This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a322b-6482-44a5-b3d2-3e109107ceb6/1/RHhnr-yeLyk5So9fl_kJKdkoIQI.mft File: RHhnr-yeLyk5So9fl_kJKdkoIQI.mft (raw, json) Hash identifier: wxg/lIEGBW/DwUHb0U45EerCKh+JZS8dzj66Hls1y/E= Subject key identifier: 01:D0:C6:7B:9F:28:ED:94:48:B9:BB:88:27:01:02:7F:45:DC:FB:8B Authority key identifier: 44:78:67:AF:EC:9E:2F:29:39:4A:8F:5F:97:F9:09:29:D9:28:21:02 Certificate issuer: /CN=447867afec9e2f29394a8f5f97f90929d9282102 Certificate serial: 019B4249B46B34B3E19DBC27E089B09C00C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHhnr-yeLyk5So9fl_kJKdkoIQI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a322b-6482-44a5-b3d2-3e109107ceb6/1/RHhnr-yeLyk5So9fl_kJKdkoIQI.mft Manifest number: 1788 Signing time: Sun 21 Dec 2025 19:01:25 +0000 Manifest this update: Sun 21 Dec 2025 19:01:25 +0000 Manifest next update: Mon 22 Dec 2025 19:01:25 +0000 Files and hashes: 1: RHhnr-yeLyk5So9fl_kJKdkoIQI.crl (hash: MXTu5IiupNsMyJKUsxMTwhHGjr6OYMbScGh+GrWqNZY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a322b-6482-44a5-b3d2-3e109107ceb6/1/RHhnr-yeLyk5So9fl_kJKdkoIQI.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7a322b-6482-44a5-b3d2-3e109107ceb6/1/RHhnr-yeLyk5So9fl_kJKdkoIQI.mft rsync://rpki.ripe.net/repository/DEFAULT/RHhnr-yeLyk5So9fl_kJKdkoIQI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:b4:6b:34:b3:e1:9d:bc:27:e0:89:b0:9c:00:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=447867afec9e2f29394a8f5f97f90929d9282102 Validity Not Before: Dec 21 19:01:25 2025 GMT Not After : Dec 22 19:01:25 2025 GMT Subject: CN=01d0c67b9f28ed9448b9bb882701027f45dcfb8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8f:4e:40:8c:5c:f8:2b:e9:2e:8f:a3:d0:e4: 6f:da:48:72:de:30:ca:b2:89:56:61:6d:fb:fe:79: c0:54:ed:9e:da:f5:a6:62:b2:a3:c7:9f:6e:41:27: 80:35:58:e2:ef:4c:26:5a:48:9a:0b:47:53:39:02: 78:33:af:b7:3f:a8:c3:19:ee:03:aa:df:40:18:42: 75:c2:ec:f0:a2:37:5d:87:03:eb:0b:45:cd:0f:cd: 37:f0:9d:b5:45:dd:a3:2d:1c:42:8c:8e:e6:99:32: 81:8a:d4:30:44:a7:a0:71:8f:c3:b2:85:cd:51:99: 8f:f5:f2:51:db:5b:25:d4:fd:33:8f:30:d1:57:ca: a7:c6:f7:41:dd:cc:c6:ae:23:b0:b6:f1:21:c4:20: 13:9c:28:56:27:6c:d7:09:5d:da:f8:e6:a9:1d:2e: 59:b7:9f:ee:30:63:cf:61:83:2c:25:56:5e:b7:15: 12:09:70:77:54:32:cb:5d:65:6f:ce:e0:38:be:ab: e2:76:a6:2e:04:8b:e7:8b:fa:ab:25:e5:24:43:6a: 1d:56:45:8e:c7:fa:33:e6:a2:3a:76:7f:b6:0e:ff: 7b:91:93:e6:3d:47:aa:67:4a:14:31:6d:a4:5e:c9: 33:82:28:95:f0:f0:c6:44:7b:c0:b0:c8:4c:49:f8: 96:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:D0:C6:7B:9F:28:ED:94:48:B9:BB:88:27:01:02:7F:45:DC:FB:8B X509v3 Authority Key Identifier: