This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft File: EHIerWpFdWQ8twMGLAlodV6Cges.mft (raw, json) Hash identifier: iHy5Zno/qf+TRpcHSHMo9mzSZiFCroCzwiTb68TnCdk= Subject key identifier: F6:07:29:97:3F:D1:FA:03:5B:1E:3C:5D:BE:9B:BB:DD:41:1C:B5:D6 Authority key identifier: 10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB Certificate issuer: /CN=10721ead6a4575643cb703062c0968755e8281eb Certificate serial: 019AF1642AF933D1F50B8A348113C51705B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft Manifest number: 0FD5 Signing time: Sat 06 Dec 2025 02:01:04 +0000 Manifest this update: Sat 06 Dec 2025 02:01:04 +0000 Manifest next update: Sun 07 Dec 2025 02:01:04 +0000 Files and hashes: 1: EHIerWpFdWQ8twMGLAlodV6Cges.crl (hash: FR66eROL76A7NVd+jznr7PrhADY92BoWr2fWK3BxZLU=) 2: Fi8wX9cISGjJ7ycNTDrnhsS2nfM.roa (hash: HuNKcd4RHVijmwuiGKzg2wYioOAAJSYuv1pU/fwGAiA=) 3: OVlT_pQqA08Q1UrNiKWeQjISths.roa (hash: R9hMVU1azsLDsV2kScsNqSIvknc94xA2JDe9jn5I16c=) 4: QRJe2bGhDZl-uF_MksH_-yAAdPM.roa (hash: sJzer8Dgec7IoDEanf1HmkhPf2w8HE2htP6s/ryl3CE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:2a:f9:33:d1:f5:0b:8a:34:81:13:c5:17:05:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10721ead6a4575643cb703062c0968755e8281eb Validity Not Before: Dec 6 02:01:04 2025 GMT Not After : Dec 7 02:01:04 2025 GMT Subject: CN=f60729973fd1fa035b1e3c5dbe9bbbdd411cb5d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:40:a6:9b:5f:0a:75:ed:8d:da:fe:2c:fb:51: 5c:4f:65:6e:32:62:a4:1f:41:31:af:9a:4f:08:05: 25:33:89:7b:69:44:61:d4:91:11:0a:92:37:e8:e1: dd:89:bf:79:b3:0f:c9:24:70:43:7e:0f:09:fd:a0: e0:55:27:4c:e2:5a:c8:d3:4e:38:35:74:46:e0:1d: 74:82:e9:df:9a:f8:c3:ff:a4:11:cb:01:f7:c3:cb: 41:4f:b4:ef:8a:a5:7d:bf:b3:fb:82:2f:4c:eb:c6: 53:bb:b5:04:fa:1d:89:88:b7:50:cb:ae:a9:e2:7e: 67:27:04:54:25:65:87:ea:27:8f:eb:dc:29:de:bd: 64:e4:69:22:1b:0c:4f:06:7d:cd:77:61:01:9c:dd: 72:c2:55:dc:d4:f1:72:de:61:01:24:81:ef:cd:07: 75:75:cb:df:c8:2f:32:55:cf:89:85:99:5f:cd:5f: 83:20:6b:d1:c8:6a:b7:95:33:a0:05:10:b3:fb:ef: 13:9f:0f:b6:a6:3c:9f:e5:24:5c:fc:c1:46:53:b4: ee:bf:f3:a2:35:91:77:6a:53:71:62:5a:8b:bf:10: ca:59:3d:71:b4:b1:41:65:27:3b:ca:d7:b7:14:08: 3c:14:20:72:18:13:91:0c:9e:13:81:bc:21:27:8a: 16:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:07:29:97:3F:D1:FA:03:5B:1E:3C:5D:BE:9B:BB:DD:41:1C:B5:D6 X509v3 Authority Key Identifier: keyid:10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:66:e8:22:4f:0c:01:61:20:87:ff:98:51:8a:8f:bf:cc:4d: 