This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft File: ehJ9Y84cnzVXOQryH8BhBypSX04.mft (raw, json) Hash identifier: 0cENAv91o6x4NJcNecWnVJD1UzsisdLaabDtTzpDg70= Subject key identifier: 53:05:50:E1:31:09:A2:98:DB:89:74:3C:07:D0:C1:AE:A0:AC:60:78 Authority key identifier: 7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E Certificate issuer: /CN=7a127d63ce1c9f3557390af21fc061072a525f4e Certificate serial: 019B2E54B26F885F771ABCE3F4D14C36AC39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft Manifest number: 02D7 Signing time: Wed 17 Dec 2025 22:01:01 +0000 Manifest this update: Wed 17 Dec 2025 22:01:01 +0000 Manifest next update: Thu 18 Dec 2025 22:01:01 +0000 Files and hashes: 1: ehJ9Y84cnzVXOQryH8BhBypSX04.crl (hash: egEF+SKXSI0ezJr8h9JxtEo5MHJNds4MFWg7kDnvQL0=) 2: ljbcOH4P0wfbZdBmDxC9WVP3jCA.roa (hash: ESZ0DE4a4/PZ75FUD4JmTPdMx0gc6CuklYJy0AZ+qzM=) 3: p7CsWJqhWsLkHyYPLS-R_3le0hU.roa (hash: EeSP4Cc1NDkG1olZjQwIwFAUrprwIWgmtu0OwLvcM94=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 22:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:54:b2:6f:88:5f:77:1a:bc:e3:f4:d1:4c:36:ac:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a127d63ce1c9f3557390af21fc061072a525f4e Validity Not Before: Dec 17 22:01:01 2025 GMT Not After : Dec 18 22:01:01 2025 GMT Subject: CN=530550e13109a298db89743c07d0c1aea0ac6078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6d:47:fd:39:6d:42:39:b1:34:53:c3:2a:5e: 8c:03:b6:3d:9f:3a:fe:cd:8f:98:85:98:a9:be:cc: 89:80:a2:a8:91:7a:b6:58:66:8b:7f:c6:74:b3:b6: 27:d3:98:7d:0a:ac:e5:d3:66:6f:1b:ad:ec:7f:f3: fd:3f:25:c7:b9:11:8e:80:44:9f:05:2f:42:00:e1: 4f:39:61:20:8d:37:23:fc:47:79:75:7d:e9:4d:61: 6e:0a:17:1d:68:f5:fc:18:f8:79:14:aa:ae:07:17: 7f:f9:d4:77:d9:d5:25:7b:51:f2:10:9f:01:55:ba: a4:17:09:fc:d3:11:a2:2d:81:74:a4:ce:05:e1:90: d4:1a:03:a2:0e:d3:65:d5:d0:dc:e1:e0:19:17:14: 6f:fa:05:f5:36:af:38:0f:aa:ca:d5:fb:36:ae:ab: a5:36:2e:a1:ea:04:58:c3:56:6e:38:55:ce:96:a9: cc:ef:7a:22:71:d3:be:3d:e5:50:91:0d:8d:32:93: 13:cc:6f:0e:a5:d4:c9:82:20:22:2f:e1:bb:fa:ec: b8:06:2b:0e:9d:ea:bd:3c:f2:ea:32:91:80:78:75: 99:3f:c7:e2:ff:c1:50:83:ac:6c:83:3e:5e:49:b6: ea:2d:1e:21:c4:f6:76:65:41:f5:a0:af:19:80:d8: ab:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:05:50:E1:31:09:A2:98:DB:89:74:3C:07:D0:C1:AE:A0:AC:60:78 X509v3 Authority Key Identifier: keyid:7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:4e:be:5c:99:43:82:9e:38:7d:cc:44:14:c9:41:d6:71:e5: