This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft File: ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft (raw, json) Hash identifier: Wbulkjc7l4KnJvyHpseYMDC+H7oYUSDA+l9IQdnsS8k= Subject key identifier: C7:C6:8B:E3:60:CF:3D:86:85:36:C5:DE:64:DE:CA:64:ED:5C:5A:03 Authority key identifier: 7A:18:FC:AA:C6:C8:40:9F:24:D3:FA:90:DF:8E:30:21:8E:E9:C3:FF Certificate issuer: /CN=7a18fcaac6c8409f24d3fa90df8e30218ee9c3ff Certificate serial: 019AF27711F135C456C4BCCFD234602D9B7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 07:01:20 +0000 Manifest this update: Sat 06 Dec 2025 07:01:20 +0000 Manifest next update: Sun 07 Dec 2025 07:01:20 +0000 Files and hashes: 1: 8XphOJkPtZHC_4MC2PQEPr0m2ac.roa (hash: dXWM6e00IU0bRpxg53QiBkBA19LCXMaHdPOkhO8paFI=) 2: ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl (hash: hKw6+YrBqJaqd/5j6lQoqKHJ6j9NbdKhuAArt587ay8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:11:f1:35:c4:56:c4:bc:cf:d2:34:60:2d:9b:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a18fcaac6c8409f24d3fa90df8e30218ee9c3ff Validity Not Before: Dec 6 07:01:20 2025 GMT Not After : Dec 7 07:01:20 2025 GMT Subject: CN=c7c68be360cf3d868536c5de64deca64ed5c5a03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:35:56:d0:52:e2:22:71:86:0d:82:24:37:1a: 94:af:92:db:35:24:cb:8e:d0:5e:fc:2a:9d:0d:7a: 08:c3:2b:cf:fa:75:86:23:6b:93:f6:86:75:8c:1e: b7:40:20:56:6a:65:98:b2:bf:84:3b:7b:81:d1:a1: 46:1c:49:60:a3:47:7c:c1:cf:ec:6b:cc:7d:c0:99: 87:2b:87:71:92:58:c9:dd:e6:f4:55:2d:ea:fc:27: c7:57:b5:f1:e0:3d:9f:8e:4e:8b:00:c8:29:7d:6c: 35:b5:79:d8:dd:8c:a5:79:d8:af:22:68:f7:6e:32: b2:b2:93:f5:87:59:5d:b1:37:d8:59:35:ec:71:61: 77:b0:bb:22:99:ce:79:9e:5e:ab:04:a1:88:b2:db: 82:57:a3:5d:ca:e0:96:6e:75:be:be:f6:44:57:82: 23:11:31:77:8d:3d:6c:44:14:09:f1:6d:d7:27:97: 89:89:04:ed:4e:b7:ea:29:6f:13:27:f3:16:a8:74: b9:c5:9d:20:00:f3:5a:8b:bf:4f:46:37:f6:5d:09: a0:37:33:d6:8c:e5:d0:16:91:6e:31:91:72:ac:de: 7f:f6:18:10:a8:75:7d:ad:52:3e:2b:b2:c7:0d:67: 6e:bc:68:8c:0b:61:5c:7f:fd:16:d5:11:7e:fa:42: e9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C6:8B:E3:60:CF:3D:86:85:36:C5:DE:64:DE:CA:64:ED:5C:5A:03 X509v3 Authority Key Identifier: keyid:7A:18:FC:AA:C6:C8:40:9F:24:D3:FA:90:DF:8E:30:21:8E:E9:C3:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:ad:3f:9e:4e:a9:e8:35:1f:77:0a:38:df:4d:a6:17:24:4b: 