This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.mft File: RHxS2B7cEklkSteUvgKK-Q4CShY.mft (raw, json) Hash identifier: 67u1YJXyLJpNBmoFdEcT46C5/BXoZhUETC2niTDvxkE= Subject key identifier: 41:57:5B:87:83:17:05:78:5A:DD:BA:49:90:F4:4C:7E:7C:B4:8C:99 Authority key identifier: 44:7C:52:D8:1E:DC:12:49:64:4A:D7:94:BE:02:8A:F9:0E:02:4A:16 Certificate issuer: /CN=447c52d81edc1249644ad794be028af90e024a16 Certificate serial: 019B7712219A664F83BFCE459AB1A101FCF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHxS2B7cEklkSteUvgKK-Q4CShY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.mft Manifest number: 0B52 Signing time: Thu 01 Jan 2026 01:00:35 +0000 Manifest this update: Thu 01 Jan 2026 01:00:35 +0000 Manifest next update: Fri 02 Jan 2026 01:00:35 +0000 Files and hashes: 1: 0RTmTUPTdqVwMU5i8iRqJZA86F0.roa (hash: eIjsDcha7FolfU5e8Eelou/OO0UBzir5atE5Gevb/B4=) 2: RHxS2B7cEklkSteUvgKK-Q4CShY.crl (hash: MefHl3KTsiWtL7ayA2km8qvbp1kE6xQdsE3+AO2jeMA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.mft rsync://rpki.ripe.net/repository/DEFAULT/RHxS2B7cEklkSteUvgKK-Q4CShY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:12:21:9a:66:4f:83:bf:ce:45:9a:b1:a1:01:fc:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=447c52d81edc1249644ad794be028af90e024a16 Validity Not Before: Jan 1 01:00:35 2026 GMT Not After : Jan 2 01:00:35 2026 GMT Subject: CN=41575b87831705785addba4990f44c7e7cb48c99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8f:dc:a5:b6:16:96:0f:de:a0:d3:06:d9:9f: f0:de:63:03:4f:97:b6:b9:39:6a:6e:73:31:0e:4e: 46:23:ab:13:2b:42:67:83:6b:ba:39:d4:11:66:52: 25:60:26:01:59:c7:cc:88:94:1f:14:22:6c:df:87: 4f:99:ee:e4:47:cb:7f:9b:ac:2d:51:00:d9:bd:24: 2b:a2:ed:dd:cf:89:a9:5e:07:df:3a:79:8f:f4:c6: fc:86:40:02:00:58:8d:28:83:39:40:92:52:67:ce: 55:bb:de:0d:38:01:5b:98:fe:dc:ee:9f:99:ac:d8: 8c:34:43:ed:45:cd:5c:e5:e1:78:d3:2b:47:d4:70: 78:be:a4:aa:08:23:b8:02:48:e4:46:53:81:91:88: d8:b9:8a:b1:75:e7:ba:7e:6d:52:b2:82:46:8c:e3: 91:92:3b:4b:2b:b3:b1:b7:0d:f1:0d:23:1f:29:e9: 5a:45:c2:3f:7d:66:82:f5:37:b2:3a:af:1d:52:80: 1d:d8:dd:15:b3:b4:bd:69:ad:cd:c1:be:cd:8c:81: c8:54:47:07:b1:8c:5f:58:66:7f:0b:d8:f4:a7:53: 76:f7:84:85:3a:c0:b3:be:45:40:89:c5:a6:1e:f4: a6:cd:ae:13:fc:04:01:6d:70:39:60:1e:fe:97:04: 23:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:57:5B:87:83:17:05:78:5A:DD:BA:49:90:F4:4C:7E:7C:B4:8C:99 X509v3 Authority Key Identifier: keyid:44:7C:52:D8:1E:DC:12:49:64:4A:D7:94:BE:02:8A:F9:0E:02:4A:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHxS2B7cEklkSteUvgKK-Q4CShY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:23:cd:48:10:9f:8e:2d:45:54:a2:70:c8:f8:75:5c:bf:68: 11:10:48:36:ac:a8:ff:d1:67:14:a7:fa:d8:25:be:e8:1f:b7: 2f:10:9c:18:b1:c3:94:15:2f:18:a2:1d:4f:ca:79:39:c7:ab: f7:44:9b:fc:41:15:a9:88:d5:99:a6:b1:b4:b9:61:7b:09:70: aa:bd:b6:df:4e:ef:61:9f:ad:d7:0e:86:9f:ef:f5:73:10:06: 28:10:f7:76:05:e3:6f:e7:b0:c6:6a:13:48:ad:72:61:4e:de: fa:d8:4c:11:bd:d3:0c:65:30:04:d9:f0:15:b5:f9:b6:6f:82: 78:44:f9:a2:05:5e:89:e3:b2:22:b6:17:38:68:4d:8e:6a:fd: 1b:2c:6e:94:97:b5:e0:b5:6f:a5:c2:0b:f3:74:a4:d6:0c:11: 4c:3d:4d:0e:4f:cc:10:71:37:8c:bf:9f:d8:69:21:70:ed:da: 9a:14:5f:db:40:ca:3c:ba:ff:dc:24:83:2e:04:f0:84:f4:6f: be:d6:af:0f:b5:25:b3:54:22:d1:cd:b0:f3:49:97:27:0d:6f: 09:15:1d:f0:b3:7b:33:ea:fc:b8:81:80:6c:1e:3d:ff:f5:6a: fd:33:a1:bb:a2:a7:1c:3a:7e:08:d0:ce:b8:5c:73:7a:c6:9b: 93:7d:cc:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt3EiGaZk+Dv85FmrGhAfzxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0N2M1MmQ4MWVkYzEyNDk2NDRhZDc5NGJlMDI4YWY5MGUw MjRhMTYwHhcNMjYwMTAxMDEwMDM1WhcNMjYwMTAyMDEwMDM1WjAzMTEwLwYDVQQD Eyg0MTU3NWI4NzgzMTcwNTc4NWFkZGJhNDk5MGY0NGM3ZTdjYjQ4Yzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Y/cpbYWlg/eoNMG2Z/w3mMDT5e2 uTlqbnMxDk5GI6sTK0Jng2u6OdQRZlIlYCYBWcfMiJQfFCJs34dPme7kR8t/m6wt UQDZvSQrou3dz4mpXgffOnmP9Mb8hkACAFiNKIM5QJJSZ85Vu94NOAFbmP7c7p+Z rNiMNEPtRc1c5eF40ytH1HB4vqSqCCO4AkjkRlOBkYjYuYqxdee6fm1SsoJGjOOR kjtLK7Oxtw3xDSMfKelaRcI/fWaC9TeyOq8dUoAd2N0Vs7S9aa3Nwb7NjIHIVEcH sYxfWGZ/C9j0p1N294SFOsCzvkVAicWmHvSmza4T/AQBbXA5YB7+lwQjJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFXW4eDFwV4Wt26SZD0TH58tIyZMB8GA1UdIwQY MBaAFER8Utge3BJJZErXlL4CivkOAkoWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkh4UzJCN2NFa2xrU3RlVXZnS0stUTRDU2hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC83NjFiMTctNmNiNS00N2ZkLThjNGYt ZWZhNjc4OWZkOTcyLzEvUkh4UzJCN2NFa2xrU3RlVXZnS0stUTRDU2hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC83NjFiMTctNmNiNS00N2ZkLThjNGYtZWZhNjc4OWZkOTcy LzEvUkh4UzJCN2NFa2xrU3RlVXZnS0stUTRDU2hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZyPNSBCf ji1FVKJwyPh1XL9oERBINqyo/9FnFKf62CW+6B+3LxCcGLHDlBUvGKIdT8p5Ocer 90Sb/EEVqYjVmaaxtLlhewlwqr22307vYZ+t1w6Gn+/1cxAGKBD3dgXjb+ewxmoT SK1yYU7e+thMEb3TDGUwBNnwFbX5tm+CeET5ogVeieOyIrYXOGhNjmr9GyxulJe1 4LVvpcIL83Sk1gwRTD1NDk/MEHE3jL+f2GkhcO3amhRf20DKPLr/3CSDLgTwhPRv vtavD7Uls1Qi0c2w80mXJw1vCRUd8LN7M+r8uIGAbB49//Vq/TOhu6KnHDp+CNDO uFxzesabk33MNw== -----END CERTIFICATE-----Generated at Thu Jan 1 02:50:32 2026 by rpki-client