This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft File: brhre7AKRC4IyzuFpj57SEh0LnY.mft (raw, json) Hash identifier: zYKc6tt7sj2prbHwAEYOicPujEGan/pDV8Wfi8X/8qY= Subject key identifier: 57:39:EF:37:59:8E:04:45:A9:26:3E:6A:C5:1D:A7:89:47:C8:26:10 Authority key identifier: 6E:B8:6B:7B:B0:0A:44:2E:08:CB:3B:85:A6:3E:7B:48:48:74:2E:76 Certificate issuer: /CN=6eb86b7bb00a442e08cb3b85a63e7b4848742e76 Certificate serial: 019AF087F4CC839788529DB0F15F39A1C2B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft Manifest number: 0E36 Signing time: Fri 05 Dec 2025 22:00:32 +0000 Manifest this update: Fri 05 Dec 2025 22:00:32 +0000 Manifest next update: Sat 06 Dec 2025 22:00:32 +0000 Files and hashes: 1: V-vZgRS8mAjoRUqoJ2bRVighD-g.roa (hash: UA46xIFUmg6Yei6BvPPyRg4XYtnlQ4qpnfSfvDj9Jd0=) 2: brhre7AKRC4IyzuFpj57SEh0LnY.crl (hash: aVL5O9cJrbXFLdjUsxkE5xcMNVNMaMGn34wUVtgmM+U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:87:f4:cc:83:97:88:52:9d:b0:f1:5f:39:a1:c2:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eb86b7bb00a442e08cb3b85a63e7b4848742e76 Validity Not Before: Dec 5 22:00:32 2025 GMT Not After : Dec 6 22:00:32 2025 GMT Subject: CN=5739ef37598e0445a9263e6ac51da78947c82610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:94:dd:87:06:34:51:8b:5f:a0:7a:9f:12:52: 34:e3:f2:7f:ea:5e:30:16:4e:01:c9:d4:78:3d:67: fb:86:3d:47:19:e7:ac:d5:f7:59:a2:ea:a8:a9:b6: 08:f2:56:e4:dd:a0:e6:17:49:c9:9c:c2:02:56:17: a1:65:66:9b:3d:45:ff:ba:1e:84:b9:8f:a2:64:bb: 50:d0:a7:34:2d:32:e0:c1:f2:ea:56:c1:d0:93:5b: 30:67:9b:d7:82:48:e3:6e:1e:5d:29:fb:d4:03:3a: 56:19:30:eb:73:94:ac:d3:b2:34:0d:6d:91:4d:4e: 35:8b:2e:ec:34:7e:f2:ad:cc:98:6f:e0:cb:4b:97: 04:34:a7:f1:ee:c2:7f:f5:25:16:f5:35:a5:87:60: 71:b3:f8:5e:14:a2:26:89:34:8c:be:d3:71:0a:81: fb:00:89:74:d6:76:e8:2b:24:f4:2f:46:92:d0:d8: e3:8c:81:58:32:d2:a3:4a:a1:78:11:8b:06:fb:85: 1b:b0:52:c4:b9:8c:c8:cb:f9:76:6b:5d:de:85:e1: cb:1e:a9:ab:1c:a9:b3:28:15:b8:7e:0a:31:0c:97: f1:ac:e4:ae:bc:e1:c6:47:5f:29:eb:85:25:bd:97: 36:66:46:fd:b6:79:5c:9f:cd:34:66:84:d0:45:53: ca:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:39:EF:37:59:8E:04:45:A9:26:3E:6A:C5:1D:A7:89:47:C8:26:10 X509v3 Authority Key Identifier: keyid:6E:B8:6B:7B:B0:0A:44:2E:08:CB:3B:85:A6:3E:7B:48:48:74:2E:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:c1:0e:52:70:86:c2:be:a9:27:6b:72:f9:e7:bb:45:1d:6c: 