This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft File: RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft (raw, json) Hash identifier: bTiBWPNFlpP71pf+SLSAbHm6R/E4QOu8ZerPlHNlfZE= Subject key identifier: 82:BE:86:C5:12:ED:E5:6B:4E:9A:CD:1E:B2:91:5D:4D:90:93:BD:74 Authority key identifier: 46:12:07:A3:EE:F2:B4:4F:8E:27:31:B7:B0:AC:7D:17:16:E3:55:C5 Certificate issuer: /CN=461207a3eef2b44f8e2731b7b0ac7d1716e355c5 Certificate serial: 019B5260D5A4A607843817AF088BD8521C18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft Manifest number: 142B Signing time: Wed 24 Dec 2025 22:00:36 +0000 Manifest this update: Wed 24 Dec 2025 22:00:36 +0000 Manifest next update: Thu 25 Dec 2025 22:00:36 +0000 Files and hashes: 1: RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl (hash: gbj7eT0cNmhsou1knLv0Fk3iE8kI0TVe8XeBP/Ymth4=) 2: Y5Fkdf8lCYdQD9ZGIAjVuUbledE.roa (hash: JnnOlLV8xwOOoN+r0LJHTPSQEB+QaVe9fn2jfA8Y6mA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 22:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:60:d5:a4:a6:07:84:38:17:af:08:8b:d8:52:1c:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=461207a3eef2b44f8e2731b7b0ac7d1716e355c5 Validity Not Before: Dec 24 22:00:36 2025 GMT Not After : Dec 25 22:00:36 2025 GMT Subject: CN=82be86c512ede56b4e9acd1eb2915d4d9093bd74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a2:a7:77:7c:b8:a3:c4:9f:cf:72:b5:d6:fa: e2:b2:3e:55:0a:df:d1:b5:51:6c:25:4f:fa:dc:6a: ff:1e:df:a2:38:5c:1a:dd:98:c0:e1:b3:f1:be:84: a4:3e:1d:75:fc:f7:a4:a5:e6:f7:f5:e3:63:eb:0a: 89:0e:5d:13:59:5b:d8:16:7c:83:7b:6f:20:d9:b7: fb:2a:94:e9:1f:5a:18:71:06:b1:7c:55:47:d6:f9: c1:bf:9a:e0:e7:77:c1:15:e5:c7:46:c4:83:30:b8: 3a:c0:c0:ad:10:af:01:ae:fe:c5:f1:60:fa:cb:26: d3:00:b2:5a:79:e6:5c:1b:8a:b5:06:77:ed:19:42: 39:e4:de:98:f3:fc:c6:25:c9:fc:65:cc:4a:3a:5a: 1f:88:89:d4:56:61:45:9f:16:d8:1a:48:cc:39:c0: 1f:eb:e7:3e:f6:e1:28:f5:d9:19:34:26:66:9c:f3: 9f:75:2d:3f:ca:46:96:f5:14:70:84:2f:64:52:c4: 7d:36:67:4f:e4:72:d2:f9:12:d0:d8:32:0d:70:1c: aa:f5:28:28:0f:21:7e:f1:76:9b:52:59:49:01:35: 8f:55:21:a7:ca:a0:90:2c:84:fd:2e:46:85:d5:f5: 38:a5:d3:c5:0f:c7:38:9e:b0:b7:8f:31:00:d0:ab: a0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:BE:86:C5:12:ED:E5:6B:4E:9A:CD:1E:B2:91:5D:4D:90:93:BD:74 X509v3 Authority Key Identifier: keyid:46:12:07:A3:EE:F2:B4:4F:8E:27:31:B7:B0:AC:7D:17:16:E3:55:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:20:f6:1d:48:98:5d:cb:a4:1d:d9:77:b4:15:a0:19:a2:26: 