This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft File: RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft (raw, json) Hash identifier: KbwrsA/pCiS5oMVH/GlC4lfTgejB9ZSjiKSrm/5cT6c= Subject key identifier: 33:0F:41:B0:8F:E2:FE:32:75:1F:64:E7:5E:12:E4:C8:0B:4D:FD:73 Authority key identifier: 46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66 Certificate issuer: /CN=461258f5e3b6b94e3916dd2b5d16e342fd605966 Certificate serial: 019B348D61D7499269D4ECEF0711863D6822 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft Manifest number: 16CB Signing time: Fri 19 Dec 2025 03:00:39 +0000 Manifest this update: Fri 19 Dec 2025 03:00:39 +0000 Manifest next update: Sat 20 Dec 2025 03:00:39 +0000 Files and hashes: 1: 9VQnH-9sd7nGshve_4r1C2nYakY.roa (hash: Z02F3WYNcnzG8yizQnWEGco/cel18dqYBCQHGg9DCTg=) 2: RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl (hash: LbKu9lCMNa/nDqPk6/AR+I6V343J4qU4jZRM6/+Jp28=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 03:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:8d:61:d7:49:92:69:d4:ec:ef:07:11:86:3d:68:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=461258f5e3b6b94e3916dd2b5d16e342fd605966 Validity Not Before: Dec 19 03:00:39 2025 GMT Not After : Dec 20 03:00:39 2025 GMT Subject: CN=330f41b08fe2fe32751f64e75e12e4c80b4dfd73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a4:53:d6:ba:c5:7e:cb:d5:54:12:ea:5e:24: cd:7d:e7:47:5b:7d:c1:b4:33:9e:ed:09:9b:6a:40: df:36:2f:5d:06:cf:8d:09:51:81:ac:ee:58:a8:41: 03:57:cd:39:44:41:4e:77:7f:79:77:3d:00:64:85: d5:ab:bb:0e:8d:0a:40:ae:df:45:04:ce:46:c5:8e: 0e:9c:bb:a5:5c:bd:98:1c:d8:15:4b:71:10:87:8f: 3b:46:e5:62:6d:3c:4b:85:dc:b0:11:d5:6a:0d:46: 63:8c:5f:3c:26:d5:a6:fb:5d:7b:3a:8b:89:69:59: 01:30:da:0b:a6:18:7c:19:df:52:b4:6a:a2:59:97: ee:b7:66:06:90:70:0a:3d:08:0a:3a:c6:24:56:c9: c4:bc:d0:7d:7a:43:f4:d9:af:af:c9:f1:a4:22:d1: 88:e4:b3:4e:43:82:4a:ff:e1:a1:a0:e3:b0:47:87: 8f:d3:bc:d1:58:4e:4c:f5:4f:9c:1c:39:4d:60:da: b2:75:b8:1f:49:be:58:80:50:03:c5:7e:26:fa:4d: ea:2b:d9:89:ab:76:76:77:a1:80:bd:af:fa:d2:6a: 05:1a:8c:ad:1b:6e:e9:9c:67:99:d7:e5:ec:24:0e: 86:bb:01:f3:63:9f:e5:a1:63:11:ca:6a:46:6a:e1: 5a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:0F:41:B0:8F:E2:FE:32:75:1F:64:E7:5E:12:E4:C8:0B:4D:FD:73 X509v3 Authority Key Identifier: keyid:46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:9b:d2:5e:fc:9a:cd:99:fe:35:94:df:1a:83:4d:6a:d7:b1: 