This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft File: EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft (raw, json) Hash identifier: E+ZwRK/xIZ5I4miHxoYo/4oeiV9p4FUphuqXN4zJoxI= Subject key identifier: 13:4B:B0:5B:F0:3D:29:30:38:AA:BC:33:E1:49:0B:13:A6:AF:91:18 Authority key identifier: 10:79:7E:B5:F9:AA:9A:BE:52:00:8C:E7:F2:1A:B4:4A:FD:EE:A0:D0 Certificate issuer: /CN=10797eb5f9aa9abe52008ce7f21ab44afdeea0d0 Certificate serial: 019B2B8B35659EB66AF28C73BE7415BA573A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft Manifest number: 177B Signing time: Wed 17 Dec 2025 09:01:41 +0000 Manifest this update: Wed 17 Dec 2025 09:01:41 +0000 Manifest next update: Thu 18 Dec 2025 09:01:41 +0000 Files and hashes: 1: EHl-tfmqmr5SAIzn8hq0Sv3uoNA.crl (hash: dSaqhbMzHGPgV1XuMmauE4RnjNi8sQxdedc9GBLHZqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft rsync://rpki.ripe.net/repository/DEFAULT/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8b:35:65:9e:b6:6a:f2:8c:73:be:74:15:ba:57:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10797eb5f9aa9abe52008ce7f21ab44afdeea0d0 Validity Not Before: Dec 17 09:01:41 2025 GMT Not After : Dec 18 09:01:41 2025 GMT Subject: CN=134bb05bf03d293038aabc33e1490b13a6af9118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a3:5c:cc:95:1f:43:92:53:e5:43:5f:bd:ea: c5:f8:36:3f:a7:9d:53:0e:61:8b:2c:70:5a:45:88: 4d:43:dd:ed:41:4f:1e:dd:29:d2:34:cb:76:8e:73: 46:e2:67:12:71:94:8e:5c:cb:61:b3:08:76:76:b7: c7:be:ea:f5:2c:5c:5b:29:db:6d:da:bc:e6:db:fe: a0:e1:e0:0c:20:ff:2e:6e:54:9b:22:f1:7c:d0:57: fb:46:de:e5:f9:78:8f:90:aa:ab:a7:70:92:3f:d9: 7d:05:88:b9:d6:e3:7c:a2:f7:d9:f3:f6:a8:53:4f: 35:e1:a0:9c:c0:65:9e:66:f7:e2:8b:55:7d:ec:e4: 8f:64:7e:1e:61:54:71:39:eb:3b:02:fa:09:a1:bf: c8:df:78:18:ac:6c:f1:6e:4c:c8:06:ff:14:74:1a: c2:51:00:63:48:6c:2b:79:fd:12:d3:cc:ed:35:c0: 29:5a:3a:0a:50:0f:0c:cd:49:ba:1d:42:4c:cf:61: 79:a9:08:29:8c:43:74:70:23:b1:3d:89:87:7a:bb: 33:bc:9a:6d:4e:60:27:5b:ec:25:4b:bc:60:63:4e: 24:1e:95:2e:68:76:e0:ac:cf:c6:49:b7:c3:a7:aa: e6:16:13:3e:3b:6d:be:8c:68:b3:b2:4e:5c:03:b7: e2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:4B:B0:5B:F0:3D:29:30:38:AA:BC:33:E1:49:0B:13:A6:AF:91:18 X509v3 Authority Key Identifier: keyid:10:79:7E:B5:F9:AA:9A:BE:52:00:8C:E7:F2:1A:B4:4A:FD:EE:A0:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:3d:4c:fb:03:12:f9:28:3d:75:5e:6f:12:fd:9c:a5:1e:fc: 