This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.mft File: RHxS2B7cEklkSteUvgKK-Q4CShY.mft (raw, json) Hash identifier: TcDu+WzYTkm+971FmPCemQ6K6Y7yJe9MNg6B+6ztKwc= Subject key identifier: 5D:98:47:E6:A2:08:69:F5:D4:9B:79:64:A3:C0:DC:17:DF:AB:B7:6B Authority key identifier: 44:7C:52:D8:1E:DC:12:49:64:4A:D7:94:BE:02:8A:F9:0E:02:4A:16 Certificate issuer: /CN=447c52d81edc1249644ad794be028af90e024a16 Certificate serial: 019B42EEC4A231273E15F7B20038B3176F05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHxS2B7cEklkSteUvgKK-Q4CShY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.mft Manifest number: 0B37 Signing time: Sun 21 Dec 2025 22:01:42 +0000 Manifest this update: Sun 21 Dec 2025 22:01:42 +0000 Manifest next update: Mon 22 Dec 2025 22:01:42 +0000 Files and hashes: 1: 0RTmTUPTdqVwMU5i8iRqJZA86F0.roa (hash: eIjsDcha7FolfU5e8Eelou/OO0UBzir5atE5Gevb/B4=) 2: RHxS2B7cEklkSteUvgKK-Q4CShY.crl (hash: mdcDUYnTjI2G1hECtkONYomyab7aS6ibVcKr4wT7rCw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.mft rsync://rpki.ripe.net/repository/DEFAULT/RHxS2B7cEklkSteUvgKK-Q4CShY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:c4:a2:31:27:3e:15:f7:b2:00:38:b3:17:6f:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=447c52d81edc1249644ad794be028af90e024a16 Validity Not Before: Dec 21 22:01:42 2025 GMT Not After : Dec 22 22:01:42 2025 GMT Subject: CN=5d9847e6a20869f5d49b7964a3c0dc17dfabb76b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:71:c4:5e:92:1a:21:de:bb:e3:d5:36:16:0e: ba:ff:a4:44:10:ed:69:4b:bb:b2:ab:d1:5f:bf:b5: 8f:72:f1:7c:eb:11:92:ef:aa:92:a9:31:31:31:ca: d2:26:a4:79:cf:e1:18:26:40:54:9c:7e:a7:c7:9d: 8b:19:52:58:8b:37:5e:c3:a6:7f:a9:d0:d8:c4:df: 87:be:fa:da:fa:7b:3b:16:e7:76:2c:f3:e2:27:7f: 78:5f:84:53:60:64:e5:7e:df:81:66:a5:b0:54:8f: 0e:52:42:00:cf:9b:49:28:d2:ff:7e:4b:83:f4:5f: 3f:dc:cb:a3:a3:f4:4c:0f:a2:ec:e2:7f:3a:95:13: 05:7e:e0:f0:c8:32:22:9f:b7:69:5d:86:9c:87:da: b2:f0:28:07:c9:b2:29:e1:76:bc:e4:f2:31:58:c3: 49:f6:62:a8:58:11:17:3d:36:7b:bf:bc:1f:61:20: f7:64:82:e7:43:b2:09:8e:45:26:cb:bb:c5:08:e3: 22:b5:13:3f:e4:f9:17:2a:76:62:d7:3b:cb:fd:22: 50:e9:c8:be:79:fa:90:88:1e:7b:45:bc:8f:60:ad: 87:e0:c6:69:21:33:3f:f1:24:1f:3c:ca:e5:75:8d: 36:08:06:fc:40:54:58:1a:d2:71:1b:95:53:22:28: 85:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:98:47:E6:A2:08:69:F5:D4:9B:79:64:A3:C0:DC:17:DF:AB:B7:6B X509v3 Authority Key Identifier: