This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft File: EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft (raw, json) Hash identifier: z4ed2cWX1+u57201cXHUxZqjIZpCwlsaJb6+weNtcZ8= Subject key identifier: 3C:C7:3E:9C:13:E4:86:C8:9A:B8:6A:68:E3:5A:ED:B4:C4:AC:70:61 Authority key identifier: 10:79:7E:B5:F9:AA:9A:BE:52:00:8C:E7:F2:1A:B4:4A:FD:EE:A0:D0 Certificate issuer: /CN=10797eb5f9aa9abe52008ce7f21ab44afdeea0d0 Certificate serial: 019AF389E66C835108AF1E02E1186AFA5C29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 12:01:32 +0000 Manifest this update: Sat 06 Dec 2025 12:01:32 +0000 Manifest next update: Sun 07 Dec 2025 12:01:32 +0000 Files and hashes: 1: EHl-tfmqmr5SAIzn8hq0Sv3uoNA.crl (hash: 58JMx+49zS2kkEY7pVAxQvJ/MbyTwa5KyS7k5xX9/CY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft rsync://rpki.ripe.net/repository/DEFAULT/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:e6:6c:83:51:08:af:1e:02:e1:18:6a:fa:5c:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10797eb5f9aa9abe52008ce7f21ab44afdeea0d0 Validity Not Before: Dec 6 12:01:32 2025 GMT Not After : Dec 7 12:01:32 2025 GMT Subject: CN=3cc73e9c13e486c89ab86a68e35aedb4c4ac7061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0e:90:1c:8e:1c:0b:3a:75:e3:0d:08:4e:a1: 4a:cf:4f:c8:fe:a5:9e:2f:6e:1b:a8:9f:5b:cf:40: bf:ce:be:ba:01:74:fa:80:4c:24:16:37:8a:9a:81: 2d:de:1c:4b:56:cc:2b:b9:fa:ec:53:c5:ea:69:b6: 1a:d8:89:ab:1e:d4:56:95:0d:7f:31:bc:3d:dc:55: f4:0e:e6:84:e0:a1:72:18:45:7d:5b:a9:9d:bb:43: 84:19:26:4f:cc:4e:f8:f4:66:bf:a8:f3:68:d3:6e: 98:66:73:36:08:22:b3:c8:16:35:60:d7:01:a0:5e: c4:99:aa:b5:c0:bd:83:da:e7:c1:f0:c3:2e:60:c1: af:ee:c1:6a:33:58:32:9c:13:b4:ff:7a:cc:dc:66: 13:e3:c9:1e:aa:8e:a2:3d:3e:70:da:d4:a7:d5:d8: 5d:10:3d:7f:b5:08:24:f4:89:f9:0e:4a:0e:24:c3: 9e:0e:9e:64:36:25:86:d3:53:2a:59:62:87:c6:12: 5b:a1:57:5c:33:12:41:78:02:b5:75:42:f4:62:4b: 66:e4:5b:f3:e3:f3:38:a7:49:5f:07:ae:48:c5:c9: da:f2:f0:a5:d3:7a:02:e2:b9:64:fa:79:c4:71:80: 8b:7e:0a:57:38:5f:02:fa:b0:3e:2c:29:50:9f:93: 64:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C7:3E:9C:13:E4:86:C8:9A:B8:6A:68:E3:5A:ED:B4:C4:AC:70:61 X509v3 Authority Key Identifier: keyid:10:79:7E:B5:F9:AA:9A:BE:52:00:8C:E7:F2:1A:B4:4A:FD:EE:A0:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:0d:90:f1:a3:9a:7c:95:a4:5d:b5:ea:a1:a6:50:8b:4a:42: 3c:4c:9a:74:07:a9:ef:ef:12:dd:66:ff:4d:dd:8e:c7:f3:dd: 