This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft File: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft (raw, json) Hash identifier: 9FfOEfd9/B9hLvJgfAzX6z82qCLcXkUhi3hbAmEzAac= Subject key identifier: AE:C1:B7:92:15:A9:E9:D6:D2:68:7D:12:37:27:17:3C:E1:F4:96:5D Authority key identifier: 7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59 Certificate issuer: /CN=7be907dd202152cf1902bedbecb19a2d72ac0859 Certificate serial: 019AF2AD933BC016B0B8F4983ACD645F0C4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft Manifest number: 0E9A Signing time: Sat 06 Dec 2025 08:00:52 +0000 Manifest this update: Sat 06 Dec 2025 08:00:52 +0000 Manifest next update: Sun 07 Dec 2025 08:00:52 +0000 Files and hashes: 1: 7HrDROWVcljE8-8l6AcztjVNWWw.roa (hash: aPUy9G990LG8Gt7ev2zQpoBPfmmiK94lRTjU13MQxug=) 2: AC883ZSFeLZkC1mvfN3COR1ZIn0.roa (hash: yFCKOZ3uJ8W8rt1Xv99w8FDNXVYQbjjKrbhWZG8+e8A=) 3: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl (hash: J4aMY/mTN4LscM0kWMtJJ8bTWcohVDj5XHqi8A6O/qs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:93:3b:c0:16:b0:b8:f4:98:3a:cd:64:5f:0c:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7be907dd202152cf1902bedbecb19a2d72ac0859 Validity Not Before: Dec 6 08:00:52 2025 GMT Not After : Dec 7 08:00:52 2025 GMT Subject: CN=aec1b79215a9e9d6d2687d123727173ce1f4965d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:96:95:09:41:1d:1d:d9:10:ed:64:2d:ec:19: 15:85:fe:b9:47:f9:a0:88:83:ef:51:60:bd:97:6e: 96:65:28:98:5e:fa:29:76:21:66:d3:a0:12:55:5c: 1f:a1:a5:c7:8c:88:03:80:2b:74:6a:c5:61:c4:f0: 4e:2d:27:29:c9:94:e4:5a:1c:a2:9c:fe:72:ee:bb: b7:6b:b7:66:31:c1:c8:af:c7:33:68:07:48:38:23: 50:f6:67:71:6d:8d:e4:a6:06:71:01:9e:d4:13:8a: 57:7c:e4:d1:22:2e:71:01:fc:96:50:17:36:28:0a: 3d:b5:32:ed:ac:82:db:21:cb:49:f7:a5:57:01:16: 41:65:3a:fd:b2:b1:36:d0:68:e9:f8:45:5e:17:3b: 3f:cb:7c:c8:f7:6a:69:41:7b:8b:cc:c2:e0:11:3c: fc:1b:3b:01:5d:a4:6a:ff:65:a6:85:b3:25:16:a5: 23:1d:3c:9c:1f:bb:09:1e:47:81:09:15:65:68:e3: 4c:9a:26:66:86:c3:95:0a:63:6f:9c:f8:c1:89:b0: 9a:eb:22:30:5b:a7:b6:76:22:6b:ff:64:f8:85:12: cb:cd:00:c4:59:e4:92:4a:22:17:3b:75:04:a7:b3: af:31:ea:b4:35:a9:05:34:4c:ff:47:08:80:4e:f1: fd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C1:B7:92:15:A9:E9:D6:D2:68:7D:12:37:27:17:3C:E1:F4:96:5D X509v3 Authority Key Identifier: keyid:7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:54:b9:07:c2:52:41:c9:53:64:e1:d0:36:3e:e0:b5:66:d0: 