This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft File: RHtl-fh6qPdA1aF6cub4vB5diI8.mft (raw, json) Hash identifier: KkrfJ8yqyY3NTdYVuDNRKahRFIWJPfrx9G82ZKa4MXs= Subject key identifier: 68:1E:1A:F9:86:6D:E5:BD:5C:EB:34:45:84:38:33:D0:EE:3C:EC:72 Authority key identifier: 44:7B:65:F9:F8:7A:A8:F7:40:D5:A1:7A:72:E6:F8:BC:1E:5D:88:8F Certificate issuer: /CN=447b65f9f87aa8f740d5a17a72e6f8bc1e5d888f Certificate serial: 019C07B27AFB9314D997BFC67E2F15EE308B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHtl-fh6qPdA1aF6cub4vB5diI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft Manifest number: 17F5 Signing time: Thu 29 Jan 2026 03:01:03 +0000 Manifest this update: Thu 29 Jan 2026 03:01:03 +0000 Manifest next update: Fri 30 Jan 2026 03:01:03 +0000 Files and hashes: 1: Err7ZpWRQFWf8BIk796AdCa7gcA.roa (hash: XK55jQ6nupceV00NIJspto01E4a6brQFthUMFsjmMGc=) 2: RHtl-fh6qPdA1aF6cub4vB5diI8.crl (hash: bS7KHgDhUKj4qpzyYziH1jjnUookWPI6XWUuLQZAkaI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.crl rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft rsync://rpki.ripe.net/repository/DEFAULT/RHtl-fh6qPdA1aF6cub4vB5diI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:07:b2:7a:fb:93:14:d9:97:bf:c6:7e:2f:15:ee:30:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=447b65f9f87aa8f740d5a17a72e6f8bc1e5d888f Validity Not Before: Jan 29 03:01:03 2026 GMT Not After : Jan 30 03:01:03 2026 GMT Subject: CN=681e1af9866de5bd5ceb3445843833d0ee3cec72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:87:66:ae:c4:b0:b6:b0:84:31:15:59:90:de: b8:b5:28:bb:e5:d3:82:ad:f6:ca:36:8a:5c:86:00: 17:5a:37:a8:b7:bb:58:b8:24:24:b0:6b:4b:36:bd: fc:18:7a:29:c8:eb:25:3d:e7:0a:9a:f9:85:8c:81: 59:49:d0:9b:ce:2c:bf:1d:c0:cd:2c:e1:b7:af:83: 12:89:e2:99:0b:89:fe:09:6f:2f:12:7b:36:e3:6a: 00:89:e5:73:48:89:07:bc:f9:c3:37:ea:47:1d:e2: 70:1b:f2:d0:73:47:0e:a2:51:07:5f:c2:7a:83:91: c2:d1:27:ab:ad:c7:12:77:61:f1:f5:c2:44:ac:b2: ba:c3:bc:fb:e8:dc:a3:89:66:da:fd:1e:c2:61:86: 5d:23:d8:43:6e:75:52:38:fe:ac:e9:cb:ed:a4:11: 93:e1:4f:a7:de:57:d0:b0:7c:dd:a0:e0:f6:9e:59: 2e:79:09:09:17:67:11:28:8a:be:90:04:dc:e2:fd: d2:bd:03:0d:e5:a9:ee:9a:a4:03:52:36:37:c4:13: 2d:6f:ce:9e:a8:71:c8:e7:d8:00:02:46:7c:85:f7: fb:b2:ef:03:23:6b:de:3c:b7:a6:e8:a6:06:4e:10: c8:1c:fc:eb:4c:42:27:97:53:ad:f6:45:5f:14:58: d3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:1E:1A:F9:86:6D:E5:BD:5C:EB:34:45:84:38:33:D0:EE:3C:EC:72 X509v3 Authority Key Identifier: