This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft File: eh_3AnJudbOmjxGC5H_7zcrlFeU.mft (raw, json) Hash identifier: wWEq5PMUyEC8Oifb82qQs+WintwRTFU3Q+MBQPJ8dUY= Subject key identifier: C3:98:C5:68:5C:B4:2D:B0:67:71:91:86:93:A2:90:B9:4A:27:CD:A2 Authority key identifier: 7A:1F:F7:02:72:6E:75:B3:A6:8F:11:82:E4:7F:FB:CD:CA:E5:15:E5 Certificate issuer: /CN=7a1ff702726e75b3a68f1182e47ffbcdcae515e5 Certificate serial: 019AF12DAB010DC0DF09767F044F970CC295 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft Manifest number: 1609 Signing time: Sat 06 Dec 2025 01:01:33 +0000 Manifest this update: Sat 06 Dec 2025 01:01:33 +0000 Manifest next update: Sun 07 Dec 2025 01:01:33 +0000 Files and hashes: 1: eh_3AnJudbOmjxGC5H_7zcrlFeU.crl (hash: X4z8ZTP2u32z6TMk9nDjk94lrY4/+dx41lUFCe8XTSk=) 2: mp3Ps9Wb-eE83MSoTQrKorxtZTg.roa (hash: Whr3Evryw6Na+L//5TTMD5LCJqnqbVVaoyp0nqLqIfA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:ab:01:0d:c0:df:09:76:7f:04:4f:97:0c:c2:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a1ff702726e75b3a68f1182e47ffbcdcae515e5 Validity Not Before: Dec 6 01:01:33 2025 GMT Not After : Dec 7 01:01:33 2025 GMT Subject: CN=c398c5685cb42db06771918693a290b94a27cda2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a4:bf:f8:10:af:22:41:f5:71:f6:5a:c9:9b: 1e:40:b3:d3:9a:35:e6:e0:fe:03:f7:c1:c6:8b:aa: 45:43:a6:05:dc:88:f7:29:ba:41:d0:8e:0f:f2:75: 06:74:7a:9f:4a:4f:23:f6:34:47:d0:03:ab:98:c5: 74:bb:f8:09:19:e8:48:d2:7d:7c:eb:e8:0d:82:a5: 43:6a:2f:e5:a9:9d:94:ce:c5:56:1e:8a:1c:1f:c2: 2a:3f:2e:be:b1:e7:f8:ec:50:14:66:2d:4f:3e:db: 0e:ad:0e:f8:9b:d3:32:f4:21:da:f7:67:fa:33:c1: 33:02:9c:43:6c:16:e2:ea:7d:01:b7:59:32:d7:d0: d9:ec:fb:33:7a:85:65:61:f7:a3:9d:c5:07:96:4a: 51:3a:e1:f5:b7:f1:32:e8:92:10:06:4c:69:2e:72: 2f:ad:90:41:02:f1:9c:97:c3:0d:2c:83:60:f4:07: 10:e0:7f:5e:ba:45:ca:53:f7:b8:9d:b8:51:36:8a: d6:09:94:3b:d3:e9:3e:67:61:41:04:7b:a6:a5:b0: 71:91:4a:10:51:ae:e5:24:b0:c9:00:c9:05:1d:53: d7:42:c6:8d:bd:38:6c:b2:5d:d0:65:20:d0:6e:48: 60:d5:47:a4:d1:6b:59:c5:88:a5:f3:2b:df:62:4c: db:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:98:C5:68:5C:B4:2D:B0:67:71:91:86:93:A2:90:B9:4A:27:CD:A2 X509v3 Authority Key Identifier: keyid:7A:1F:F7:02:72:6E:75:B3:A6:8F:11:82:E4:7F:FB:CD:CA:E5:15:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e1:69:ad:71:12:46:48:20:44:a9:e7:f2:1f:94:b1:d5:64:a8: 