This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft File: RETHw600tpd_oYoiN8owa5vuCOA.mft (raw, json) Hash identifier: Xa93/e57QQkEaWMJJUivzs5IK8ErCaR+23MXzK9AoAo= Subject key identifier: E8:53:B2:9F:2E:DB:85:59:05:0B:C9:FA:55:A9:9A:72:EF:38:35:5F Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0 Certificate issuer: /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0 Certificate serial: 019B0FDC1EE7F28AE997FBBA391425721F38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft Manifest number: 1270 Signing time: Fri 12 Dec 2025 00:00:42 +0000 Manifest this update: Fri 12 Dec 2025 00:00:42 +0000 Manifest next update: Sat 13 Dec 2025 00:00:42 +0000 Files and hashes: 1: 2V9yE_-2gPzUwYdccQgBOoOM18I.roa (hash: eOCHHWhfMlB35sI0btwTirM6dsTLjT95v8bNNnNalmA=) 2: NEq6MArjlQuQ-WIB1VyRrErjAd0.roa (hash: MidMhTk3ASBcuW3/c0/stqSyljlKyQu+afJNZt4dhek=) 3: RETHw600tpd_oYoiN8owa5vuCOA.crl (hash: w/WDLtCuhHs7W/HfmTJWQ5Z6MNAFBLoxUpG823Xd7a8=) 4: T9enhqzdG5yQEOgWkABkrQAk6M8.roa (hash: SxiuxM/I8FF8zreMQuHoAzLYfdJRNYC8zGUE4C2+MUg=) 5: YIWnRcAakVGioTGRMmr97QBMxt8.roa (hash: 0pAd524EgOV9gt8eDHTEF8KH00KSBimBO4oKROwsaA0=) 6: kaShJaLkR3B81NHQpcp6VAc_nlg.roa (hash: pqDRdBas3v1MNi9715+npvAM7Hsxyhh7JGLBbksQ+7E=) 7: lg3As9QftSBug7tpmYrQWLTzXlw.roa (hash: Zav5DG+USj65sND09nTQM5cgapiwyx+unRcWKNxbfPM=) 8: tLpYmjiy2-hs1MM_Lyatf45ocKg.roa (hash: /IX/rjwA4xnIpYI7Xf4mBV5PcdOdUpUQwLhk+QGjMLQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:dc:1e:e7:f2:8a:e9:97:fb:ba:39:14:25:72:1f:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0 Validity Not Before: Dec 12 00:00:42 2025 GMT Not After : Dec 13 00:00:42 2025 GMT Subject: CN=e853b29f2edb8559050bc9fa55a99a72ef38355f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:d7:c2:6a:b2:9f:d8:ff:ce:be:1c:99:64:0f: 26:2f:3c:1c:67:fe:a1:68:2a:00:8b:98:6b:ef:2f: 6f:ac:22:57:74:57:5e:1b:b9:3b:60:95:8e:df:e8: 65:6a:b9:9f:f2:ff:02:1a:33:24:cf:4e:61:33:d6: cd:5a:1d:7a:f8:b5:54:7d:95:34:55:b2:6a:77:48: ea:55:96:cb:9e:ad:e8:7c:5e:ef:c7:48:aa:26:3f: cb:40:59:f2:ee:73:4e:a6:52:3a:f6:fc:1f:c0:b4: c6:44:11:a8:92:7e:ac:0c:6f:bb:ae:cd:0d:2d:5f: 08:5c:13:fb:d6:7d:d1:2c:17:ee:b3:91:4f:03:3b: 59:5a:9e:2c:86:26:ea:ef:41:b2:24:a5:c3:b0:d5: 91:a7:79:17:53:fb:2b:e1:51:f5:85:ef:fb:2b:9f: 9f:44:62:ed:c7:2e:18:3f:db:aa:7b:ec:f9:bd:3d: 97:1c:42:d2:5d:09:25:48:94:5b:11:85:70:5b:bd: ff:a1:a2:92:3b:af:9f:2e:ab:a5:56:51:e9:5c:0f: 36:41:2f:cb:80:8d:f0:38:53:11:f9:ea:74:4b:84: 31:f3:56:1d:a3:5a:bd:59:41:6a:16:af:63:5a:c8: 63:e2:7c:8b:c7:02:2e:26:45:be:01:d2:f4:e5:cd: e1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:53:B2:9F:2E:DB:85:59:05:0B:C9:FA:55:A9:9A:72:EF:38:35:5F