This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft File: ejhiE08UE2XviHkC5gV8KLKCnJ0.mft (raw, json) Hash identifier: gpU/6vq+tcdSEekGc9bNVDw4vA+N4kKxAFnHg9WeLM8= Subject key identifier: CC:CA:AF:87:B0:D5:01:D0:41:57:4D:80:87:A8:F9:DC:F5:B7:73:99 Authority key identifier: 7A:38:62:13:4F:14:13:65:EF:88:79:02:E6:05:7C:28:B2:82:9C:9D Certificate issuer: /CN=7a3862134f141365ef887902e6057c28b2829c9d Certificate serial: 019AF164A6867F2E094198E416C0EE770C0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejhiE08UE2XviHkC5gV8KLKCnJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft Manifest number: 0E42 Signing time: Sat 06 Dec 2025 02:01:36 +0000 Manifest this update: Sat 06 Dec 2025 02:01:36 +0000 Manifest next update: Sun 07 Dec 2025 02:01:36 +0000 Files and hashes: 1: DUeztC_9OSU5_baS7RpA8PIrChA.roa (hash: nC0NIfkO+km6NTJ5hH8jMs/CXJYU2lhmZlogyR2BxZI=) 2: ejhiE08UE2XviHkC5gV8KLKCnJ0.crl (hash: 6Bp1DxmrP1MVcbaqJ7hO8CKHSKmeK0mJLGL3coiPDCk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/ejhiE08UE2XviHkC5gV8KLKCnJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:a6:86:7f:2e:09:41:98:e4:16:c0:ee:77:0c:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a3862134f141365ef887902e6057c28b2829c9d Validity Not Before: Dec 6 02:01:36 2025 GMT Not After : Dec 7 02:01:36 2025 GMT Subject: CN=cccaaf87b0d501d041574d8087a8f9dcf5b77399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:94:46:e7:5a:e4:5c:ce:d7:50:1d:99:56:be: 3d:5b:b4:49:81:5a:db:1f:24:9d:f2:01:a4:41:8d: fd:0f:aa:d5:6d:3f:53:b9:2f:a2:b8:13:fb:29:8c: 87:52:f0:05:d3:d4:a5:30:bc:7a:09:2c:a6:ef:4f: 98:f3:b7:07:cb:82:d3:59:e3:d4:2a:ab:f6:fd:4f: e8:1d:45:19:2b:4e:95:ea:2e:29:cc:c6:af:58:8f: 7d:2b:9c:e7:35:b3:c2:a4:56:37:70:89:70:de:c4: 83:2d:45:36:ce:99:ed:ae:bb:f2:48:52:41:3e:ab: 22:8e:b0:2a:5f:07:64:48:ea:1e:22:d5:f9:ec:91: 00:6c:dc:6b:62:1f:45:d3:69:1b:7d:28:9b:a2:aa: 70:8c:e7:36:80:62:f2:56:f4:33:85:e2:b0:d5:00: dc:c6:15:7e:53:1a:b7:4e:40:11:2a:12:b1:2e:c7: 73:ff:aa:c7:c4:f4:b1:ec:1c:04:f9:57:6a:d3:5c: 70:39:e3:f5:cf:a0:90:e6:e6:0e:3f:d2:dd:79:07: ac:cc:1a:c6:9f:86:e9:f7:94:48:4e:e7:4d:e3:ed: 7e:c1:8e:9b:eb:5b:e5:76:24:12:95:1c:0a:75:92: 55:0d:9f:46:7a:bc:cc:97:e7:ca:97:f4:76:a2:44: 1c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:CA:AF:87:B0:D5:01:D0:41:57:4D:80:87:A8:F9:DC:F5:B7:73:99 X509v3 Authority Key Identifier: keyid:7A:38:62:13:4F:14:13:65:EF:88:79:02:E6:05:7C:28:B2:82:9C:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejhiE08UE2XviHkC5gV8KLKCnJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:00:90:d5:0a:18:2c:2d:bf:b2:ec:2e:31:15:fe:cc:43:7e: 