This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft File: EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft (raw, json) Hash identifier: 1nhunDVPRkWA6tXayeaHAH3neKvlgYNsX7IlQwgZmKY= Subject key identifier: 79:F9:25:1D:FA:83:55:2B:DA:08:63:49:9E:BA:F7:09:75:B0:80:AE Authority key identifier: 10:76:8D:39:F9:32:79:10:07:A0:97:20:9B:09:83:FE:85:56:0C:B8 Certificate issuer: /CN=10768d39f932791007a097209b0983fe85560cb8 Certificate serial: 019AF19AC6CFB6D5A766DACA7D99B993D988 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 03:00:43 +0000 Manifest this update: Sat 06 Dec 2025 03:00:43 +0000 Manifest next update: Sun 07 Dec 2025 03:00:43 +0000 Files and hashes: 1: EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl (hash: ZBMi0IS3ykkiG/dPCEfvzzHJnQjts5Hhw4hQXJYZx0M=) 2: Nvbyv1PpytUaMC6H5xpJ11kc-dg.roa (hash: SbERHfQI9Tu/9a/EQjXNeCBB9RcFRF7Qffhnwr+U0O8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:c6:cf:b6:d5:a7:66:da:ca:7d:99:b9:93:d9:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10768d39f932791007a097209b0983fe85560cb8 Validity Not Before: Dec 6 03:00:43 2025 GMT Not After : Dec 7 03:00:43 2025 GMT Subject: CN=79f9251dfa83552bda0863499ebaf70975b080ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0e:cf:73:ab:1e:8f:4b:81:97:cc:27:d3:46: 53:73:b7:33:c1:57:7c:43:2f:19:e4:e2:00:c2:3b: 22:85:d0:a7:3b:7a:e4:82:73:9b:f1:b4:fd:62:57: a5:90:ed:15:57:b9:af:ba:5b:7b:8c:9e:83:c2:87: eb:3c:d4:25:89:45:3e:95:66:18:0d:04:1e:c9:a8: 1b:71:37:cd:06:a0:3b:1a:78:6c:d9:14:68:06:f7: 4a:97:d2:a4:a4:79:f4:40:1d:05:f2:ae:10:30:a8: d2:84:ae:03:7a:0c:a0:26:5f:7d:07:eb:0a:81:1f: b0:c3:5e:9f:51:68:cd:5c:bc:ee:30:64:78:2a:f9: 2d:00:77:e6:85:03:b1:35:8a:4e:7a:ee:5d:5d:62: c1:98:3b:ae:16:79:8d:62:57:17:95:17:e5:74:ab: 75:a6:77:48:04:d3:81:73:ee:03:54:75:3e:36:c2: 4d:f3:53:63:00:70:a0:09:e6:f4:18:c0:97:0f:77: 37:c4:24:88:d4:c8:4a:cd:e7:0d:15:2e:80:1d:0d: dd:54:e2:fd:c2:4e:a9:a4:99:47:9f:fb:65:7d:4a: 3a:b6:93:08:7f:c5:e2:2b:73:1b:2a:21:5a:81:64: 63:a5:3d:16:4c:8b:4d:81:fa:d7:4f:57:54:7f:b9: 66:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:F9:25:1D:FA:83:55:2B:DA:08:63:49:9E:BA:F7:09:75:B0:80:AE X509v3 Authority Key Identifier: keyid:10:76:8D:39:F9:32:79:10:07:A0:97:20:9B:09:83:FE:85:56:0C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:eb:36:e4:10:71:ad:d7:b1:7f:76:46:d5:7b:19:34:3f:45: 