This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft File: EH99C2TJjJno0IaDUFJk1rCL_YY.mft (raw, json) Hash identifier: AgoqLNwSWLRppS28KDKXgo8Ae2EF8N4dBE7H5OgVhZI= Subject key identifier: C1:5C:11:6F:94:F7:3E:9D:2B:B7:60:2D:7B:83:30:C2:DA:8B:2F:72 Authority key identifier: 10:7F:7D:0B:64:C9:8C:99:E8:D0:86:83:50:52:64:D6:B0:8B:FD:86 Certificate issuer: /CN=107f7d0b64c98c99e8d08683505264d6b08bfd86 Certificate serial: 019AF12EC910C1D3096FD1CD4A7C969D6908 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EH99C2TJjJno0IaDUFJk1rCL_YY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 01:02:46 +0000 Manifest this update: Sat 06 Dec 2025 01:02:46 +0000 Manifest next update: Sun 07 Dec 2025 01:02:46 +0000 Files and hashes: 1: EH99C2TJjJno0IaDUFJk1rCL_YY.crl (hash: rbukUD7jNhuQ8AC57oYW9Vbs5sJDb2lLlUqbEdCHKKs=) 2: vrwlMuSLqv4pWbmq0q24Ljisqq4.roa (hash: ownIF7p9fjg22RoqGmSsCCI+6MRT6EIXQBD8zcqpPug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.crl rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft rsync://rpki.ripe.net/repository/DEFAULT/EH99C2TJjJno0IaDUFJk1rCL_YY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:c9:10:c1:d3:09:6f:d1:cd:4a:7c:96:9d:69:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=107f7d0b64c98c99e8d08683505264d6b08bfd86 Validity Not Before: Dec 6 01:02:46 2025 GMT Not After : Dec 7 01:02:46 2025 GMT Subject: CN=c15c116f94f73e9d2bb7602d7b8330c2da8b2f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c8:16:b1:29:a3:d9:a4:08:4d:49:bf:c8:b4: 14:9c:bd:dd:72:5a:57:06:05:8a:ae:8d:1d:7b:7b: 97:c0:b8:28:1f:33:b1:d7:36:e9:d3:56:83:ef:85: f1:7d:a0:ea:9a:d9:36:fe:fa:30:02:e9:5e:05:a6: 09:82:9a:2a:48:b6:33:d7:a5:4d:9d:ef:fa:72:f0: 58:2e:e6:82:4c:49:ff:92:b7:fc:ff:23:b3:31:25: e6:5a:6c:1a:5e:5e:40:ae:77:ec:2a:5f:77:83:c2: 39:1d:26:5b:39:3c:77:93:e5:86:d9:0b:ae:c5:83: a4:63:f5:c6:84:99:2a:b1:8d:99:08:5d:a8:2b:88: f1:92:c9:c3:8a:40:19:a5:cb:8a:22:c3:d7:22:3e: 7e:68:18:ce:ae:dc:fe:6b:7a:42:8c:b0:d2:c9:51: 13:ed:6e:79:4a:80:a6:8b:f5:99:60:d2:ad:18:9f: 6f:fb:dd:94:85:18:f1:91:fc:b2:91:e3:cd:b6:13: 5f:f0:04:48:cf:47:2f:da:89:8f:1c:22:35:31:0c: 7b:2f:f9:94:19:22:c9:3f:9a:79:5c:b9:2f:e2:27: a0:0b:94:10:a1:45:5d:fb:c8:d1:11:ad:93:a6:20: f9:06:7c:77:b3:1c:40:b3:22:c2:36:a7:8d:48:d8: d7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:5C:11:6F:94:F7:3E:9D:2B:B7:60:2D:7B:83:30:C2:DA:8B:2F:72 X509v3 Authority Key Identifier: keyid:10:7F:7D:0B:64:C9:8C:99:E8:D0:86:83:50:52:64:D6:B0:8B:FD:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EH99C2TJjJno0IaDUFJk1rCL_YY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:f2:c0:2b:3e:28:4c:0c:61:4b:bc:1f:85:d4:3c:4b:ae:99: c7:28:0f:be:05:dc:37:5f:5b:a8:42:f5:2c:16:aa:e1:c9:85: 59:2b:ca:ee:38:33:7e:57:15:c3:bc:39:be:47:c7:4c:55:70: 80:44:1a:d1:35:41:ee:74:50:e5:28:2e:f9:45:00:dd:91:42: 18:8f:30:25:9c:f9:35:b1:0b:13:4b:6b:b9:e9:01:86:b5:b6: 3f:d3:96:c9:79:ef:4e:7c:8f:f9:4d:92:e0:36:d0:aa:39:22: 6e:12:ba:8c:69:76:84:94:31:80:88:f2:85:2a:8b:ce:2b:63: 3f:49:d7:8f:1f:50:31:66:15:41:e2:04:71:ff:77:79:5c:74: 43:92:aa:a8:7f:4e:ae:71:6e:db:65:9a:18:1e:08:15:f6:6c: 70:6c:ee:10:aa:0a:24:77:89:67:5d:ed:ef:b7:d4:be:ec:35: e7:14:29:15:c8:81:dd:a7:c5:60:cc:dd:42:70:60:a0:3d:89: b1:85:8a:e6:20:d4:f6:25:04:03:c0:c1:d2:89:9c:59:44:a4: 36:2e:5c:18:9f:38:a0:0e:3d:27:6f:e4:33:7b:e1:6e:8b:31: 0c:de:8f:45:a2:e5:49:03:06:77:e5:ba:66:c4:1e:63:55:ce: 1a:05:39:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLskQwdMJb9HNSnyWnWkIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwN2Y3ZDBiNjRjOThjOTllOGQwODY4MzUwNTI2NGQ2YjA4 YmZkODYwHhcNMjUxMjA2MDEwMjQ2WhcNMjUxMjA3MDEwMjQ2WjAzMTEwLwYDVQQD EyhjMTVjMTE2Zjk0ZjczZTlkMmJiNzYwMmQ3YjgzMzBjMmRhOGIyZjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucgWsSmj2aQITUm/yLQUnL3dclpX BgWKro0de3uXwLgoHzOx1zbp01aD74XxfaDqmtk2/vowAuleBaYJgpoqSLYz16VN ne/6cvBYLuaCTEn/krf8/yOzMSXmWmwaXl5ArnfsKl93g8I5HSZbOTx3k+WG2Quu xYOkY/XGhJkqsY2ZCF2oK4jxksnDikAZpcuKIsPXIj5+aBjOrtz+a3pCjLDSyVET 7W55SoCmi/WZYNKtGJ9v+92UhRjxkfyykePNthNf8ARIz0cv2omPHCI1MQx7L/mU GSLJP5p5XLkv4iegC5QQoUVd+8jREa2TpiD5Bnx3sxxAsyLCNqeNSNjXhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMFcEW+U9z6dK7dgLXuDMMLaiy9yMB8GA1UdIwQY MBaAFBB/fQtkyYyZ6NCGg1BSZNawi/2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUg5OUMyVEpqSm5vMElhRFVGSmsxckNMX1lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8zODYxODUtNWFjYy00ZmUxLTk3ODQt NmI0YWZhNDA2NzhkLzEvRUg5OUMyVEpqSm5vMElhRFVGSmsxckNMX1lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8zODYxODUtNWFjYy00ZmUxLTk3ODQtNmI0YWZhNDA2Nzhk LzEvRUg5OUMyVEpqSm5vMElhRFVGSmsxckNMX1lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/LAKz4o TAxhS7wfhdQ8S66ZxygPvgXcN19bqEL1LBaq4cmFWSvK7jgzflcVw7w5vkfHTFVw gEQa0TVB7nRQ5Sgu+UUA3ZFCGI8wJZz5NbELE0truekBhrW2P9OWyXnvTnyP+U2S 4DbQqjkibhK6jGl2hJQxgIjyhSqLzitjP0nXjx9QMWYVQeIEcf93eVx0Q5KqqH9O rnFu22WaGB4IFfZscGzuEKoKJHeJZ13t77fUvuw15xQpFciB3afFYMzdQnBgoD2J sYWK5iDU9iUEA8DB0omcWUSkNi5cGJ84oA49J2/kM3vhbosxDN6PRaLlSQMGd+W6 ZsQeY1XOGgU5+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:14 2025 by rpki-client