ee:d6:88:9c:e6:5b:4c:35:4d:4f:74:c8:8a:67:85:d1:78:03: 7e:cd:66:b1:dd:41:5d:74:c7:01:fd:b3:e5:c2:34:c4:d0:6d: ee:15:38:88:92:bc:3e:8d:1d:50:f3:1f:82:52:85:78:61:c9: e1:a6:44:82:c9:e8:28:48:a4:a3:90:ba:10:0c:fd:6d:e0:ea: 5d:b5:f9:2a:84:a1:d3:fe:19:e7:78:b5:e6:ac:9d:3e:77:7e: 18:f8:62:df:4d:b0:05:c7:3c:1d:f1:d2:98:92:c3:e4:1c:86: 3e:79:f6:54:37:02:db:90:ed:95:20:4c:f2:25:3c:54:71:a2: e6:b6:c0:64:ff:69:11:a4:50:6f:3f:a8:6d:7b:55:e2:94:36: 1c:8a:94:8a:90:4a:7d:58:63:fc:81:c3:1e:ff:9b:49:a6:65: c8:33:d0:25:3d:d6:2d:ff:58:fe:99:91:d8:b6:30:69:40:98: a0:8b:56:7d:68:ed:ef:1b:1a:f3:eb:a1:6a:36:1d:5e:5a:a6: e4:1c:ea:b3:86:ce:ac:26:22:bd:f5:cc:76:46:5a:45:cb:85: 10:3a:1d:ae:55:19:e7:e9:fe:50:d1:3c:4f:8c:84:56:b1:be: 04:ca:59:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuVLJviF93Grzj9NFMNqw5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMTI3ZDYzY2UxYzlmMzU1NzM5MGFmMjFmYzA2MTA3MmE1 MjVmNGUwHhcNMjUxMjE3MjIwMTAxWhcNMjUxMjE4MjIwMTAxWjAzMTEwLwYDVQQD Eyg1MzA1NTBlMTMxMDlhMjk4ZGI4OTc0M2MwN2QwYzFhZWEwYWM2MDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1W1H/TltQjmxNFPDKl6MA7Y9nzr+ zY+YhZipvsyJgKKokXq2WGaLf8Z0s7Yn05h9Cqzl02ZvG63sf/P9PyXHuRGOgESf BS9CAOFPOWEgjTcj/Ed5dX3pTWFuChcdaPX8GPh5FKquBxd/+dR32dUle1HyEJ8B VbqkFwn80xGiLYF0pM4F4ZDUGgOiDtNl1dDc4eAZFxRv+gX1Nq84D6rK1fs2rqul Ni6h6gRYw1ZuOFXOlqnM73oicdO+PeVQkQ2NMpMTzG8OpdTJgiAiL+G7+uy4BisO neq9PPLqMpGAeHWZP8fi/8FQg6xsgz5eSbbqLR4hxPZ2ZUH1oK8ZgNirewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFMFUOExCaKY24l0PAfQwa6grGB4MB8GA1UdIwQY MBaAFHoSfWPOHJ81VzkK8h/AYQcqUl9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWhKOVk4NGNuelZYT1FyeUg4QmhCeXBTWDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82OWU1M2YtYTQ4Yy00OWIwLTkwZTQt OGQyNDgxNmQ5N2RlLzEvZWhKOVk4NGNuelZYT1FyeUg4QmhCeXBTWDA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC82OWU1M2YtYTQ4Yy00OWIwLTkwZTQtOGQyNDgxNmQ5N2Rl LzEvZWhKOVk4NGNuelZYT1FyeUg4QmhCeXBTWDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABk6+XJlD gp44fcxEFMlB1nHl7taInOZbTDVNT3TIimeF0XgDfs1msd1BXXTHAf2z5cI0xNBt 7hU4iJK8Po0dUPMfglKFeGHJ4aZEgsnoKEiko5C6EAz9beDqXbX5KoSh0/4Z53i1 5qydPnd+GPhi302wBcc8HfHSmJLD5ByGPnn2VDcC25DtlSBM8iU8VHGi5rbAZP9p EaRQbz+obXtV4pQ2HIqUipBKfVhj/IHDHv+bSaZlyDPQJT3WLf9Y/pmR2LYwaUCY oItWfWjt7xsa8+uhajYdXlqm5Bzqs4bOrCYivfXMdkZaRcuFEDodrlUZ5+n+UNE8 T4yEVrG+BMpZEA== -----END CERTIFICATE-----Generated at Thu Dec 18 07:34:31 2025 by rpki-client