This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft File: RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft (raw, json) Hash identifier: eycN1E002Va/aWWWi5JFlWQYaeLCc2N9zZc95op/3RU= Subject key identifier: 49:AF:97:2D:65:91:15:6F:B1:E5:01:7A:6D:AE:E7:1A:58:A9:EE:9B Authority key identifier: 44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31 Certificate issuer: /CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31 Certificate serial: 019B5C08EA0675A734E069665214732CB71F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft Manifest number: 0D0F Signing time: Fri 26 Dec 2025 19:00:46 +0000 Manifest this update: Fri 26 Dec 2025 19:00:46 +0000 Manifest next update: Sat 27 Dec 2025 19:00:46 +0000 Files and hashes: 1: 0qRVIHZKX4qGnjxAiU1aoisO8_I.roa (hash: lyCpmpSchMKVPytHVw70ZjOKFalrbZ7DXCdpS6ih0A8=) 2: RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl (hash: bqrB10ZqQmE3391DLDjib4uQ/Zpff5JQUwzMSn3ZlZs=) 3: XrZ7_VYsTjVO1Hdr6lTXBYRHdDM.roa (hash: /HTMnGOuDTUdEjSKAx29mQcK6o1vmtlFHqUYC092xGg=) 4: fNaHZKQWzTR0TatLxGJsV51nz-I.roa (hash: sE2fqms9057unxv9v3lOHD2WZe1GOPfgICxqGHioarI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 19:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:08:ea:06:75:a7:34:e0:69:66:52:14:73:2c:b7:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31 Validity Not Before: Dec 26 19:00:46 2025 GMT Not After : Dec 27 19:00:46 2025 GMT Subject: CN=49af972d6591156fb1e5017a6daee71a58a9ee9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a0:99:b9:a0:ab:44:e8:2e:55:3a:e6:8a:4d: 9d:44:d8:42:c9:47:97:dc:cf:03:5c:5f:2e:07:42: 34:02:06:91:d6:3c:bc:95:09:cd:b2:f3:47:14:82: b6:8b:a7:d8:34:8f:87:41:be:4a:a6:5d:95:b6:ff: fe:6e:42:ed:58:42:74:10:96:c7:c1:6f:02:72:1f: c8:26:b8:a5:ad:2d:55:ee:f4:75:4b:3f:56:9f:da: a9:be:b3:4a:a6:ae:f4:34:8d:ec:0a:48:60:ae:c1: 14:95:ab:92:c6:4a:04:48:85:68:a0:54:e4:39:2b: 3a:ac:22:d6:aa:52:00:68:0b:5b:50:aa:10:ac:d6: b8:69:2d:e6:ed:7e:a6:7d:24:10:ab:fb:91:f9:8c: eb:88:ca:5f:b1:ed:7e:f4:a1:cb:3a:99:c9:40:db: 2c:f9:42:4c:b9:fc:bb:8c:d7:6f:e4:bc:95:19:b6: 14:17:5f:29:a1:c4:84:db:81:b0:73:05:74:01:82: e6:74:f2:5a:7e:97:e8:0a:17:43:c1:58:32:94:8d: 42:d0:e3:da:13:63:1c:94:f4:09:c4:d1:88:d6:22: e7:f9:5c:2c:e8:16:0f:ad:5e:94:06:31:c2:45:2a: 7e:28:b0:2d:89:c2:7b:34:3c:7a:50:f8:3d:54:be: eb:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AF:97:2D:65:91:15:6F:B1:E5:01:7A:6D:AE:E7:1A:58:A9:EE:9B X509v3 Authority Key Identifier: