This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft File: EhSn4qjHASMlrpc-0aK7oFsrucE.mft (raw, json) Hash identifier: Wz7MS/uyB+fRsOL/rKplFJOZWgumN+JZkev9MoUVnJw= Subject key identifier: 83:D3:E7:DB:00:38:30:40:EA:71:FD:2E:6F:49:36:1C:63:59:65:EE Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1 Certificate issuer: /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1 Certificate serial: 019AF2E4576B638661D67C7FE69DD0426BB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft Manifest number: 176A Signing time: Sat 06 Dec 2025 09:00:41 +0000 Manifest this update: Sat 06 Dec 2025 09:00:41 +0000 Manifest next update: Sun 07 Dec 2025 09:00:41 +0000 Files and hashes: 1: 1DU-9zpdMFnLCpRFqEpUKjP1_SU.roa (hash: ECSzVL8H6djguciJDERoW94dzwpyxXLeOE5CnliCEPY=) 2: BH1qEokqqzS6QZQI0vKu4oCRwq0.roa (hash: FAUeRE2dz1nIQh6oaxPr0ilW7qqs+jlIqjguVCoEOyM=) 3: EhSn4qjHASMlrpc-0aK7oFsrucE.crl (hash: frl89h2BA8oh5P+47BpjtE9cPvUZ7Sq+r5FGzItajk4=) 4: QhIb9pU2TFz78TnVhDlEb28bLew.roa (hash: RCBq8YAUky5FP3KjBMjIj1v3CgulfdLRMkZuDyWMETw=) 5: gOoOuIZOmTcmldEZvCq4XtMtjO0.roa (hash: hmwK87HYYcPAKwIEHNLhFiTNPFHHx/u4UOy/l/S/Aj8=) 6: m_k3Aqy-aX7CwHacvMO7KscI6WI.roa (hash: FW7of+gpwTivV7HfNQEL7I3Yftx4/Lrk33rZymDJAac=) 7: nie0Mmy1gieDJiKDb3rzMQ7GKsE.roa (hash: yfewYdidxvBmXesHwdrJgftWGHYEK1CBv49h98D7XZY=) 8: ykCEDMwt0gSfj-8Dck34ZSuRxP4.roa (hash: Al22oIYh8E5aXL0ywXKSqrnxU2vRdMQS4zIM1t7Q1JQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:57:6b:63:86:61:d6:7c:7f:e6:9d:d0:42:6b:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1 Validity Not Before: Dec 6 09:00:41 2025 GMT Not After : Dec 7 09:00:41 2025 GMT Subject: CN=83d3e7db00383040ea71fd2e6f49361c635965ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0d:d3:a3:61:17:67:56:d3:0d:99:83:59:95: b2:32:17:69:05:86:60:40:1a:66:d8:2c:54:f8:7e: be:04:6e:ae:40:aa:43:ec:63:20:65:83:6c:26:33: 9c:18:ae:58:d8:8b:11:c7:52:c3:06:1c:df:51:5a: da:d1:b5:1c:00:44:4b:58:af:96:b9:61:71:a2:06: 1b:0b:26:a7:8d:b4:a9:8a:b5:9e:07:b7:62:a6:9e: 56:ff:46:78:8e:b9:6f:0b:c8:c0:72:93:ad:66:81: a2:c1:0d:f1:03:3a:f2:3f:5c:b7:30:21:6e:78:8e: 81:0f:41:1c:15:db:9a:83:86:26:e6:fb:e1:28:31: 34:53:27:4b:36:e0:75:dd:d2:f6:31:4f:45:94:3e: a5:56:10:fd:28:28:7d:8f:c3:e3:17:1c:aa:d4:98: 29:3e:9a:89:aa:89:97:c7:fe:98:29:7f:8f:43:89: 9e:ac:1d:02:1a:f4:af:17:0c:e6:91:9f:d7:82:f9: 47:64:9f:b7:e1:62:aa:17:e3:a9:5c:2b:25:28:7e: c8:30:2c:33:e9:e0:fd:04:60:1a:2d:9a:cc:b6:28: eb:50:21:fe:c6:13:22:bf:7e:ef:a1:92:0d:b9:fd: 01:d7:d3:16:66:b9:76:f5:ea:f1:e2:73:71:b0:05: cf:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:D3:E7:DB:00:38:30:40:EA:71:FD:2E:6F:49:36:1C:63:59:65:EE X509v3 Authority Key Identifier: keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:b0:b1:b0:ec:e6:66:cb:07:a6:76:a9:39:1d:f0:9f:76:f9: bb:91:ad:8d:b2:6c:61:19:58:c3:c1:06:e4:92:4a:d6:32:96: 2d:bc:de:f2:60:a1:0e:6d:37:5a:cd:38:b2:27:f8:94:88:85: e8:15:fc:3a:80:4d:21:04:b3:f3:73:2d:b6:63:d2:49:6f:ef: 22:f4:8a:4c:9d:42:9b:99:aa:7a:db:d0:d5:46:26:0c:9e:9d: c1:95:c0:44:43:8a:9c:59:1e:09:03:5d:cb:5e:32:a0:8d:71: 5f:ba:66:3b:be:98:29:81:b9:f1:69:13:64:3a:da:ce:68:db: d5:7b:f3:83:b7:d1:28:4b:ba:11:ed:d1:95:46:a2:66:01:9f: e9:c5:05:91:ba:32:3a:a4:18:f1:93:94:f6:63:f8:3f:25:03: b9:01:1f:9a:62:4c:a1:d1:79:78:c0:25:c0:10:f1:ef:1f:95: 90:83:2b:af:94:a8:0a:91:38:08:2c:e5:ae:a2:e0:47:22:e9: 64:83:a2:0f:30:e2:6b:cb:ea:f4:f3:56:d6:61:79:bf:e8:c4: 77:f9:67:07:bc:99:45:ea:dc:b7:92:41:47:8c:0a:97:99:a3: 19:38:a4:f5:98:25:8b:bc:fa:2b:b2:be:01:62:03:d8:27:6f: b4:64:b1:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5FdrY4Zh1nx/5p3QQmu1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMTRhN2UyYThjNzAxMjMyNWFlOTczZWQxYTJiYmEwNWIy YmI5YzEwHhcNMjUxMjA2MDkwMDQxWhcNMjUxMjA3MDkwMDQxWjAzMTEwLwYDVQQD Eyg4M2QzZTdkYjAwMzgzMDQwZWE3MWZkMmU2ZjQ5MzYxYzYzNTk2NWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2g3To2EXZ1bTDZmDWZWyMhdpBYZg QBpm2CxU+H6+BG6uQKpD7GMgZYNsJjOcGK5Y2IsRx1LDBhzfUVra0bUcAERLWK+W uWFxogYbCyanjbSpirWeB7dipp5W/0Z4jrlvC8jAcpOtZoGiwQ3xAzryP1y3MCFu eI6BD0EcFduag4Ym5vvhKDE0UydLNuB13dL2MU9FlD6lVhD9KCh9j8PjFxyq1Jgp PpqJqomXx/6YKX+PQ4merB0CGvSvFwzmkZ/XgvlHZJ+34WKqF+OpXCslKH7IMCwz 6eD9BGAaLZrMtijrUCH+xhMiv37voZINuf0B19MWZrl29erx4nNxsAXPfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIPT59sAODBA6nH9Lm9JNhxjWWXuMB8GA1UdIwQY MBaAFBIUp+KoxwEjJa6XPtGiu6BbK7nBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hNjhkYmMtM2Y5NC00ZmVkLThkOWQt ZTljMzY0OWMxMjE4LzEvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9hNjhkYmMtM2Y5NC00ZmVkLThkOWQtZTljMzY0OWMxMjE4 LzEvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcrCxsOzm ZssHpnapOR3wn3b5u5GtjbJsYRlYw8EG5JJK1jKWLbze8mChDm03Ws04sif4lIiF 6BX8OoBNIQSz83MttmPSSW/vIvSKTJ1Cm5mqetvQ1UYmDJ6dwZXAREOKnFkeCQNd y14yoI1xX7pmO76YKYG58WkTZDrazmjb1Xvzg7fRKEu6Ee3RlUaiZgGf6cUFkboy OqQY8ZOU9mP4PyUDuQEfmmJModF5eMAlwBDx7x+VkIMrr5SoCpE4CCzlrqLgRyLp ZIOiDzDia8vq9PNW1mF5v+jEd/lnB7yZRerct5JBR4wKl5mjGTik9Zgli7z6K7K+ AWID2CdvtGSxhA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:10:12 2025 by rpki-client