This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft File: EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft (raw, json) Hash identifier: h0nTW+cAUm5pplekT4WrIRMo5G9tFVILuQ0UOkSHcNY= Subject key identifier: F4:78:B8:6E:EC:B1:D8:9C:63:14:38:16:35:46:51:A0:38:9A:5F:80 Authority key identifier: 10:7A:5A:F1:96:B8:A0:EA:96:0C:28:F6:B3:E7:52:91:C7:E8:61:CD Certificate issuer: /CN=107a5af196b8a0ea960c28f6b3e75291c7e861cd Certificate serial: 019AF23FC285B472007D1E3041A04DAEEE7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 06:00:56 +0000 Manifest this update: Sat 06 Dec 2025 06:00:56 +0000 Manifest next update: Sun 07 Dec 2025 06:00:56 +0000 Files and hashes: 1: EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl (hash: sUuhYbVmkbeOwvEqbYm3wifFSzphIoLhblX+IKIOl58=) 2: NmHfVOAq428sUSSIRO7nZKCwlXg.roa (hash: 7cV2xNe1q0M48rtVit0uJemlcGCJGSiYbHDZVWgEp6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:c2:85:b4:72:00:7d:1e:30:41:a0:4d:ae:ee:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=107a5af196b8a0ea960c28f6b3e75291c7e861cd Validity Not Before: Dec 6 06:00:56 2025 GMT Not After : Dec 7 06:00:56 2025 GMT Subject: CN=f478b86eecb1d89c63143816354651a0389a5f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e0:61:2c:d8:fc:84:15:dd:67:70:ba:b8:53: 66:c5:96:26:8b:90:a5:c4:21:d8:f8:c2:09:a6:51: eb:5f:4e:11:7e:fd:ad:00:54:8b:98:42:a4:42:dd: 01:0f:f5:0a:f6:3f:ca:1f:b9:ee:4a:79:d9:2e:75: b7:19:a6:ff:c8:b7:96:a7:67:e9:5d:f7:4e:ce:e1: 88:9d:8d:b2:8c:fe:14:f5:00:97:b4:2e:bf:0a:e2: e7:c2:55:3b:0a:d4:52:74:b6:46:58:c7:e6:9c:99: 51:39:68:b2:d5:26:8f:99:13:41:53:1b:ca:39:5a: d8:31:db:81:18:fc:78:72:96:ac:21:a3:2d:73:db: 77:f0:38:0b:25:a6:7e:45:93:7f:17:da:37:46:2a: 8d:2b:83:fa:66:40:9d:1b:d1:df:2b:16:81:d5:37: bb:f2:3b:db:ea:e5:21:83:fd:23:4a:0f:a3:1f:48: cf:63:4a:cc:4f:b5:0f:b6:15:a9:3b:e7:d2:10:83: 7a:df:bd:cb:79:2c:2a:6f:4e:de:80:46:c4:06:74: d6:c7:ea:aa:e4:57:06:f3:58:e3:47:25:b4:5f:3d: 0c:4e:c7:8d:ac:c1:ad:ef:9f:96:e6:72:40:ff:0d: 56:ff:0e:09:3b:b6:63:31:c3:20:68:ca:26:1d:9a: fd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:78:B8:6E:EC:B1:D8:9C:63:14:38:16:35:46:51:A0:38:9A:5F:80 X509v3 Authority Key Identifier: keyid:10:7A:5A:F1:96:B8:A0:EA:96:0C:28:F6:B3:E7:52:91:C7:E8:61:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:99:c9:a7:bf:47:50:68:9f:28:3a:dc:12:e3:cc:35:b1:47: 