqz9e2W0DobSk9gkEXGremHzcEMnuvd1XJIQ1Nr/QCPY1RYp0siK7nQyI3AMnMU bi2LlyjDP6Jieg== -----END CERTIFICATE-----Generated at Wed Dec 17 18:11:55 2025 by rpki-client