This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft File: RHtl-fh6qPdA1aF6cub4vB5diI8.mft (raw, json) Hash identifier: iO31RNL6YvdkV1hSWEpQCB7dnrCnuMUIdY++IpWI+LY= Subject key identifier: 36:FA:CA:F6:1F:D9:C9:6E:07:61:63:49:FE:A0:88:B5:C4:B3:C3:16 Authority key identifier: 44:7B:65:F9:F8:7A:A8:F7:40:D5:A1:7A:72:E6:F8:BC:1E:5D:88:8F Certificate issuer: /CN=447b65f9f87aa8f740d5a17a72e6f8bc1e5d888f Certificate serial: 019AF19B4CABF486953CA039A116F20CE907 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHtl-fh6qPdA1aF6cub4vB5diI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 03:01:18 +0000 Manifest this update: Sat 06 Dec 2025 03:01:18 +0000 Manifest next update: Sun 07 Dec 2025 03:01:18 +0000 Files and hashes: 1: RHtl-fh6qPdA1aF6cub4vB5diI8.crl (hash: cfRO2mppoj8lhcXbiUTuxrpZly488P9QBR6GYZZ2d5M=) 2: yVtJV2wHnYYgGKReSCSnZYps7Ag.roa (hash: AsvRlZAtzH1D3I297oQkwJy/CORxgTVcaX2DwwZRFUs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.crl rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft rsync://rpki.ripe.net/repository/DEFAULT/RHtl-fh6qPdA1aF6cub4vB5diI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:4c:ab:f4:86:95:3c:a0:39:a1:16:f2:0c:e9:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=447b65f9f87aa8f740d5a17a72e6f8bc1e5d888f Validity Not Before: Dec 6 03:01:18 2025 GMT Not After : Dec 7 03:01:18 2025 GMT Subject: CN=36facaf61fd9c96e07616349fea088b5c4b3c316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:41:8a:17:88:81:e9:0b:12:2e:aa:e1:23:4c: 44:b5:f2:55:b5:39:d3:67:50:f9:04:fb:68:30:57: 17:59:17:ee:1a:6b:33:71:98:21:80:02:8d:48:74: 8b:fe:83:59:56:45:c9:09:6b:ad:23:56:cf:ba:c2: b1:ff:9f:57:ba:7a:b5:4d:35:7b:ed:d8:0e:77:2e: 86:6d:11:88:dd:96:6f:89:da:85:5d:2a:c0:d9:a7: e0:18:33:b9:e1:b2:4c:ea:a2:37:98:4e:39:65:3e: f4:e2:58:9d:ff:7c:6c:02:82:77:47:c3:1c:6d:0d: 49:d7:d8:6c:07:7f:5e:c9:64:7e:77:d6:4d:a4:dc: c0:9e:2d:b4:ec:10:2e:bf:8e:55:c6:be:92:9c:13: 6d:cf:42:77:b5:e1:96:ad:ee:04:63:5d:8f:97:4b: a5:1a:dd:a2:a9:36:c5:d1:57:e3:31:da:32:c8:8b: 2b:10:42:02:76:ff:ac:9c:6f:cd:2e:9e:18:af:1c: af:f0:aa:a7:b1:43:e6:f6:93:06:38:20:95:be:b7: 13:78:3c:e6:1f:a1:b0:29:f1:fd:ff:f8:e0:bf:9e: 35:f3:34:3e:da:ad:19:c8:eb:c1:36:38:a3:9d:04: ee:03:20:b8:18:70:f6:56:ed:a3:03:18:e9:91:fd: ea:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:FA:CA:F6:1F:D9:C9:6E:07:61:63:49:FE:A0:88:B5:C4:B3:C3:16 X509v3 Authority Key Identifier: keyid:44:7B:65:F9:F8:7A:A8:F7:40:D5:A1:7A:72:E6:F8:BC:1E:5D:88:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHtl-fh6qPdA1aF6cub4vB5diI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:23:26:9d:ca:76:53:a8:38:96:ff:cf:b1:c1:bd:94:74:d2: eb:fe:6b:95:ca:f2:9e:1a:ad:40:20:46:aa:c0:c9:4d:5b:94: ab:1c:63:fc:85:cf:e8:b3:2a:62:af:b0:f2:a6:47:da:63:99: 75:e0:91:01:25:0d:f4:89:70:2c:88:cf:d4:7a:04:18:60:fa: 57:f5:eb:1c:fd:c3:e3:2d:06:d3:b7:6d:f3:9c:36:6c:2e:ee: 2c:18:fd:2b:b3:58:58:00:0e:55:0f:cd:c8:10:cb:d2:88:5c: b2:4a:16:a5:e9:0d:ef:52:d5:45:4b:b1:26:6c:b1:34:29:d7: 47:43:27:f7:f5:60:9c:dc:5b:46:c2:57:63:c6:55:cb:a6:21: c0:85:c6:88:f8:37:7c:9a:e1:c6:33:85:b0:36:f7:0c:8b:8b: 76:a3:ad:69:ea:8b:30:af:ca:ec:ca:54:e4:b0:42:96:f9:57: 2d:b0:23:ce:e2:7b:92:58:cb:1a:03:b6:c7:e1:42:a9:1d:68: ea:7b:49:16:ee:78:73:73:da:56:7e:0f:58:03:e2:9f:40:d6: 20:b5:6b:fd:1b:c4:1d:42:cf:0a:75:89:bd:f4:7d:26:3e:59: e1:da:f8:bd:24:88:09:14:f4:9f:60:fa:cf:3c:b7:9a:98:a6: 5f:de:03:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0yr9IaVPKA5oRbyDOkHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0N2I2NWY5Zjg3YWE4Zjc0MGQ1YTE3YTcyZTZmOGJjMWU1 ZDg4OGYwHhcNMjUxMjA2MDMwMTE4WhcNMjUxMjA3MDMwMTE4WjAzMTEwLwYDVQQD EygzNmZhY2FmNjFmZDljOTZlMDc2MTYzNDlmZWEwODhiNWM0YjNjMzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkGKF4iB6QsSLqrhI0xEtfJVtTnT Z1D5BPtoMFcXWRfuGmszcZghgAKNSHSL/oNZVkXJCWutI1bPusKx/59Xunq1TTV7 7dgOdy6GbRGI3ZZvidqFXSrA2afgGDO54bJM6qI3mE45ZT704lid/3xsAoJ3R8Mc bQ1J19hsB39eyWR+d9ZNpNzAni207BAuv45Vxr6SnBNtz0J3teGWre4EY12Pl0ul Gt2iqTbF0VfjMdoyyIsrEEICdv+snG/NLp4Yrxyv8KqnsUPm9pMGOCCVvrcTeDzm H6GwKfH9//jgv5418zQ+2q0ZyOvBNjijnQTuAyC4GHD2Vu2jAxjpkf3qgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDb6yvYf2cluB2FjSf6giLXEs8MWMB8GA1UdIwQY MBaAFER7Zfn4eqj3QNWhenLm+LweXYiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkh0bC1maDZxUGRBMWFGNmN1YjR2QjVkaUk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC83NzJkMmYtZDFhZS00N2RmLWI2N2Ut MTVjYTc1M2ZhNTEwLzEvUkh0bC1maDZxUGRBMWFGNmN1YjR2QjVkaUk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC83NzJkMmYtZDFhZS00N2RmLWI2N2UtMTVjYTc1M2ZhNTEw LzEvUkh0bC1maDZxUGRBMWFGNmN1YjR2QjVkaUk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfyMmncp2 U6g4lv/PscG9lHTS6/5rlcrynhqtQCBGqsDJTVuUqxxj/IXP6LMqYq+w8qZH2mOZ deCRASUN9IlwLIjP1HoEGGD6V/XrHP3D4y0G07dt85w2bC7uLBj9K7NYWAAOVQ/N yBDL0ohcskoWpekN71LVRUuxJmyxNCnXR0Mn9/VgnNxbRsJXY8ZVy6YhwIXGiPg3 fJrhxjOFsDb3DIuLdqOtaeqLMK/K7MpU5LBClvlXLbAjzuJ7kljLGgO2x+FCqR1o 6ntJFu54c3PaVn4PWAPin0DWILVr/RvEHULPCnWJvfR9Jj5Z4dr4vSSICRT0n2D6 zzy3mpimX94DvQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:32:10 2025 by rpki-client