keyid:44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:ed:6d:dd:82:ad:96:b9:95:16:53:bc:1f:01:d4:71:fb:45: cc:5a:7f:ee:5f:99:da:09:f3:78:ed:20:a1:92:96:d1:15:45: 39:a4:f4:3b:a3:b0:9f:74:64:35:13:bb:02:59:8a:85:ed:0d: e5:9c:ed:15:a1:2d:1c:43:66:77:8b:1a:7d:92:d5:da:95:23: f8:9d:19:3d:44:2e:7c:e0:7a:36:1f:86:09:18:6a:62:da:8e: 00:dc:da:d9:78:6f:1c:9f:06:36:8b:dc:17:9b:7b:21:b9:53: 49:dc:63:17:6b:e9:0f:2d:83:b8:11:08:a0:f1:c1:82:20:d1: d8:84:cb:5f:98:da:9d:93:8b:fe:98:e6:e7:53:b3:6f:26:8b: 77:cb:78:2b:fd:f8:e2:e9:7f:e8:32:7e:00:03:5c:97:bf:10: 36:8f:39:93:2b:7f:38:5e:d8:ea:1f:92:e6:51:78:fe:20:e5: ab:8e:b4:5a:aa:40:43:7a:16:37:87:47:ad:e3:2a:e7:5c:df: 5e:34:bb:1e:c8:78:e3:ad:da:6c:6e:33:22:ea:1d:95:73:04: 08:52:9c:f5:d3:6b:61:2b:71:9c:fe:98:12:f4:1b:4b:4b:3c: 94:47:37:6b:a6:7b:f4:42:bd:68:ac:2c:7f:1b:8b:76:d3:5b: c5:92:ce:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcCOoGdac04GlmUhRzLLcfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NzI4ZmIzMWM0ZWJkZmI5YmYxMjk3NDViOTFiZDJlMmVl OGVmMzEwHhcNMjUxMjI2MTkwMDQ2WhcNMjUxMjI3MTkwMDQ2WjAzMTEwLwYDVQQD Eyg0OWFmOTcyZDY1OTExNTZmYjFlNTAxN2E2ZGFlZTcxYTU4YTllZTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KCZuaCrROguVTrmik2dRNhCyUeX 3M8DXF8uB0I0AgaR1jy8lQnNsvNHFIK2i6fYNI+HQb5Kpl2Vtv/+bkLtWEJ0EJbH wW8Cch/IJrilrS1V7vR1Sz9Wn9qpvrNKpq70NI3sCkhgrsEUlauSxkoESIVooFTk OSs6rCLWqlIAaAtbUKoQrNa4aS3m7X6mfSQQq/uR+YzriMpfse1+9KHLOpnJQNss +UJMufy7jNdv5LyVGbYUF18pocSE24GwcwV0AYLmdPJafpfoChdDwVgylI1C0OPa E2MclPQJxNGI1iLn+Vws6BYPrV6UBjHCRSp+KLAticJ7NDx6UPg9VL7rzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEmvly1lkRVvseUBem2u5xpYqe6bMB8GA1UdIwQY MBaAFERyj7McTr37m/EpdFuRvS4u6O8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkhLUHN4eE92ZnViOFNsMFc1RzlMaTdvN3pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zYWM3NjEtOWFkOC00NTEzLThhMzIt MWY1NWQ5OTk5ZWViLzEvUkhLUHN4eE92ZnViOFNsMFc1RzlMaTdvN3pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8zYWM3NjEtOWFkOC00NTEzLThhMzItMWY1NWQ5OTk5ZWVi LzEvUkhLUHN4eE92ZnViOFNsMFc1RzlMaTdvN3pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADu1t3YKt lrmVFlO8HwHUcftFzFp/7l+Z2gnzeO0goZKW0RVFOaT0O6Own3RkNRO7AlmKhe0N 5ZztFaEtHENmd4safZLV2pUj+J0ZPUQufOB6Nh+GCRhqYtqOANza2XhvHJ8GNovc F5t7IblTSdxjF2vpDy2DuBEIoPHBgiDR2ITLX5janZOL/pjm51OzbyaLd8t4K/34 4ul/6DJ+AANcl78QNo85kyt/OF7Y6h+S5lF4/iDlq460WqpAQ3oWN4dHreMq51zf XjS7Hsh4463abG4zIuodlXMECFKc9dNrYStxnP6YEvQbS0s8lEc3a6Z79EK9aKws fxuLdtNbxZLOhA== -----END CERTIFICATE-----Generated at Sat Dec 27 04:04:27 2025 by rpki-client