This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft File: RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft (raw, json) Hash identifier: 90GEziOhgkDYWDJnZobq6IOAQjgR6k0b1tyynz8unWw= Subject key identifier: 64:FA:BE:13:C4:89:AD:53:3B:58:A2:4A:5B:7C:BE:16:66:CA:58:97 Authority key identifier: 44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31 Certificate issuer: /CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31 Certificate serial: 019B35697B5021336B9D7801332DE896158C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft Manifest number: 0CFB Signing time: Fri 19 Dec 2025 07:01:03 +0000 Manifest this update: Fri 19 Dec 2025 07:01:03 +0000 Manifest next update: Sat 20 Dec 2025 07:01:03 +0000 Files and hashes: 1: 0qRVIHZKX4qGnjxAiU1aoisO8_I.roa (hash: lyCpmpSchMKVPytHVw70ZjOKFalrbZ7DXCdpS6ih0A8=) 2: RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl (hash: dlytb0AlogrM5Kf05fiFRTh5HXkzmA87hvY5u6VT56I=) 3: XrZ7_VYsTjVO1Hdr6lTXBYRHdDM.roa (hash: /HTMnGOuDTUdEjSKAx29mQcK6o1vmtlFHqUYC092xGg=) 4: fNaHZKQWzTR0TatLxGJsV51nz-I.roa (hash: sE2fqms9057unxv9v3lOHD2WZe1GOPfgICxqGHioarI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:7b:50:21:33:6b:9d:78:01:33:2d:e8:96:15:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31 Validity Not Before: Dec 19 07:01:03 2025 GMT Not After : Dec 20 07:01:03 2025 GMT Subject: CN=64fabe13c489ad533b58a24a5b7cbe1666ca5897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ae:77:41:5f:57:af:7a:e3:1d:e5:92:f3:26: 9f:51:e2:e4:99:e5:f9:a3:26:70:e7:10:ac:6a:0b: d8:1d:bd:f2:54:9e:02:13:55:95:80:b2:bc:dd:ee: 31:b8:90:42:fd:6a:7a:f9:17:fa:a3:44:8c:77:d3: 08:4e:66:46:02:a9:46:ec:2b:4c:f6:ba:fb:ae:b3: 2c:e1:7c:1c:32:0c:f6:4b:ac:05:a5:8b:69:a7:10: ab:d5:a2:1e:99:a3:47:2a:9a:e7:24:0a:c9:db:b5: 9b:d3:65:72:e2:6c:f5:ec:32:37:d4:74:15:13:d6: 1b:99:01:74:31:1a:cd:b3:42:ba:a5:97:4e:ba:a2: da:06:12:5c:d0:9f:b4:5c:34:fc:1c:b0:1d:14:00: b7:b0:66:75:4d:a2:8a:d2:b7:4d:ca:92:32:dd:d4: 43:52:39:7c:ee:a1:46:c7:64:6f:79:ba:fa:b7:b7: 49:9c:b5:ad:a3:21:a5:31:fb:56:fc:31:2c:e2:00: 0e:8e:04:bc:25:bf:60:be:65:58:7c:c5:11:bf:4e: 65:06:28:d1:bd:03:5c:4f:63:a3:07:cc:f2:5f:7a: 1d:bd:71:59:e9:86:a9:a0:4f:b6:37:da:b3:fe:fb: 30:da:21:94:a1:24:57:16:cf:5f:75:1b:0a:9f:22: 2e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:FA:BE:13:C4:89:AD:53:3B:58:A2:4A:5B:7C:BE:16:66:CA:58:97 X509v3 Authority Key Identifier: keyid:44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:fb:9d:df:da:a3:3a:15:e5:2c:d9:ac:a3:e0:c1:bf:64:60: 