64:dd:25:07:69:5c:15:39:78:c7:66:03:9e:aa:0f:a8:23:d9: 42:bf:53:0c:e3:f8:ba:44:2e:c4:cd:2d:98:e9:78:ae:2e:2f: 65:ee:aa:58:d2:b6:86:07:65:a5:97:eb:0a:26:a9:12:ef:09: fc:68:bb:dc:ae:d6:2e:0c:6c:78:5d:14:41:31:c4:53:08:9e: 35:09:fb:15:4f:98:13:ab:fb:45:48:88:b6:35:1a:45:c3:be: 84:3e:81:02:28:79:c0:d6:5e:df:59:3b:42:89:d2:23:23:48: 84:32:14:6c:c0:0b:6f:86:3e:10:2f:38:1a:b3:b8:28:5f:0a: e6:9d:0a:ea:46:17:57:ab:67:91:0c:3d:44:68:42:79:42:34: f5:e5:f1:3a:bc:5d:6a:62:4c:80:c4:dd:35:21:00:17:4c:f2: 10:66:0e:81:ea:14:c6:06:84:fb:f4:83:cf:e3:f9:eb:4f:22: 33:90:b1:f9:b8:ac:85:9a:85:ee:b1:10:20:b7:88:aa:53:28: 76:a3:8a:fe:dd:9a:ac:2b:26:0b:e4:6c:5c:d0:45:03:18:d9: eb:bc:e3:eb:cc:b9:c5:63:42:9e:82:21:3d:0c:49:4e:5f:b4: bb:6a:53:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSYNWkpgeEOBevCIvYUhwYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MTIwN2EzZWVmMmI0NGY4ZTI3MzFiN2IwYWM3ZDE3MTZl MzU1YzUwHhcNMjUxMjI0MjIwMDM2WhcNMjUxMjI1MjIwMDM2WjAzMTEwLwYDVQQD Eyg4MmJlODZjNTEyZWRlNTZiNGU5YWNkMWViMjkxNWQ0ZDkwOTNiZDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKKnd3y4o8Sfz3K11vrisj5VCt/R tVFsJU/63Gr/Ht+iOFwa3ZjA4bPxvoSkPh11/Pekpeb39eNj6wqJDl0TWVvYFnyD e28g2bf7KpTpH1oYcQaxfFVH1vnBv5rg53fBFeXHRsSDMLg6wMCtEK8Brv7F8WD6 yybTALJaeeZcG4q1BnftGUI55N6Y8/zGJcn8ZcxKOlofiInUVmFFnxbYGkjMOcAf 6+c+9uEo9dkZNCZmnPOfdS0/ykaW9RRwhC9kUsR9NmdP5HLS+RLQ2DINcByq9Sgo DyF+8XabUllJATWPVSGnyqCQLIT9LkaF1fU4pdPFD8c4nrC3jzEA0Kug5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIK+hsUS7eVrTprNHrKRXU2Qk710MB8GA1UdIwQY MBaAFEYSB6Pu8rRPjicxt7CsfRcW41XFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmhJSG8tN3l0RS1PSnpHM3NLeDlGeGJqVmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zOGMxOTgtMGYxYi00YzU5LTgxZmUt MWM4Y2U3YzMzYWMwLzEvUmhJSG8tN3l0RS1PSnpHM3NLeDlGeGJqVmNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8zOGMxOTgtMGYxYi00YzU5LTgxZmUtMWM4Y2U3YzMzYWMw LzEvUmhJSG8tN3l0RS1PSnpHM3NLeDlGeGJqVmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1CD2HUiY XcukHdl3tBWgGaImZN0lB2lcFTl4x2YDnqoPqCPZQr9TDOP4ukQuxM0tmOl4ri4v Ze6qWNK2hgdlpZfrCiapEu8J/Gi73K7WLgxseF0UQTHEUwieNQn7FU+YE6v7RUiI tjUaRcO+hD6BAih5wNZe31k7QonSIyNIhDIUbMALb4Y+EC84GrO4KF8K5p0K6kYX V6tnkQw9RGhCeUI09eXxOrxdamJMgMTdNSEAF0zyEGYOgeoUxgaE+/SDz+P5608i M5Cx+bishZqF7rEQILeIqlModqOK/t2arCsmC+RsXNBFAxjZ67zj68y5xWNCnoIh PQxJTl+0u2pTpw== -----END CERTIFICATE-----Generated at Thu Dec 25 07:10:34 2025 by rpki-client