This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft File: RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft (raw, json) Hash identifier: nSXATuAIEKAUCFBWuZCYg4t6X5jPF1Et0AIiqKnGWnY= Subject key identifier: F0:14:10:1E:24:2A:F5:ED:9C:B4:74:17:00:F8:6D:D5:D3:23:91:DD Authority key identifier: 44:7C:D4:1D:9E:6C:CF:80:30:6C:1B:46:BD:C0:B5:77:B1:EE:2C:AE Certificate issuer: /CN=447cd41d9e6ccf80306c1b46bdc0b577b1ee2cae Certificate serial: 019AF65363848FA6A74320FE58644E79EEF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft Manifest number: 155A Signing time: Sun 07 Dec 2025 01:00:51 +0000 Manifest this update: Sun 07 Dec 2025 01:00:51 +0000 Manifest next update: Mon 08 Dec 2025 01:00:51 +0000 Files and hashes: 1: RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl (hash: 97C6tuFj1ArK3OO2x4h2K6MB+LZUSaEVBBaXwniA1ig=) 2: UK2n5J82Y8mJ_ChH-Mf3D9V405E.roa (hash: tUUMnCPKY1tGYA08Lbr1dGnhLn6RW32Wd2MZ44NLy2E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:63:84:8f:a6:a7:43:20:fe:58:64:4e:79:ee:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=447cd41d9e6ccf80306c1b46bdc0b577b1ee2cae Validity Not Before: Dec 7 01:00:51 2025 GMT Not After : Dec 8 01:00:51 2025 GMT Subject: CN=f014101e242af5ed9cb4741700f86dd5d32391dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7e:43:fe:e7:f0:4a:6e:22:92:f7:14:1c:f1: b0:bb:31:15:f4:cc:5d:11:6c:57:dd:17:0c:9c:fb: 2c:36:b0:59:a7:e8:b6:31:2b:fc:9b:c6:3b:dc:ad: d8:af:a0:da:dd:77:c6:1c:18:60:62:6f:b0:a6:99: 56:d5:75:cd:88:fc:83:ae:db:7f:ee:1a:72:fe:c3: 49:ae:4d:1f:d9:c8:3f:44:fd:43:60:a8:c0:8e:d8: 96:9a:10:dc:bd:23:83:bd:bb:a9:db:5b:51:c4:09: 4c:a6:38:d4:37:fb:66:2b:7a:64:17:10:09:ee:a5: ea:27:75:03:56:5a:68:b1:1e:61:2b:cd:83:3b:0d: c3:c4:4e:6d:07:b0:9b:8b:73:7f:dc:e0:17:6a:66: 31:cc:bb:d9:0d:71:73:2e:2a:c1:d4:8f:ae:6f:8d: c1:c1:a1:6e:ef:e8:76:cf:c7:49:17:40:ec:68:09: c1:66:a6:0f:1a:ef:29:bd:dc:32:8e:51:ec:f2:49: ba:48:15:7f:fe:db:86:40:2a:7d:62:50:87:32:54: eb:34:ca:1e:58:10:7b:27:b7:a5:00:1b:c2:54:24: ca:6c:39:cb:3c:e8:14:d7:c7:15:e6:64:77:de:a0: 0f:29:e4:bf:f2:67:92:6e:00:73:ac:79:3d:79:52: 21:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:14:10:1E:24:2A:F5:ED:9C:B4:74:17:00:F8:6D:D5:D3:23:91:DD X509v3 Authority Key Identifier: keyid:44:7C:D4:1D:9E:6C:CF:80:30:6C:1B:46:BD:C0:B5:77:B1:EE:2C:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:52:f7:01:2e:be:0f:c6:69:e1:b4:d2:04:85:3f:7d:9f:6c: 