2e:0b:ee:68:ec:13:56:6b:c1:07:9a:d7:84:50:15:31:8b:3b: 4e:ad:32:6a:50:ca:2e:74:84:63:7f:fd:04:3e:b4:43:4b:52: 99:59:0d:30:c5:32:d4:ec:e3:16:54:8a:18:da:73:ab:33:2c: fe:ae:28:e1:bb:25:d0:4c:2d:1e:61:ca:9d:f8:f0:ea:05:58: 95:53:f6:3c:9c:ac:10:65:f0:a0:4d:6b:f7:87:9d:3a:5c:18: 58:3d:36:a9:36:e0:bf:5f:07:d2:db:23:94:fd:95:00:12:83: fc:f3:44:8c:ab:0c:1e:41:33:b7:51:47:25:82:3d:04:00:5b: ee:90:63:44:7f:75:09:36:f7:c6:8b:e4:81:31:d6:a0:98:00: 4c:d9:58:3f:48:42:e1:10:5c:ee:66:66:06:5b:48:b7:db:24: 6b:71:b1:e7:a8:2c:41:f4:75:39:09:d5:fd:c3:13:14:05:68: 5b:c2:78:d4:e8:5d:33:74:3d:61:70:83:82:50:af:68:d4:58: ae:e6:10:b9:2c:9c:41:3e:d0:a2:5e:14:80:a0:d8:2f:10:da: 5c:5d:c4:da:cc:01:19:5c:b6:b0:80:35:14:c4:da:86:7f:28: 81:9f:1b:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aXtQITNrnXgBMy3olhWMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NzI4ZmIzMWM0ZWJkZmI5YmYxMjk3NDViOTFiZDJlMmVl OGVmMzEwHhcNMjUxMjE5MDcwMTAzWhcNMjUxMjIwMDcwMTAzWjAzMTEwLwYDVQQD Eyg2NGZhYmUxM2M0ODlhZDUzM2I1OGEyNGE1YjdjYmUxNjY2Y2E1ODk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw653QV9Xr3rjHeWS8yafUeLkmeX5 oyZw5xCsagvYHb3yVJ4CE1WVgLK83e4xuJBC/Wp6+Rf6o0SMd9MITmZGAqlG7CtM 9rr7rrMs4XwcMgz2S6wFpYtppxCr1aIemaNHKprnJArJ27Wb02Vy4mz17DI31HQV E9YbmQF0MRrNs0K6pZdOuqLaBhJc0J+0XDT8HLAdFAC3sGZ1TaKK0rdNypIy3dRD Ujl87qFGx2Rvebr6t7dJnLWtoyGlMftW/DEs4gAOjgS8Jb9gvmVYfMURv05lBijR vQNcT2OjB8zyX3odvXFZ6YapoE+2N9qz/vsw2iGUoSRXFs9fdRsKnyIuIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGT6vhPEia1TO1iiSlt8vhZmyliXMB8GA1UdIwQY MBaAFERyj7McTr37m/EpdFuRvS4u6O8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkhLUHN4eE92ZnViOFNsMFc1RzlMaTdvN3pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zYWM3NjEtOWFkOC00NTEzLThhMzIt MWY1NWQ5OTk5ZWViLzEvUkhLUHN4eE92ZnViOFNsMFc1RzlMaTdvN3pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8zYWM3NjEtOWFkOC00NTEzLThhMzItMWY1NWQ5OTk5ZWVi LzEvUkhLUHN4eE92ZnViOFNsMFc1RzlMaTdvN3pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABPud39qj OhXlLNmso+DBv2RgLgvuaOwTVmvBB5rXhFAVMYs7Tq0yalDKLnSEY3/9BD60Q0tS mVkNMMUy1OzjFlSKGNpzqzMs/q4o4bsl0EwtHmHKnfjw6gVYlVP2PJysEGXwoE1r 94edOlwYWD02qTbgv18H0tsjlP2VABKD/PNEjKsMHkEzt1FHJYI9BABb7pBjRH91 CTb3xovkgTHWoJgATNlYP0hC4RBc7mZmBltIt9ska3Gx56gsQfR1OQnV/cMTFAVo W8J41OhdM3Q9YXCDglCvaNRYruYQuSycQT7Qol4UgKDYLxDaXF3E2swBGVy2sIA1 FMTahn8ogZ8bwA== -----END CERTIFICATE-----Generated at Fri Dec 19 15:06:44 2025 by rpki-client