This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft File: ezhehhZ9XMwi_YWJJWCudgtfKJg.mft (raw, json) Hash identifier: OgWOKb3W4fKMhQliT0060zYivHfrOcPJ7Stx8UYEsv8= Subject key identifier: 9C:DB:0C:3E:A1:BD:A3:B7:FC:B4:25:06:A1:29:11:F1:BA:55:BF:9A Authority key identifier: 7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98 Certificate issuer: /CN=7b385e86167d5ccc22fd85892560ae760b5f2898 Certificate serial: 019AF19AD2B0901EE3BD653CBB39E956F0AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 03:00:46 +0000 Manifest this update: Sat 06 Dec 2025 03:00:46 +0000 Manifest next update: Sun 07 Dec 2025 03:00:46 +0000 Files and hashes: 1: 1-15VXX8nVt-lY3LiGzv1Jr6OcwM.roa (hash: SlkmWz0jcL6xUXUhTFQpLdotJEVgcyVB/xztx7GovmM=) 2: ezhehhZ9XMwi_YWJJWCudgtfKJg.crl (hash: qqDNYs1fH5pUR1EeuYtP408H64C3oR3D9utin2fIPNM=) 3: gp4Lcl-XthpiQz3Pgjj2aofu5Eg.roa (hash: +WQhnu3iWgtDqgj16Fdo45N/RQNl/1eQLYZcURm+NBk=) 4: tMCKKQ7T7_7JMjdc5UvMftnS0Sc.roa (hash: kzZ53feDoHQUM5QIs7aC6l1igadYhsq3pYnx3tG/SUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:d2:b0:90:1e:e3:bd:65:3c:bb:39:e9:56:f0:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b385e86167d5ccc22fd85892560ae760b5f2898 Validity Not Before: Dec 6 03:00:46 2025 GMT Not After : Dec 7 03:00:46 2025 GMT Subject: CN=9cdb0c3ea1bda3b7fcb42506a12911f1ba55bf9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:52:f7:d6:9c:72:6a:bc:60:d5:59:ba:7f:96: 24:98:f5:35:27:2b:fb:45:c4:f4:97:e7:cd:7e:08: e1:06:e2:71:28:8b:e7:09:dc:87:11:30:56:23:9d: 8f:ef:37:16:fb:de:55:9a:81:9e:5c:24:b0:2d:64: 03:e5:21:02:b1:89:1c:f5:f7:36:df:0d:f7:5f:e4: a7:8f:0a:4b:0b:f0:20:33:04:70:9c:a3:17:f6:94: 97:b7:66:a0:cc:ff:82:c4:ca:b3:07:c0:18:1c:d1: 34:5f:95:ea:8e:ef:8c:94:ef:2c:3f:a4:79:e0:3f: 6b:6d:ba:af:97:ee:db:c9:fa:12:c9:60:60:40:b9: 41:ff:a9:24:55:eb:d2:1f:49:c1:ae:5c:4f:95:51: 31:63:ef:fb:d7:60:2e:27:f2:4e:21:9e:2a:b5:a6: a2:0d:84:8a:54:87:9d:f8:1b:22:f4:91:96:af:2d: d7:97:6a:27:45:b3:26:2f:33:48:e4:c0:6b:3e:5f: 8d:2d:e1:bc:21:0d:8c:27:eb:7d:a8:80:ed:db:f8: 01:69:90:7c:f7:6c:b1:3a:0c:4d:9e:3f:5c:17:16: 24:93:66:60:6f:df:29:90:e6:81:25:87:02:8a:b6: 42:13:07:5c:cb:9e:d4:b5:a0:53:19:4a:16:95:2c: d7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:DB:0C:3E:A1:BD:A3:B7:FC:B4:25:06:A1:29:11:F1:BA:55:BF:9A X509v3 Authority Key Identifier: keyid:7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:90:11:11:3e:9e:73:61:74:ed:2f:d1:9d:71:14:b5:c6:58: 