This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft File: ehuwNttA15nYYRmKUkOzwD1Wwgo.mft (raw, json) Hash identifier: pKMwGIQbTJ/062c/NDrKQJVPJ/wjjMIHgGVUYctkJZ0= Subject key identifier: 84:00:BC:4D:34:0A:AF:38:C3:E5:F3:69:48:59:44:5B:F4:62:9F:0C Authority key identifier: 7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A Certificate issuer: /CN=7a1bb036db40d799d861198a5243b3c03d56c20a Certificate serial: 019B34C4C9F83C47988DD84FC9774C19490D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft Manifest number: 02CB Signing time: Fri 19 Dec 2025 04:01:10 +0000 Manifest this update: Fri 19 Dec 2025 04:01:10 +0000 Manifest next update: Sat 20 Dec 2025 04:01:10 +0000 Files and hashes: 1: XmpF35ngj-yNyTGypvCjCYGlpo8.roa (hash: 8XBhk5d8sjaCG8b1mNcJkFy1C7vdRPz5bf2EYXdWLuY=) 2: ehuwNttA15nYYRmKUkOzwD1Wwgo.crl (hash: vbVxwFihmzjNX49jDP5Cz9asAjprENwSdxCaAAXpyXk=) 3: te8WoSPpdBUUYvd1WKkLZbO72RM.roa (hash: o04bmvCElYlWOOu299mgLz7Vc+VKn0vUSkUyiAJD0o0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:c9:f8:3c:47:98:8d:d8:4f:c9:77:4c:19:49:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a1bb036db40d799d861198a5243b3c03d56c20a Validity Not Before: Dec 19 04:01:10 2025 GMT Not After : Dec 20 04:01:10 2025 GMT Subject: CN=8400bc4d340aaf38c3e5f3694859445bf4629f0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:68:3c:42:19:49:8a:49:af:6b:9e:4a:3e:b0: 4d:08:1d:7e:15:84:f7:89:46:62:0a:04:08:ec:76: e6:a4:23:75:8f:bc:46:22:6a:7f:74:3a:e3:34:da: 95:7b:80:dc:58:bb:18:fc:a1:36:ef:97:fe:89:69: 6f:68:d6:d9:bd:f9:24:08:e7:a1:93:49:4b:37:00: 8a:80:ac:63:29:bf:ad:00:1f:4e:9f:15:aa:d7:8b: ab:89:ce:e7:14:b5:aa:95:5e:48:58:81:c5:b0:09: a6:a7:0f:b7:f1:a4:97:3f:11:79:58:e2:aa:c8:ed: c6:27:c5:58:45:e4:6c:41:d9:39:7a:0b:2e:03:47: e4:d5:c8:ba:13:52:5d:82:17:8a:9e:8c:ed:5d:f1: 39:67:df:c4:ac:28:5a:b3:29:a9:c3:af:1a:8c:c6: f7:11:ca:6c:67:ad:88:05:28:6c:d7:f1:54:78:6d: af:0d:4d:db:ac:e3:28:d3:8a:67:02:57:be:48:57: 7a:04:f4:e2:6f:8b:6c:04:96:72:13:fb:f0:1d:cd: 85:be:40:12:7e:da:f6:12:f1:42:b1:f3:b9:2d:97: cb:4b:82:cf:48:89:f4:3c:47:87:3c:c6:d4:48:37: 41:18:a5:ae:81:75:d7:b7:97:cc:b0:74:13:ba:fc: 2c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:00:BC:4D:34:0A:AF:38:C3:E5:F3:69:48:59:44:5B:F4:62:9F:0C X509v3 Authority Key Identifier: keyid:7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:9c:29:1b:b8:98:75:61:a8:8c:fc:31:7c:7f:59:1a:d4:a2: eb:42:3c:2a:86:0d:76:15:b7:01:e9:6e:32:b9:64:01:b5:97: 28:7a:e4:8c:fe:65:15:e3:03:21:2b:2c:1a:5e:f0:a5:ed:cc: b2:10:24:cd:21:c4:8e:d8:6c:b6:d1:07:62:c0:53:a0:bd:79: 42:54:19:10:0a:56:93:95:62:b1:c2:94:a2:03:2a:7f:7a:fe: 68:28:5d:f5:ca:f8:89:a5:ef:c9:26:dc:28:65:56:65:c3:42: de:fc:36:54:24:13:22:0e:6e:a3:e6:06:91:9a:33:e2:92:36: 60:6e:4c:e0:1c:67:55:19:33:eb:5f:02:41:89:9b:52:d4:a7: 7c:f9:ac:8d:33:ea:91:7d:4a:bd:99:e3:46:ad:8b:93:37:2b: 72:0e:e5:2a:a4:4e:46:6b:9e:06:ee:e0:35:11:e3:8d:29:c1: 8e:ce:52:d5:e0:00:3f:8e:d3:29:75:30:e9:5f:ef:08:01:8b: 05:cd:c4:6e:f0:e2:d6:b1:b5:cb:85:40:26:18:bd:6c:06:dd: a0:f4:52:37:b0:08:a3:89:10:2a:cd:6b:01:f3:3b:4b:b2:8f: 1a:18:b9:1e:65:7e:8c:82:6a:91:fc:74:f7:d8:fc:52:3e:de: b2:8b:4b:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xMn4PEeYjdhPyXdMGUkNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMWJiMDM2ZGI0MGQ3OTlkODYxMTk4YTUyNDNiM2MwM2Q1 NmMyMGEwHhcNMjUxMjE5MDQwMTEwWhcNMjUxMjIwMDQwMTEwWjAzMTEwLwYDVQQD Eyg4NDAwYmM0ZDM0MGFhZjM4YzNlNWYzNjk0ODU5NDQ1YmY0NjI5ZjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGg8QhlJikmva55KPrBNCB1+FYT3 iUZiCgQI7HbmpCN1j7xGImp/dDrjNNqVe4DcWLsY/KE275f+iWlvaNbZvfkkCOeh k0lLNwCKgKxjKb+tAB9OnxWq14uric7nFLWqlV5IWIHFsAmmpw+38aSXPxF5WOKq yO3GJ8VYReRsQdk5egsuA0fk1ci6E1JdgheKnoztXfE5Z9/ErChasympw68ajMb3 EcpsZ62IBShs1/FUeG2vDU3brOMo04pnAle+SFd6BPTib4tsBJZyE/vwHc2FvkAS ftr2EvFCsfO5LZfLS4LPSIn0PEeHPMbUSDdBGKWugXXXt5fMsHQTuvwsxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQAvE00Cq84w+XzaUhZRFv0Yp8MMB8GA1UdIwQY MBaAFHobsDbbQNeZ2GEZilJDs8A9VsIKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWh1d050dEExNW5ZWVJtS1VrT3p3RDFXd2dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ZGE1YjMtMjRjNy00ZWU1LTk1ZGMt YjA4ZGIzYzM2ZmJiLzEvZWh1d050dEExNW5ZWVJtS1VrT3p3RDFXd2dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ZGE1YjMtMjRjNy00ZWU1LTk1ZGMtYjA4ZGIzYzM2ZmJi LzEvZWh1d050dEExNW5ZWVJtS1VrT3p3RDFXd2dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASZwpG7iY dWGojPwxfH9ZGtSi60I8KoYNdhW3AeluMrlkAbWXKHrkjP5lFeMDISssGl7wpe3M shAkzSHEjthsttEHYsBToL15QlQZEApWk5ViscKUogMqf3r+aChd9cr4iaXvySbc KGVWZcNC3vw2VCQTIg5uo+YGkZoz4pI2YG5M4BxnVRkz618CQYmbUtSnfPmsjTPq kX1KvZnjRq2Lkzcrcg7lKqRORmueBu7gNRHjjSnBjs5S1eAAP47TKXUw6V/vCAGL Bc3EbvDi1rG1y4VAJhi9bAbdoPRSN7AIo4kQKs1rAfM7S7KPGhi5HmV+jIJqkfx0 99j8Uj7esotLNw== -----END CERTIFICATE-----Generated at Fri Dec 19 13:29:19 2025 by rpki-client