This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft File: ewjhaHh0S4i4QgPu_i13qH2rkLE.mft (raw, json) Hash identifier: vL5/ceMpmKNnP50UtWlci5Dlcc0NBD2GxrboxNoCVjc= Subject key identifier: 5A:9E:8C:CD:CD:9A:2A:50:49:8E:B4:29:A1:2E:37:67:AF:67:3D:62 Authority key identifier: 7B:08:E1:68:78:74:4B:88:B8:42:03:EE:FE:2D:77:A8:7D:AB:90:B1 Certificate issuer: /CN=7b08e16878744b88b84203eefe2d77a87dab90b1 Certificate serial: 019AF68A899825588A207D2ED00F2AD1F3B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft Manifest number: 0F1A Signing time: Sun 07 Dec 2025 02:01:05 +0000 Manifest this update: Sun 07 Dec 2025 02:01:05 +0000 Manifest next update: Mon 08 Dec 2025 02:01:05 +0000 Files and hashes: 1: SPkSmU2cuYPaslq98jH650uCm8U.roa (hash: 3l9S6s2Phg4ZgQxgg2kV0SAhmKBDDFr+VpsMCOZHDtE=) 2: ewjhaHh0S4i4QgPu_i13qH2rkLE.crl (hash: XTCPxt2FMe0rb4Wd7rL53pkMglmacG6aw+s7ls/cWsw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.crl rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:89:98:25:58:8a:20:7d:2e:d0:0f:2a:d1:f3:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b08e16878744b88b84203eefe2d77a87dab90b1 Validity Not Before: Dec 7 02:01:05 2025 GMT Not After : Dec 8 02:01:05 2025 GMT Subject: CN=5a9e8ccdcd9a2a50498eb429a12e3767af673d62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:11:de:f6:15:3d:fc:51:0d:da:88:a1:88:77: b5:31:3c:4e:15:b3:8a:77:30:ee:90:fc:b3:af:c3: cf:89:9d:03:b2:33:63:72:0f:d7:38:04:4a:a8:ee: 16:cd:1c:f0:16:dd:ba:56:c5:81:dc:ec:62:0f:d5: 5a:48:f2:53:0d:10:f1:ea:51:7d:2d:17:e8:5c:2c: 39:aa:16:8f:ad:42:83:5b:76:d1:63:33:91:55:8b: cc:17:34:3e:0d:07:47:d0:6c:1c:10:b7:29:e4:22: 86:6e:a2:46:0d:c0:27:ba:23:84:ed:60:42:b7:9f: 13:37:d1:ef:d6:f6:ad:86:8c:6c:8e:38:a0:d0:5e: 01:7f:80:46:5e:85:7f:a1:49:31:00:da:87:06:22: 81:50:44:81:41:3f:7d:86:6e:5f:7c:82:a2:68:75: 3f:df:c7:6b:9a:d7:87:7d:5a:f2:b8:fc:ed:5d:6d: 68:7b:00:e6:d5:60:1a:52:8c:65:f3:db:38:b2:26: 14:26:df:09:f6:25:c0:68:f6:be:b4:ec:15:e7:6c: 6f:a9:f8:8d:30:48:8b:d0:0e:5e:a2:86:f6:d6:71: e9:78:49:fe:d9:de:cb:47:ea:5b:c6:81:df:18:39: 95:2a:74:37:fc:ac:38:62:35:05:ea:3e:2b:f1:f3: 3e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:9E:8C:CD:CD:9A:2A:50:49:8E:B4:29:A1:2E:37:67:AF:67:3D:62 X509v3 Authority Key Identifier: keyid:7B:08:E1:68:78:74:4B:88:B8:42:03:EE:FE:2D:77:A8:7D:AB:90:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:43:38:f2:f4:45:08:2b:8f:3f:14:c7:2f:48:c6:89:ba:7e: 