This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft File: RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft (raw, json) Hash identifier: MKt/pwGRPpWI32MPTtZLMfAVss3W+G3NR4lEKqRom1I= Subject key identifier: 22:3E:62:72:68:DA:D8:13:FE:38:65:19:9B:3E:A9:C1:25:AB:1E:3C Authority key identifier: 44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31 Certificate issuer: /CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31 Certificate serial: 019AF1D195E50B7FA24CE45D94C4657DF91B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft Manifest number: 0CD8 Signing time: Sat 06 Dec 2025 04:00:35 +0000 Manifest this update: Sat 06 Dec 2025 04:00:35 +0000 Manifest next update: Sun 07 Dec 2025 04:00:35 +0000 Files and hashes: 1: 0qRVIHZKX4qGnjxAiU1aoisO8_I.roa (hash: lyCpmpSchMKVPytHVw70ZjOKFalrbZ7DXCdpS6ih0A8=) 2: RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl (hash: /Fu3Wj8TuO0OBMhrW6ufZtuJPfGF/ogbGehXUpkB8uA=) 3: XrZ7_VYsTjVO1Hdr6lTXBYRHdDM.roa (hash: /HTMnGOuDTUdEjSKAx29mQcK6o1vmtlFHqUYC092xGg=) 4: fNaHZKQWzTR0TatLxGJsV51nz-I.roa (hash: sE2fqms9057unxv9v3lOHD2WZe1GOPfgICxqGHioarI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:95:e5:0b:7f:a2:4c:e4:5d:94:c4:65:7d:f9:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31 Validity Not Before: Dec 6 04:00:35 2025 GMT Not After : Dec 7 04:00:35 2025 GMT Subject: CN=223e627268dad813fe3865199b3ea9c125ab1e3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8e:58:35:e3:32:7c:4d:c8:6e:6c:fe:38:91: ab:4f:45:9d:d7:3c:8c:58:90:9e:0d:b1:a0:24:22: 9c:a2:b8:45:46:61:7a:e1:d0:f8:93:a6:05:79:95: 39:9a:f6:8a:e0:e0:c7:fa:8e:17:93:26:25:71:e6: 00:99:3f:85:d0:9b:25:c9:0c:53:7d:11:3e:ad:fc: 76:7f:47:fb:5f:27:eb:59:19:50:43:2f:d7:29:c0: 2f:2a:6e:34:1c:12:1e:d8:6a:fd:d1:11:29:d0:77: c7:34:e6:34:eb:0f:e6:2a:16:43:66:bb:06:ca:bf: 84:24:8e:9e:25:f1:3e:87:a4:0d:e5:01:62:d5:80: 2e:42:c0:fe:21:85:12:65:df:a0:2e:5a:03:85:6f: 4c:0b:42:16:5c:7d:db:b1:2b:bd:9f:79:72:64:c1: dd:9d:a9:7b:05:46:5c:9b:19:38:0f:43:66:a5:cb: 17:62:1c:67:fd:73:6a:44:57:7c:e6:63:71:6f:67: cf:32:0c:bd:0f:70:d0:c4:d6:2f:99:5f:66:a3:1d: 44:68:c3:91:9e:6d:32:55:ee:d0:33:b1:83:96:c6: fe:9d:24:6f:93:1c:36:38:24:0e:3f:c2:e1:0b:82: 20:a9:0e:31:5d:15:ef:c8:9b:f3:de:ac:be:a0:ee: 2f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:3E:62:72:68:DA:D8:13:FE:38:65:19:9B:3E:A9:C1:25:AB:1E:3C X509v3 Authority Key Identifier: keyid:44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:3c:34:e9:4e:24:1e:6b:ff:c2:c6:cd:db:18:6e:8e:84:ec: d7:86:eb:76:42:90:f1:25:69:c8:7e:60:7e:b1:ba:71:23:ba: 1b:02:51:17:48:d9:cc:4d:b3:87:ab:38:42:ef:d0:f5:84:39: 85:e7:57:7d:38:83:58:fa:11:8b:6d:52:86:43:e2:e2:e0:b1: 7c:cf:73:b3:10:9f:18:53:eb:8a:c9:ad:69:b0:72:a5:dc:0f: a0:c7:03:6f:73:69:83:60:7c:7c:b4:e2:01:bd:78:57:ed:e7: 62:38:f9:bd:61:df:a1:88:10:6d:8a:c4:22:bd:ff:ba:ed:cb: 02:20:fd:f3:6f:b2:5a:0b:e2:c9:36:d6:8b:da:92:2f:d5:b5: 6c:48:e9:ae:cb:ec:98:a0:9f:16:90:00:8b:0b:11:74:0b:d0: c1:14:37:45:36:7d:ce:c1:72:10:34:e0:a2:6f:c2:b0:87:a3: cf:ed:3c:b7:51:9b:eb:f9:9e:06:62:46:c7:a0:40:e5:45:2e: ed:3d:92:80:66:04:3f:4f:16:fe:79:f9:f9:15:7a:14:72:ec: b2:e5:b0:35:17:74:60:78:b6:d5:d7:27:63:fa:3e:53:98:d5: 3f:90:eb:fd:4e:0d:d0:1d:c0:f5:11:54:68:02:04:b2:3a:37: 7c:74:95:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ZXlC3+iTORdlMRlffkbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NzI4ZmIzMWM0ZWJkZmI5YmYxMjk3NDViOTFiZDJlMmVl OGVmMzEwHhcNMjUxMjA2MDQwMDM1WhcNMjUxMjA3MDQwMDM1WjAzMTEwLwYDVQQD EygyMjNlNjI3MjY4ZGFkODEzZmUzODY1MTk5YjNlYTljMTI1YWIxZTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwo5YNeMyfE3Ibmz+OJGrT0Wd1zyM WJCeDbGgJCKcorhFRmF64dD4k6YFeZU5mvaK4ODH+o4XkyYlceYAmT+F0JslyQxT fRE+rfx2f0f7XyfrWRlQQy/XKcAvKm40HBIe2Gr90REp0HfHNOY06w/mKhZDZrsG yr+EJI6eJfE+h6QN5QFi1YAuQsD+IYUSZd+gLloDhW9MC0IWXH3bsSu9n3lyZMHd nal7BUZcmxk4D0NmpcsXYhxn/XNqRFd85mNxb2fPMgy9D3DQxNYvmV9mox1EaMOR nm0yVe7QM7GDlsb+nSRvkxw2OCQOP8LhC4IgqQ4xXRXvyJvz3qy+oO4vOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCI+YnJo2tgT/jhlGZs+qcElqx48MB8GA1UdIwQY MBaAFERyj7McTr37m/EpdFuRvS4u6O8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkhLUHN4eE92ZnViOFNsMFc1RzlMaTdvN3pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zYWM3NjEtOWFkOC00NTEzLThhMzIt MWY1NWQ5OTk5ZWViLzEvUkhLUHN4eE92ZnViOFNsMFc1RzlMaTdvN3pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8zYWM3NjEtOWFkOC00NTEzLThhMzItMWY1NWQ5OTk5ZWVi LzEvUkhLUHN4eE92ZnViOFNsMFc1RzlMaTdvN3pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMjw06U4k Hmv/wsbN2xhujoTs14brdkKQ8SVpyH5gfrG6cSO6GwJRF0jZzE2zh6s4Qu/Q9YQ5 hedXfTiDWPoRi21ShkPi4uCxfM9zsxCfGFPrismtabBypdwPoMcDb3Npg2B8fLTi Ab14V+3nYjj5vWHfoYgQbYrEIr3/uu3LAiD982+yWgviyTbWi9qSL9W1bEjprsvs mKCfFpAAiwsRdAvQwRQ3RTZ9zsFyEDTgom/CsIejz+08t1Gb6/meBmJGx6BA5UUu 7T2SgGYEP08W/nn5+RV6FHLssuWwNRd0YHi21dcnY/o+U5jVP5Dr/U4N0B3A9RFU aAIEsjo3fHSVGQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:50 2025 by rpki-client