keyid:44:7B:65:F9:F8:7A:A8:F7:40:D5:A1:7A:72:E6:F8:BC:1E:5D:88:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHtl-fh6qPdA1aF6cub4vB5diI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:39:39:ca:42:3f:bb:58:02:48:0d:c6:24:c7:56:44:32:d2: 3f:7c:90:06:86:20:be:b6:7f:a0:9a:cc:d0:f3:05:ed:48:75: ee:f2:c5:fc:f3:65:ef:a5:ad:dc:28:1c:6d:c3:b3:55:10:4e: e2:c6:66:dc:cf:84:b7:ad:76:b6:2f:c3:e0:ca:e8:4e:b0:1b: e2:85:71:ea:a4:ac:12:b7:af:ff:c5:76:ec:7b:6b:c8:80:65: bc:9e:96:9d:59:60:13:ad:dd:8d:e8:d0:6c:de:f7:73:07:c1: bf:35:6d:fb:59:37:71:7d:57:08:99:b1:8c:5a:d9:fc:b0:0e: 0e:a9:e0:0f:bf:f2:2c:5e:6e:64:e0:26:40:99:b9:da:08:fd: fa:df:5e:d1:9b:2f:6c:62:60:7c:4d:44:10:5f:45:24:b9:fd: 59:59:cd:d4:a1:2c:24:d8:02:6a:c7:6c:a5:cf:06:95:e8:9f: 6d:86:5d:ee:3d:59:67:59:1e:a5:4a:26:9a:75:7c:8b:74:8e: e2:94:94:9f:d1:00:de:fd:cd:a0:4d:56:6d:f9:c2:6e:f3:0b: 78:50:00:25:3c:d4:88:8b:1a:5d:70:cf:e5:27:88:df:05:97: 14:2d:b3:24:8e:32:5d:28:1e:2e:80:76:b0:b1:28:7b:e5:1a: fe:ca:2b:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwHsnr7kxTZl7/Gfi8V7jCLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0N2I2NWY5Zjg3YWE4Zjc0MGQ1YTE3YTcyZTZmOGJjMWU1 ZDg4OGYwHhcNMjYwMTI5MDMwMTAzWhcNMjYwMTMwMDMwMTAzWjAzMTEwLwYDVQQD Eyg2ODFlMWFmOTg2NmRlNWJkNWNlYjM0NDU4NDM4MzNkMGVlM2NlYzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlodmrsSwtrCEMRVZkN64tSi75dOC rfbKNopchgAXWjeot7tYuCQksGtLNr38GHopyOslPecKmvmFjIFZSdCbziy/HcDN LOG3r4MSieKZC4n+CW8vEns242oAieVzSIkHvPnDN+pHHeJwG/LQc0cOolEHX8J6 g5HC0SerrccSd2Hx9cJErLK6w7z76NyjiWba/R7CYYZdI9hDbnVSOP6s6cvtpBGT 4U+n3lfQsHzdoOD2nlkueQkJF2cRKIq+kATc4v3SvQMN5anumqQDUjY3xBMtb86e qHHI59gAAkZ8hff7su8DI2vePLem6KYGThDIHPzrTEInl1Ot9kVfFFjT/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGgeGvmGbeW9XOs0RYQ4M9DuPOxyMB8GA1UdIwQY MBaAFER7Zfn4eqj3QNWhenLm+LweXYiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkh0bC1maDZxUGRBMWFGNmN1YjR2QjVkaUk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC83NzJkMmYtZDFhZS00N2RmLWI2N2Ut MTVjYTc1M2ZhNTEwLzEvUkh0bC1maDZxUGRBMWFGNmN1YjR2QjVkaUk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC83NzJkMmYtZDFhZS00N2RmLWI2N2UtMTVjYTc1M2ZhNTEw LzEvUkh0bC1maDZxUGRBMWFGNmN1YjR2QjVkaUk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEzk5ykI/ u1gCSA3GJMdWRDLSP3yQBoYgvrZ/oJrM0PMF7Uh17vLF/PNl76Wt3CgcbcOzVRBO 4sZm3M+Et612ti/D4MroTrAb4oVx6qSsErev/8V27HtryIBlvJ6WnVlgE63djejQ bN73cwfBvzVt+1k3cX1XCJmxjFrZ/LAODqngD7/yLF5uZOAmQJm52gj9+t9e0Zsv bGJgfE1EEF9FJLn9WVnN1KEsJNgCasdspc8GleifbYZd7j1ZZ1kepUommnV8i3SO 4pSUn9EA3v3NoE1WbfnCbvMLeFAAJTzUiIsaXXDP5SeI3wWXFC2zJI4yXSgeLoB2 sLEoe+Ua/sorbA== -----END CERTIFICATE-----Generated at Thu Jan 29 10:02:33 2026 by rpki-client