29:74:e4:99:5f:9e:ee:2c:79:f4:4c:62:cb:2f:4c:e5:9e:50: 9f:3a:12:63:ea:fe:96:ba:42:d5:4d:1a:3f:71:1e:93:6d:f8: f0:e8:2a:7a:c6:92:70:f6:d4:57:8b:89:bc:5c:6b:dd:37:17: fd:ef:92:40:81:fa:e7:68:bc:6f:99:11:96:43:1e:be:cd:7e: 22:d7:6c:f8:c3:21:8a:9d:63:1f:7e:83:cb:0e:dd:f6:c6:4f: 21:e1:25:dd:4d:9a:bf:4a:fc:1d:b4:43:4f:74:49:17:78:be: 9b:bd:a9:e9:68:14:b6:27:c7:28:e3:4d:53:12:d7:c0:bc:a2: b4:ae:8d:f4:18:cf:d0:07:a7:1a:6c:72:f2:7a:4f:15:61:35: 71:23:1e:d9:30:76:35:ca:a1:89:c7:aa:30:58:c2:b5:e7:43: 30:6c:a9:c9:b3:03:db:b9:79:7f:ed:a9:83:89:ae:74:26:27: b6:a9:4f:84:46:56:37:b4:9d:0c:48:71:b9:74:dc:52:3b:13: 8c:ed:7f:97:ad:83:de:4e:98:9f:4b:2d:cd:f2:0f:5b:e1:99: 93:d6:25:d8:db:de:97:39:3a:3b:6f:ba:05:81:63:b9:13:e5: 9a:25:78:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP8KFtHIAfR4wQaBNru5/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwN2E1YWYxOTZiOGEwZWE5NjBjMjhmNmIzZTc1MjkxYzdl ODYxY2QwHhcNMjUxMjA2MDYwMDU2WhcNMjUxMjA3MDYwMDU2WjAzMTEwLwYDVQQD EyhmNDc4Yjg2ZWVjYjFkODljNjMxNDM4MTYzNTQ2NTFhMDM4OWE1ZjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuBhLNj8hBXdZ3C6uFNmxZYmi5Cl xCHY+MIJplHrX04Rfv2tAFSLmEKkQt0BD/UK9j/KH7nuSnnZLnW3Gab/yLeWp2fp XfdOzuGInY2yjP4U9QCXtC6/CuLnwlU7CtRSdLZGWMfmnJlROWiy1SaPmRNBUxvK OVrYMduBGPx4cpasIaMtc9t38DgLJaZ+RZN/F9o3RiqNK4P6ZkCdG9HfKxaB1Te7 8jvb6uUhg/0jSg+jH0jPY0rMT7UPthWpO+fSEIN6373LeSwqb07egEbEBnTWx+qq 5FcG81jjRyW0Xz0MTseNrMGt75+W5nJA/w1W/w4JO7ZjMcMgaMomHZr9LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPR4uG7ssdicYxQ4FjVGUaA4ml+AMB8GA1UdIwQY MBaAFBB6WvGWuKDqlgwo9rPnUpHH6GHNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUhwYThaYTRvT3FXRENqMnMtZFNrY2ZvWWMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9iYjIzZTEtNDZjYS00NjRhLWIzZjIt ZjkyOWUyNTUxNjI3LzEvRUhwYThaYTRvT3FXRENqMnMtZFNrY2ZvWWMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9iYjIzZTEtNDZjYS00NjRhLWIzZjItZjkyOWUyNTUxNjI3 LzEvRUhwYThaYTRvT3FXRENqMnMtZFNrY2ZvWWMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfZnJp79H UGifKDrcEuPMNbFHKXTkmV+e7ix59Exiyy9M5Z5QnzoSY+r+lrpC1U0aP3Eek234 8OgqesaScPbUV4uJvFxr3TcX/e+SQIH652i8b5kRlkMevs1+Itds+MMhip1jH36D yw7d9sZPIeEl3U2av0r8HbRDT3RJF3i+m72p6WgUtifHKONNUxLXwLyitK6N9BjP 0AenGmxy8npPFWE1cSMe2TB2NcqhiceqMFjCtedDMGypybMD27l5f+2pg4mudCYn tqlPhEZWN7SdDEhxuXTcUjsTjO1/l62D3k6Yn0stzfIPW+GZk9Yl2Nvelzk6O2+6 BYFjuRPlmiV4Zw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:28:30 2025 by rpki-client