This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft File: EHbBYnj8gh4e75Mv3qmz3WPKayE.mft (raw, json) Hash identifier: gHyB7pfsVWMhnM1JncjEnTOJ4AsuAJB3Iy5nLnJsAQE= Subject key identifier: 19:DA:E5:93:18:81:06:82:69:8F:1C:F4:50:FF:4A:04:13:37:23:03 Authority key identifier: 10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21 Certificate issuer: /CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21 Certificate serial: 019B3456523DEAEFD1611424BBF564AD1E3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft Manifest number: 07BC Signing time: Fri 19 Dec 2025 02:00:30 +0000 Manifest this update: Fri 19 Dec 2025 02:00:30 +0000 Manifest next update: Sat 20 Dec 2025 02:00:30 +0000 Files and hashes: 1: EHbBYnj8gh4e75Mv3qmz3WPKayE.crl (hash: okePfpVONEhJXRtPauGxl+4hmflkTeyqi9RuzejqD+c=) 2: mfs8Yrq8TGR3i1Sy2Eh6FVf4mhQ.roa (hash: tv507tNB1QXfugt/h+ndpoPCsbGtPaZ5Ph9vwb9XCV0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 02:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:52:3d:ea:ef:d1:61:14:24:bb:f5:64:ad:1e:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21 Validity Not Before: Dec 19 02:00:30 2025 GMT Not After : Dec 20 02:00:30 2025 GMT Subject: CN=19dae59318810682698f1cf450ff4a0413372303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e2:91:9c:67:58:f3:44:09:57:29:17:68:1c: ec:40:d9:a2:5c:98:60:6f:82:7c:bb:a8:1b:41:e9: eb:1b:e3:08:98:10:57:f8:58:d4:e5:75:d2:8a:d1: fc:5d:00:87:9d:45:c7:0a:e0:25:df:2f:5a:4b:04: f3:d0:54:7d:b8:64:c2:8a:ff:e9:7f:d2:1f:e1:e8: 88:c7:c0:9b:8f:48:59:07:66:3c:06:be:d3:60:e5: 63:2d:f5:4a:da:4e:8f:cb:1e:c7:42:db:10:24:53: 80:09:3c:da:db:d4:4b:ec:d0:f8:d0:ff:99:ba:73: f9:08:a1:09:6a:97:14:69:43:d4:32:c3:9d:3a:b5: 71:ff:14:c7:06:39:c9:57:2f:ba:65:70:de:c1:2c: b9:a6:be:c7:8c:ad:88:d7:76:44:f2:08:d1:f0:49: 92:eb:aa:9e:38:e9:d4:30:03:3c:7e:5d:0f:72:cf: 35:ba:88:21:cf:cf:78:55:50:57:e7:21:1f:2e:f1: e9:c5:61:93:17:25:25:b3:46:85:42:23:bb:b8:e3: f6:1b:18:3b:f0:28:9c:5a:84:23:2e:33:5b:a5:f4: 03:4c:71:d9:a1:c6:5e:c3:b2:3a:7a:3c:fc:87:11: 0a:ec:64:0b:09:11:b3:39:77:49:e1:dc:76:c4:c8: 7f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:DA:E5:93:18:81:06:82:69:8F:1C:F4:50:FF:4A:04:13:37:23:03 X509v3 Authority Key Identifier: keyid:10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:42:88:e5:a4:f6:fc:db:e0:90:e4:83:7e:82:b5:64:e4:52: 72:d9:32:41:af:16:60:05:0b:e5:18:bd:65:62:f7:76:35:dc: c4:67:38:48:f0:6f:fe:97:17:a4:d5:fc:6b:60:fb:71:da:b6: ee:1d:63:03:ac:68:04:6b:c0:35:f0:d1:2a:c6:50:8a:d1:d7: c2:57:8c:a8:e8:6d:58:06:b1:23:77:8e:ba:00:9b:37:86:50: d6:50:53:9c:7e:16:3f:dd:73:8e:8f:c2:01:0a:e2:fe:63:d5: f9:17:49:fa:14:1b:64:28:bf:f1:85:52:38:ba:70:4d:f9:19: 6c:49:b5:c8:7e:86:c3:ed:d3:b2:5f:63:a9:b0:f3:ee:9d:26: 18:66:5f:ba:9d:cc:a1:0a:03:0d:5e:d2:f5:8e:90:58:10:c3: a1:9d:6f:d5:e2:ea:b2:d1:7a:72:a5:7e:b2:27:aa:eb:9b:10: ba:e6:9e:fb:6f:21:ed:00:fa:18:05:b0:84:29:e2:46:ca:65: 46:44:bd:40:99:ca:ca:3b:ae:fa:a7:ad:9f:de:a7:e2:f0:b2: e8:2a:24:7c:45:7d:29:ad:05:1a:4a:6c:0b:77:dd:f5:65:5d: 0e:7f:b4:13:ac:df:d3:8b:ff:8f:75:bc:c1:bf:8d:78:47:5a: c2:3f:77:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VlI96u/RYRQku/VkrR46MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNzZjMTYyNzhmYzgyMWUxZWVmOTMyZmRlYTliM2RkNjNj YTZiMjEwHhcNMjUxMjE5MDIwMDMwWhcNMjUxMjIwMDIwMDMwWjAzMTEwLwYDVQQD EygxOWRhZTU5MzE4ODEwNjgyNjk4ZjFjZjQ1MGZmNGEwNDEzMzcyMzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOKRnGdY80QJVykXaBzsQNmiXJhg b4J8u6gbQenrG+MImBBX+FjU5XXSitH8XQCHnUXHCuAl3y9aSwTz0FR9uGTCiv/p f9If4eiIx8Cbj0hZB2Y8Br7TYOVjLfVK2k6Pyx7HQtsQJFOACTza29RL7ND40P+Z unP5CKEJapcUaUPUMsOdOrVx/xTHBjnJVy+6ZXDewSy5pr7HjK2I13ZE8gjR8EmS 66qeOOnUMAM8fl0Pcs81uoghz894VVBX5yEfLvHpxWGTFyUls0aFQiO7uOP2Gxg7 8CicWoQjLjNbpfQDTHHZocZew7I6ejz8hxEK7GQLCRGzOXdJ4dx2xMh/TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBna5ZMYgQaCaY8c9FD/SgQTNyMDMB8GA1UdIwQY MBaAFBB2wWJ4/IIeHu+TL96ps91jymshMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUhiQlluajhnaDRlNzVNdjNxbXozV1BLYXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS84MmIxMGUtNjM4Zi00MjY3LWJjMjQt ZDQ5NGQ5OTdkMzk4LzEvRUhiQlluajhnaDRlNzVNdjNxbXozV1BLYXlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS84MmIxMGUtNjM4Zi00MjY3LWJjMjQtZDQ5NGQ5OTdkMzk4 LzEvRUhiQlluajhnaDRlNzVNdjNxbXozV1BLYXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqUKI5aT2 /NvgkOSDfoK1ZORSctkyQa8WYAUL5Ri9ZWL3djXcxGc4SPBv/pcXpNX8a2D7cdq2 7h1jA6xoBGvANfDRKsZQitHXwleMqOhtWAaxI3eOugCbN4ZQ1lBTnH4WP91zjo/C AQri/mPV+RdJ+hQbZCi/8YVSOLpwTfkZbEm1yH6Gw+3Tsl9jqbDz7p0mGGZfup3M oQoDDV7S9Y6QWBDDoZ1v1eLqstF6cqV+sieq65sQuuae+28h7QD6GAWwhCniRspl RkS9QJnKyjuu+qetn96n4vCy6CokfEV9Ka0FGkpsC3fd9WVdDn+0E6zf04v/j3W8 wb+NeEdawj939A== -----END CERTIFICATE-----Generated at Fri Dec 19 11:41:21 2025 by rpki-client