This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft File: RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft (raw, json) Hash identifier: Y+2PWqw0FsoMAn8WxywkmmEEn1amf9ukbSIIBINNToI= Subject key identifier: 23:9D:1B:2E:4A:0C:3C:89:C5:1E:CC:6C:EB:14:6F:0E:55:D7:5F:60 Authority key identifier: 46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66 Certificate issuer: /CN=461258f5e3b6b94e3916dd2b5d16e342fd605966 Certificate serial: 019B0DEDD5D08443FAAA8BCDAAADA9CA67EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft Manifest number: 16B7 Signing time: Thu 11 Dec 2025 15:00:49 +0000 Manifest this update: Thu 11 Dec 2025 15:00:49 +0000 Manifest next update: Fri 12 Dec 2025 15:00:49 +0000 Files and hashes: 1: 9VQnH-9sd7nGshve_4r1C2nYakY.roa (hash: Z02F3WYNcnzG8yizQnWEGco/cel18dqYBCQHGg9DCTg=) 2: RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl (hash: nLUHVl5lMNDwnji5//ubphJ4Q3mDN4C0adud/vspzHw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:ed:d5:d0:84:43:fa:aa:8b:cd:aa:ad:a9:ca:67:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=461258f5e3b6b94e3916dd2b5d16e342fd605966 Validity Not Before: Dec 11 15:00:49 2025 GMT Not After : Dec 12 15:00:49 2025 GMT Subject: CN=239d1b2e4a0c3c89c51ecc6ceb146f0e55d75f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0d:f2:ff:aa:ce:6e:de:eb:55:d2:42:f3:ba: 8b:8f:35:11:f2:9a:e8:17:c6:30:fd:fc:b0:ae:5d: e2:4a:58:dc:03:95:fa:e1:5e:1e:16:9e:bd:dd:8d: 37:de:75:53:0a:80:b4:81:ab:52:8e:60:b9:be:cf: b1:fb:c1:cd:8f:f2:0b:86:e7:f5:2e:fc:f1:67:28: 5d:1e:46:29:ef:94:bb:05:df:6a:be:08:75:ca:61: fc:39:80:e3:2f:7d:02:ff:c7:d2:af:00:a5:1f:7e: 48:04:b3:0c:68:f7:15:7f:ea:30:4e:b2:51:c0:2f: 64:31:c5:54:a7:d2:72:bd:53:46:a3:66:e7:30:81: 5c:cc:39:fc:76:4c:c2:1b:32:df:16:7f:5b:f9:64: 3f:2b:6f:59:0f:85:e5:16:04:b0:ce:42:3a:ee:45: 4c:42:b9:27:39:10:99:db:70:d1:02:6f:c2:7d:6e: cb:6f:81:3b:42:56:b3:65:31:bd:3a:73:9a:72:34: 97:6b:f7:26:38:c5:b9:c9:20:a2:d9:56:22:34:8a: a7:47:ed:61:b6:23:a1:dd:68:99:e8:2f:9c:23:25: 5c:20:3f:25:38:ca:21:81:0e:ea:12:30:09:5e:52: 8a:a6:46:33:dc:81:a4:2a:c4:20:14:06:23:01:49: 51:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:9D:1B:2E:4A:0C:3C:89:C5:1E:CC:6C:EB:14:6F:0E:55:D7:5F:60 X509v3 Authority Key Identifier: keyid:46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:12:19:bb:3a:d6:ee:6f:f5:3e:28:67:fe:1c:24:03:b3:37: 