03:0e:be:21:36:f5:43:93:bb:95:bc:31:86:98:a1:97:ab:2a: 9c:01:88:b0:b5:68:db:3d:e1:00:06:a3:8f:79:54:ae:a7:4b: 8c:eb:80:db:40:78:ed:91:3e:bb:a5:06:8f:cb:8e:e5:4e:78: bd:f6:2a:11:5c:b8:a3:a9:06:3a:28:40:f9:f3:dd:85:9b:9f: 64:8f:0f:39:c5:6e:8f:b3:7b:b7:21:6e:f9:6f:70:91:b4:02: 6d:db:21:e5:1d:69:49:29:ef:ec:fe:3a:b2:b7:c7:13:2e:0a: cf:c0:30:dc:9e:98:d0:1b:5c:ec:a8:c2:97:8f:93:99:f9:e1: a4:84:20:e9:ba:c6:66:8b:f6:2c:ad:10:70:d1:29:42:f9:fe: 12:2b:9e:f9:3a:9f:51:b8:fc:f6:dc:e4:11:88:19:11:aa:8e: 96:ba:29:0d:ce:0f:c1:49:b5:b0:47:83:18:cc:c1:c0:3e:27: cf:02:82:89:58:c2:a4:8c:84:9b:d4:bf:cd:d1:b9:40:b2:bc: 83:db:3e:a5:0c:c9:4e:0c:52:d9:cf:70:cc:18:3c:86:a6:8b: 64:e6:ea:b8:9c:d2:f0:a9:bf:6e:a5:a5:9d:60:74:97:31:43: ca:d8:96:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0jWHXSZJp1OzvBxGGPWgiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MTI1OGY1ZTNiNmI5NGUzOTE2ZGQyYjVkMTZlMzQyZmQ2 MDU5NjYwHhcNMjUxMjE5MDMwMDM5WhcNMjUxMjIwMDMwMDM5WjAzMTEwLwYDVQQD EygzMzBmNDFiMDhmZTJmZTMyNzUxZjY0ZTc1ZTEyZTRjODBiNGRmZDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqRT1rrFfsvVVBLqXiTNfedHW33B tDOe7QmbakDfNi9dBs+NCVGBrO5YqEEDV805REFOd395dz0AZIXVq7sOjQpArt9F BM5GxY4OnLulXL2YHNgVS3EQh487RuVibTxLhdywEdVqDUZjjF88JtWm+117OouJ aVkBMNoLphh8Gd9StGqiWZfut2YGkHAKPQgKOsYkVsnEvNB9ekP02a+vyfGkItGI 5LNOQ4JK/+GhoOOwR4eP07zRWE5M9U+cHDlNYNqydbgfSb5YgFADxX4m+k3qK9mJ q3Z2d6GAva/60moFGoytG27pnGeZ1+XsJA6GuwHzY5/loWMRympGauFauQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDMPQbCP4v4ydR9k514S5MgLTf1zMB8GA1UdIwQY MBaAFEYSWPXjtrlOORbdK10W40L9YFlmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmhKWTllTzJ1VTQ1RnQwclhSYmpRdjFnV1dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lODA1NzUtOGM4Yi00OWE0LTg1ZGUt NTgzYmNlNmZiNTY3LzEvUmhKWTllTzJ1VTQ1RnQwclhSYmpRdjFnV1dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lODA1NzUtOGM4Yi00OWE0LTg1ZGUtNTgzYmNlNmZiNTY3 LzEvUmhKWTllTzJ1VTQ1RnQwclhSYmpRdjFnV1dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgZvSXvya zZn+NZTfGoNNatexAw6+ITb1Q5O7lbwxhpihl6sqnAGIsLVo2z3hAAajj3lUrqdL jOuA20B47ZE+u6UGj8uO5U54vfYqEVy4o6kGOihA+fPdhZufZI8POcVuj7N7tyFu +W9wkbQCbdsh5R1pSSnv7P46srfHEy4Kz8Aw3J6Y0Btc7KjCl4+TmfnhpIQg6brG Zov2LK0QcNEpQvn+Eiue+TqfUbj89tzkEYgZEaqOlropDc4PwUm1sEeDGMzBwD4n zwKCiVjCpIyEm9S/zdG5QLK8g9s+pQzJTgxS2c9wzBg8hqaLZObquJzS8Km/bqWl nWB0lzFDytiWFA== -----END CERTIFICATE-----Generated at Fri Dec 19 10:37:31 2025 by rpki-client