56:77:e0:70:0f:e4:ff:ad:75:99:15:2e:8a:78:d7:ba:fa:07: 3a:a4:a0:f6:4f:08:d5:08:26:f8:2a:10:33:ed:68:75:b2:57: 0b:f9:d9:9d:f5:01:f9:e8:87:38:56:3c:a9:80:1b:73:36:76: 91:e0:b5:33:f5:ce:1b:2c:2c:b7:4f:9c:4e:47:f6:31:08:33: 5b:e0:a5:24:e7:36:7c:ef:2c:9d:4b:92:3b:9a:49:a7:be:a7: ad:33:ce:b4:b5:ac:e8:ae:ed:9a:d3:3b:e9:bb:60:b9:c9:c7: e6:e9:6c:10:e3:88:28:bb:17:4d:db:a8:c5:18:c0:7d:33:c2: 22:2e:db:7c:33:bd:36:ea:89:c7:ab:be:c6:eb:62:2c:b8:b4: 7f:19:a2:81:d6:d4:9f:e0:ce:14:07:86:3a:34:ea:91:dc:55: 91:14:f9:ce:57:6f:65:e3:e4:76:a9:c2:05:7d:74:d3:60:03: fe:e6:5b:0e:76:e3:85:ba:ac:a3:9f:94:a9:df:36:27:c7:4b: 45:75:cc:75:3d:64:47:9e:65:cf:4a:95:44:89:62:7e:4b:a4: 56:0f:3e:b9:c3:49:6c:3a:c8:b9:cd:ce:a8:a3:9e:cc:53:0c: bd:02:8d:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZCr5M9H1C4o0gRPFFwWxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNzIxZWFkNmE0NTc1NjQzY2I3MDMwNjJjMDk2ODc1NWU4 MjgxZWIwHhcNMjUxMjA2MDIwMTA0WhcNMjUxMjA3MDIwMTA0WjAzMTEwLwYDVQQD EyhmNjA3Mjk5NzNmZDFmYTAzNWIxZTNjNWRiZTliYmJkZDQxMWNiNWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kCmm18Kde2N2v4s+1FcT2VuMmKk H0Exr5pPCAUlM4l7aURh1JERCpI36OHdib95sw/JJHBDfg8J/aDgVSdM4lrI0044 NXRG4B10gunfmvjD/6QRywH3w8tBT7TviqV9v7P7gi9M68ZTu7UE+h2JiLdQy66p 4n5nJwRUJWWH6ieP69wp3r1k5GkiGwxPBn3Nd2EBnN1ywlXc1PFy3mEBJIHvzQd1 dcvfyC8yVc+JhZlfzV+DIGvRyGq3lTOgBRCz++8Tnw+2pjyf5SRc/MFGU7Tuv/Oi NZF3alNxYlqLvxDKWT1xtLFBZSc7yte3FAg8FCByGBORDJ4TgbwhJ4oWdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPYHKZc/0foDWx48Xb6bu91BHLXWMB8GA1UdIwQY MBaAFBByHq1qRXVkPLcDBiwJaHVegoHrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUhJZXJXcEZkV1E4dHdNR0xBbG9kVjZDZ2VzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9jYTkzNWItMjQ4NC00MDIwLWI4MTQt M2Q0YWU4MGZjNDVkLzEvRUhJZXJXcEZkV1E4dHdNR0xBbG9kVjZDZ2VzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9jYTkzNWItMjQ4NC00MDIwLWI4MTQtM2Q0YWU4MGZjNDVk LzEvRUhJZXJXcEZkV1E4dHdNR0xBbG9kVjZDZ2VzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqGboIk8M AWEgh/+YUYqPv8xNVnfgcA/k/611mRUuinjXuvoHOqSg9k8I1Qgm+CoQM+1odbJX C/nZnfUB+eiHOFY8qYAbczZ2keC1M/XOGywst0+cTkf2MQgzW+ClJOc2fO8snUuS O5pJp76nrTPOtLWs6K7tmtM76btgucnH5ulsEOOIKLsXTduoxRjAfTPCIi7bfDO9 NuqJx6u+xutiLLi0fxmigdbUn+DOFAeGOjTqkdxVkRT5zldvZePkdqnCBX1002AD /uZbDnbjhbqso5+Uqd82J8dLRXXMdT1kR55lz0qVRIlifkukVg8+ucNJbDrIuc3O qKOezFMMvQKNwA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:41 2025 by rpki-client