This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft File: RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft (raw, json) Hash identifier: IRdfdPRu7u+bwFHlzV1ZiXojhGGGYnoPMKUtbSwVyPA= Subject key identifier: 07:C3:E7:93:93:37:D0:4F:F5:C2:AD:92:9B:CC:C6:22:7F:65:68:E1 Authority key identifier: 46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66 Certificate issuer: /CN=461258f5e3b6b94e3916dd2b5d16e342fd605966 Certificate serial: 019B51855CFBC411E92D4BFA9C579E36E1C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft Manifest number: 16DA Signing time: Wed 24 Dec 2025 18:00:53 +0000 Manifest this update: Wed 24 Dec 2025 18:00:53 +0000 Manifest next update: Thu 25 Dec 2025 18:00:53 +0000 Files and hashes: 1: 9VQnH-9sd7nGshve_4r1C2nYakY.roa (hash: Z02F3WYNcnzG8yizQnWEGco/cel18dqYBCQHGg9DCTg=) 2: RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl (hash: C0xCd4ryKuej53cWXLbASnbf+Pf1wRRSDQT+YzM2olU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:85:5c:fb:c4:11:e9:2d:4b:fa:9c:57:9e:36:e1:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=461258f5e3b6b94e3916dd2b5d16e342fd605966 Validity Not Before: Dec 24 18:00:53 2025 GMT Not After : Dec 25 18:00:53 2025 GMT Subject: CN=07c3e7939337d04ff5c2ad929bccc6227f6568e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bf:2e:12:a6:87:d2:99:63:53:52:27:91:5c: e1:5e:2b:18:65:42:89:37:84:c2:59:8b:0b:04:15: 06:99:43:d6:4b:c0:6c:a2:cc:ea:f2:3f:86:fa:65: 3a:8c:46:f6:12:49:2b:64:ea:82:36:32:c1:2d:c2: 14:e7:63:52:94:c3:e2:a2:f5:27:1a:ad:8e:77:7a: 7a:2c:aa:75:35:be:21:c6:08:fb:3a:56:64:70:01: a0:66:4b:d4:fd:f5:1f:cb:31:17:69:40:d6:2c:ea: 5e:2c:fd:4d:d6:0f:87:41:7d:89:bb:b9:c4:50:7e: 2c:0c:54:85:bc:d3:bc:b4:46:35:ed:8e:30:5a:68: 33:2e:fe:2d:b1:78:9b:55:09:57:5f:06:74:d6:72: 0a:49:8a:69:53:ce:b2:03:a6:fd:ca:85:9f:a7:c6: 17:f7:e3:91:72:9c:da:04:a0:c6:67:04:ec:ec:ff: 63:58:2b:d9:e2:96:ba:6c:1a:da:b4:94:12:fe:ea: b9:11:bf:2b:26:a9:d1:ed:4c:21:96:ca:6f:d0:e5: d4:82:d6:77:65:12:4a:3f:28:6a:18:98:de:2a:58: 13:de:00:e2:43:bd:ce:25:09:51:85:1e:20:84:2f: cc:97:38:53:12:8d:a7:3c:9c:85:44:b5:b6:47:d2: 0c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C3:E7:93:93:37:D0:4F:F5:C2:AD:92:9B:CC:C6:22:7F:65:68:E1 X509v3 Authority Key Identifier: keyid:46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:39:1e:37:72:17:ee:53:64:50:c8:14:1f:91:8a:b4:d6:f4: 