72:6e:a5:0a:5c:47:9d:53:79:2e:d6:dd:e6:16:96:5b:ec:1f: 9c:60:90:8e:50:92:a2:f9:24:c5:8a:c6:e9:a3:e4:19:66:37: 6f:14:a3:91:93:ec:e7:dc:f2:5d:1b:5a:37:ac:06:16:5b:70: 09:f2:6d:99:ca:1a:84:50:35:8e:f8:2d:31:ea:8a:8d:3c:1d: 6a:a3:c0:c0:6f:df:da:b5:02:25:ec:e5:ea:42:50:c0:ef:4c: d4:2c:38:1b:8d:27:0c:f9:62:71:47:44:8a:93:84:42:03:3c: 07:ee:50:88:eb:5e:77:4a:45:92:e0:f1:42:38:98:22:17:de: ac:c2:57:c1:23:05:0d:a7:df:ce:e8:59:18:5c:1b:23:99:15: b9:f7:15:d1:28:4a:97:ac:25:b2:f3:38:1b:dc:86:e8:02:eb: d3:d3:53:d0:73:10:13:4f:6c:c5:55:39:75:08:6a:23:60:f1: 2d:c8:17:ad:1c:8e:02:4a:b4:85:37:8e:9f:91:9e:96:78:8e: bb:da:41:d4:b5:9a:7e:80:c9:f1:9b:0d:63:d1:99:06:a3:57: 10:2d:3a:2a:7e:a3:6d:7e:82:e6:87:34:15:e8:ba:e6:8d:79: 1c:30:35:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2iomYJViKIH0u0A8q0fO3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMDhlMTY4Nzg3NDRiODhiODQyMDNlZWZlMmQ3N2E4N2Rh YjkwYjEwHhcNMjUxMjA3MDIwMTA1WhcNMjUxMjA4MDIwMTA1WjAzMTEwLwYDVQQD Eyg1YTllOGNjZGNkOWEyYTUwNDk4ZWI0MjlhMTJlMzc2N2FmNjczZDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxHe9hU9/FEN2oihiHe1MTxOFbOK dzDukPyzr8PPiZ0DsjNjcg/XOARKqO4WzRzwFt26VsWB3OxiD9VaSPJTDRDx6lF9 LRfoXCw5qhaPrUKDW3bRYzORVYvMFzQ+DQdH0GwcELcp5CKGbqJGDcAnuiOE7WBC t58TN9Hv1vathoxsjjig0F4Bf4BGXoV/oUkxANqHBiKBUESBQT99hm5ffIKiaHU/ 38drmteHfVryuPztXW1oewDm1WAaUoxl89s4siYUJt8J9iXAaPa+tOwV52xvqfiN MEiL0A5eoob21nHpeEn+2d7LR+pbxoHfGDmVKnQ3/Kw4YjUF6j4r8fM+HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFqejM3NmipQSY60KaEuN2evZz1iMB8GA1UdIwQY MBaAFHsI4Wh4dEuIuEID7v4td6h9q5CxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXdqaGFIaDBTNGk0UWdQdV9pMTNxSDJya0xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC81ZWM3OTQtMWJiMy00YzY1LWFjNDIt YTE4YzA2ZWM1MmU4LzEvZXdqaGFIaDBTNGk0UWdQdV9pMTNxSDJya0xFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC81ZWM3OTQtMWJiMy00YzY1LWFjNDItYTE4YzA2ZWM1MmU4 LzEvZXdqaGFIaDBTNGk0UWdQdV9pMTNxSDJya0xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJUM48vRF CCuPPxTHL0jGibp+cm6lClxHnVN5Ltbd5haWW+wfnGCQjlCSovkkxYrG6aPkGWY3 bxSjkZPs59zyXRtaN6wGFltwCfJtmcoahFA1jvgtMeqKjTwdaqPAwG/f2rUCJezl 6kJQwO9M1Cw4G40nDPlicUdEipOEQgM8B+5QiOted0pFkuDxQjiYIhferMJXwSMF DaffzuhZGFwbI5kVufcV0ShKl6wlsvM4G9yG6ALr09NT0HMQE09sxVU5dQhqI2Dx LcgXrRyOAkq0hTeOn5GelniOu9pB1LWafoDJ8ZsNY9GZBqNXEC06Kn6jbX6C5oc0 Fei65o15HDA1tA== -----END CERTIFICATE-----Generated at Sun Dec 7 04:52:32 2025 by rpki-client