This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft File: RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft (raw, json) Hash identifier: zSGns+wqeR/RCk0pBJtk996T7SxUQn5ExHTg0nyXc00= Subject key identifier: 4B:EE:6D:A3:49:F7:E0:2A:7B:98:08:3A:D1:37:5F:20:FC:73:3F:3F Authority key identifier: 44:7F:91:43:EA:55:35:8F:BD:62:FA:56:44:54:74:60:17:2E:1A:FD Certificate issuer: /CN=447f9143ea55358fbd62fa5644547460172e1afd Certificate serial: 019AF2097E8E6A7703EA3824FCC1F1ECA5BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft Manifest number: 0537 Signing time: Sat 06 Dec 2025 05:01:39 +0000 Manifest this update: Sat 06 Dec 2025 05:01:39 +0000 Manifest next update: Sun 07 Dec 2025 05:01:39 +0000 Files and hashes: 1: RH-RQ-pVNY-9YvpWRFR0YBcuGv0.crl (hash: vPA8+viwS7tCXX1JrOVJPPdzZV46KzXD/5HeqlrkgNw=) 2: XJeFszxemC7e9u-8mZLkEs6aHFs.roa (hash: OiP4xwhS3dePGm/ma2M64C+nfCdXfnndrH2qcjsO/X0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft rsync://rpki.ripe.net/repository/DEFAULT/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:7e:8e:6a:77:03:ea:38:24:fc:c1:f1:ec:a5:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=447f9143ea55358fbd62fa5644547460172e1afd Validity Not Before: Dec 6 05:01:39 2025 GMT Not After : Dec 7 05:01:39 2025 GMT Subject: CN=4bee6da349f7e02a7b98083ad1375f20fc733f3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:4f:9f:15:73:df:0d:6a:15:88:70:98:c5:c3: 06:aa:bc:ca:12:b5:8c:c9:36:f1:66:8f:79:80:8d: 68:ef:0e:ed:d1:09:74:28:94:f9:8b:43:31:2d:df: 87:81:4c:59:58:b4:31:cd:27:8e:f3:72:dd:c5:40: f1:2e:f6:83:5e:0e:ec:02:7c:45:04:20:f4:7d:d6: 44:6b:ac:8b:ab:33:71:30:e0:6b:aa:6a:ec:ff:21: 28:a1:1b:f3:4a:9c:a6:71:d6:dc:ab:7b:27:56:0a: 26:a9:61:db:66:0d:a1:e3:da:20:f9:9f:d5:39:69: 40:e6:e3:85:47:5c:1d:68:74:7b:08:5b:e6:16:3f: 08:ad:8b:f3:79:d3:d0:85:a4:35:dc:0f:b1:4d:e5: ed:c0:94:41:a7:b9:52:e3:df:ce:c9:66:fb:c8:03: 26:2a:6d:d4:25:71:be:e1:a4:0d:43:f5:88:69:65: ec:7b:08:87:bb:f3:5e:0c:e2:c6:61:d2:a1:34:8d: 0d:f3:22:b1:44:cc:c5:ff:7b:b1:70:25:1a:aa:0b: 67:43:12:98:47:ba:ee:73:00:3d:cf:54:98:ed:fa: 04:44:c0:9c:43:1c:03:57:d2:cb:fb:db:48:81:be: ac:44:31:ce:ca:6e:a8:ad:8e:8a:52:c4:cd:f9:3b: 1f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:EE:6D:A3:49:F7:E0:2A:7B:98:08:3A:D1:37:5F:20:FC:73:3F:3F X509v3 Authority Key Identifier: keyid:44:7F:91:43:EA:55:35:8F:BD:62:FA:56:44:54:74:60:17:2E:1A:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:74:40:7c:7a:18:5f:d6:b3:bc:f3:12:31:7c:b7:3c:64:60: 