This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft File: eHl3C__BTZzftXTshmyq8TVy9Fw.mft (raw, json) Hash identifier: Qg6fUvMqh3F9mJxpXUt1TE62ev6loi7/hy/xrNygOJc= Subject key identifier: 9F:38:C0:95:4C:96:ED:47:D6:9E:CD:6F:7D:D6:03:F0:84:7F:EE:E4 Authority key identifier: 78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C Certificate issuer: /CN=7879770bffc14d9cdfb574ec866caaf13572f45c Certificate serial: 019AF540B60C50F398EDE87CD2147D7C2C24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft Manifest number: 1423 Signing time: Sat 06 Dec 2025 20:00:50 +0000 Manifest this update: Sat 06 Dec 2025 20:00:50 +0000 Manifest next update: Sun 07 Dec 2025 20:00:50 +0000 Files and hashes: 1: WiSq1XaassFeIzQ7VRRmBzOb3-E.roa (hash: kuvzaokAS1drpTQ/4WqXgBODOQIMCPVvcrCFZCP4fDk=) 2: eHl3C__BTZzftXTshmyq8TVy9Fw.crl (hash: ctCsLUCMqOwWksjnNBA08YSROzbibv412TovlvWQE3U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:b6:0c:50:f3:98:ed:e8:7c:d2:14:7d:7c:2c:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7879770bffc14d9cdfb574ec866caaf13572f45c Validity Not Before: Dec 6 20:00:50 2025 GMT Not After : Dec 7 20:00:50 2025 GMT Subject: CN=9f38c0954c96ed47d69ecd6f7dd603f0847feee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e5:f2:c4:ed:f6:6e:7d:fc:10:e0:0d:b9:c2: 4f:09:72:6c:58:6b:8a:50:0d:25:36:ae:61:04:08: 4b:62:64:f4:dc:a0:bc:96:69:4f:ed:06:ee:74:49: 4f:0e:20:68:c6:d4:b3:b8:e6:18:46:8c:f5:8c:c6: 61:88:d1:1f:03:b3:7d:f4:3b:54:05:dc:5e:ba:8c: 2e:8a:ef:cd:a4:ba:c1:53:fd:53:c2:55:8b:f3:ad: 5e:c7:ca:68:65:34:36:ab:38:05:79:84:0a:fe:b7: 3e:37:5c:df:b4:e9:f7:eb:fb:cd:7d:4e:47:62:9f: 2f:82:8a:53:39:ba:1b:01:82:63:1b:80:11:10:74: b3:c1:e5:44:e4:43:c0:14:5a:b0:99:c7:a4:fd:7e: 07:bb:3f:93:45:8f:02:0f:77:d0:26:46:3e:a8:d9: 3b:26:33:c2:5d:29:7d:5d:e3:f0:7a:ff:95:35:67: c0:65:71:9b:b2:18:59:31:a0:40:12:66:89:24:8d: 7d:af:0d:af:35:74:99:43:52:57:96:83:2a:b9:58: 40:de:0d:cd:df:cd:23:bf:72:c0:17:71:ee:6e:ca: 47:ab:02:c7:a7:e5:82:d5:fc:f8:00:a8:d6:d8:eb: f9:d8:19:bf:40:5c:71:a3:4f:ba:6f:82:8a:d5:9f: 3c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:38:C0:95:4C:96:ED:47:D6:9E:CD:6F:7D:D6:03:F0:84:7F:EE:E4 X509v3 Authority Key Identifier: keyid:78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:7c:0d:ac:e5:4a:e1:1c:5e:bd:7e:cb:cb:2e:91:aa:cf:0e: b6:1e:cf:b1:8b:f0:81:25:41:2b:bd:f1:fd:6a:6d:34:2d:01: c3:7a:bf:d9:fc:35:61:19:45:8f:f5:0d:2a:15:c3:33:23:ed: 85:12:5a:38:bd:16:4c:57:0b:2d:d6:ba:75:05:57:3c:86:34: 69:94:53:82:c7:db:8e:c2:c7:36:2b:17:62:79:98:98:0f:cf: de:65:1c:01:32:cc:a6:8b:a3:78:22:62:80:91:81:57:c5:95: f6:1c:ad:98:d1:73:df:aa:36:7c:72:39:6f:02:63:42:1d:73: 15:78:5b:fb:7d:16:89:a5:32:52:74:d6:c6:f3:99:6c:e8:f9: 4b:e9:7f:fd:47:f8:0b:2d:95:df:92:6e:e3:70:70:f0:af:9c: 42:fc:38:6f:75:01:db:72:59:67:3b:fb:1c:d4:f1:43:4b:f9: 6c:91:1d:84:1f:96:fc:79:48:b1:d2:85:8d:9f:0f:05:ab:1d: 2a:80:bf:32:f1:d7:ed:19:e4:2b:73:b8:95:38:aa:ab:28:ef: de:82:18:4d:f6:70:2e:fc:45:52:96:1d:76:96:e1:15:1d:73: 13:6d:70:4f:f1:c0:ef:cb:9e:e0:0d:28:37:7a:ad:b9:93:90: 26:ac:68:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QLYMUPOY7eh80hR9fCwkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4Nzk3NzBiZmZjMTRkOWNkZmI1NzRlYzg2NmNhYWYxMzU3 MmY0NWMwHhcNMjUxMjA2MjAwMDUwWhcNMjUxMjA3MjAwMDUwWjAzMTEwLwYDVQQD Eyg5ZjM4YzA5NTRjOTZlZDQ3ZDY5ZWNkNmY3ZGQ2MDNmMDg0N2ZlZWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+XyxO32bn38EOANucJPCXJsWGuK UA0lNq5hBAhLYmT03KC8lmlP7QbudElPDiBoxtSzuOYYRoz1jMZhiNEfA7N99DtU Bdxeuowuiu/NpLrBU/1TwlWL861ex8poZTQ2qzgFeYQK/rc+N1zftOn36/vNfU5H Yp8vgopTObobAYJjG4AREHSzweVE5EPAFFqwmcek/X4Huz+TRY8CD3fQJkY+qNk7 JjPCXSl9XePwev+VNWfAZXGbshhZMaBAEmaJJI19rw2vNXSZQ1JXloMquVhA3g3N 380jv3LAF3HubspHqwLHp+WC1fz4AKjW2Ov52Bm/QFxxo0+6b4KK1Z88LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ84wJVMlu1H1p7Nb33WA/CEf+7kMB8GA1UdIwQY MBaAFHh5dwv/wU2c37V07IZsqvE1cvRcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUhsM0NfX0JUWnpmdFhUc2hteXE4VFZ5OUZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zN2UyNmYtNTdiOC00MDgwLWI4MzIt ZWU3MzEzNzE2NDk4LzEvZUhsM0NfX0JUWnpmdFhUc2hteXE4VFZ5OUZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8zN2UyNmYtNTdiOC00MDgwLWI4MzItZWU3MzEzNzE2NDk4 LzEvZUhsM0NfX0JUWnpmdFhUc2hteXE4VFZ5OUZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoXwNrOVK 4RxevX7Lyy6Rqs8Oth7PsYvwgSVBK73x/WptNC0Bw3q/2fw1YRlFj/UNKhXDMyPt hRJaOL0WTFcLLda6dQVXPIY0aZRTgsfbjsLHNisXYnmYmA/P3mUcATLMpoujeCJi gJGBV8WV9hytmNFz36o2fHI5bwJjQh1zFXhb+30WiaUyUnTWxvOZbOj5S+l//Uf4 Cy2V35Ju43Bw8K+cQvw4b3UB23JZZzv7HNTxQ0v5bJEdhB+W/HlIsdKFjZ8PBasd KoC/MvHX7RnkK3O4lTiqqyjv3oIYTfZwLvxFUpYddpbhFR1zE21wT/HA78ue4A0o N3qtuZOQJqxo7Q== -----END CERTIFICATE-----Generated at Sun Dec 7 03:56:49 2025 by rpki-client