3a:3b:52:5e:ac:88:a0:39:44:0d:bf:ef:f5:c0:e1:40:88:19: b5:0c:49:65:13:1b:79:46:4f:41:e8:6e:7f:d1:49:cb:18:c4: 42:5c:8e:d2:41:a9:e8:f6:75:37:da:de:d1:58:4e:67:85:b0: 01:3f:75:05:6c:9c:b7:f6:74:b1:b1:47:b6:cb:fd:84:2d:86: 7e:17:5a:d2:1e:44:d0:89:39:a5:0b:3a:ae:1a:7c:7f:6c:50: 25:07:37:bb:34:a7:2b:b2:ba:c7:e1:69:e2:2b:16:ac:fa:0e: 49:55:ae:09:13:78:67:64:59:60:79:0e:0c:1a:97:5d:51:5c: 9e:c1:e7:bb:eb:b6:17:5c:9f:8d:30:cf:79:6d:dc:36:a4:71: ca:92:6e:01:11:6c:4b:0e:65:17:9a:8a:d4:d6:67:1a:3b:88: 34:2b:af:71:f4:49:70:bc:01:d2:93:94:9c:0c:d9:d6:8a:86: 44:16:ed:bc:df:fe:1d:e0:c7:e8:a6:72:18:83:65:8b:03:e8: e7:f2:8e:fc:f7:c2:1b:1e:ac:a3:21:00:7d:21:61:50:cf:1b: b8:68:15:0e:94:b1:87:50:32:ca:89:d5:ff:78:1d:c4:71:af: 25:4f:f7:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsN7dXQhEP6qovNqq2pymfqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MTI1OGY1ZTNiNmI5NGUzOTE2ZGQyYjVkMTZlMzQyZmQ2 MDU5NjYwHhcNMjUxMjExMTUwMDQ5WhcNMjUxMjEyMTUwMDQ5WjAzMTEwLwYDVQQD EygyMzlkMWIyZTRhMGMzYzg5YzUxZWNjNmNlYjE0NmYwZTU1ZDc1ZjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsg3y/6rObt7rVdJC87qLjzUR8pro F8Yw/fywrl3iSljcA5X64V4eFp693Y033nVTCoC0gatSjmC5vs+x+8HNj/ILhuf1 LvzxZyhdHkYp75S7Bd9qvgh1ymH8OYDjL30C/8fSrwClH35IBLMMaPcVf+owTrJR wC9kMcVUp9JyvVNGo2bnMIFczDn8dkzCGzLfFn9b+WQ/K29ZD4XlFgSwzkI67kVM QrknORCZ23DRAm/CfW7Lb4E7QlazZTG9OnOacjSXa/cmOMW5ySCi2VYiNIqnR+1h tiOh3WiZ6C+cIyVcID8lOMohgQ7qEjAJXlKKpkYz3IGkKsQgFAYjAUlR4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCOdGy5KDDyJxR7MbOsUbw5V119gMB8GA1UdIwQY MBaAFEYSWPXjtrlOORbdK10W40L9YFlmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmhKWTllTzJ1VTQ1RnQwclhSYmpRdjFnV1dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lODA1NzUtOGM4Yi00OWE0LTg1ZGUt NTgzYmNlNmZiNTY3LzEvUmhKWTllTzJ1VTQ1RnQwclhSYmpRdjFnV1dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lODA1NzUtOGM4Yi00OWE0LTg1ZGUtNTgzYmNlNmZiNTY3 LzEvUmhKWTllTzJ1VTQ1RnQwclhSYmpRdjFnV1dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuBIZuzrW 7m/1Pihn/hwkA7M3OjtSXqyIoDlEDb/v9cDhQIgZtQxJZRMbeUZPQehuf9FJyxjE QlyO0kGp6PZ1N9re0VhOZ4WwAT91BWyct/Z0sbFHtsv9hC2Gfhda0h5E0Ik5pQs6 rhp8f2xQJQc3uzSnK7K6x+Fp4isWrPoOSVWuCRN4Z2RZYHkODBqXXVFcnsHnu+u2 F1yfjTDPeW3cNqRxypJuARFsSw5lF5qK1NZnGjuINCuvcfRJcLwB0pOUnAzZ1oqG RBbtvN/+HeDH6KZyGINliwPo5/KO/PfCGx6soyEAfSFhUM8buGgVDpSxh1AyyonV /3gdxHGvJU/3Kg== -----END CERTIFICATE-----Generated at Thu Dec 11 19:21:36 2025 by rpki-client