43:c1:6f:b9:9d:3a:3b:57:08:a3:e0:03:0e:19:88:50:70:0c: 2d:e8:d0:ad:0c:00:47:ae:9d:8c:29:a3:9e:8c:7d:55:06:42: 94:04:97:eb:94:fd:3c:a7:a4:5d:90:91:89:55:81:51:7c:37: d5:cd:8d:ac:cd:ed:83:47:fe:2b:7a:eb:d1:b0:cc:bf:ef:79: 51:ba:91:ce:96:68:a5:25:d3:dc:87:84:13:ae:89:df:c6:0d: d5:68:e9:bc:0e:cd:a9:50:ea:34:6a:2c:e3:e1:f0:a7:9d:ab: 28:28:c3:9a:c1:2a:dd:ed:32:90:a6:07:12:0e:31:be:5a:aa: 12:31:ad:19:97:05:40:7b:c9:d2:53:47:23:c7:f7:bf:ac:c0: 33:1e:77:2b:52:0d:55:57:bb:bc:b8:57:f7:9b:14:db:3d:75: 39:36:a0:4e:32:27:4f:ea:b7:28:68:8e:3a:ba:ba:ea:b9:64: 91:dc:1e:99:b9:66:43:23:59:eb:90:be:b4:e2:37:e1:47:77: 57:0f:f6:bf:57:d9:fe:54:e9:e8:38:17:c4:b4:94:5c:7a:f5: fc:a9:fe:aa:9f:28:e6:17:41:98:8b:03:82:b6:55:88:4a:be: 33:dd:aa:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCX6OancD6jgk/MHx7KW7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0N2Y5MTQzZWE1NTM1OGZiZDYyZmE1NjQ0NTQ3NDYwMTcy ZTFhZmQwHhcNMjUxMjA2MDUwMTM5WhcNMjUxMjA3MDUwMTM5WjAzMTEwLwYDVQQD Eyg0YmVlNmRhMzQ5ZjdlMDJhN2I5ODA4M2FkMTM3NWYyMGZjNzMzZjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6U+fFXPfDWoViHCYxcMGqrzKErWM yTbxZo95gI1o7w7t0Ql0KJT5i0MxLd+HgUxZWLQxzSeO83LdxUDxLvaDXg7sAnxF BCD0fdZEa6yLqzNxMOBrqmrs/yEooRvzSpymcdbcq3snVgomqWHbZg2h49og+Z/V OWlA5uOFR1wdaHR7CFvmFj8IrYvzedPQhaQ13A+xTeXtwJRBp7lS49/OyWb7yAMm Km3UJXG+4aQNQ/WIaWXsewiHu/NeDOLGYdKhNI0N8yKxRMzF/3uxcCUaqgtnQxKY R7rucwA9z1SY7foERMCcQxwDV9LL+9tIgb6sRDHOym6orY6KUsTN+TsfVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEvubaNJ9+Aqe5gIOtE3XyD8cz8/MB8GA1UdIwQY MBaAFER/kUPqVTWPvWL6VkRUdGAXLhr9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkgtUlEtcFZOWS05WXZwV1JGUjBZQmN1R3YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS85ZWEzNjktYTI4Yy00YzdlLTlhMTUt YzQyOTJmYWM5YmU4LzEvUkgtUlEtcFZOWS05WXZwV1JGUjBZQmN1R3YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS85ZWEzNjktYTI4Yy00YzdlLTlhMTUtYzQyOTJmYWM5YmU4 LzEvUkgtUlEtcFZOWS05WXZwV1JGUjBZQmN1R3YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfHRAfHoY X9azvPMSMXy3PGRgQ8FvuZ06O1cIo+ADDhmIUHAMLejQrQwAR66djCmjnox9VQZC lASX65T9PKekXZCRiVWBUXw31c2NrM3tg0f+K3rr0bDMv+95UbqRzpZopSXT3IeE E66J38YN1WjpvA7NqVDqNGos4+Hwp52rKCjDmsEq3e0ykKYHEg4xvlqqEjGtGZcF QHvJ0lNHI8f3v6zAMx53K1INVVe7vLhX95sU2z11OTagTjInT+q3KGiOOrq66rlk kdwemblmQyNZ65C+tOI34Ud3Vw/2v1fZ/lTp6DgXxLSUXHr1/Kn+qp8o5hdBmIsD grZViEq+M92qGA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:21:35 2025 by rpki-client