This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft File: EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft (raw, json) Hash identifier: Mdb0wW6HBDpraBjPi8Mau6RfK8IBEMUJukxvU/LO55s= Subject key identifier: 21:93:3B:81:AA:66:B4:4B:DC:55:B8:62:44:83:03:2D:F6:CF:EC:0D Authority key identifier: 12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64 Certificate issuer: /CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64 Certificate serial: 019AF1D1D8F6BAF42CB9E8C0F7C02739D064 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft Manifest number: 0862 Signing time: Sat 06 Dec 2025 04:00:52 +0000 Manifest this update: Sat 06 Dec 2025 04:00:52 +0000 Manifest next update: Sun 07 Dec 2025 04:00:52 +0000 Files and hashes: 1: EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl (hash: Q5aXuy96cn0pcxsYk6+R7m0td4a9FbtkIdrv09eQX/g=) 2: QB_3GAwgUBDF8MSXTq2uaHbFbVk.roa (hash: kWfvWxwAjwjbMAzYwS2Vj1dVqlEfvEJvCE+9y9lLF0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:d8:f6:ba:f4:2c:b9:e8:c0:f7:c0:27:39:d0:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64 Validity Not Before: Dec 6 04:00:52 2025 GMT Not After : Dec 7 04:00:52 2025 GMT Subject: CN=21933b81aa66b44bdc55b8624483032df6cfec0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:22:a0:2a:73:68:45:71:77:15:17:e9:5a:b1: 76:8b:46:d2:54:e2:df:82:a8:b0:49:87:a0:79:1b: ff:a7:21:a9:12:91:3d:11:45:8d:04:53:ed:b1:ca: 83:e5:dc:c3:51:e5:00:56:6a:ab:04:01:57:25:e2: da:d3:93:92:ca:91:1d:08:5e:c5:14:de:57:49:7a: 81:cb:93:c7:5f:d2:8f:23:07:65:b1:38:0d:d2:0f: 4c:6d:c1:55:c5:06:57:b7:52:63:a9:0a:d0:d1:e8: ff:a9:32:7c:7f:71:66:b4:69:ca:2c:a8:57:ba:2b: 1a:dd:39:22:33:15:b8:78:0c:d3:f3:2e:fb:7d:91: f5:17:7b:9b:4e:37:54:ce:c4:79:ba:b9:04:99:76: fd:6b:58:44:03:91:dd:72:ba:a1:0e:bd:ca:e5:31: ad:8c:83:9b:a9:fb:f1:5b:3e:c3:d2:b9:84:5c:07: 5d:d9:38:e4:f0:73:a6:d1:7a:77:2d:d9:3b:ea:ca: 8b:d9:bc:b3:1e:dc:91:99:a7:8f:ce:5d:e0:06:5a: a9:2a:6e:f7:d6:9e:20:d1:70:27:2e:de:17:e9:f8: 0b:82:d2:36:ac:98:f0:9f:96:64:53:10:1e:ee:15: e4:41:44:ba:e6:53:ee:0f:c2:c3:e1:7a:b6:f7:ed: 62:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:93:3B:81:AA:66:B4:4B:DC:55:B8:62:44:83:03:2D:F6:CF:EC:0D X509v3 Authority Key Identifier: keyid:12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:d3:bb:d7:ec:fb:0b:a2:83:9c:64:b6:c0:9c:11:46:aa:37: eb:6b:b5:df:ba:63:73:50:82:a5:08:0d:64:ce:40:13:df:54: 