This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft File: ehuwNttA15nYYRmKUkOzwD1Wwgo.mft (raw, json) Hash identifier: IqNCiSzhZXup6iEiviVxqjWYchZP6Nry5aU1FbPrYHU= Subject key identifier: A0:D4:42:5A:70:82:AB:2B:06:82:66:5C:D5:48:30:87:D8:87:6C:82 Authority key identifier: 7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A Certificate issuer: /CN=7a1bb036db40d799d861198a5243b3c03d56c20a Certificate serial: 019AF12D5F0D49DC942BCAD15FC44FA94070 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft Manifest number: 02A8 Signing time: Sat 06 Dec 2025 01:01:13 +0000 Manifest this update: Sat 06 Dec 2025 01:01:13 +0000 Manifest next update: Sun 07 Dec 2025 01:01:13 +0000 Files and hashes: 1: XmpF35ngj-yNyTGypvCjCYGlpo8.roa (hash: 8XBhk5d8sjaCG8b1mNcJkFy1C7vdRPz5bf2EYXdWLuY=) 2: ehuwNttA15nYYRmKUkOzwD1Wwgo.crl (hash: vtMD2ffdrZfRJLvWiH134aX/RFKI3L8V/fs/dE0WLGE=) 3: te8WoSPpdBUUYvd1WKkLZbO72RM.roa (hash: o04bmvCElYlWOOu299mgLz7Vc+VKn0vUSkUyiAJD0o0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:5f:0d:49:dc:94:2b:ca:d1:5f:c4:4f:a9:40:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a1bb036db40d799d861198a5243b3c03d56c20a Validity Not Before: Dec 6 01:01:13 2025 GMT Not After : Dec 7 01:01:13 2025 GMT Subject: CN=a0d4425a7082ab2b0682665cd5483087d8876c82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:96:f2:f1:dd:0e:db:86:63:4e:e7:62:84:da: 55:66:ea:fb:fb:f4:26:5c:4d:cb:ec:7b:2c:34:0d: 24:41:20:c1:27:29:7e:f7:a6:1f:04:c6:9a:f1:ba: 2d:6f:f6:c8:62:6e:9c:37:ec:4b:fe:44:87:88:37: 95:bb:dd:88:c7:a9:c1:5a:9e:0b:f3:11:61:1a:f5: 35:8d:75:3c:b7:b7:fd:a9:31:50:b5:6d:d7:78:0b: bd:1b:7b:c8:24:42:43:4f:5e:d6:fb:03:6d:ff:cf: 6c:e2:9e:b8:51:af:9b:48:ea:d1:32:fe:0d:2b:d1: 02:e4:31:a8:a6:1f:fd:18:4a:c3:96:77:28:36:42: bf:54:9c:89:4a:9f:a6:84:d9:3d:28:97:f1:0f:57: 39:9e:66:29:35:2b:4f:71:5f:f2:07:f4:1c:52:88: 7f:1c:60:35:55:58:35:3c:3a:4d:09:a4:03:92:d3: 68:93:62:7d:04:b6:5e:c1:52:30:da:ed:04:c7:f0: 12:cc:bb:ef:2c:ca:73:cf:06:eb:e0:c8:63:ff:cb: 0b:59:5e:6f:67:e4:f9:95:dd:2c:d5:dd:9d:2d:d6: 72:3c:84:1e:a4:bc:49:f8:67:b7:01:51:b0:ed:aa: 8b:81:f1:b8:36:2c:f6:cb:23:d9:f3:53:82:54:10: f5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D4:42:5A:70:82:AB:2B:06:82:66:5C:D5:48:30:87:D8:87:6C:82 X509v3 Authority Key Identifier: keyid:7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:af:c1:54:c1:4f:03:bc:d5:6f:d5:30:1d:67:66:85:81:aa: cf:28:22:80:f2:6f:95:a9:ff:8c:24:47:18:98:a6:fe:58:bb: 24:68:93:12:45:08:bf:aa:75:4f:88:4f:da:5c:60:af:23:6c: b3:13:26:7a:55:45:84:ad:a0:f5:b7:5c:70:4b:ff:07:8b:ef: f3:aa:ef:64:c3:24:ce:21:08:53:33:2d:fe:1a:36:94:73:26: e7:ff:aa:3a:10:4a:ab:8a:2b:3c:e0:ef:00:5a:87:ca:7e:2d: 17:c2:f5:b9:ea:64:d4:62:49:36:db:f7:ac:99:fb:f9:84:fb: 11:13:bb:cd:17:d4:f6:20:6e:46:09:f2:d9:23:01:ef:bf:11: 81:e1:d4:f6:5c:04:a5:fe:89:d5:87:f0:b3:d3:b1:63:8a:7d: 82:eb:41:84:03:e0:e6:64:f9:6a:0e:1c:a1:7f:7b:3b:93:12: 1b:c5:62:9b:44:cb:4f:bd:f8:8e:1d:32:d8:02:76:c0:58:34: 9b:da:d9:7f:f3:c0:93:3e:ef:0d:6a:48:00:b8:52:5b:3e:4e: 6a:a4:78:1b:9e:2b:f9:35:23:a7:fb:60:15:22:27:b2:33:aa: 30:e2:2c:1d:2a:a8:20:25:f3:05:a7:b6:18:89:5e:65:61:d2: 37:ff:85:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLV8NSdyUK8rRX8RPqUBwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMWJiMDM2ZGI0MGQ3OTlkODYxMTk4YTUyNDNiM2MwM2Q1 NmMyMGEwHhcNMjUxMjA2MDEwMTEzWhcNMjUxMjA3MDEwMTEzWjAzMTEwLwYDVQQD EyhhMGQ0NDI1YTcwODJhYjJiMDY4MjY2NWNkNTQ4MzA4N2Q4ODc2YzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJby8d0O24ZjTudihNpVZur7+/Qm XE3L7HssNA0kQSDBJyl+96YfBMaa8botb/bIYm6cN+xL/kSHiDeVu92Ix6nBWp4L 8xFhGvU1jXU8t7f9qTFQtW3XeAu9G3vIJEJDT17W+wNt/89s4p64Ua+bSOrRMv4N K9EC5DGoph/9GErDlncoNkK/VJyJSp+mhNk9KJfxD1c5nmYpNStPcV/yB/QcUoh/ HGA1VVg1PDpNCaQDktNok2J9BLZewVIw2u0Ex/ASzLvvLMpzzwbr4Mhj/8sLWV5v Z+T5ld0s1d2dLdZyPIQepLxJ+Ge3AVGw7aqLgfG4Niz2yyPZ81OCVBD1uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDUQlpwgqsrBoJmXNVIMIfYh2yCMB8GA1UdIwQY MBaAFHobsDbbQNeZ2GEZilJDs8A9VsIKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWh1d050dEExNW5ZWVJtS1VrT3p3RDFXd2dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ZGE1YjMtMjRjNy00ZWU1LTk1ZGMt YjA4ZGIzYzM2ZmJiLzEvZWh1d050dEExNW5ZWVJtS1VrT3p3RDFXd2dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ZGE1YjMtMjRjNy00ZWU1LTk1ZGMtYjA4ZGIzYzM2ZmJi LzEvZWh1d050dEExNW5ZWVJtS1VrT3p3RDFXd2dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt6/BVMFP A7zVb9UwHWdmhYGqzygigPJvlan/jCRHGJim/li7JGiTEkUIv6p1T4hP2lxgryNs sxMmelVFhK2g9bdccEv/B4vv86rvZMMkziEIUzMt/ho2lHMm5/+qOhBKq4orPODv AFqHyn4tF8L1uepk1GJJNtv3rJn7+YT7ERO7zRfU9iBuRgny2SMB778RgeHU9lwE pf6J1Yfws9OxY4p9gutBhAPg5mT5ag4coX97O5MSG8Vim0TLT734jh0y2AJ2wFg0 m9rZf/PAkz7vDWpIALhSWz5OaqR4G54r+TUjp/tgFSInsjOqMOIsHSqoICXzBae2 GIleZWHSN/+FgA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:55:33 2025 by rpki-client