55:75:42:5a:3a:9c:9c:7d:46:72:97:cf:e0:8e:f4:62:de:32: c3:2d:76:bb:80:07:9c:ff:eb:31:fd:0e:42:72:ba:d0:10:91: 5c:f9:5c:75:70:b7:19:a1:08:c2:3a:ec:3c:91:e5:90:7c:13: 53:61:8d:69:18:84:60:c0:2f:22:ed:93:d9:f6:5a:2b:8f:34: 7a:99:07:3c:52:83:1c:cf:08:b2:fe:4c:61:e9:42:d7:a8:53: 4e:ff:50:db:21:c7:b9:bf:fe:fa:ee:fc:19:ef:d2:ab:df:0a: d9:07:7f:6b:f2:70:fb:d7:1d:b1:97:2e:85:e3:42:0a:c1:9d: bf:22:a2:f9:32:84:5a:a4:48:fe:23:db:30:29:bc:8b:a0:91: 42:ef:bb:6f:94:78:c7:91:c8:1b:7c:d8:3b:c8:9c:f0:5c:71: 6f:fe:a9:f1:e2:ad:2f:0e:a9:f8:7d:36:2f:85:e4:d8:6e:9d: 3c:68:28:b5:f5:89:07:2d:e5:92:cf:7c:08:0a:4b:79:f1:05: 19:32:70:9a:4f:a2:02:95:22:c3:bc:b4:75:5c:b9:2f:50:47: d8:cc:52:d2:29:15:22:67:82:ba:1a:ce:c9:b1:af:41:ff:c8: 18:7d:e0:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmtKwkB7jvWU8uznpVvCrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMzg1ZTg2MTY3ZDVjY2MyMmZkODU4OTI1NjBhZTc2MGI1 ZjI4OTgwHhcNMjUxMjA2MDMwMDQ2WhcNMjUxMjA3MDMwMDQ2WjAzMTEwLwYDVQQD Eyg5Y2RiMGMzZWExYmRhM2I3ZmNiNDI1MDZhMTI5MTFmMWJhNTViZjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlL31pxyarxg1Vm6f5YkmPU1Jyv7 RcT0l+fNfgjhBuJxKIvnCdyHETBWI52P7zcW+95VmoGeXCSwLWQD5SECsYkc9fc2 3w33X+SnjwpLC/AgMwRwnKMX9pSXt2agzP+CxMqzB8AYHNE0X5Xqju+MlO8sP6R5 4D9rbbqvl+7byfoSyWBgQLlB/6kkVevSH0nBrlxPlVExY+/712AuJ/JOIZ4qtaai DYSKVIed+Bsi9JGWry3Xl2onRbMmLzNI5MBrPl+NLeG8IQ2MJ+t9qIDt2/gBaZB8 92yxOgxNnj9cFxYkk2Zgb98pkOaBJYcCirZCEwdcy57UtaBTGUoWlSzXuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJzbDD6hvaO3/LQlBqEpEfG6Vb+aMB8GA1UdIwQY MBaAFHs4XoYWfVzMIv2FiSVgrnYLXyiYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXpoZWhoWjlYTXdpX1lXSkpXQ3VkZ3RmS0pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9iNDU5ZjEtNjQ5OS00ZTE0LWFjZmIt ZWE3ODhhZDMyOTZhLzEvZXpoZWhoWjlYTXdpX1lXSkpXQ3VkZ3RmS0pnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9iNDU5ZjEtNjQ5OS00ZTE0LWFjZmItZWE3ODhhZDMyOTZh LzEvZXpoZWhoWjlYTXdpX1lXSkpXQ3VkZ3RmS0pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOpARET6e c2F07S/RnXEUtcZYVXVCWjqcnH1GcpfP4I70Yt4ywy12u4AHnP/rMf0OQnK60BCR XPlcdXC3GaEIwjrsPJHlkHwTU2GNaRiEYMAvIu2T2fZaK480epkHPFKDHM8Isv5M YelC16hTTv9Q2yHHub/++u78Ge/Sq98K2Qd/a/Jw+9cdsZcuheNCCsGdvyKi+TKE WqRI/iPbMCm8i6CRQu+7b5R4x5HIG3zYO8ic8Fxxb/6p8eKtLw6p+H02L4Xk2G6d PGgotfWJBy3lks98CApLefEFGTJwmk+iApUiw7y0dVy5L1BH2MxS0ikVImeCuhrO ybGvQf/IGH3gSA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:12:06 2025 by rpki-client