0b:a7:69:09:89:20:4d:ef:b9:f6:9c:91:75:31:cb:bb:07:0c: e6:30:6f:ab:7f:09:92:c7:9e:fb:81:ca:4e:9a:f6:c2:05:fb: d4:ad:84:b0:d8:77:ba:cf:d2:4f:3d:ed:e5:ab:61:13:21:ed: 18:99:c5:b6:5d:6b:06:4a:bb:67:a0:26:e8:bb:73:46:c8:44: 20:0c:04:ab:ec:1f:29:60:8e:0b:07:b1:b5:e6:84:ef:f1:9a: 14:14:55:7f:c6:2f:13:93:84:f1:2f:a2:6e:69:90:52:f3:68: 1a:67:4a:56:53:e9:ad:b8:b0:e8:da:ce:e6:e5:4f:c8:b3:db: 93:f1:ef:b3:84:50:ee:6d:50:6e:9b:5f:dd:17:c6:b9:6e:af: 0d:c9:bf:bf:72:79:7b:d6:5a:ff:04:fe:1b:ac:40:f4:83:65: de:b7:c3:81:02:99:30:d6:65:d8:d5:4f:0a:3f:71:2b:a9:5b: cd:ad:b0:e4:3e:0b:6d:00:24:c5:35:ed:c9:ea:18:c2:9a:6b: cd:b6:29:5e:5a:5c:85:c6:8c:15:c0:45:23:d9:1b:6e:1e:bc: 55:92:2f:fe:8a:e3:6f:50:9b:0b:15:bf:53:5e:5d:11:95:25: c0:99:01:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwh/TMg5eIUp2w8V85ocK1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYjg2YjdiYjAwYTQ0MmUwOGNiM2I4NWE2M2U3YjQ4NDg3 NDJlNzYwHhcNMjUxMjA1MjIwMDMyWhcNMjUxMjA2MjIwMDMyWjAzMTEwLwYDVQQD Eyg1NzM5ZWYzNzU5OGUwNDQ1YTkyNjNlNmFjNTFkYTc4OTQ3YzgyNjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpTdhwY0UYtfoHqfElI04/J/6l4w Fk4BydR4PWf7hj1HGees1fdZouqoqbYI8lbk3aDmF0nJnMICVhehZWabPUX/uh6E uY+iZLtQ0Kc0LTLgwfLqVsHQk1swZ5vXgkjjbh5dKfvUAzpWGTDrc5Ss07I0DW2R TU41iy7sNH7yrcyYb+DLS5cENKfx7sJ/9SUW9TWlh2Bxs/heFKImiTSMvtNxCoH7 AIl01nboKyT0L0aS0NjjjIFYMtKjSqF4EYsG+4UbsFLEuYzIy/l2a13eheHLHqmr HKmzKBW4fgoxDJfxrOSuvOHGR18p64UlvZc2Zkb9tnlcn800ZoTQRVPKsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFc57zdZjgRFqSY+asUdp4lHyCYQMB8GA1UdIwQY MBaAFG64a3uwCkQuCMs7haY+e0hIdC52MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnJocmU3QUtSQzRJeXp1RnBqNTdTRWgwTG5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iODFlNmUtMmZlZi00NjRjLTg5MzUt MDc3OTAyOWFlMjIyLzEvYnJocmU3QUtSQzRJeXp1RnBqNTdTRWgwTG5ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9iODFlNmUtMmZlZi00NjRjLTg5MzUtMDc3OTAyOWFlMjIy LzEvYnJocmU3QUtSQzRJeXp1RnBqNTdTRWgwTG5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB8EOUnCG wr6pJ2ty+ee7RR1sC6dpCYkgTe+59pyRdTHLuwcM5jBvq38Jksee+4HKTpr2wgX7 1K2EsNh3us/STz3t5athEyHtGJnFtl1rBkq7Z6Am6LtzRshEIAwEq+wfKWCOCwex teaE7/GaFBRVf8YvE5OE8S+ibmmQUvNoGmdKVlPprbiw6NrO5uVPyLPbk/Hvs4RQ 7m1Qbptf3RfGuW6vDcm/v3J5e9Za/wT+G6xA9INl3rfDgQKZMNZl2NVPCj9xK6lb za2w5D4LbQAkxTXtyeoYwpprzbYpXlpchcaMFcBFI9kbbh68VZIv/orjb1CbCxW/ U15dEZUlwJkBoA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:39 2025 by rpki-client