This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft File: RFHoPa4So3HB3UnbNNm9Uqloi0o.mft (raw, json) Hash identifier: EOeljE/hRkKrAVv76rNZ6ENzfCVbq3WFXHbFdCFBgx8= Subject key identifier: 24:BB:E0:EB:2A:C4:5C:28:15:79:9B:14:25:71:55:85:C4:6F:B8:7A Authority key identifier: 44:51:E8:3D:AE:12:A3:71:C1:DD:49:DB:34:D9:BD:52:A9:68:8B:4A Certificate issuer: /CN=4451e83dae12a371c1dd49db34d9bd52a9688b4a Certificate serial: 019AF12CC1CA991653532E3E12F7E1669B02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft Manifest number: 09C3 Signing time: Sat 06 Dec 2025 01:00:33 +0000 Manifest this update: Sat 06 Dec 2025 01:00:33 +0000 Manifest next update: Sun 07 Dec 2025 01:00:33 +0000 Files and hashes: 1: 5Fdl-r1UYISwU-G4_2MqecNlP8w.roa (hash: TAJZY43vWFWcoOa+D6CqSMPTmCKVwuNadSb4SpvtlPE=) 2: RFHoPa4So3HB3UnbNNm9Uqloi0o.crl (hash: 7DzRExQyGIJrNZwPRe+9uG7R1ZYoDjm+UvdAZZVqInQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:c1:ca:99:16:53:53:2e:3e:12:f7:e1:66:9b:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4451e83dae12a371c1dd49db34d9bd52a9688b4a Validity Not Before: Dec 6 01:00:33 2025 GMT Not After : Dec 7 01:00:33 2025 GMT Subject: CN=24bbe0eb2ac45c2815799b1425715585c46fb87a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b0:7a:f8:af:e7:56:8d:0d:a7:12:58:52:69: cb:a2:92:fe:4d:59:f9:16:4e:6b:cc:ee:39:bf:2d: ad:b3:39:35:0b:6a:18:11:fe:5a:80:b7:44:e8:70: a1:18:cb:24:7b:47:65:9d:93:f6:7a:54:fa:8f:e7: 71:28:52:52:c8:ec:03:cc:4c:5e:63:b0:c1:5f:88: 9f:94:48:75:6e:16:a5:ac:b8:e7:a1:3a:fb:87:b1: a1:71:d5:b7:56:dd:be:fd:2e:81:ef:1f:fe:44:81: 69:26:dc:5a:4a:8c:eb:f5:73:ab:42:90:c4:b9:e7: e2:05:25:de:fb:55:8c:8e:9e:8d:24:da:1f:c7:f6: be:4f:2a:63:95:a3:cb:00:38:e6:42:51:e0:52:6d: d2:9b:2f:a9:45:63:e5:ec:c5:cd:23:f3:ff:3a:b8: ba:fd:8e:82:c7:f6:9d:7b:11:4b:0f:c3:78:03:97: 8b:de:4b:8f:4b:81:39:90:15:df:f6:36:e2:88:4c: db:ca:4b:01:5f:5a:ed:4f:34:2f:3f:3e:c1:d8:f7: 48:cd:16:e1:ef:aa:03:95:f8:fc:64:22:fe:28:5c: 2f:22:0b:e3:23:18:4c:0b:8c:45:53:a1:11:6f:d9: c5:9c:f7:48:8c:5c:f8:e4:d4:b9:28:c2:82:0d:d1: b7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:BB:E0:EB:2A:C4:5C:28:15:79:9B:14:25:71:55:85:C4:6F:B8:7A X509v3 Authority Key Identifier: keyid:44:51:E8:3D:AE:12:A3:71:C1:DD:49:DB:34:D9:BD:52:A9:68:8B:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:6f:d7:ad:15:b5:8b:c2:a8:64:0f:f7:aa:01:d0:8c:4e:ad: 