This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft File: eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft (raw, json) Hash identifier: dTJ/36i6HjhDIdItJAZXyk+Y6zW0ffqGnW5UdSsmbig= Subject key identifier: AE:9F:AE:4C:5C:F4:23:9C:A2:E4:FB:73:CC:BC:A3:7D:AD:23:7A:3F Authority key identifier: 78:70:62:1F:C0:AF:C8:EC:18:EE:F2:06:33:F6:14:88:13:27:99:76 Certificate issuer: /CN=7870621fc0afc8ec18eef20633f6148813279976 Certificate serial: 019AF42DCAABF003BF0F1DBC248ACD8A6CB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft Manifest number: 0628 Signing time: Sat 06 Dec 2025 15:00:32 +0000 Manifest this update: Sat 06 Dec 2025 15:00:32 +0000 Manifest next update: Sun 07 Dec 2025 15:00:32 +0000 Files and hashes: 1: Mg8uBQPef3LyJjKgZxMt4YNcO_E.roa (hash: PmmY7x5LyJJDD6LlXlPdfzSLFcMHWHakThUWPxHgQkY=) 2: eHBiH8CvyOwY7vIGM_YUiBMnmXY.crl (hash: BIsB4oVSEhjAHtlpmvqvleAq4MUd6UKqJktTdtb1pgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft rsync://rpki.ripe.net/repository/DEFAULT/eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:ca:ab:f0:03:bf:0f:1d:bc:24:8a:cd:8a:6c:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7870621fc0afc8ec18eef20633f6148813279976 Validity Not Before: Dec 6 15:00:32 2025 GMT Not After : Dec 7 15:00:32 2025 GMT Subject: CN=ae9fae4c5cf4239ca2e4fb73ccbca37dad237a3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1b:de:bd:46:7a:4e:24:3d:10:02:0b:de:bb: 6a:26:4b:f2:f7:17:25:ab:cf:f9:07:88:2f:cd:ac: 98:db:b7:3a:da:ce:f3:ea:3b:cc:3f:de:ca:35:e4: 88:df:23:3e:78:b8:6c:b5:21:50:73:fc:a2:c7:33: db:75:47:cb:45:1c:e9:16:ee:28:df:d4:0a:88:05: d6:53:dc:ab:61:f5:f6:b5:21:2d:aa:5c:3a:b1:ad: b2:aa:ab:3c:98:ce:f0:b5:77:0a:16:3b:e8:dc:95: be:83:b2:54:e8:9f:68:d5:7b:aa:6d:0c:22:8c:f3: a2:d9:e8:63:c4:59:32:f5:ec:8d:33:62:b9:ef:cf: 62:4a:ee:2e:5c:62:37:d5:f3:e3:c4:df:0d:9d:01: 2b:d7:b3:85:b0:53:28:7a:68:45:d4:2f:e0:d1:45: 2d:60:53:dc:eb:0e:b7:9f:86:f7:fc:6f:6e:21:cf: 6d:46:e0:24:32:c4:45:8d:37:bb:00:30:72:ec:eb: 30:45:5e:b4:11:c5:18:94:fe:f3:08:f8:c2:40:6b: 48:a9:a1:1e:89:f8:9e:dd:97:1b:65:01:3b:75:08: 4d:eb:e3:38:cc:25:03:3d:18:27:f6:ab:23:01:de: e3:35:01:d5:10:4c:d6:93:92:00:93:07:34:dd:a5: 99:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:9F:AE:4C:5C:F4:23:9C:A2:E4:FB:73:CC:BC:A3:7D:AD:23:7A:3F X509v3 Authority Key Identifier: keyid:78:70:62:1F:C0:AF:C8:EC:18:EE:F2:06:33:F6:14:88:13:27:99:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:d5:1b:ce:48:34:e7:9e:fb:cb:b6:a4:22:f1:04:b3:bd:3b: 