This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft File: EHcd196iLjX9rxm1G4OfQ3IScLo.mft (raw, json) Hash identifier: 7aib5JCR2IeE+iIW5v7bm7bptk+CiYO9Svke1Fc8YZg= Subject key identifier: 6E:B8:83:11:C2:C0:37:D5:75:C2:F6:18:C3:2B:82:5A:E2:C9:18:B3 Authority key identifier: 10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA Certificate issuer: /CN=10771dd7dea22e35fdaf19b51b839f43721270ba Certificate serial: 019AF208AEE0C8B601D80317C4E8FAC912B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 05:00:46 +0000 Manifest this update: Sat 06 Dec 2025 05:00:46 +0000 Manifest next update: Sun 07 Dec 2025 05:00:46 +0000 Files and hashes: 1: 2W0mVYMtUj2Armlmk_FP_3q5ESY.roa (hash: w5Ej5+Qvny/iMXD/R+qRLBIbP+3L75HhJ+B0EUJmp8o=) 2: EHcd196iLjX9rxm1G4OfQ3IScLo.crl (hash: 132rEI6iZdXnJY7484dIDNJVdqCYr+FD7VnS3ixgQp0=) 3: Lh4ykTJQfzCAQTP8wtaXdQr_9Fk.roa (hash: QG3UN2HjFfGKFrQvhtxeeeXreoHXBK1yS6QHGjO5Etg=) 4: VbGX6V55_AUgh-706a5pCl3f9Kg.roa (hash: IviXGlaLtNBbBi+wGZOwysY/nW7XfiJY8zoOrjfnvG8=) 5: efQyVpTfdzTLxoeY6EZRaCPb9ME.roa (hash: osXy82VNbyBuJJhgosvmVAstSYEdkdV+Zv1r3Rp3SjY=) 6: vPKCfihyP4aceHhSVf5O5t7dhks.roa (hash: BSL3nS6RO+KWTxuVXzJtjXxdHmqwKWboA1DQ+yINRvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ae:e0:c8:b6:01:d8:03:17:c4:e8:fa:c9:12:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10771dd7dea22e35fdaf19b51b839f43721270ba Validity Not Before: Dec 6 05:00:46 2025 GMT Not After : Dec 7 05:00:46 2025 GMT Subject: CN=6eb88311c2c037d575c2f618c32b825ae2c918b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4d:e6:0b:ba:e1:d8:df:9c:11:c4:8c:9a:a0: b8:79:1f:3a:fe:7a:e4:2b:46:45:30:a6:8b:1e:52: d3:fd:9b:b7:80:38:1a:99:a2:2a:7c:e8:e5:c2:c5: f0:91:ad:62:45:45:26:f2:4b:08:df:90:07:07:fd: a2:28:d7:ba:f8:05:1f:51:19:a8:18:e8:15:82:fe: 20:70:69:07:47:83:0f:6d:8a:ce:91:f1:a8:a8:c5: ca:3e:96:3f:44:87:f2:ca:65:a1:b3:b7:d0:9a:f5: 9e:e9:e2:01:81:8d:e1:80:9d:08:58:e5:52:98:b3: 60:66:5c:c9:a9:f5:8a:06:14:96:5a:d4:8c:ee:b3: c9:7e:4e:9d:06:0d:53:b1:67:79:cc:c9:61:66:8b: ea:25:4d:99:5b:dd:e7:62:16:d0:85:bc:10:bb:e6: 07:14:c4:c0:25:91:dc:f8:f7:48:af:4d:fd:61:d3: 1f:cd:d6:8f:6d:c7:da:5c:08:4b:2c:b2:64:c2:73: 51:40:64:bb:a2:fb:66:a8:27:e8:85:76:14:88:eb: b7:1b:6f:19:ab:39:81:9b:52:60:fb:e1:e5:95:7a: c7:4f:d5:2b:18:df:f1:11:17:8b:51:5e:77:00:35: d2:f3:16:5b:d3:75:d3:8a:a1:ce:5c:e9:df:da:8b: a7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B8:83:11:C2:C0:37:D5:75:C2:F6:18:C3:2B:82:5A:E2:C9:18:B3 X509v3 Authority Key Identifier: keyid:10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:68:8c:2a:37:56:61:d8:3e:f0:c6:57:b6:60:e9:5d:24:42: fd:1e:3a:6a:ee:2d:9e:be:c7:d7:dc:0d:00:49:0a:4a:9f:dc: 56:d9:28:a7:2c:3a:76:79:ad:b8:b3:e4:77:29:29:55:87:a3: 98:03:ad:5b:20:1c:19:61:e1:65:82:e4:d3:db:f4:dc:c7:eb: 73:7c:f0:84:8e:4f:7e:0e:b5:e9:6f:fa:59:ba:5c:e2:a0:9b: 91:27:7a:8b:a3:d0:0c:35:e4:cb:16:01:fa:4d:30:ce:30:f2: 09:e4:d0:d1:e4:b8:be:a2:80:66:01:98:17:8a:f0:31:64:38: 81:31:78:d1:64:3d:d8:bf:42:7f:74:5c:68:16:b9:c3:c0:5c: 87:1b:dc:b7:19:64:d3:b8:a3:24:db:9e:bf:73:ee:a1:67:32: d2:13:42:63:d9:c8:4a:87:e4:b5:9d:fd:a2:7a:9a:ee:d1:29: 60:5b:3a:7a:02:6d:5d:16:d1:57:70:5d:fa:92:eb:e0:77:03: 3f:7b:2f:13:e2:01:78:6e:41:74:7a:67:2e:5c:9d:e6:66:de: 5e:e7:e6:13:65:31:5c:4f:f3:1f:0e:b7:b6:c1:dc:42:6d:24: 79:38:3d:72:d9:33:1a:f3:10:4b:06:d4:d4:90:c8:f7:e5:2b: 24:5b:44:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCK7gyLYB2AMXxOj6yRK0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNzcxZGQ3ZGVhMjJlMzVmZGFmMTliNTFiODM5ZjQzNzIx MjcwYmEwHhcNMjUxMjA2MDUwMDQ2WhcNMjUxMjA3MDUwMDQ2WjAzMTEwLwYDVQQD Eyg2ZWI4ODMxMWMyYzAzN2Q1NzVjMmY2MThjMzJiODI1YWUyYzkxOGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU3mC7rh2N+cEcSMmqC4eR86/nrk K0ZFMKaLHlLT/Zu3gDgamaIqfOjlwsXwka1iRUUm8ksI35AHB/2iKNe6+AUfURmo GOgVgv4gcGkHR4MPbYrOkfGoqMXKPpY/RIfyymWhs7fQmvWe6eIBgY3hgJ0IWOVS mLNgZlzJqfWKBhSWWtSM7rPJfk6dBg1TsWd5zMlhZovqJU2ZW93nYhbQhbwQu+YH FMTAJZHc+PdIr039YdMfzdaPbcfaXAhLLLJkwnNRQGS7ovtmqCfohXYUiOu3G28Z qzmBm1Jg++HllXrHT9UrGN/xEReLUV53ADXS8xZb03XTiqHOXOnf2ounCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG64gxHCwDfVdcL2GMMrglriyRizMB8GA1UdIwQY MBaAFBB3Hdfeoi41/a8ZtRuDn0NyEnC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUhjZDE5NmlMalg5cnhtMUc0T2ZRM0lTY0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy83NTE0OGEtZTQwZS00MDlmLThhMGIt ZGE4NTFhNzE1ZmE0LzEvRUhjZDE5NmlMalg5cnhtMUc0T2ZRM0lTY0xvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy83NTE0OGEtZTQwZS00MDlmLThhMGItZGE4NTFhNzE1ZmE0 LzEvRUhjZDE5NmlMalg5cnhtMUc0T2ZRM0lTY0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtGiMKjdW Ydg+8MZXtmDpXSRC/R46au4tnr7H19wNAEkKSp/cVtkopyw6dnmtuLPkdykpVYej mAOtWyAcGWHhZYLk09v03Mfrc3zwhI5Pfg616W/6Wbpc4qCbkSd6i6PQDDXkyxYB +k0wzjDyCeTQ0eS4vqKAZgGYF4rwMWQ4gTF40WQ92L9Cf3RcaBa5w8Bchxvctxlk 07ijJNuev3PuoWcy0hNCY9nISofktZ39onqa7tEpYFs6egJtXRbRV3Bd+pLr4HcD P3svE+IBeG5BdHpnLlyd5mbeXufmE2UxXE/zHw63tsHcQm0keTg9ctkzGvMQSwbU 1JDI9+UrJFtE/w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:37 2025 by rpki-client