3a:28:fe:e1:57:d8:24:70:d1:0d:cd:14:da:1d:80:fa:74:4f: 60:72:41:68:1b:89:87:ee:4b:ac:b4:cc:4c:f6:da:da:b5:0e: c9:36:59:2b:1a:52:32:b6:3d:0e:75:84:5a:51:a0:6f:00:dc: 3e:96:6c:52:f3:39:29:70:f3:c6:6d:32:0e:ad:a9:17:8c:1e: 52:d8:6d:ed:2b:f5:94:7e:3d:dc:67:77:ff:f4:3d:df:34:26: 7b:6e:41:1a:94:3a:aa:da:fe:d2:6c:3a:72:3b:68:61:1e:0c: a8:81:ef:54:ed:80:fd:ab:e6:59:41:96:a5:6c:10:d2:73:45: 72:3f:75:43:bf:63:a6:37:9a:0c:d1:fb:19:83:c2:cf:77:8f: 03:59:a2:7c:4e:f9:6d:fa:ef:73:1d:2f:7f:5d:cb:74:ea:2b: 04:5a:eb:40:8d:93:3e:84:48:90:75:c7:a0:c2:5f:e9:51:29: 2c:49:7c:bc:f9:2e:a0:4f:68:38:a4:b9:39:7f:f5:4c:99:2a: 21:9c:6d:bd:e3:2d:a4:b0:1d:ab:8b:2d:8e:b6:1d:f3:cc:4e: ab:ab:35:56:9c:25:6d:24:78:b7:ea:4b:3f:e9:2d:06:e9:59: 55:2f:b9:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLMHKmRZTUy4+EvfhZpsCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTFlODNkYWUxMmEzNzFjMWRkNDlkYjM0ZDliZDUyYTk2 ODhiNGEwHhcNMjUxMjA2MDEwMDMzWhcNMjUxMjA3MDEwMDMzWjAzMTEwLwYDVQQD EygyNGJiZTBlYjJhYzQ1YzI4MTU3OTliMTQyNTcxNTU4NWM0NmZiODdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7B6+K/nVo0NpxJYUmnLopL+TVn5 Fk5rzO45vy2tszk1C2oYEf5agLdE6HChGMske0dlnZP2elT6j+dxKFJSyOwDzExe Y7DBX4iflEh1bhalrLjnoTr7h7GhcdW3Vt2+/S6B7x/+RIFpJtxaSozr9XOrQpDE uefiBSXe+1WMjp6NJNofx/a+TypjlaPLADjmQlHgUm3Smy+pRWPl7MXNI/P/Ori6 /Y6Cx/adexFLD8N4A5eL3kuPS4E5kBXf9jbiiEzbyksBX1rtTzQvPz7B2PdIzRbh 76oDlfj8ZCL+KFwvIgvjIxhMC4xFU6ERb9nFnPdIjFz45NS5KMKCDdG3HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCS74OsqxFwoFXmbFCVxVYXEb7h6MB8GA1UdIwQY MBaAFERR6D2uEqNxwd1J2zTZvVKpaItKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZIb1BhNFNvM0hCM1VuYk5ObTlVcWxvaTBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9kZDhmNzEtMmIzNi00ZmI3LWIyZDUt Zjk5N2RiZGMzZTU3LzEvUkZIb1BhNFNvM0hCM1VuYk5ObTlVcWxvaTBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9kZDhmNzEtMmIzNi00ZmI3LWIyZDUtZjk5N2RiZGMzZTU3 LzEvUkZIb1BhNFNvM0hCM1VuYk5ObTlVcWxvaTBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUG/XrRW1 i8KoZA/3qgHQjE6tOij+4VfYJHDRDc0U2h2A+nRPYHJBaBuJh+5LrLTMTPba2rUO yTZZKxpSMrY9DnWEWlGgbwDcPpZsUvM5KXDzxm0yDq2pF4weUtht7Sv1lH493Gd3 //Q93zQme25BGpQ6qtr+0mw6cjtoYR4MqIHvVO2A/avmWUGWpWwQ0nNFcj91Q79j pjeaDNH7GYPCz3ePA1mifE75bfrvcx0vf13LdOorBFrrQI2TPoRIkHXHoMJf6VEp LEl8vPkuoE9oOKS5OX/1TJkqIZxtveMtpLAdq4stjrYd88xOq6s1VpwlbSR4t+pL P+ktBulZVS+5xw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:17 2025 by rpki-client