This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft File: EharzETJqVVAzfWx3FQux9Ef4Ho.mft (raw, json) Hash identifier: Uo1t6mzNTOhcmST092wfut1f7pAkJAl2HkHuMAW3tfE= Subject key identifier: 3B:CC:AB:65:C3:A8:9C:BC:32:6D:63:9A:FC:66:1C:11:6E:14:11:FB Authority key identifier: 12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A Certificate issuer: /CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a Certificate serial: 019AF0F5C75B9A0951B63FB8C589FB2207B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft Manifest number: 027D Signing time: Sat 06 Dec 2025 00:00:30 +0000 Manifest this update: Sat 06 Dec 2025 00:00:30 +0000 Manifest next update: Sun 07 Dec 2025 00:00:30 +0000 Files and hashes: 1: 8Qkj-OL1DBWAUGxyf__SID7DvY0.roa (hash: FohvUxuind4X94r0B623U5wmhvbScHzDNUfxcV28qbg=) 2: 8XAK_n9Ijdz-1TJV-cnMoV4PDJI.roa (hash: hpzRZ9fG9vy0NkMEhpRLlojbHPEYeYp5I8KcchuS0u0=) 3: 9PgT8am9GX2lNTUWeiRs0LXntY0.roa (hash: X5SDKNQRKe6G52wQx4wpF/A5KQNfS5fj8rskXwcraIA=) 4: D8akI8P5Xi8Ifp8LsQyslMH9ydQ.roa (hash: AKGzJiWAK4O0wOeiBq1pBQs9Et3quYVUdawmatMGbA4=) 5: EharzETJqVVAzfWx3FQux9Ef4Ho.crl (hash: ojFMIgM3ArZQIHQvUuPdfy2V6WkT5NL2U88sNMQsqiU=) 6: MQJ9Tms8NtZHBjFKGd8tRATLgzU.roa (hash: JQ9FShj97dGuiiKP4b3nhes/Pu/ifqQ1fWpnjpSUqN0=) 7: Ru8ZRa3us3EXd4Kuc_gCxyMaY_w.roa (hash: 8tvJstphtGeZ6QzHvnWs5W3Xee9kE5jmY/6KMv2k9ic=) 8: ScAR3uPyATYgU_nmPSEp-uOF-dw.roa (hash: /Djsq98hUPSTRPRTBh6WF392L0FrLeU6LETIMEXpAeg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:c7:5b:9a:09:51:b6:3f:b8:c5:89:fb:22:07:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a Validity Not Before: Dec 6 00:00:30 2025 GMT Not After : Dec 7 00:00:30 2025 GMT Subject: CN=3bccab65c3a89cbc326d639afc661c116e1411fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:34:50:9c:f7:e2:de:fb:de:ad:7f:f6:4d:09: 67:2e:27:72:14:76:57:af:dd:39:bf:75:f5:5b:da: 4a:9e:d1:f2:82:1a:aa:4e:6e:b8:8b:88:66:d6:27: 79:4f:b7:8d:66:f1:e8:21:b5:35:a9:14:1c:b5:e0: b7:42:2e:a9:82:f5:01:8e:f1:ae:50:01:b6:da:22: fd:3d:34:e5:d1:30:7e:de:6f:49:d5:e9:98:ef:78: 99:eb:02:a5:ec:0a:78:d7:19:27:c0:fa:6b:f8:62: 39:c6:05:d0:c3:9c:5c:de:e2:a5:5e:68:2f:f7:7d: d8:da:b0:12:b0:a6:d8:6a:ee:3a:fc:29:ec:fa:a3: 70:77:d1:7e:55:c8:cf:15:d3:20:8f:43:c9:af:58: 4d:3d:a5:12:ae:04:9f:00:cf:a2:bf:36:a4:05:d4: db:8a:27:c5:cf:66:da:e6:42:ab:97:6d:22:9f:36: 96:60:bf:52:52:3d:e5:0d:f1:32:d5:fd:0b:ef:e8: 4c:31:c9:60:f0:19:b5:c4:f0:3c:52:68:cc:bd:fb: e5:94:75:1f:ee:ee:d3:6c:9e:f4:8c:e2:87:73:a7: e4:24:e0:56:b6:f9:a6:ad:c6:50:6b:e7:12:7e:4c: 30:2f:bc:72:40:d0:1d:fd:20:63:97:b4:5b:3b:9e: 30:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:CC:AB:65:C3:A8:9C:BC:32:6D:63:9A:FC:66:1C:11:6E:14:11:FB X509v3 Authority Key Identifier: keyid:12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:d7:9d:63:8b:57:2c:52:3f:cd:91:33:5f:de:19:05:9b:d6: fd:27:2a:cb:5d:5d:1c:fb:d7:98:4b:41:d2:61:57:46:37:a9: 14:09:d8:d6:41:f2:2b:9e:11:3d:f8:a1:da:51:5b:26:48:f1: 53:f5:d4:14:3e:85:09:96:c6:b7:a1:e9:ad:38:d6:db:92:3e: 6b:90:77:45:b4:ab:c6:e5:6a:d6:ea:1f:92:b1:6b:9b:aa:9b: 73:29:8e:a0:a6:dc:06:cc:80:43:d0:31:a8:42:ce:98:54:23: 45:f3:99:1a:3b:c6:3e:18:d5:c2:ea:71:57:10:12:fe:aa:de: a2:32:56:8f:5d:b2:91:f7:ba:82:15:e9:7c:d4:30:65:ca:67: 3c:49:a7:47:db:09:ec:f9:30:1d:ef:2e:e1:a4:0b:94:09:c5: 4f:8b:b9:27:40:07:8f:c4:b2:8a:85:82:ad:d6:c1:f3:b4:0d: a6:56:11:a5:fe:5b:6a:a8:73:57:8c:6c:fd:14:1b:b2:05:33: 16:0e:b5:f1:e6:cb:5b:56:27:85:f3:a7:70:88:2b:7e:c1:52: ba:3c:44:e5:e5:32:0e:0e:0c:8b:19:e4:6c:00:6d:70:44:58: 63:9f:5b:32:91:fc:d2:78:ab:43:56:be:e3:25:9c:4f:cc:26: 3e:92:51:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9cdbmglRtj+4xYn7Ige5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMTZhYmNjNDRjOWE5NTU0MGNkZjViMWRjNTQyZWM3ZDEx ZmUwN2EwHhcNMjUxMjA2MDAwMDMwWhcNMjUxMjA3MDAwMDMwWjAzMTEwLwYDVQQD EygzYmNjYWI2NWMzYTg5Y2JjMzI2ZDYzOWFmYzY2MWMxMTZlMTQxMWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzRQnPfi3vverX/2TQlnLidyFHZX r905v3X1W9pKntHyghqqTm64i4hm1id5T7eNZvHoIbU1qRQcteC3Qi6pgvUBjvGu UAG22iL9PTTl0TB+3m9J1emY73iZ6wKl7Ap41xknwPpr+GI5xgXQw5xc3uKlXmgv 933Y2rASsKbYau46/Cns+qNwd9F+VcjPFdMgj0PJr1hNPaUSrgSfAM+ivzakBdTb iifFz2ba5kKrl20inzaWYL9SUj3lDfEy1f0L7+hMMclg8Bm1xPA8UmjMvfvllHUf 7u7TbJ70jOKHc6fkJOBWtvmmrcZQa+cSfkwwL7xyQNAd/SBjl7RbO54wBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDvMq2XDqJy8Mm1jmvxmHBFuFBH7MB8GA1UdIwQY MBaAFBIWq8xEyalVQM31sdxULsfRH+B6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWhhcnpFVEpxVlZBemZXeDNGUXV4OUVmNEhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9hYzljZjYtMWJlYy00MjRiLWFhNTEt YTA5NjJkOTk4ZTYwLzEvRWhhcnpFVEpxVlZBemZXeDNGUXV4OUVmNEhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9hYzljZjYtMWJlYy00MjRiLWFhNTEtYTA5NjJkOTk4ZTYw LzEvRWhhcnpFVEpxVlZBemZXeDNGUXV4OUVmNEhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK9edY4tX LFI/zZEzX94ZBZvW/Scqy11dHPvXmEtB0mFXRjepFAnY1kHyK54RPfih2lFbJkjx U/XUFD6FCZbGt6HprTjW25I+a5B3RbSrxuVq1uofkrFrm6qbcymOoKbcBsyAQ9Ax qELOmFQjRfOZGjvGPhjVwupxVxAS/qreojJWj12ykfe6ghXpfNQwZcpnPEmnR9sJ 7PkwHe8u4aQLlAnFT4u5J0AHj8SyioWCrdbB87QNplYRpf5baqhzV4xs/RQbsgUz Fg618ebLW1YnhfOncIgrfsFSujxE5eUyDg4MixnkbABtcERYY59bMpH80nirQ1a+ 4yWcT8wmPpJRrQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:24 2025 by rpki-client