2f:91:d9:46:f5:3d:be:b4:c0:16:7a:f5:9f:1d:09:1b:cc:e8: 34:80:3d:7a:29:68:03:0d:83:c6:ee:45:29:a0:be:e6:d5:a7: e1:28:bb:38:fa:8b:6a:b8:87:cf:f1:ae:0b:7d:07:3e:d4:38: 24:1e:71:8c:30:bd:4a:3c:06:f0:ac:64:9d:43:c5:a7:ee:c4: af:a4:e8:8e:28:f0:19:23:01:e7:4b:3d:61:b9:dd:a6:87:dd: e5:79:93:2e:dc:7a:0e:52:ac:a5:ea:00:90:95:0d:ae:fc:55: 96:3c:f4:9b:42:5a:f6:4b:39:f8:fb:71:4f:c7:b7:35:b3:74: dc:f6:f5:79:51:80:98:eb:a5:59:58:8a:fc:c8:99:70:93:96: 02:c6:e0:f6:0f:51:de:fe:92:f8:00:3c:a7:20:29:3d:8f:71: 22:bb:b9:39:af:d8:e0:fc:81:0f:c2:0c:83:bc:a7:64:08:88: 7d:f4:92:de:31:0a:62:32:39:5f:6d:d2:90:8c:f2:ae:b0:c8: 1a:e1:79:c3:40:f9:7a:41:cd:d3:2d:6c:4f:df:da:26:0f:9d: 7d:3a:1a:9a:dc:10:99:60:ad:36:a0:6a:97:93:64:37:ae:e1: 1d:41:b5:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZKaGfy4JQZjkFsDudwwMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMzg2MjEzNGYxNDEzNjVlZjg4NzkwMmU2MDU3YzI4YjI4 MjljOWQwHhcNMjUxMjA2MDIwMTM2WhcNMjUxMjA3MDIwMTM2WjAzMTEwLwYDVQQD EyhjY2NhYWY4N2IwZDUwMWQwNDE1NzRkODA4N2E4ZjlkY2Y1Yjc3Mzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZRG51rkXM7XUB2ZVr49W7RJgVrb HySd8gGkQY39D6rVbT9TuS+iuBP7KYyHUvAF09SlMLx6CSym70+Y87cHy4LTWePU Kqv2/U/oHUUZK06V6i4pzMavWI99K5znNbPCpFY3cIlw3sSDLUU2zpntrrvySFJB PqsijrAqXwdkSOoeItX57JEAbNxrYh9F02kbfSiboqpwjOc2gGLyVvQzheKw1QDc xhV+Uxq3TkARKhKxLsdz/6rHxPSx7BwE+Vdq01xwOeP1z6CQ5uYOP9LdeQeszBrG n4bp95RITudN4+1+wY6b61vldiQSlRwKdZJVDZ9GerzMl+fKl/R2okQcWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMzKr4ew1QHQQVdNgIeo+dz1t3OZMB8GA1UdIwQY MBaAFHo4YhNPFBNl74h5AuYFfCiygpydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWpoaUUwOFVFMlh2aUhrQzVnVjhLTEtDbkowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS80MzQxOTktZDI2ZS00MTJlLWEyYmIt ZGEwYTQwNjVlODI0LzEvZWpoaUUwOFVFMlh2aUhrQzVnVjhLTEtDbkowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS80MzQxOTktZDI2ZS00MTJlLWEyYmItZGEwYTQwNjVlODI0 LzEvZWpoaUUwOFVFMlh2aUhrQzVnVjhLTEtDbkowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcgCQ1QoY LC2/suwuMRX+zEN+L5HZRvU9vrTAFnr1nx0JG8zoNIA9eiloAw2Dxu5FKaC+5tWn 4Si7OPqLariHz/GuC30HPtQ4JB5xjDC9SjwG8KxknUPFp+7Er6TojijwGSMB50s9 Ybndpofd5XmTLtx6DlKspeoAkJUNrvxVljz0m0Ja9ks5+PtxT8e3NbN03Pb1eVGA mOulWViK/MiZcJOWAsbg9g9R3v6S+AA8pyApPY9xIru5Oa/Y4PyBD8IMg7ynZAiI ffSS3jEKYjI5X23SkIzyrrDIGuF5w0D5ekHN0y1sT9/aJg+dfToamtwQmWCtNqBq l5NkN67hHUG1Vg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:08 2025 by rpki-client