This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft File: RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft (raw, json) Hash identifier: bgKNuGMwzKRLppgta8kl3GhENjDfdmKnZJgpA/uta4g= Subject key identifier: B8:C3:47:93:B8:AD:A0:B3:51:D4:4B:77:54:48:62:D7:42:43:F9:B0 Authority key identifier: 44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31 Certificate issuer: /CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31 Certificate serial: 019B3D2307BD4412550AF67D7631194C890E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft Manifest number: 0CFF Signing time: Sat 20 Dec 2025 19:01:04 +0000 Manifest this update: Sat 20 Dec 2025 19:01:04 +0000 Manifest next update: Sun 21 Dec 2025 19:01:04 +0000 Files and hashes: 1: 0qRVIHZKX4qGnjxAiU1aoisO8_I.roa (hash: lyCpmpSchMKVPytHVw70ZjOKFalrbZ7DXCdpS6ih0A8=) 2: RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl (hash: HLGXU3ExshZUUEFsvUpQblRdyZdJH9CjT0C7je9wlts=) 3: XrZ7_VYsTjVO1Hdr6lTXBYRHdDM.roa (hash: /HTMnGOuDTUdEjSKAx29mQcK6o1vmtlFHqUYC092xGg=) 4: fNaHZKQWzTR0TatLxGJsV51nz-I.roa (hash: sE2fqms9057unxv9v3lOHD2WZe1GOPfgICxqGHioarI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:07:bd:44:12:55:0a:f6:7d:76:31:19:4c:89:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31 Validity Not Before: Dec 20 19:01:04 2025 GMT Not After : Dec 21 19:01:04 2025 GMT Subject: CN=b8c34793b8ada0b351d44b77544862d74243f9b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:99:1b:6c:51:86:0e:e3:7e:32:9a:2f:21:ba: 7a:58:c6:db:16:2a:37:13:f5:db:f0:69:49:bd:aa: ca:34:15:f3:85:b3:e0:e7:0a:d8:8d:30:72:46:52: cb:2b:ef:6a:a2:71:9f:24:a1:97:5e:ff:55:1e:6d: 91:2f:f5:45:e3:23:b2:42:87:51:6b:dd:25:33:18: ac:30:13:d5:c9:f5:4d:44:db:2b:a8:4f:f0:a7:8a: e0:f3:e6:58:f6:3a:c5:e4:d0:68:35:d9:51:40:b0: 92:66:5b:f0:0d:8a:e2:c0:af:91:af:99:48:be:00: ff:2e:54:16:c3:e4:76:9a:01:f6:1f:01:0c:e2:43: fe:ab:02:4d:5b:b8:e3:19:0a:14:cb:50:99:93:f6: fd:f0:32:f0:bd:07:a3:0f:45:c9:0a:66:41:48:6f: 0f:6d:d7:c6:34:0b:66:a8:f7:c9:b3:dd:f2:51:83: 74:10:ac:4d:a1:55:40:61:bb:ce:d9:a4:61:a2:69: fc:e4:ab:88:8a:28:4a:03:53:72:ce:75:23:a5:a1: ae:df:67:bd:48:0c:b2:e7:c1:43:1e:d6:c3:c9:16: 50:8c:13:c4:5e:d5:45:02:ff:d2:f6:9a:d0:f9:9f: ab:34:7a:62:1a:14:2f:b4:a6:ea:68:b6:5f:dd:9a: 3f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C3:47:93:B8:AD:A0:B3:51:D4:4B:77:54:48:62:D7:42:43:F9:B0 X509v3 Authority Key Identifier: keyid:44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:22:ab:6e:a7:42:5d:68:b3:6a:a3:84:de:17:cf:07:f4:8e: ca:ca:13:52:65:90:b2:a7:a1:1f:c2:fb:84:09:34:e2:f7:1f: fb:38:4c:46:23:c0:ff:e8:9c:72:4e:19:26:f1:0a:85:f4:23: e8:58:b6:be:75:46:6b:5f:9b:ed:64:19:86:1a:b5:71:0f:c6: 0e:d3:ec:60:09:41:fb:44:c1:31:db:b6:92:ef:66:80:c5:25: ef:f9:af:8f:e7:04:60:9f:92:f7:6a:8e:b3:8c:b3:66:14:73: d0:6b:94:b4:03:b7:c6:51:af:23:c4:e3:d2:fa:8c:a1:cb:24: 3d:0f:38:0b:d6:0c:31:4a:54:13:37:e4:ce:ee:55:f7:39:67: a0:41:ed:ae:12:35:8d:1b:47:8a:2c:3c:3d:78:d8:6b:a2:3b: 42:72:c6:0e:8f:4e:d4:e2:70:62:2d:37:89:1e:15:fb:be:16: d3:9f:4b:97:95:3a:38:8f:a9:c7:15:7a:28:b8:78:8b:03:cf: 4d:e8:1a:19:a1:77:df:fb:7e:b8:57:74:96:17:b4:65:e8:9b: cb:78:d8:d3:bd:de:6d:00:e4:98:74:71:0e:3a:ff:4e:31:37: 17:6f:5e:2e:b5:01:97:03:14:f3:43:66:1a:eb:b7:f0:10:5e: 13:77:71:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Iwe9RBJVCvZ9djEZTIkOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NzI4ZmIzMWM0ZWJkZmI5YmYxMjk3NDViOTFiZDJlMmVl OGVmMzEwHhcNMjUxMjIwMTkwMTA0WhcNMjUxMjIxMTkwMTA0WjAzMTEwLwYDVQQD EyhiOGMzNDc5M2I4YWRhMGIzNTFkNDRiNzc1NDQ4NjJkNzQyNDNmOWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJkbbFGGDuN+MpovIbp6WMbbFio3 E/Xb8GlJvarKNBXzhbPg5wrYjTByRlLLK+9qonGfJKGXXv9VHm2RL/VF4yOyQodR a90lMxisMBPVyfVNRNsrqE/wp4rg8+ZY9jrF5NBoNdlRQLCSZlvwDYriwK+Rr5lI vgD/LlQWw+R2mgH2HwEM4kP+qwJNW7jjGQoUy1CZk/b98DLwvQejD0XJCmZBSG8P bdfGNAtmqPfJs93yUYN0EKxNoVVAYbvO2aRhomn85KuIiihKA1NyznUjpaGu32e9 SAyy58FDHtbDyRZQjBPEXtVFAv/S9prQ+Z+rNHpiGhQvtKbqaLZf3Zo/pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjDR5O4raCzUdRLd1RIYtdCQ/mwMB8GA1UdIwQY MBaAFERyj7McTr37m/EpdFuRvS4u6O8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkhLUHN4eE92ZnViOFNsMFc1RzlMaTdvN3pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zYWM3NjEtOWFkOC00NTEzLThhMzIt MWY1NWQ5OTk5ZWViLzEvUkhLUHN4eE92ZnViOFNsMFc1RzlMaTdvN3pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8zYWM3NjEtOWFkOC00NTEzLThhMzItMWY1NWQ5OTk5ZWVi LzEvUkhLUHN4eE92ZnViOFNsMFc1RzlMaTdvN3pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEiKrbqdC XWizaqOE3hfPB/SOysoTUmWQsqehH8L7hAk04vcf+zhMRiPA/+icck4ZJvEKhfQj 6Fi2vnVGa1+b7WQZhhq1cQ/GDtPsYAlB+0TBMdu2ku9mgMUl7/mvj+cEYJ+S92qO s4yzZhRz0GuUtAO3xlGvI8Tj0vqMocskPQ84C9YMMUpUEzfkzu5V9zlnoEHtrhI1 jRtHiiw8PXjYa6I7QnLGDo9O1OJwYi03iR4V+74W059Ll5U6OI+pxxV6KLh4iwPP TegaGaF33/t+uFd0lhe0Zeiby3jY073ebQDkmHRxDjr/TjE3F29eLrUBlwMU80Nm Guu38BBeE3dxcw== -----END CERTIFICATE-----Generated at Sun Dec 21 02:44:40 2025 by rpki-client