This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft File: RFHoPa4So3HB3UnbNNm9Uqloi0o.mft (raw, json) Hash identifier: yG5ksUCNQCMoWVbZJ1IMY9TlMRAu9GJjdHwXoiL/8Oo= Subject key identifier: 6D:15:DB:66:32:24:03:98:7D:98:17:C6:BB:33:52:80:A2:87:CD:D5 Authority key identifier: 44:51:E8:3D:AE:12:A3:71:C1:DD:49:DB:34:D9:BD:52:A9:68:8B:4A Certificate issuer: /CN=4451e83dae12a371c1dd49db34d9bd52a9688b4a Certificate serial: 019B3E6C2DC052B06D25BB584F8F955FDC4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft Manifest number: 09EB Signing time: Sun 21 Dec 2025 01:00:35 +0000 Manifest this update: Sun 21 Dec 2025 01:00:35 +0000 Manifest next update: Mon 22 Dec 2025 01:00:35 +0000 Files and hashes: 1: 5Fdl-r1UYISwU-G4_2MqecNlP8w.roa (hash: TAJZY43vWFWcoOa+D6CqSMPTmCKVwuNadSb4SpvtlPE=) 2: RFHoPa4So3HB3UnbNNm9Uqloi0o.crl (hash: QZ7q/vfKvq5vpRV3/XcGOAZHYaBkN4mjAR086Mq1JNM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 01:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:2d:c0:52:b0:6d:25:bb:58:4f:8f:95:5f:dc:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4451e83dae12a371c1dd49db34d9bd52a9688b4a Validity Not Before: Dec 21 01:00:35 2025 GMT Not After : Dec 22 01:00:35 2025 GMT Subject: CN=6d15db66322403987d9817c6bb335280a287cdd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e2:a7:90:48:b9:46:36:f6:b0:a0:0d:93:35: 57:7a:dc:a9:76:e6:3f:9d:b6:27:69:b2:de:b7:11: d6:70:3c:7e:b8:87:22:63:a0:00:79:eb:79:46:4e: 89:ea:20:aa:97:e5:fb:4d:e4:54:60:f2:e9:9a:96: 50:9e:46:a3:a5:7e:42:aa:0f:bd:29:db:3e:52:fc: 73:b9:57:0e:60:dc:df:d9:7a:1b:33:d7:96:18:83: a2:1c:ba:32:ed:1b:7f:de:ce:53:4b:be:97:0f:30: 36:41:9b:b4:44:39:f5:5c:5b:88:df:fc:cf:0a:13: 55:82:cc:26:82:e6:31:c6:fc:33:a2:82:9e:cd:36: 68:64:f5:30:c0:79:c1:29:be:7c:7f:c1:06:e1:c4: 80:c7:5c:a7:48:c8:2e:bc:94:18:fd:35:06:8f:e4: b9:6c:7d:5b:bf:9e:e3:ba:fb:1b:49:6d:f5:60:2b: 52:f8:d9:0b:a4:c1:61:10:9a:49:6e:2a:fb:68:de: 35:c2:17:56:7a:ec:82:46:a6:45:9f:70:1e:65:6b: b9:75:8e:5a:7c:4d:33:d8:52:6a:2a:c5:eb:e0:57: 08:d5:16:2e:19:57:39:35:bb:45:35:20:d8:b1:70: 8f:5b:b1:fc:a1:9e:c6:71:37:44:f0:3d:89:0a:bd: ac:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:15:DB:66:32:24:03:98:7D:98:17:C6:BB:33:52:80:A2:87:CD:D5 X509v3 Authority Key Identifier: keyid:44:51:E8:3D:AE:12:A3:71:C1:DD:49:DB:34:D9:BD:52:A9:68:8B:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:54:0a:e9:25:15:d9:8f:fa:69:3a:a9:da:91:b9:a3:32:37: 