07:7b:9a:62:45:69:f2:2d:50:b3:ff:7d:4d:1c:17:5e:b6:7a: 65:fc:ea:f5:9a:52:cb:f8:de:c3:16:8e:f1:89:ab:1a:65:d2: eb:bc:7a:7e:55:f9:fd:5f:6f:af:4d:8e:b5:cf:67:c2:49:c3: 50:28:93:70:f2:67:b3:a4:e6:54:c3:c1:f9:2f:b1:f7:92:6b: ce:5a:4e:d3:08:93:2b:9c:89:ac:1d:92:b5:c8:d3:ce:09:dd: cf:ef:38:d4:8b:a2:52:06:a2:b2:d0:5e:3c:e5:24:d4:d9:b5: 47:20:65:e9:f7:1a:8c:a4:ca:0a:dc:b7:06:47:72:a5:ae:2c: e4:9f:af:6e:2c:fb:46:40:41:56:5b:df:0e:fc:87:f3:fb:ba: 86:d1:ad:af:fe:ee:f2:a9:4e:3b:49:37:89:12:9b:41:e9:cf: 0b:d3:a6:81:24:fb:c2:84:40:dd:1d:2b:b9:94:cd:18:17:66: aa:70:2a:bd:88:90:09:bc:e8:79:d0:f6:1d:ee:53:ec:de:ca: ff:31:c4:df:79:0a:33:8e:80:24:5d:34:88:96:fa:55:2a:d9: 32:1d:2e:3e:7d:68:3f:2b:ac:c7:46:6f:be:b0:ed:b0:6e:9f: f9:53:2e:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydxHxNcRWxLzP0jRgLZt9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMThmY2FhYzZjODQwOWYyNGQzZmE5MGRmOGUzMDIxOGVl OWMzZmYwHhcNMjUxMjA2MDcwMTIwWhcNMjUxMjA3MDcwMTIwWjAzMTEwLwYDVQQD EyhjN2M2OGJlMzYwY2YzZDg2ODUzNmM1ZGU2NGRlY2E2NGVkNWM1YTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjVW0FLiInGGDYIkNxqUr5LbNSTL jtBe/CqdDXoIwyvP+nWGI2uT9oZ1jB63QCBWamWYsr+EO3uB0aFGHElgo0d8wc/s a8x9wJmHK4dxkljJ3eb0VS3q/CfHV7Xx4D2fjk6LAMgpfWw1tXnY3YyledivImj3 bjKyspP1h1ldsTfYWTXscWF3sLsimc55nl6rBKGIstuCV6NdyuCWbnW+vvZEV4Ij ETF3jT1sRBQJ8W3XJ5eJiQTtTrfqKW8TJ/MWqHS5xZ0gAPNai79PRjf2XQmgNzPW jOXQFpFuMZFyrN5/9hgQqHV9rVI+K7LHDWduvGiMC2Fcf/0W1RF++kLpoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfGi+Ngzz2GhTbF3mTeymTtXFoDMB8GA1UdIwQY MBaAFHoY/KrGyECfJNP6kN+OMCGO6cP/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWhqOHFzYklRSjhrMF9xUTM0NHdJWTdwd184LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC81OGE4NmMtYjg4Mi00MmZmLWI3NDMt YzQxYjhhYTJkZjk1LzEvZWhqOHFzYklRSjhrMF9xUTM0NHdJWTdwd184Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC81OGE4NmMtYjg4Mi00MmZmLWI3NDMtYzQxYjhhYTJkZjk1 LzEvZWhqOHFzYklRSjhrMF9xUTM0NHdJWTdwd184LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZK0/nk6p 6DUfdwo4302mFyRLB3uaYkVp8i1Qs/99TRwXXrZ6Zfzq9ZpSy/jewxaO8YmrGmXS 67x6flX5/V9vr02Otc9nwknDUCiTcPJns6TmVMPB+S+x95JrzlpO0wiTK5yJrB2S tcjTzgndz+841IuiUgaistBePOUk1Nm1RyBl6fcajKTKCty3Bkdypa4s5J+vbiz7 RkBBVlvfDvyH8/u6htGtr/7u8qlOO0k3iRKbQenPC9OmgST7woRA3R0ruZTNGBdm qnAqvYiQCbzoedD2He5T7N7K/zHE33kKM46AJF00iJb6VSrZMh0uPn1oPyusx0Zv vrDtsG6f+VMunA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:38 2025 by rpki-client