This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft File: Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft (raw, json) Hash identifier: VdUL2h7HrgOVKgFmFk9Spcl/7Fi4tgvLlukJrvUoGEI= Subject key identifier: 49:98:B5:6B:18:6C:0B:A8:5D:C8:4F:CE:53:0A:F6:97:8E:12:20:32 Authority key identifier: 12:17:3D:1B:3E:23:1C:57:B3:51:9E:8D:4E:54:78:68:60:6C:4F:D3 Certificate issuer: /CN=12173d1b3e231c57b3519e8d4e547868606c4fd3 Certificate serial: 019AF2AD6DFC209A1DCCF4CEF15B0C842BAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft Manifest number: 03AF Signing time: Sat 06 Dec 2025 08:00:43 +0000 Manifest this update: Sat 06 Dec 2025 08:00:43 +0000 Manifest next update: Sun 07 Dec 2025 08:00:43 +0000 Files and hashes: 1: Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.crl (hash: ga9K7zSpbQ67qGTj0m8iTi/x/2Isi/gmd9MXCkOp74k=) 2: _oQZGq-xsgpE_WLGIURnDSFrBnc.roa (hash: KeGRH+oG+cnDL/Vprs+PX1DlQtTCAw0VDd1F5GouGeA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.crl rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft rsync://rpki.ripe.net/repository/DEFAULT/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:6d:fc:20:9a:1d:cc:f4:ce:f1:5b:0c:84:2b:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12173d1b3e231c57b3519e8d4e547868606c4fd3 Validity Not Before: Dec 6 08:00:43 2025 GMT Not After : Dec 7 08:00:43 2025 GMT Subject: CN=4998b56b186c0ba85dc84fce530af6978e122032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:37:80:96:a1:4a:c2:9d:eb:81:24:08:2f:be: 88:3d:7a:b9:94:8f:44:cf:0f:4a:b9:37:5e:dc:57: a6:fb:a7:a0:f2:9f:8b:2f:0b:ee:8d:3b:17:99:f0: 5c:0b:2f:02:de:0b:9e:82:1f:a7:73:49:9b:9a:e4: 36:81:da:91:92:65:79:8e:74:24:d0:1d:87:46:8b: b3:a7:7a:0e:7d:c8:0a:b5:c3:43:e8:f2:86:35:cd: 2b:82:3f:4c:19:8b:70:67:21:45:15:1a:da:a2:94: b5:38:a5:51:ae:c4:3b:ab:7d:67:58:e1:d1:b4:0d: 81:c8:49:f3:5d:c3:03:2d:25:e8:36:41:5a:21:7f: 86:d5:e4:7e:61:5a:f0:63:1c:25:f6:66:b8:4f:02: a6:c7:e6:ed:ba:7a:72:be:ac:4a:0d:6d:d6:31:99: e6:24:2e:aa:0b:de:df:da:de:ea:34:16:8d:51:82: 68:90:2a:f3:3e:23:fc:37:d3:f4:cc:5c:ac:a2:a7: ea:80:e4:88:97:fa:0d:d3:a2:b7:9b:f1:9a:5d:a8: 52:96:fb:0b:52:c8:bd:d4:ab:8c:30:76:f8:2e:b0: 3b:3b:a8:5a:17:e0:fc:49:27:31:c1:d5:fe:b4:d7: f5:ca:f7:67:fa:2d:4b:7c:09:e8:5e:b1:80:c2:41: 74:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:98:B5:6B:18:6C:0B:A8:5D:C8:4F:CE:53:0A:F6:97:8E:12:20:32 X509v3 Authority Key Identifier: keyid:12:17:3D:1B:3E:23:1C:57:B3:51:9E:8D:4E:54:78:68:60:6C:4F:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:83:3a:2d:26:31:87:b5:d0:a6:29:17:bd:9b:1a:9d:d0:a6: e0:de:ac:1a:c7:4f:a5:4f:14:47:f6:61:ac:49:87:c3:bc:bd: 50:64:b4:ed:2a:4f:ef:32:b6:ae:cd:2a:ab:7f:21:55:57:ec: 9d:a3:6b:26:c0:8b:56:fd:71:bc:af:82:36:44:62:4d:a4:62: a7:5b:bb:c0:13:14:f7:51:3d:69:ce:1c:82:62:69:59:f5:f0: 3d:21:c8:b4:8f:ae:8c:a8:7f:f3:8e:de:15:ef:59:4e:ca:de: ea:9e:f6:6b:d6:e0:8f:cf:c3:51:c7:2c:27:71:ba:b4:81:85: be:dd:7e:cf:95:c1:74:91:c8:33:d5:c6:11:82:0e:7e:e5:6f: 50:d0:eb:f1:d3:67:0f:75:90:a8:96:91:28:ab:13:96:d7:f5: 1d:4d:b2:e2:a4:3d:24:b3:8b:83:22:eb:78:4d:b7:16:46:28: 13:69:19:b5:5a:43:6b:9c:12:6b:96:38:73:e5:43:10:ef:a9: e2:90:48:4c:df:34:d4:14:7e:8a:56:b1:ed:85:af:a7:32:b6: 9a:a6:15:20:5e:f1:80:bf:24:a7:30:f7:2d:08:5b:e5:69:69: db:83:33:c2:ae:c2:58:d4:60:6b:c9:c9:b7:5e:36:8b:7b:59: db:94:4b:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrW38IJodzPTO8VsMhCuqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMTczZDFiM2UyMzFjNTdiMzUxOWU4ZDRlNTQ3ODY4NjA2 YzRmZDMwHhcNMjUxMjA2MDgwMDQzWhcNMjUxMjA3MDgwMDQzWjAzMTEwLwYDVQQD Eyg0OTk4YjU2YjE4NmMwYmE4NWRjODRmY2U1MzBhZjY5NzhlMTIyMDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zeAlqFKwp3rgSQIL76IPXq5lI9E zw9KuTde3Fem+6eg8p+LLwvujTsXmfBcCy8C3guegh+nc0mbmuQ2gdqRkmV5jnQk 0B2HRouzp3oOfcgKtcND6PKGNc0rgj9MGYtwZyFFFRraopS1OKVRrsQ7q31nWOHR tA2ByEnzXcMDLSXoNkFaIX+G1eR+YVrwYxwl9ma4TwKmx+btunpyvqxKDW3WMZnm JC6qC97f2t7qNBaNUYJokCrzPiP8N9P0zFysoqfqgOSIl/oN06K3m/GaXahSlvsL Usi91KuMMHb4LrA7O6haF+D8SScxwdX+tNf1yvdn+i1LfAnoXrGAwkF0SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEmYtWsYbAuoXchPzlMK9peOEiAyMB8GA1UdIwQY MBaAFBIXPRs+IxxXs1GejU5UeGhgbE/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWhjOUd6NGpIRmV6VVo2TlRsUjRhR0JzVDlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi83MzNmNzQtMGRiZS00NDNiLTg0MzEt M2Y4MzcyZDk2OGQwLzEvRWhjOUd6NGpIRmV6VVo2TlRsUjRhR0JzVDlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi83MzNmNzQtMGRiZS00NDNiLTg0MzEtM2Y4MzcyZDk2OGQw LzEvRWhjOUd6NGpIRmV6VVo2TlRsUjRhR0JzVDlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKYM6LSYx h7XQpikXvZsandCm4N6sGsdPpU8UR/ZhrEmHw7y9UGS07SpP7zK2rs0qq38hVVfs naNrJsCLVv1xvK+CNkRiTaRip1u7wBMU91E9ac4cgmJpWfXwPSHItI+ujKh/847e Fe9ZTsre6p72a9bgj8/DUccsJ3G6tIGFvt1+z5XBdJHIM9XGEYIOfuVvUNDr8dNn D3WQqJaRKKsTltf1HU2y4qQ9JLOLgyLreE23FkYoE2kZtVpDa5wSa5Y4c+VDEO+p 4pBITN801BR+ilax7YWvpzK2mqYVIF7xgL8kpzD3LQhb5Wlp24Mzwq7CWNRga8nJ t142i3tZ25RLiA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:53:58 2025 by rpki-client