56:9e:06:c4:7e:46:f9:cd:0e:71:d3:d2:29:97:94:0f:95:f9: f0:fb:0e:86:8a:f8:af:05:72:a5:e3:7c:29:75:a1:38:c2:40: 8e:f7:42:aa:80:ab:3b:94:d7:42:fc:05:46:e4:a3:e1:d0:73: 46:bb:18:2f:78:c4:72:08:56:6e:fb:a7:b6:c8:99:d0:90:43: 45:7f:65:f7:b0:6b:f5:ff:7a:09:6d:34:ea:f7:0c:a9:0b:a1: 49:a4:ff:53:34:c4:53:0a:f8:a8:44:02:6f:01:4a:e4:e8:c6: 2f:a6:fe:43:44:8e:25:8e:94:69:e6:ba:11:4f:55:e7:06:a4: 07:09:e6:25:d9:93:f7:ed:cc:67:28:30:e8:52:e2:b0:49:ff: 67:bc:76:7f:aa:65:2f:32:13:64:d7:b7:81:46:6f:a5:eb:e6: 39:31:08:86:ea:6e:13:10:13:f9:b8:6b:87:24:d2:7d:f0:cd: 45:5c:64:ae:ad:eb:35:af:72:8e:76:ac:b6:d9:96:2e:67:9b: 75:67:bf:ae:ea:e2:1f:c1:8e:51:de:6d:ba:01:5e:12:bd:9d: ce:ff:b4:a8:a0:f3:ca:36:dd:13:22:3b:cf:06:9b:f6:7b:00: 83:a5:9b:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lcqr8AO/Dx28JIrNimy3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4NzA2MjFmYzBhZmM4ZWMxOGVlZjIwNjMzZjYxNDg4MTMy Nzk5NzYwHhcNMjUxMjA2MTUwMDMyWhcNMjUxMjA3MTUwMDMyWjAzMTEwLwYDVQQD EyhhZTlmYWU0YzVjZjQyMzljYTJlNGZiNzNjY2JjYTM3ZGFkMjM3YTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xvevUZ6TiQ9EAIL3rtqJkvy9xcl q8/5B4gvzayY27c62s7z6jvMP97KNeSI3yM+eLhstSFQc/yixzPbdUfLRRzpFu4o 39QKiAXWU9yrYfX2tSEtqlw6sa2yqqs8mM7wtXcKFjvo3JW+g7JU6J9o1XuqbQwi jPOi2ehjxFky9eyNM2K5789iSu4uXGI31fPjxN8NnQEr17OFsFMoemhF1C/g0UUt YFPc6w63n4b3/G9uIc9tRuAkMsRFjTe7ADBy7OswRV60EcUYlP7zCPjCQGtIqaEe ifie3ZcbZQE7dQhN6+M4zCUDPRgn9qsjAd7jNQHVEEzWk5IAkwc03aWZIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6frkxc9COcouT7c8y8o32tI3o/MB8GA1UdIwQY MBaAFHhwYh/Ar8jsGO7yBjP2FIgTJ5l2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUhCaUg4Q3Z5T3dZN3ZJR01fWVVpQk1ubVhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi84YjRlODQtYmVjZC00ZWNmLWJlYjUt OTZhNzlhMWQxYmIzLzEvZUhCaUg4Q3Z5T3dZN3ZJR01fWVVpQk1ubVhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi84YjRlODQtYmVjZC00ZWNmLWJlYjUtOTZhNzlhMWQxYmIz LzEvZUhCaUg4Q3Z5T3dZN3ZJR01fWVVpQk1ubVhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA9Ubzkg0 5577y7akIvEEs707Vp4GxH5G+c0OcdPSKZeUD5X58PsOhor4rwVypeN8KXWhOMJA jvdCqoCrO5TXQvwFRuSj4dBzRrsYL3jEcghWbvuntsiZ0JBDRX9l97Br9f96CW00 6vcMqQuhSaT/UzTEUwr4qEQCbwFK5OjGL6b+Q0SOJY6Uaea6EU9V5wakBwnmJdmT 9+3MZygw6FLisEn/Z7x2f6plLzITZNe3gUZvpevmOTEIhupuExAT+bhrhyTSffDN RVxkrq3rNa9yjnasttmWLmebdWe/ruriH8GOUd5tugFeEr2dzv+0qKDzyjbdEyI7 zwab9nsAg6WbPA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:06:26 2025 by rpki-client