61:36:77:96:7d:8e:6a:94:3a:54:5b:d6:73:c7:7f:f0:9b:5c: 34:e2:22:b5:f7:14:ef:58:cd:83:04:7d:67:47:3f:9d:38:3f: b1:ac:e5:4f:91:1e:ba:25:12:31:43:e8:be:89:cb:58:d5:75: 2d:c0:25:b2:28:67:b8:90:6a:00:87:81:da:f6:ee:f4:c1:87: 4b:08:ec:63:29:a8:39:d8:e2:6a:55:92:5c:4b:e5:23:a1:14: 5c:d4:ce:b5:66:c1:0a:39:b3:82:74:31:a5:7d:e3:47:18:e4: 37:3e:56:44:b1:4c:b9:7a:9a:27:20:61:58:e5:fb:33:28:d7: dc:f0:61:f0:99:8c:95:24:7f:da:7f:a9:1d:61:a9:13:3d:55: a3:32:1d:59:7f:ad:ad:61:02:ac:99:3d:2d:63:38:18:21:7d: c7:28:ae:7c:16:da:e5:14:b7:b8:90:33:5a:8a:41:52:d1:91: cb:a0:87:f7:84:fe:86:7b:ad:00:30:9f:84:93:ce:02:9d:1a: 46:31:02:37:3e:af:6e:73:2c:a8:9b:1b:61:ad:52:06:c7:99: 84:8f:18:11:75:ec:83:61:be:fd:2e:e2:9b:db:87:3c:37:42: 5e:90:cf:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRhVz7xBHpLUv6nFeeNuHEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MTI1OGY1ZTNiNmI5NGUzOTE2ZGQyYjVkMTZlMzQyZmQ2 MDU5NjYwHhcNMjUxMjI0MTgwMDUzWhcNMjUxMjI1MTgwMDUzWjAzMTEwLwYDVQQD EygwN2MzZTc5MzkzMzdkMDRmZjVjMmFkOTI5YmNjYzYyMjdmNjU2OGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu78uEqaH0pljU1InkVzhXisYZUKJ N4TCWYsLBBUGmUPWS8Bsoszq8j+G+mU6jEb2EkkrZOqCNjLBLcIU52NSlMPiovUn Gq2Od3p6LKp1Nb4hxgj7OlZkcAGgZkvU/fUfyzEXaUDWLOpeLP1N1g+HQX2Ju7nE UH4sDFSFvNO8tEY17Y4wWmgzLv4tsXibVQlXXwZ01nIKSYppU86yA6b9yoWfp8YX 9+ORcpzaBKDGZwTs7P9jWCvZ4pa6bBratJQS/uq5Eb8rJqnR7Uwhlspv0OXUgtZ3 ZRJKPyhqGJjeKlgT3gDiQ73OJQlRhR4ghC/MlzhTEo2nPJyFRLW2R9IM9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAfD55OTN9BP9cKtkpvMxiJ/ZWjhMB8GA1UdIwQY MBaAFEYSWPXjtrlOORbdK10W40L9YFlmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmhKWTllTzJ1VTQ1RnQwclhSYmpRdjFnV1dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lODA1NzUtOGM4Yi00OWE0LTg1ZGUt NTgzYmNlNmZiNTY3LzEvUmhKWTllTzJ1VTQ1RnQwclhSYmpRdjFnV1dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lODA1NzUtOGM4Yi00OWE0LTg1ZGUtNTgzYmNlNmZiNTY3 LzEvUmhKWTllTzJ1VTQ1RnQwclhSYmpRdjFnV1dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQDkeN3IX 7lNkUMgUH5GKtNb0YTZ3ln2OapQ6VFvWc8d/8JtcNOIitfcU71jNgwR9Z0c/nTg/ sazlT5EeuiUSMUPovonLWNV1LcAlsihnuJBqAIeB2vbu9MGHSwjsYymoOdjialWS XEvlI6EUXNTOtWbBCjmzgnQxpX3jRxjkNz5WRLFMuXqaJyBhWOX7MyjX3PBh8JmM lSR/2n+pHWGpEz1VozIdWX+trWECrJk9LWM4GCF9xyiufBba5RS3uJAzWopBUtGR y6CH94T+hnutADCfhJPOAp0aRjECNz6vbnMsqJsbYa1SBseZhI8YEXXsg2G+/S7i m9uHPDdCXpDPAA== -----END CERTIFICATE-----Generated at Wed Dec 24 20:20:57 2025 by rpki-client