This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft File: eIehaWWHX29TvMMfDkk6lhVOt7k.mft (raw, json) Hash identifier: cn2ny+qYX+1qIL+7iuBORrAFG7Iz0ubgMz0YFHdM27w= Subject key identifier: 6F:F2:7C:09:52:92:C0:68:BE:88:C0:44:71:4F:50:E1:6B:B5:F5:19 Authority key identifier: 78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9 Certificate issuer: /CN=7887a16965875f6f53bcc31f0e493a96154eb7b9 Certificate serial: 019AF352B27A6B384D15C5438E41B6E0B74E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft Manifest number: 1480 Signing time: Sat 06 Dec 2025 11:01:14 +0000 Manifest this update: Sat 06 Dec 2025 11:01:14 +0000 Manifest next update: Sun 07 Dec 2025 11:01:14 +0000 Files and hashes: 1: 6wgIIIZZn9PKkWyj1o24YVKslZY.roa (hash: ItzXFRJIwEcM+B1Foxna1VuLqIlGbg+/9MVYoMgJCug=) 2: HHXGSuGQRW_zAz7Tg7UBxMkUHpE.roa (hash: EXdQKgQbUheeBJFdVxwDKTAaBfIc+np/FEnci5xb95s=) 3: eIehaWWHX29TvMMfDkk6lhVOt7k.crl (hash: 6f9ZYrpdejPN8FSsIPVUpgetoC4eGlwSAg52OSzHDwo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:b2:7a:6b:38:4d:15:c5:43:8e:41:b6:e0:b7:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7887a16965875f6f53bcc31f0e493a96154eb7b9 Validity Not Before: Dec 6 11:01:14 2025 GMT Not After : Dec 7 11:01:14 2025 GMT Subject: CN=6ff27c095292c068be88c044714f50e16bb5f519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f1:bb:8f:e9:3d:c0:04:aa:1a:c2:03:a0:fe: 3e:8b:72:64:bb:ab:54:c6:f7:41:94:f8:e2:f4:3c: 2a:96:fd:8c:8c:9f:95:95:b6:29:ed:d4:aa:75:99: 17:49:fa:1e:05:c6:b1:53:83:6b:30:3b:d7:f7:d6: 75:74:6e:d9:a7:60:57:6e:d3:a6:e5:22:28:db:7a: b7:fc:d2:1e:f6:f1:49:65:64:c9:20:1d:bf:79:d2: d5:cb:da:19:ec:1f:b5:26:61:7c:74:5e:3a:02:65: f0:1e:d0:b6:41:46:72:41:f6:f1:53:f8:13:e3:92: f0:e0:cf:24:15:fd:88:d6:ef:5f:a3:ee:97:b8:56: 88:c0:a0:58:77:6f:d3:e9:15:8d:fa:c8:b3:46:d6: fa:3a:d3:82:4f:27:49:c2:42:82:bf:2c:f7:56:4d: 9b:e0:1c:b3:70:0e:02:68:1e:84:8b:ca:48:e7:4d: 5b:7d:04:4c:7c:df:54:c6:8c:cc:c3:92:aa:69:2e: 7f:7a:c0:df:8e:30:28:e8:5f:6d:59:32:0f:dc:e7: 3f:1b:9a:c8:a4:d7:a3:e4:2f:8b:ad:f0:f2:68:f4: 67:d9:5b:39:02:21:c8:63:e4:e5:0f:90:59:e7:95: 6c:e9:ad:df:27:ea:cd:64:91:a4:fc:74:2e:24:ce: 55:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F2:7C:09:52:92:C0:68:BE:88:C0:44:71:4F:50:E1:6B:B5:F5:19 X509v3 Authority Key Identifier: keyid:78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:0f:2e:40:67:a3:d1:3f:c5:c9:7d:3c:c5:65:64:77:58:37: 