10:d6:93:ba:1d:fe:ef:a1:92:7a:57:f6:94:24:08:42:7f:85: 0d:c2:16:c8:bb:ea:d7:6f:c7:a9:59:29:87:78:f6:b6:7d:f6: 8b:09:3e:8d:be:e3:02:10:21:b9:c4:f8:40:17:d8:c6:1b:6c: 9e:00:ec:08:16:92:45:ca:e5:46:25:3c:9d:ad:38:2b:5d:b9: 95:23:9f:56:0a:d4:cc:00:6c:68:ce:6d:85:b5:dd:dc:18:2f: 44:29:94:ee:08:f6:f7:79:34:71:ed:2f:1b:c7:30:35:1f:e9: aa:cc:fc:e6:57:a6:c0:54:62:67:f2:cd:fe:c0:d4:d6:e0:29: 44:5d:18:32:a2:f6:9d:34:d1:c6:01:5c:70:b5:97:8b:ca:95: 3c:61:54:82:61:1e:12:00:1e:10:35:6a:a3:85:24:5c:e4:39: 69:44:70:53:9b:ff:fc:05:84:ca:ba:7e:66:3b:ba:72:92:b1: 45:5d:d7:be:41:dc:34:a3:f4:f1:87:58:71:42:47:62:59:c8: 5d:62:5e:65:eb:6e:83:1e:72:b2:18:48:99:46:03:99:df:4d: 67:c3:95:37:38:94:ab:e0:c6:58:d0:9d:5b:2d:df:f1:57:4f: 75:9f:36:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLasBDcDfCXZ/BE+XDMKVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMWZmNzAyNzI2ZTc1YjNhNjhmMTE4MmU0N2ZmYmNkY2Fl NTE1ZTUwHhcNMjUxMjA2MDEwMTMzWhcNMjUxMjA3MDEwMTMzWjAzMTEwLwYDVQQD EyhjMzk4YzU2ODVjYjQyZGIwNjc3MTkxODY5M2EyOTBiOTRhMjdjZGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6S/+BCvIkH1cfZayZseQLPTmjXm 4P4D98HGi6pFQ6YF3Ij3KbpB0I4P8nUGdHqfSk8j9jRH0AOrmMV0u/gJGehI0n18 6+gNgqVDai/lqZ2UzsVWHoocH8IqPy6+sef47FAUZi1PPtsOrQ74m9My9CHa92f6 M8EzApxDbBbi6n0Bt1ky19DZ7PszeoVlYfejncUHlkpROuH1t/Ey6JIQBkxpLnIv rZBBAvGcl8MNLINg9AcQ4H9eukXKU/e4nbhRNorWCZQ70+k+Z2FBBHumpbBxkUoQ Ua7lJLDJAMkFHVPXQsaNvThssl3QZSDQbkhg1Uek0WtZxYil8yvfYkzb0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMOYxWhctC2wZ3GRhpOikLlKJ82iMB8GA1UdIwQY MBaAFHof9wJybnWzpo8RguR/+83K5RXlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWhfM0FuSnVkYk9tanhHQzVIXzd6Y3JsRmVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82ZmVmMDMtMDY3MC00MWFiLWE2Yzkt NDNhZGI2MDVmNjhhLzEvZWhfM0FuSnVkYk9tanhHQzVIXzd6Y3JsRmVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC82ZmVmMDMtMDY3MC00MWFiLWE2YzktNDNhZGI2MDVmNjhh LzEvZWhfM0FuSnVkYk9tanhHQzVIXzd6Y3JsRmVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4WmtcRJG SCBEqefyH5Sx1WSoENaTuh3+76GSelf2lCQIQn+FDcIWyLvq12/HqVkph3j2tn32 iwk+jb7jAhAhucT4QBfYxhtsngDsCBaSRcrlRiU8na04K125lSOfVgrUzABsaM5t hbXd3BgvRCmU7gj293k0ce0vG8cwNR/pqsz85lemwFRiZ/LN/sDU1uApRF0YMqL2 nTTRxgFccLWXi8qVPGFUgmEeEgAeEDVqo4UkXOQ5aURwU5v//AWEyrp+Zju6cpKx RV3XvkHcNKP08YdYcUJHYlnIXWJeZetugx5yshhImUYDmd9NZ8OVNziUq+DGWNCd Wy3f8VdPdZ82Ow== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:57 2025 by rpki-client