10:01:d9:e6:b8:0c:b7:ce:e9:4d:df:07:3e:71:4a:41:e6:03: 5c:6a:f0:7c:35:18:69:ff:bc:ea:69:7f:ca:fd:3a:e2:df:fc: 74:a9:7f:31:0a:30:d7:44:54:16:55:ef:3c:39:f8:2e:2f:c8: 40:62:28:2d:9f:bf:c1:2a:e5:f0:1b:94:ef:9d:af:94:83:bf: e2:e4:95:51:2d:3e:5c:10:fe:6e:1e:c2:6a:db:b1:5f:a0:37: f5:e6:c4:92:ed:4c:be:66:55:4b:15:eb:be:be:9e:93:05:5e: e0:51:bc:05:06:45:7d:2f:9d:7a:9c:c3:94:69:68:ad:b1:e6: d9:16:89:be:79:bd:d8:7c:ab:bc:bc:1e:2e:e9:43:db:fc:6f: 28:78:9a:9d:36:71:28:07:0c:fc:5a:fe:c8:57:09:2d:2e:6d: 4a:a0:7a:ec:c9:53:9b:50:0a:96:0a:0f:ee:a0:d0:b3:92:8e: f8:48:c5:db:75:d2:d2:3a:4b:19:07:51:4f:ca:2f:0c:4a:6d: fa:63:fd:27:95:33:2d:4e:3e:2f:2b:e3:43:a7:3e:c8:bd:b9: bb:be:73:80:ee:c3:25:98:63:65:fd:32:09:51:90:e8:87:d1: 60:ee:1b:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrZM7wBawuPSYOs1kXwxLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiZTkwN2RkMjAyMTUyY2YxOTAyYmVkYmVjYjE5YTJkNzJh YzA4NTkwHhcNMjUxMjA2MDgwMDUyWhcNMjUxMjA3MDgwMDUyWjAzMTEwLwYDVQQD EyhhZWMxYjc5MjE1YTllOWQ2ZDI2ODdkMTIzNzI3MTczY2UxZjQ5NjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJaVCUEdHdkQ7WQt7BkVhf65R/mg iIPvUWC9l26WZSiYXvopdiFm06ASVVwfoaXHjIgDgCt0asVhxPBOLScpyZTkWhyi nP5y7ru3a7dmMcHIr8czaAdIOCNQ9mdxbY3kpgZxAZ7UE4pXfOTRIi5xAfyWUBc2 KAo9tTLtrILbIctJ96VXARZBZTr9srE20Gjp+EVeFzs/y3zI92ppQXuLzMLgETz8 GzsBXaRq/2WmhbMlFqUjHTycH7sJHkeBCRVlaONMmiZmhsOVCmNvnPjBibCa6yIw W6e2diJr/2T4hRLLzQDEWeSSSiIXO3UEp7OvMeq0NakFNEz/RwiATvH95wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7Bt5IVqenW0mh9EjcnFzzh9JZdMB8GA1UdIwQY MBaAFHvpB90gIVLPGQK+2+yxmi1yrAhZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZS1rSDNTQWhVczhaQXI3YjdMR2FMWEtzQ0ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yNWU3NmEtZDE0MC00ZTBiLTg4ZTQt ZWYyMTkzODFmMTBlLzEvZS1rSDNTQWhVczhaQXI3YjdMR2FMWEtzQ0ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8yNWU3NmEtZDE0MC00ZTBiLTg4ZTQtZWYyMTkzODFmMTBl LzEvZS1rSDNTQWhVczhaQXI3YjdMR2FMWEtzQ0ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ1S5B8JS QclTZOHQNj7gtWbQEAHZ5rgMt87pTd8HPnFKQeYDXGrwfDUYaf+86ml/yv064t/8 dKl/MQow10RUFlXvPDn4Li/IQGIoLZ+/wSrl8BuU752vlIO/4uSVUS0+XBD+bh7C atuxX6A39ebEku1MvmZVSxXrvr6ekwVe4FG8BQZFfS+depzDlGlorbHm2RaJvnm9 2HyrvLweLulD2/xvKHianTZxKAcM/Fr+yFcJLS5tSqB67MlTm1AKlgoP7qDQs5KO +EjF23XS0jpLGQdRT8ovDEpt+mP9J5UzLU4+LyvjQ6c+yL25u75zgO7DJZhjZf0y CVGQ6IfRYO4bXg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:02 2025 by rpki-client