6b:56:64:d3:fe:dc:cf:3c:6a:ea:55:29:c0:12:d8:38:09:58: e0:24:68:f1:1a:1c:45:08:b5:d1:04:a0:cc:2a:2d:48:35:b5: 6f:ab:fa:2d:cb:db:4e:64:de:7d:d7:ec:5e:ab:0e:a8:e1:93: 01:12:b8:e8:9b:9f:af:73:db:49:65:65:77:49:a2:e9:24:13: 5f:96:d4:a9:46:09:93:4c:56:e0:3a:35:a7:aa:0b:29:ee:39: c2:60:5d:9c:c6:3f:38:08:bc:99:d9:bc:3e:60:28:f0:d4:e0: 86:5e:5a:e8:cc:2e:e2:79:65:11:62:ee:c3:d4:7f:f4:74:b0: b9:7d:10:3a:6d:72:c1:0c:a7:22:43:b9:ca:ea:c6:11:86:03: c2:2e:5b:68:64:9e:6b:e2:2a:1c:65:3c:4b:c1:65:2b:64:76: 0f:12:78:ad:d2:71:36:ca:57:89:d8:78:5d:38:75:c2:23:b9: 22:e6:a4:20:0d:4e:80:ec:81:df:5a:29:36:65:83:d9:0e:f4: ff:e3:74:38:da:24:23:24:51:cf:91:0f:08:6d:97:e1:1c:8f: 91:25:fc:b7:ad:95:71:82:b6:2c:60:79:f5:b4:47:23:9a:7f: de:dc:98:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmsbPttWnZtrKfZm5k9mIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNzY4ZDM5ZjkzMjc5MTAwN2EwOTcyMDliMDk4M2ZlODU1 NjBjYjgwHhcNMjUxMjA2MDMwMDQzWhcNMjUxMjA3MDMwMDQzWjAzMTEwLwYDVQQD Eyg3OWY5MjUxZGZhODM1NTJiZGEwODYzNDk5ZWJhZjcwOTc1YjA4MGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlw7Pc6sej0uBl8wn00ZTc7czwVd8 Qy8Z5OIAwjsihdCnO3rkgnOb8bT9YlelkO0VV7mvult7jJ6DwofrPNQliUU+lWYY DQQeyagbcTfNBqA7Gnhs2RRoBvdKl9KkpHn0QB0F8q4QMKjShK4DegygJl99B+sK gR+ww16fUWjNXLzuMGR4KvktAHfmhQOxNYpOeu5dXWLBmDuuFnmNYlcXlRfldKt1 pndIBNOBc+4DVHU+NsJN81NjAHCgCeb0GMCXD3c3xCSI1MhKzecNFS6AHQ3dVOL9 wk6ppJlHn/tlfUo6tpMIf8XiK3MbKiFagWRjpT0WTItNgfrXT1dUf7lmZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHn5JR36g1Ur2ghjSZ669wl1sICuMB8GA1UdIwQY MBaAFBB2jTn5MnkQB6CXIJsJg/6FVgy4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUhhTk9ma3llUkFIb0pjZ213bURfb1ZXRExnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy85M2MxN2UtODQ5MC00ZTkxLTk4MTUt NzJjMzNkYWYzMTU2LzEvRUhhTk9ma3llUkFIb0pjZ213bURfb1ZXRExnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy85M2MxN2UtODQ5MC00ZTkxLTk4MTUtNzJjMzNkYWYzMTU2 LzEvRUhhTk9ma3llUkFIb0pjZ213bURfb1ZXRExnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaes25BBx rdexf3ZG1XsZND9Fa1Zk0/7czzxq6lUpwBLYOAlY4CRo8RocRQi10QSgzCotSDW1 b6v6LcvbTmTefdfsXqsOqOGTARK46Jufr3PbSWVld0mi6SQTX5bUqUYJk0xW4Do1 p6oLKe45wmBdnMY/OAi8mdm8PmAo8NTghl5a6Mwu4nllEWLuw9R/9HSwuX0QOm1y wQynIkO5yurGEYYDwi5baGSea+IqHGU8S8FlK2R2DxJ4rdJxNspXidh4XTh1wiO5 IuakIA1OgOyB31opNmWD2Q70/+N0ONokIyRRz5EPCG2X4RyPkSX8t62VcYK2LGB5 9bRHI5p/3tyYQQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:43:59 2025 by rpki-client