1b:80:0e:6c:2b:c8:c8:f4:68:8a:7a:0f:e4:0c:03:1a:d3:03: 0c:68:68:98:b7:bb:4e:77:0a:e2:39:17:5b:77:dc:94:dc:e8: 2e:5d:f4:4e:c1:77:34:dd:dc:cd:bf:ee:09:d0:77:c1:44:f1: e3:39:2f:59:d6:2b:e0:01:dc:2b:e1:2f:39:ca:a9:b4:f6:29: 2e:cc:0e:a3:7f:cb:d7:79:92:20:eb:4d:6e:04:45:0e:78:4d: b6:ed:77:e6:a9:f3:fd:34:6b:95:60:38:83:14:9d:41:41:2d: 86:b1:b6:aa:b5:48:57:d2:8a:ca:c6:ed:8c:f9:d9:4c:37:39: e7:77:94:66:32:2b:b4:c3:08:ce:ac:74:ac:19:bc:db:58:8f: ca:bc:5d:8f:e7:a4:d2:a2:91:fd:af:5e:56:ac:90:86:19:aa: 50:9c:55:c1:fe:25:fd:49:32:df:61:59:4d:b1:67:78:51:d1: b3:54:3d:e7:a7:9e:63:2d:42:2b:f7:fc:d2:04:dd:8e:51:94: 64:ce:26:cf:cc:d5:dd:af:04:f1:13:a6:dd:42:05:0b:8c:ea: 66:f9:e1:3d:d9:b2:fc:22:a1:9e:34:81:fc:ca:fa:7d:b9:14: 25:0b:e5:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U2OEj6anQyD+WGROee73MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0N2NkNDFkOWU2Y2NmODAzMDZjMWI0NmJkYzBiNTc3YjFl ZTJjYWUwHhcNMjUxMjA3MDEwMDUxWhcNMjUxMjA4MDEwMDUxWjAzMTEwLwYDVQQD EyhmMDE0MTAxZTI0MmFmNWVkOWNiNDc0MTcwMGY4NmRkNWQzMjM5MWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxn5D/ufwSm4ikvcUHPGwuzEV9Mxd EWxX3RcMnPssNrBZp+i2MSv8m8Y73K3Yr6Da3XfGHBhgYm+wpplW1XXNiPyDrtt/ 7hpy/sNJrk0f2cg/RP1DYKjAjtiWmhDcvSODvbup21tRxAlMpjjUN/tmK3pkFxAJ 7qXqJ3UDVlposR5hK82DOw3DxE5tB7Cbi3N/3OAXamYxzLvZDXFzLirB1I+ub43B waFu7+h2z8dJF0DsaAnBZqYPGu8pvdwyjlHs8km6SBV//tuGQCp9YlCHMlTrNMoe WBB7J7elABvCVCTKbDnLPOgU18cV5mR33qAPKeS/8meSbgBzrHk9eVIhXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPAUEB4kKvXtnLR0FwD4bdXTI5HdMB8GA1UdIwQY MBaAFER81B2ebM+AMGwbRr3AtXex7iyuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkh6VUhaNXN6NEF3YkJ0R3ZjQzFkN0h1TEs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8xMjAzZDctNDFhYi00MDRjLTkyOWIt Yjk3ODM4YzhkNjU4LzEvUkh6VUhaNXN6NEF3YkJ0R3ZjQzFkN0h1TEs0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8xMjAzZDctNDFhYi00MDRjLTkyOWItYjk3ODM4YzhkNjU4 LzEvUkh6VUhaNXN6NEF3YkJ0R3ZjQzFkN0h1TEs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKlL3AS6+ D8Zp4bTSBIU/fZ9sG4AObCvIyPRoinoP5AwDGtMDDGhomLe7TncK4jkXW3fclNzo Ll30TsF3NN3czb/uCdB3wUTx4zkvWdYr4AHcK+EvOcqptPYpLswOo3/L13mSIOtN bgRFDnhNtu135qnz/TRrlWA4gxSdQUEthrG2qrVIV9KKysbtjPnZTDc553eUZjIr tMMIzqx0rBm821iPyrxdj+ek0qKR/a9eVqyQhhmqUJxVwf4l/Uky32FZTbFneFHR s1Q956eeYy1CK/f80gTdjlGUZM4mz8zV3a8E8ROm3UIFC4zqZvnhPdmy/CKhnjSB /Mr6fbkUJQvl9w== -----END CERTIFICATE-----Generated at Sun Dec 7 03:57:40 2025 by rpki-client