09:21:9f:7e:2e:e6:23:b6:8b:45:3b:c3:aa:40:2a:0b:a5:17: c2:05:b3:c3:7f:70:78:21:f3:80:57:02:94:ed:ea:d0:bd:c5: 31:e1:92:1d:a7:2b:7f:d8:49:33:c5:c1:e3:23:98:67:08:7a: 3d:50:49:6b:ad:56:5f:ea:f9:7d:46:c6:d4:ac:7e:bd:bb:1e: 7a:e7:dc:c4:46:52:51:96:4f:0f:36:9a:de:cc:51:42:77:56: 30:bc:c7:90:df:d8:a3:71:9d:f8:d3:da:85:cd:26:55:86:48: fe:a9:aa:74:cb:a3:96:27:37:72:6b:3c:ee:9f:6b:45:6f:3a: df:b9:0c:65:35:3f:a9:32:df:16:e7:fb:b0:d7:55:b4:fc:f8: c5:7c:dd:cc:d5:1e:6e:41:c8:55:4e:79:4c:3a:ff:c4:f3:d0: e1:d8:92:38:ff:fc:e6:15:54:e0:a8:7c:f7:66:52:07:65:18: 6a:9e:69:a1:f4:81:a9:c3:96:25:30:8b:bc:b7:0e:4c:f0:a3: c1:4e:e4:d0:d4:14:68:87:12:4c:0f:98:20:f3:23:cd:6b:5c: 88:0d:db:4f:e2:a3:14:ca:c7:a8:91:f4:e7:e7:c0:fd:d5:83: c1:98:9b:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUrJ6azhNFcVDjkG24LdOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ODdhMTY5NjU4NzVmNmY1M2JjYzMxZjBlNDkzYTk2MTU0 ZWI3YjkwHhcNMjUxMjA2MTEwMTE0WhcNMjUxMjA3MTEwMTE0WjAzMTEwLwYDVQQD Eyg2ZmYyN2MwOTUyOTJjMDY4YmU4OGMwNDQ3MTRmNTBlMTZiYjVmNTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PG7j+k9wASqGsIDoP4+i3Jku6tU xvdBlPji9Dwqlv2MjJ+VlbYp7dSqdZkXSfoeBcaxU4NrMDvX99Z1dG7Zp2BXbtOm 5SIo23q3/NIe9vFJZWTJIB2/edLVy9oZ7B+1JmF8dF46AmXwHtC2QUZyQfbxU/gT 45Lw4M8kFf2I1u9fo+6XuFaIwKBYd2/T6RWN+sizRtb6OtOCTydJwkKCvyz3Vk2b 4ByzcA4CaB6Ei8pI501bfQRMfN9UxozMw5KqaS5/esDfjjAo6F9tWTIP3Oc/G5rI pNej5C+LrfDyaPRn2Vs5AiHIY+TlD5BZ55Vs6a3fJ+rNZJGk/HQuJM5ViwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG/yfAlSksBovojARHFPUOFrtfUZMB8GA1UdIwQY MBaAFHiHoWllh19vU7zDHw5JOpYVTre5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUllaGFXV0hYMjlUdk1NZkRrazZsaFZPdDdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xOTdlZWMtNzYyYS00ZTQyLWI5ZDIt NzU2OGExMGRmNDQzLzEvZUllaGFXV0hYMjlUdk1NZkRrazZsaFZPdDdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8xOTdlZWMtNzYyYS00ZTQyLWI5ZDItNzU2OGExMGRmNDQz LzEvZUllaGFXV0hYMjlUdk1NZkRrazZsaFZPdDdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVg8uQGej 0T/FyX08xWVkd1g3CSGffi7mI7aLRTvDqkAqC6UXwgWzw39weCHzgFcClO3q0L3F MeGSHacrf9hJM8XB4yOYZwh6PVBJa61WX+r5fUbG1Kx+vbseeufcxEZSUZZPDzaa 3sxRQndWMLzHkN/Yo3Gd+NPahc0mVYZI/qmqdMujlic3cms87p9rRW8637kMZTU/ qTLfFuf7sNdVtPz4xXzdzNUebkHIVU55TDr/xPPQ4diSOP/85hVU4Kh892ZSB2UY ap5pofSBqcOWJTCLvLcOTPCjwU7k0NQUaIcSTA+YIPMjzWtciA3bT+KjFMrHqJH0 5+fA/dWDwZib2g== -----END CERTIFICATE-----Generated at Sat Dec 6 20:25:56 2025 by rpki-client