X509v3 Authority Key Identifier: keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:6f:2a:c4:d9:6b:a3:a9:bf:43:6b:60:6a:93:85:0a:bd:f9: 81:85:3e:7c:f5:63:f4:07:62:7f:03:60:ee:55:50:db:21:8a: 7d:a3:b8:ba:b2:18:02:8c:44:96:2c:9c:01:62:0c:64:66:1c: 58:50:d6:cc:6c:18:4a:c1:78:bb:f0:73:80:c9:67:d9:d0:3f: c6:ac:6e:e0:c0:6e:46:26:62:02:d9:93:1f:65:5e:b9:87:8a: 7b:8f:96:f5:fd:b3:99:60:5f:83:72:30:74:35:7b:ea:db:06: f7:a0:2d:41:7a:e1:93:5f:70:b3:1a:49:76:82:d8:56:f3:9e: 5a:01:6a:28:98:12:69:bf:20:b0:5e:1e:d6:f1:b9:c1:6c:2b: e6:98:cd:7b:24:eb:95:47:04:14:ee:ef:38:a4:74:26:a6:09: 81:c4:d7:6c:25:4f:b0:60:49:fc:c9:90:86:56:70:8b:02:09: 33:70:9e:7c:77:87:85:47:c6:e9:17:93:08:46:ee:9c:8d:ec: 34:36:a2:54:8a:e3:51:46:41:2b:29:d0:61:0b:e7:24:ab:f0: 83:ad:55:cd:37:0d:b5:2d:69:bf:f4:b9:28:e2:c0:fc:16:95: 6a:54:a8:86:4b:58:53:50:a3:3d:0c:61:15:b8:fc:63:41:2b: 32:b8:a9:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsP3B7n8orpl/u6ORQlch84MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NDRjN2MzYWQzNGI2OTc3ZmExOGEyMjM3Y2EzMDZiOWJl ZTA4ZTAwHhcNMjUxMjEyMDAwMDQyWhcNMjUxMjEzMDAwMDQyWjAzMTEwLwYDVQQD EyhlODUzYjI5ZjJlZGI4NTU5MDUwYmM5ZmE1NWE5OWE3MmVmMzgzNTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9tfCarKf2P/OvhyZZA8mLzwcZ/6h aCoAi5hr7y9vrCJXdFdeG7k7YJWO3+hlarmf8v8CGjMkz05hM9bNWh16+LVUfZU0 VbJqd0jqVZbLnq3ofF7vx0iqJj/LQFny7nNOplI69vwfwLTGRBGokn6sDG+7rs0N LV8IXBP71n3RLBfus5FPAztZWp4shibq70GyJKXDsNWRp3kXU/sr4VH1he/7K5+f RGLtxy4YP9uqe+z5vT2XHELSXQklSJRbEYVwW73/oaKSO6+fLqulVlHpXA82QS/L gI3wOFMR+ep0S4Qx81Ydo1q9WUFqFq9jWshj4nyLxwIuJkW+AdL05c3hWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOhTsp8u24VZBQvJ+lWpmnLvODVfMB8GA1UdIwQY MBaAFEREx8OtNLaXf6GKIjfKMGub7gjgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkVUSHc2MDB0cGRfb1lvaU44b3dhNXZ1Q09BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jOWM5ZmMtNTg2NC00MTRlLWFlMmEt ODYzYzliM2QzMmIwLzEvUkVUSHc2MDB0cGRfb1lvaU44b3dhNXZ1Q09BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9jOWM5ZmMtNTg2NC00MTRlLWFlMmEtODYzYzliM2QzMmIw LzEvUkVUSHc2MDB0cGRfb1lvaU44b3dhNXZ1Q09BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACG8qxNlr o6m/Q2tgapOFCr35gYU+fPVj9AdifwNg7lVQ2yGKfaO4urIYAoxEliycAWIMZGYc WFDWzGwYSsF4u/BzgMln2dA/xqxu4MBuRiZiAtmTH2VeuYeKe4+W9f2zmWBfg3Iw dDV76tsG96AtQXrhk19wsxpJdoLYVvOeWgFqKJgSab8gsF4e1vG5wWwr5pjNeyTr lUcEFO7vOKR0JqYJgcTXbCVPsGBJ/MmQhlZwiwIJM3CefHeHhUfG6ReTCEbunI3s NDaiVIrjUUZBKynQYQvnJKvwg61VzTcNtS1pv/S5KOLA/BaValSohktYU1CjPQxh Fbj8Y0ErMrip7g== -----END CERTIFICATE-----Generated at Fri Dec 12 02:29:09 2025 by rpki-client