26:65:2c:f5:31:d6:03:70:5a:ac:d1:d3:37:3d:35:90:21:d9: 9d:5e:fa:e4:07:d2:c4:ef:ec:e8:aa:60:d3:0f:83:db:a2:48: c6:9f:a7:7b:c2:d2:b7:22:0c:f4:7f:f9:0d:d2:60:f2:f5:e5: c0:56:5c:c5:7d:98:a1:a3:81:4b:4f:c8:ac:e6:fb:53:73:91: b0:f9:01:f9:f2:b2:f0:62:ac:80:36:ba:05:68:93:c8:9b:3e: c0:13:e3:e0:eb:f0:e1:c9:c6:b1:6c:32:50:42:f5:be:12:02: c7:87:b7:b7:b2:2b:c6:f0:99:89:26:d5:54:17:a8:1b:9c:4e: d0:a1:5f:af:f1:d8:28:fc:1c:92:71:4b:c7:88:fb:b6:b8:67: b4:fe:92:d8:5d:db:a5:e5:b8:3d:d0:b5:39:f4:9d:31:1f:e2: 11:76:eb:62:ea:e4:2a:83:f2:ba:70:ca:ff:86:74:cf:b7:4e: a7:a8:0c:52:fa:05:15:af:01:74:e9:50:ed:f8:7b:b2:2a:7a: 73:3e:cf:3d:5d:c4:f8:f9:1b:11:8b:58:bf:f2:c0:64:8e:21: 88:32:3d:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dj2uvQsuejA98AnOdBkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMTMzYTY1MjNlMmVkMGEwYzlhMzZlYThhN2M2ZjBlNzJh NWRkNjQwHhcNMjUxMjA2MDQwMDUyWhcNMjUxMjA3MDQwMDUyWjAzMTEwLwYDVQQD EygyMTkzM2I4MWFhNjZiNDRiZGM1NWI4NjI0NDgzMDMyZGY2Y2ZlYzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSKgKnNoRXF3FRfpWrF2i0bSVOLf gqiwSYegeRv/pyGpEpE9EUWNBFPtscqD5dzDUeUAVmqrBAFXJeLa05OSypEdCF7F FN5XSXqBy5PHX9KPIwdlsTgN0g9MbcFVxQZXt1JjqQrQ0ej/qTJ8f3FmtGnKLKhX uisa3TkiMxW4eAzT8y77fZH1F3ubTjdUzsR5urkEmXb9a1hEA5HdcrqhDr3K5TGt jIObqfvxWz7D0rmEXAdd2Tjk8HOm0Xp3Ldk76sqL2byzHtyRmaePzl3gBlqpKm73 1p4g0XAnLt4X6fgLgtI2rJjwn5ZkUxAe7hXkQUS65lPuD8LD4Xq29+1ijQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCGTO4GqZrRL3FW4YkSDAy32z+wNMB8GA1UdIwQY MBaAFBITOmUj4u0KDJo26op8bw5ypd1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWhNNlpTUGk3UW9NbWpicWlueHZEbktsM1dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85MzRlYzMtYjc2YS00MGQwLThhM2Et ODI0NzI5YWI0YjlhLzEvRWhNNlpTUGk3UW9NbWpicWlueHZEbktsM1dRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC85MzRlYzMtYjc2YS00MGQwLThhM2EtODI0NzI5YWI0Yjlh LzEvRWhNNlpTUGk3UW9NbWpicWlueHZEbktsM1dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPtO71+z7 C6KDnGS2wJwRRqo362u137pjc1CCpQgNZM5AE99UJmUs9THWA3BarNHTNz01kCHZ nV765AfSxO/s6Kpg0w+D26JIxp+ne8LStyIM9H/5DdJg8vXlwFZcxX2YoaOBS0/I rOb7U3ORsPkB+fKy8GKsgDa6BWiTyJs+wBPj4Ovw4cnGsWwyUEL1vhICx4e3t7Ir xvCZiSbVVBeoG5xO0KFfr/HYKPwcknFLx4j7trhntP6S2F3bpeW4PdC1OfSdMR/i EXbrYurkKoPyunDK/4Z0z7dOp6gMUvoFFa8BdOlQ7fh7sip6cz7PPV3E+PkbEYtY v/LAZI4hiDI9cQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:15:05 2025 by rpki-client