04:4f:ad:00:49:24:f5:f6:5a:49:24:f1:02:c5:6c:f6:b7:49: 1a:e4:c4:d5:94:25:d7:29:34:7e:1e:40:a7:ea:f4:db:4b:28: ae:ba:37:28:eb:3d:47:5a:20:92:2b:92:2e:1c:b2:55:82:66: e2:66:6f:89:9f:e7:69:78:31:cc:c2:7b:1b:a6:f1:97:54:5d: 08:d2:53:4d:de:2d:9c:76:ab:d9:68:2e:fe:0e:25:99:32:52: 39:b2:1b:54:07:18:34:06:36:60:15:20:15:02:a4:97:26:ea: 16:06:81:95:c6:b1:5b:37:8c:dd:b3:c8:5a:f9:63:c7:18:29: dc:6c:f0:15:31:29:56:0c:55:7e:f0:73:dd:b7:b1:6d:6d:b2: a2:e7:58:47:80:f7:24:72:b9:56:c2:7c:6e:b8:10:a5:44:63: 01:bd:ae:bf:48:a1:47:b2:74:c9:ef:bf:42:5f:3d:80:e9:bc: b5:1c:33:a3:fc:38:35:7b:ea:e1:e4:12:4a:d4:e8:db:3f:f8: af:d8:3f:b4:15:e4:27:1c:82:34:42:43:65:fc:c1:a0:1e:1b: 4a:21:7d:a6:90:58:ca:95:ee:46:1f:c2:d7:e2:63:e8:bc:16: 76:06:ce:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bC3AUrBtJbtYT4+VX9xPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTFlODNkYWUxMmEzNzFjMWRkNDlkYjM0ZDliZDUyYTk2 ODhiNGEwHhcNMjUxMjIxMDEwMDM1WhcNMjUxMjIyMDEwMDM1WjAzMTEwLwYDVQQD Eyg2ZDE1ZGI2NjMyMjQwMzk4N2Q5ODE3YzZiYjMzNTI4MGEyODdjZGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+KnkEi5Rjb2sKANkzVXetypduY/ nbYnabLetxHWcDx+uIciY6AAeet5Rk6J6iCql+X7TeRUYPLpmpZQnkajpX5Cqg+9 Kds+UvxzuVcOYNzf2XobM9eWGIOiHLoy7Rt/3s5TS76XDzA2QZu0RDn1XFuI3/zP ChNVgswmguYxxvwzooKezTZoZPUwwHnBKb58f8EG4cSAx1ynSMguvJQY/TUGj+S5 bH1bv57juvsbSW31YCtS+NkLpMFhEJpJbir7aN41whdWeuyCRqZFn3AeZWu5dY5a fE0z2FJqKsXr4FcI1RYuGVc5NbtFNSDYsXCPW7H8oZ7GcTdE8D2JCr2sFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG0V22YyJAOYfZgXxrszUoCih83VMB8GA1UdIwQY MBaAFERR6D2uEqNxwd1J2zTZvVKpaItKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZIb1BhNFNvM0hCM1VuYk5ObTlVcWxvaTBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9kZDhmNzEtMmIzNi00ZmI3LWIyZDUt Zjk5N2RiZGMzZTU3LzEvUkZIb1BhNFNvM0hCM1VuYk5ObTlVcWxvaTBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9kZDhmNzEtMmIzNi00ZmI3LWIyZDUtZjk5N2RiZGMzZTU3 LzEvUkZIb1BhNFNvM0hCM1VuYk5ObTlVcWxvaTBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF1QK6SUV 2Y/6aTqp2pG5ozI3BE+tAEkk9fZaSSTxAsVs9rdJGuTE1ZQl1yk0fh5Ap+r020so rro3KOs9R1ogkiuSLhyyVYJm4mZviZ/naXgxzMJ7G6bxl1RdCNJTTd4tnHar2Wgu /g4lmTJSObIbVAcYNAY2YBUgFQKklybqFgaBlcaxWzeM3bPIWvljxxgp3GzwFTEp VgxVfvBz3bexbW2youdYR4D3JHK5VsJ8brgQpURjAb2uv0ihR7J0ye+/Ql89gOm8 tRwzo/w4NXvq4eQSStTo2z/4r9g/tBXkJxyCNEJDZfzBoB4bSiF9ppBYypXuRh/C 1+Jj6LwWdgbORw== -----END CERTIFICATE-----Generated at Sun Dec 21 11:26:35 2025 by rpki-client