2c:e0:7a:11:3b:2a:09:23:18:f7:8f:74:41:36:d0:ed:3e:69: c6:ce:de:ba:99:15:f8:b1:5d:85:31:ad:55:16:a7:11:62:63: f7:71:48:c9:63:3c:7b:b9:d6:ce:47:e8:2a:48:3d:f6:f2:2e: 1f:07:2a:c7:70:c7:86:5a:f8:8c:b2:0c:ef:16:60:7c:0e:be: 38:72:21:e8:f3:15:1e:c2:90:9f:16:5c:01:10:74:57:99:1a: e9:73:ac:35:df:d6:ec:82:54:cd:70:28:36:5f:4c:5f:ea:e3: 9d:bf:a7:e9:96:82:05:47:8d:a7:64:e7:5d:95:0f:fa:74:08: 7e:4f:c7:8e:43:1d:e0:cb:0d:14:a4:d6:86:35:46:ed:7c:66: df:47:0f:9c:dc:82:96:ee:5e:7c:d6:ca:3c:e0:b3:b1:74:fe: 04:ab:78:66:cc:e7:dd:a2:db:0a:1c:05:56:94:86:19:9f:0e: 73:9f:b6:1d:06:d9:75:05:6e:86:cf:99:be:90:cb:ee:6b:da: e5:54:6d:31:bc:36:de:9c:07:b6:a6:49:34:de:4f:22:2a:db: 31:60:e2:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzieZsg1EIrx4C4Rhq+lwpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNzk3ZWI1ZjlhYTlhYmU1MjAwOGNlN2YyMWFiNDRhZmRl ZWEwZDAwHhcNMjUxMjA2MTIwMTMyWhcNMjUxMjA3MTIwMTMyWjAzMTEwLwYDVQQD EygzY2M3M2U5YzEzZTQ4NmM4OWFiODZhNjhlMzVhZWRiNGM0YWM3MDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3g6QHI4cCzp14w0ITqFKz0/I/qWe L24bqJ9bz0C/zr66AXT6gEwkFjeKmoEt3hxLVswrufrsU8XqabYa2ImrHtRWlQ1/ Mbw93FX0DuaE4KFyGEV9W6mdu0OEGSZPzE749Ga/qPNo026YZnM2CCKzyBY1YNcB oF7Emaq1wL2D2ufB8MMuYMGv7sFqM1gynBO0/3rM3GYT48keqo6iPT5w2tSn1dhd ED1/tQgk9In5DkoOJMOeDp5kNiWG01MqWWKHxhJboVdcMxJBeAK1dUL0Yktm5Fvz 4/M4p0lfB65Ixcna8vCl03oC4rlk+nnEcYCLfgpXOF8C+rA+LClQn5NkbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzHPpwT5IbImrhqaONa7bTErHBhMB8GA1UdIwQY MBaAFBB5frX5qpq+UgCM5/IatEr97qDQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUhsLXRmbXFtcjVTQUl6bjhocTBTdjN1b05BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9mNWM4YTMtZTVjYS00MWFlLWFmOGEt OGRiNzA4MzQ3NDM4LzEvRUhsLXRmbXFtcjVTQUl6bjhocTBTdjN1b05BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9mNWM4YTMtZTVjYS00MWFlLWFmOGEtOGRiNzA4MzQ3NDM4 LzEvRUhsLXRmbXFtcjVTQUl6bjhocTBTdjN1b05BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkw2Q8aOa fJWkXbXqoaZQi0pCPEyadAep7+8S3Wb/Td2Ox/PdLOB6ETsqCSMY9490QTbQ7T5p xs7eupkV+LFdhTGtVRanEWJj93FIyWM8e7nWzkfoKkg99vIuHwcqx3DHhlr4jLIM 7xZgfA6+OHIh6PMVHsKQnxZcARB0V5ka6XOsNd/W7IJUzXAoNl9MX+rjnb+n6ZaC BUeNp2TnXZUP+nQIfk/HjkMd4MsNFKTWhjVG7Xxm30cPnNyClu5efNbKPOCzsXT+ BKt4Zszn3aLbChwFVpSGGZ8Oc5+2HQbZdQVuhs+ZvpDL7mva5VRtMbw23pwHtqZJ NN5PIirbMWDiuA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:45:24 2025 by rpki-client