40:51:a1:a9:72:87:bb:07:7f:20:2d:d1:fa:18:b6:f4:d2:e6: 20:76:6e:73:47:a6:c9:66:a7:f6:7d:ff:50:d7:da:01:4c:b6: 1d:ff:18:ee:56:b7:b5:6f:85:6e:ce:fb:82:85:ad:e2:f3:1e: b1:48:cb:50:04:95:2d:86:80:59:eb:e2:f0:53:75:91:ef:05: 49:50:09:cc:2b:46:5d:9d:5c:25:90:bf:da:0f:1e:36:5b:7b: 0d:16:ee:dc:dc:e8:a1:0a:2f:c0:aa:cf:d7:f8:db:2f:98:5a: a2:92:05:92:05:3a:1c:70:ce:ae:12:07:a0:e1:3c:ff:9f:31: 4a:26:d8:98:da:43:b4:e6:cd:65:a8:9a:a5:77:52:ad:88:25: 21:f3:20:74:5b:89:33:75:4e:93:76:0d:8a:ac:46:02:cf:b2: 04:a2:04:e0:6e:50:22:bd:16:55:f2:20:ae:88:d3:3d:04:53: 97:8e:ab:7d:d3:d4:3f:3b:d6:72:e1:8c:04:b9:97:f7:18:5b: 60:ab:2c:9c:05:e2:81:22:a5:5b:38:c1:2f:1b:ee:65:a0:7c: e8:0d:59:d4:7d:4b:ea:2a:2a:b3:28:92:d9:d2:f7:2e:1f:21: 0c:6e:66:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrizVlnrZq8oxzvnQVulc6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNzk3ZWI1ZjlhYTlhYmU1MjAwOGNlN2YyMWFiNDRhZmRl ZWEwZDAwHhcNMjUxMjE3MDkwMTQxWhcNMjUxMjE4MDkwMTQxWjAzMTEwLwYDVQQD EygxMzRiYjA1YmYwM2QyOTMwMzhhYWJjMzNlMTQ5MGIxM2E2YWY5MTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6NczJUfQ5JT5UNfverF+DY/p51T DmGLLHBaRYhNQ93tQU8e3SnSNMt2jnNG4mcScZSOXMthswh2drfHvur1LFxbKdtt 2rzm2/6g4eAMIP8ublSbIvF80Ff7Rt7l+XiPkKqrp3CSP9l9BYi51uN8ovfZ8/ao U0814aCcwGWeZvfii1V97OSPZH4eYVRxOes7AvoJob/I33gYrGzxbkzIBv8UdBrC UQBjSGwref0S08ztNcApWjoKUA8MzUm6HUJMz2F5qQgpjEN0cCOxPYmHerszvJpt TmAnW+wlS7xgY04kHpUuaHbgrM/GSbfDp6rmFhM+O22+jGizsk5cA7fi0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBNLsFvwPSkwOKq8M+FJCxOmr5EYMB8GA1UdIwQY MBaAFBB5frX5qpq+UgCM5/IatEr97qDQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUhsLXRmbXFtcjVTQUl6bjhocTBTdjN1b05BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9mNWM4YTMtZTVjYS00MWFlLWFmOGEt OGRiNzA4MzQ3NDM4LzEvRUhsLXRmbXFtcjVTQUl6bjhocTBTdjN1b05BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9mNWM4YTMtZTVjYS00MWFlLWFmOGEtOGRiNzA4MzQ3NDM4 LzEvRUhsLXRmbXFtcjVTQUl6bjhocTBTdjN1b05BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkz1M+wMS +Sg9dV5vEv2cpR78QFGhqXKHuwd/IC3R+hi29NLmIHZuc0emyWan9n3/UNfaAUy2 Hf8Y7la3tW+Fbs77goWt4vMesUjLUASVLYaAWevi8FN1ke8FSVAJzCtGXZ1cJZC/ 2g8eNlt7DRbu3NzooQovwKrP1/jbL5haopIFkgU6HHDOrhIHoOE8/58xSibYmNpD tObNZaiapXdSrYglIfMgdFuJM3VOk3YNiqxGAs+yBKIE4G5QIr0WVfIgrojTPQRT l46rfdPUPzvWcuGMBLmX9xhbYKssnAXigSKlWzjBLxvuZaB86A1Z1H1L6ioqsyiS 2dL3Lh8hDG5m/Q== -----END CERTIFICATE-----Generated at Wed Dec 17 13:46:11 2025 by rpki-client