This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft File: EHMSpQFqPNzAt-Ydx59V09Xss34.mft (raw, json) Hash identifier: zHzWzGiQUkjftqOJfGy7qQ1Mo1xWJ/hQSc9+S3oaAh8= Subject key identifier: 82:67:0A:A2:AD:1C:FC:3B:93:B6:81:60:B1:8B:2E:FC:7A:A3:F9:A8 Authority key identifier: 10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E Certificate issuer: /CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e Certificate serial: 019AF12E38CF8970C2B64DE9BA0BDE1DDF86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft Manifest number: 146A Signing time: Sat 06 Dec 2025 01:02:09 +0000 Manifest this update: Sat 06 Dec 2025 01:02:09 +0000 Manifest next update: Sun 07 Dec 2025 01:02:09 +0000 Files and hashes: 1: 1-mZSuN8jPSBbxpJ0doddwA6wFPs.roa (hash: Sk05O6P4hwRcAJcaUWnZwocsNzWFPwC5OreYAuAopME=) 2: EHMSpQFqPNzAt-Ydx59V09Xss34.crl (hash: VMP2wqJAgRGhnmmLqEZrsA6GFotzt02jwfsWopZfL8I=) 3: OSWE1sIIbzFSVSZXWSe38hTA_Qg.roa (hash: wDvkUp5iZcHAQjx5TJixiXfTzob9BfdiEP7CxXAI0TQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:38:cf:89:70:c2:b6:4d:e9:ba:0b:de:1d:df:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e Validity Not Before: Dec 6 01:02:09 2025 GMT Not After : Dec 7 01:02:09 2025 GMT Subject: CN=82670aa2ad1cfc3b93b68160b18b2efc7aa3f9a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1a:ea:e6:1e:9f:cd:c6:98:ae:a6:e3:c9:ec: 03:40:04:f0:b6:7d:98:c2:d8:5e:e9:4e:de:26:51: 60:3a:22:71:b0:1d:74:26:84:fb:f3:a1:52:5b:c9: ec:c9:c7:e9:14:d1:e8:44:23:9f:fb:9e:e4:57:57: 01:70:80:fe:41:88:e1:11:dd:cd:b3:15:f6:3a:7f: 1c:00:33:00:20:5c:77:eb:b2:5e:d0:20:3a:5b:15: 43:64:06:3d:87:52:7a:85:13:50:6c:f1:73:a7:92: 3c:82:c4:44:fd:7c:7e:c0:28:e0:5d:57:bc:2b:d4: 05:8c:70:fa:a6:8d:7c:2c:93:f1:32:cc:be:bf:53: 5e:c1:30:34:ae:ae:84:4b:82:e6:76:f1:84:a9:bb: 14:d6:65:de:1c:11:6b:b5:f2:f4:bf:cd:cb:be:0d: 6d:e6:cf:3d:5c:95:01:93:e7:80:b3:da:9c:2f:57: 22:97:db:19:d2:e1:42:f0:99:ff:e6:34:cf:4f:71: e4:04:02:a2:eb:26:3d:af:a0:42:0f:c5:32:71:1c: c3:47:c3:ca:c8:c0:39:a0:8c:ce:c1:fa:66:a7:4b: 09:18:ee:f3:67:92:49:5a:e6:8e:da:5c:06:66:fa: 80:f3:1a:91:bc:3c:5f:38:ad:11:4e:52:dc:8e:e3: e4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:67:0A:A2:AD:1C:FC:3B:93:B6:81:60:B1:8B:2E:FC:7A:A3:F9:A8 X509v3 Authority Key Identifier: keyid:10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:d0:f8:f9:d0:f8:50:16:32:54:e8:45:04:0f:e5:f2:4f:0f: d4:22:4e:3d:be:57:eb:98:ce:0f:92:a2:36:14:3a:a2:e3:f1: 79:76:e4:d9:af:c7:33:ae:47:a5:91:11:02:2a:02:08:ac:15: 49:22:2e:91:1f:9b:f8:9b:ca:b0:28:c5:9d:a6:fe:13:85:ac: 20:d2:d0:4a:68:eb:ba:df:8f:5b:39:0f:26:f6:73:1a:1a:9f: e7:83:78:ec:39:7b:3b:26:9a:c9:47:a8:5f:48:dc:1c:53:e8: 0b:40:e5:6b:2d:b3:37:ea:66:e8:e3:b5:90:89:fa:a5:e5:8c: 76:a7:2f:03:6d:4e:a6:26:e3:ca:78:33:e4:ad:e6:49:f8:83: 25:73:cc:53:29:10:0f:5b:ba:3c:67:63:31:dc:5e:50:8d:86: ff:6e:f3:f3:05:0a:86:79:0f:ae:85:c6:73:85:12:ab:53:b0: 7a:45:a1:53:9a:fa:7e:d5:99:3b:a9:91:f1:9a:b3:48:d4:0a: 57:ca:c2:a5:03:0b:c5:6c:f9:61:1c:b0:d1:68:ec:08:6b:fa: 35:fe:30:ca:90:eb:ac:90:56:a1:32:3b:3d:c7:ef:f0:c7:33: de:5e:6a:80:ac:e7:6a:08:a6:24:0e:b0:2f:f6:fa:0d:c0:6f: 31:92:40:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLjjPiXDCtk3pugveHd+GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNzMxMmE1MDE2YTNjZGNjMGI3ZTYxZGM3OWY1NWQzZDVl Y2IzN2UwHhcNMjUxMjA2MDEwMjA5WhcNMjUxMjA3MDEwMjA5WjAzMTEwLwYDVQQD Eyg4MjY3MGFhMmFkMWNmYzNiOTNiNjgxNjBiMThiMmVmYzdhYTNmOWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRrq5h6fzcaYrqbjyewDQATwtn2Y wthe6U7eJlFgOiJxsB10JoT786FSW8nsycfpFNHoRCOf+57kV1cBcID+QYjhEd3N sxX2On8cADMAIFx367Je0CA6WxVDZAY9h1J6hRNQbPFzp5I8gsRE/Xx+wCjgXVe8 K9QFjHD6po18LJPxMsy+v1NewTA0rq6ES4LmdvGEqbsU1mXeHBFrtfL0v83Lvg1t 5s89XJUBk+eAs9qcL1cil9sZ0uFC8Jn/5jTPT3HkBAKi6yY9r6BCD8UycRzDR8PK yMA5oIzOwfpmp0sJGO7zZ5JJWuaO2lwGZvqA8xqRvDxfOK0RTlLcjuPkLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIJnCqKtHPw7k7aBYLGLLvx6o/moMB8GA1UdIwQY MBaAFBBzEqUBajzcwLfmHcefVdPV7LN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUhNU3BRRnFQTnpBdC1ZZHg1OVYwOVhzczM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC85OWY1YzMtNmI3NS00OGJjLWE4YWEt M2ZkYmE5NzY5MzAyLzEvRUhNU3BRRnFQTnpBdC1ZZHg1OVYwOVhzczM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC85OWY1YzMtNmI3NS00OGJjLWE4YWEtM2ZkYmE5NzY5MzAy LzEvRUhNU3BRRnFQTnpBdC1ZZHg1OVYwOVhzczM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAodD4+dD4 UBYyVOhFBA/l8k8P1CJOPb5X65jOD5KiNhQ6ouPxeXbk2a/HM65HpZERAioCCKwV SSIukR+b+JvKsCjFnab+E4WsINLQSmjrut+PWzkPJvZzGhqf54N47Dl7OyaayUeo X0jcHFPoC0Dlay2zN+pm6OO1kIn6peWMdqcvA21Opibjyngz5K3mSfiDJXPMUykQ D1u6PGdjMdxeUI2G/27z8wUKhnkProXGc4USq1OwekWhU5r6ftWZO6mR8ZqzSNQK V8rCpQMLxWz5YRyw0WjsCGv6Nf4wypDrrJBWoTI7Pcfv8Mcz3l5qgKznagimJA6w L/b6DcBvMZJAOw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:15 2025 by rpki-client