keyid:44:78:67:AF:EC:9E:2F:29:39:4A:8F:5F:97:F9:09:29:D9:28:21:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHhnr-yeLyk5So9fl_kJKdkoIQI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a322b-6482-44a5-b3d2-3e109107ceb6/1/RHhnr-yeLyk5So9fl_kJKdkoIQI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a322b-6482-44a5-b3d2-3e109107ceb6/1/RHhnr-yeLyk5So9fl_kJKdkoIQI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:ee:ec:cf:49:6f:61:04:5f:ec:95:33:14:36:0f:e8:45:cb: f9:06:70:74:d2:a5:b9:ba:84:ef:57:90:7b:1b:e7:c2:a0:ca: 4f:85:ed:75:13:71:5c:73:1c:31:d6:ae:fb:c6:8b:64:5c:44: f9:43:24:52:7a:ac:6e:88:ea:5d:75:94:02:bb:0c:8d:ca:aa: 70:dc:07:66:54:c3:16:7c:2b:dd:64:46:74:18:66:4e:0b:9e: f8:24:c0:80:11:c5:40:f2:df:7e:77:ef:fb:c5:a6:a3:ee:3c: fd:07:d2:f0:a2:61:3b:6a:30:27:86:c2:bb:b5:3f:3f:82:30: 57:e4:a5:20:8e:32:3b:7e:cb:09:da:a4:14:bd:ef:d4:d5:9d: 40:a8:8e:21:4a:3f:e5:10:5b:99:f5:f6:4a:1c:6d:a9:e0:cf: 43:51:2a:50:36:07:fd:5d:da:b0:41:a6:66:64:81:a8:82:65: 05:27:db:df:7e:30:f8:1e:68:07:49:ad:c3:0b:b8:cb:ec:25: 26:28:a4:c0:e0:49:4c:d0:8b:71:f7:37:67:d8:d0:72:a4:2e: 7f:0c:c0:ad:4e:5d:42:54:3e:7c:7c:7e:7a:2d:98:38:75:bb: af:a3:a2:7c:3d:dc:ec:1e:0d:e5:83:37:f3:fb:f7:c1:4e:f4: 35:d5:bb:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSbRrNLPhnbwn4ImwnADBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0Nzg2N2FmZWM5ZTJmMjkzOTRhOGY1Zjk3ZjkwOTI5ZDky ODIxMDIwHhcNMjUxMjIxMTkwMTI1WhcNMjUxMjIyMTkwMTI1WjAzMTEwLwYDVQQD EygwMWQwYzY3YjlmMjhlZDk0NDhiOWJiODgyNzAxMDI3ZjQ1ZGNmYjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAko9OQIxc+CvpLo+j0ORv2khy3jDK solWYW37/nnAVO2e2vWmYrKjx59uQSeANVji70wmWkiaC0dTOQJ4M6+3P6jDGe4D qt9AGEJ1wuzwojddhwPrC0XND8038J21Rd2jLRxCjI7mmTKBitQwRKegcY/DsoXN UZmP9fJR21sl1P0zjzDRV8qnxvdB3czGriOwtvEhxCATnChWJ2zXCV3a+OapHS5Z t5/uMGPPYYMsJVZetxUSCXB3VDLLXWVvzuA4vqvidqYuBIvni/qrJeUkQ2odVkWO x/oz5qI6dn+2Dv97kZPmPUeqZ0oUMW2kXskzgiiV8PDGRHvAsMhMSfiWHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAHQxnufKO2USLm7iCcBAn9F3PuLMB8GA1UdIwQY MBaAFER4Z6/sni8pOUqPX5f5CSnZKCECMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkhobnIteWVMeWs1U285Zmxfa0pLZGtvSVFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTMyMmItNjQ4Mi00NGE1LWIzZDIt M2UxMDkxMDdjZWI2LzEvUkhobnIteWVMeWs1U285Zmxfa0pLZGtvSVFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YTMyMmItNjQ4Mi00NGE1LWIzZDItM2UxMDkxMDdjZWI2 LzEvUkhobnIteWVMeWs1U285Zmxfa0pLZGtvSVFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZe7sz0lv YQRf7JUzFDYP6EXL+QZwdNKlubqE71eQexvnwqDKT4XtdRNxXHMcMdau+8aLZFxE +UMkUnqsbojqXXWUArsMjcqqcNwHZlTDFnwr3WRGdBhmTgue+CTAgBHFQPLffnfv +8Wmo+48/QfS8KJhO2owJ4bCu7U/P4IwV+SlII4yO37LCdqkFL3v1NWdQKiOIUo/ 5RBbmfX2ShxtqeDPQ1EqUDYH/V3asEGmZmSBqIJlBSfb334w+B5oB0mtwwu4y+wl JiikwOBJTNCLcfc3Z9jQcqQufwzArU5dQlQ+fHx+ei2YOHW7r6OifD3c7B4N5YM3 8/v3wU70NdW77g== -----END CERTIFICATE-----Generated at Sun Dec 21 21:13:26 2025 by rpki-client