keyid:44:7C:52:D8:1E:DC:12:49:64:4A:D7:94:BE:02:8A:F9:0E:02:4A:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHxS2B7cEklkSteUvgKK-Q4CShY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:74:d1:2e:de:9c:a4:44:ad:8b:00:25:d9:27:2d:45:17:ea: b2:95:e2:49:3b:8d:0f:fd:72:a8:3d:a3:1d:3f:2f:f9:96:6f: de:69:96:56:28:b0:ec:66:71:2c:4f:96:64:d6:6d:54:cd:dc: 64:c9:a8:f2:0c:18:0a:45:67:9e:f5:95:3f:e0:bc:24:42:38: 7a:c2:64:8c:3b:15:ff:58:66:7a:61:56:3e:4c:f8:90:2e:a3: 7a:e1:56:aa:d9:7e:b9:dd:da:0e:4c:29:bd:14:47:08:7b:90: 69:8c:7e:6e:41:cd:e2:24:35:82:2c:4b:c5:e2:d1:0f:59:75: ad:8c:56:b2:84:4d:83:71:ce:ef:07:ee:0f:70:99:bd:40:8c: fe:e8:a9:c7:d7:23:b7:91:10:66:70:ab:23:32:d1:16:82:54: d6:d1:f7:dd:35:89:59:cd:34:34:1e:46:ca:b4:3b:02:c2:e0: a2:06:54:b4:f7:4e:dc:81:ec:53:ea:12:27:23:28:ae:c8:1a: b9:7e:f3:e6:70:8a:e0:dc:0e:fc:d7:1e:8d:e9:77:35:a2:0f: ff:9a:cf:3f:95:39:bf:c1:cb:88:25:bc:15:3a:9f:96:7d:8b: 6a:fb:09:ed:0d:64:fc:96:75:aa:c8:d6:50:b2:86:34:0a:43: 84:5e:73:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7sSiMSc+FfeyADizF28FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0N2M1MmQ4MWVkYzEyNDk2NDRhZDc5NGJlMDI4YWY5MGUw MjRhMTYwHhcNMjUxMjIxMjIwMTQyWhcNMjUxMjIyMjIwMTQyWjAzMTEwLwYDVQQD Eyg1ZDk4NDdlNmEyMDg2OWY1ZDQ5Yjc5NjRhM2MwZGMxN2RmYWJiNzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHHEXpIaId6749U2Fg66/6REEO1p S7uyq9Ffv7WPcvF86xGS76qSqTExMcrSJqR5z+EYJkBUnH6nx52LGVJYizdew6Z/ qdDYxN+Hvvra+ns7Fud2LPPiJ394X4RTYGTlft+BZqWwVI8OUkIAz5tJKNL/fkuD 9F8/3Mujo/RMD6Ls4n86lRMFfuDwyDIin7dpXYach9qy8CgHybIp4Xa85PIxWMNJ 9mKoWBEXPTZ7v7wfYSD3ZILnQ7IJjkUmy7vFCOMitRM/5PkXKnZi1zvL/SJQ6ci+ efqQiB57RbyPYK2H4MZpITM/8SQfPMrldY02CAb8QFRYGtJxG5VTIiiFrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF2YR+aiCGn11Jt5ZKPA3Bffq7drMB8GA1UdIwQY MBaAFER8Utge3BJJZErXlL4CivkOAkoWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkh4UzJCN2NFa2xrU3RlVXZnS0stUTRDU2hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC83NjFiMTctNmNiNS00N2ZkLThjNGYt ZWZhNjc4OWZkOTcyLzEvUkh4UzJCN2NFa2xrU3RlVXZnS0stUTRDU2hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC83NjFiMTctNmNiNS00N2ZkLThjNGYtZWZhNjc4OWZkOTcy LzEvUkh4UzJCN2NFa2xrU3RlVXZnS0stUTRDU2hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGnTRLt6c pEStiwAl2SctRRfqspXiSTuND/1yqD2jHT8v+ZZv3mmWViiw7GZxLE+WZNZtVM3c ZMmo8gwYCkVnnvWVP+C8JEI4esJkjDsV/1hmemFWPkz4kC6jeuFWqtl+ud3aDkwp vRRHCHuQaYx+bkHN4iQ1gixLxeLRD1l1rYxWsoRNg3HO7wfuD3CZvUCM/uipx9cj t5EQZnCrIzLRFoJU1tH33TWJWc00NB5GyrQ7AsLgogZUtPdO3IHsU+oSJyMorsga uX7z5nCK4NwO/Ncejel3NaIP/5rPP5U5v8HLiCW8FTqfln2LavsJ7Q1k/JZ1qsjW ULKGNApDhF5zkA== -----END CERTIFICATE-----Generated at Mon Dec 22 04:20:59 2025 by rpki-client