This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft File: ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft (raw, json) Hash identifier: 6wbefx2TcxSDRMtBra57nxNpTcMfCLnycI/FQDdfhi0= Subject key identifier: 92:48:63:6E:4F:AC:BB:BA:4A:0D:E3:CE:F2:7A:C1:6E:C1:A2:04:14 Authority key identifier: 7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6 Certificate issuer: /CN=7a17259a863c3d637d457e119b750df95e003fd6 Certificate serial: 019AF54128B849A3264754BC84C73E8ECE30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 20:01:19 +0000 Manifest this update: Sat 06 Dec 2025 20:01:19 +0000 Manifest next update: Sun 07 Dec 2025 20:01:19 +0000 Files and hashes: 1: dUBDyI3Y08c8mTiyeoJMlAL0nl0.roa (hash: J6i7zBjAUQN6Z3eRo+/Gx26n+pN6OCH/O5XrMxGVkXk=) 2: ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl (hash: enV3uOAa6pLUT0Geap7gNmstcPmSPG7r1DaKJqsr1ig=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:41:28:b8:49:a3:26:47:54:bc:84:c7:3e:8e:ce:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a17259a863c3d637d457e119b750df95e003fd6 Validity Not Before: Dec 6 20:01:19 2025 GMT Not After : Dec 7 20:01:19 2025 GMT Subject: CN=9248636e4facbbba4a0de3cef27ac16ec1a20414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c1:83:5c:cd:02:7a:18:8c:e5:67:73:44:52: d2:ad:28:37:c9:28:de:a3:3f:42:93:ad:de:88:31: 31:11:9a:98:0a:17:62:07:9d:69:b9:3e:1f:99:64: f8:97:bd:a8:a0:80:f2:d0:c1:5c:0d:f3:b5:32:ce: e2:58:be:98:f6:1f:aa:f6:49:f3:de:b0:98:50:89: 42:4e:6e:35:ea:b8:82:d0:f8:91:5c:4d:11:3b:a8: 5c:f2:ee:67:42:ec:a8:1a:72:9b:3b:c8:00:80:06: 12:36:79:43:6c:c8:57:a9:12:12:5a:8d:d9:a1:36: b2:60:bf:f6:f1:41:e3:01:86:74:c3:c5:b9:eb:14: 81:f9:78:f7:ae:73:7b:85:ca:10:97:28:80:72:7e: 01:33:00:e0:8c:54:d0:c8:20:7c:31:14:f3:db:99: c2:47:b1:6c:09:54:93:f6:83:f2:26:cb:40:64:24: b7:c7:95:83:6c:93:74:e3:5c:36:14:b6:f9:22:25: 8e:56:88:dc:3c:47:9e:b8:65:14:72:1d:f4:f6:2b: de:03:8f:4c:e3:80:1c:6c:02:63:4d:e9:52:01:4b: fc:d4:3f:e8:0d:e5:e5:c7:d7:cd:22:62:a5:0e:ae: 38:9c:d3:ff:8b:4b:45:e4:5c:68:e0:f3:8c:64:a1: 1d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:48:63:6E:4F:AC:BB:BA:4A:0D:E3:CE:F2:7A:C1:6E:C1:A2:04:14 X509v3 Authority Key Identifier: keyid:7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:ff:f9:ef:ec:8e:cb:d2:bb:21:5b:ce:9e:27:43:e8:6d:2b: f0:9e:0b:26:2e:15:0f:e5:1c:1f:fc:7c:a1:ab:f3:ca:0f:5e: 4f:5e:96:ff:07:fb:7d:87:b4:15:79:59:99:08:0a:ba:71:af: 46:dc:a1:6b:a0:e7:fb:10:0f:7a:c2:8e:e2:b6:66:27:fb:aa: c8:4a:df:7b:2d:9c:9c:00:a5:b4:37:17:54:1f:d1:d1:90:aa: 6d:0a:3a:bb:f5:44:a4:c0:19:59:65:d4:e5:a4:2e:37:38:b6: 01:83:05:df:88:76:65:e1:87:48:5e:13:59:c4:38:48:9d:c1: cd:94:f7:fb:ae:5b:e8:49:11:58:16:41:92:69:df:d5:ea:14: 4a:8d:58:53:d3:1f:49:66:b0:5f:a5:4c:6f:0e:66:a0:6e:0d: 8f:fe:f9:b3:40:c6:df:ed:c3:a1:8e:16:b9:51:22:20:dd:01: 93:0c:04:ff:8d:92:a9:48:3b:7b:a3:80:9d:c4:f6:af:91:a6: 45:f8:0d:5f:5d:46:6d:73:b6:8d:a3:53:eb:61:63:b5:37:63: a7:89:f8:df:ab:4c:b0:0a:4e:25:de:d1:6a:e2:de:48:53:94: 5b:a2:5d:63:f0:23:30:3a:c5:16:55:73:ad:cb:ba:65:66:5c: 50:e6:4b:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QSi4SaMmR1S8hMc+js4wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMTcyNTlhODYzYzNkNjM3ZDQ1N2UxMTliNzUwZGY5NWUw MDNmZDYwHhcNMjUxMjA2MjAwMTE5WhcNMjUxMjA3MjAwMTE5WjAzMTEwLwYDVQQD Eyg5MjQ4NjM2ZTRmYWNiYmJhNGEwZGUzY2VmMjdhYzE2ZWMxYTIwNDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsGDXM0CehiM5WdzRFLSrSg3ySje oz9Ck63eiDExEZqYChdiB51puT4fmWT4l72ooIDy0MFcDfO1Ms7iWL6Y9h+q9knz 3rCYUIlCTm416riC0PiRXE0RO6hc8u5nQuyoGnKbO8gAgAYSNnlDbMhXqRISWo3Z oTayYL/28UHjAYZ0w8W56xSB+Xj3rnN7hcoQlyiAcn4BMwDgjFTQyCB8MRTz25nC R7FsCVST9oPyJstAZCS3x5WDbJN041w2FLb5IiWOVojcPEeeuGUUch309iveA49M 44AcbAJjTelSAUv81D/oDeXlx9fNImKlDq44nNP/i0tF5Fxo4POMZKEdxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJJIY25PrLu6Sg3jzvJ6wW7BogQUMB8GA1UdIwQY MBaAFHoXJZqGPD1jfUV+EZt1DfleAD/WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWhjbG1vWThQV045Ulg0Um0zVU4tVjRBUDlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wMDg0OWUtZDhlNi00YmIxLWFkMzAt YWQ4YmM4YmM3OTY3LzEvZWhjbG1vWThQV045Ulg0Um0zVU4tVjRBUDlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8wMDg0OWUtZDhlNi00YmIxLWFkMzAtYWQ4YmM4YmM3OTY3 LzEvZWhjbG1vWThQV045Ulg0Um0zVU4tVjRBUDlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhf/57+yO y9K7IVvOnidD6G0r8J4LJi4VD+UcH/x8oavzyg9eT16W/wf7fYe0FXlZmQgKunGv Rtyha6Dn+xAPesKO4rZmJ/uqyErfey2cnACltDcXVB/R0ZCqbQo6u/VEpMAZWWXU 5aQuNzi2AYMF34h2ZeGHSF4TWcQ4SJ3BzZT3+65b6EkRWBZBkmnf1eoUSo1YU9Mf SWawX6VMbw5moG4Nj/75s0DG3+3DoY4WuVEiIN0BkwwE/42SqUg7e6OAncT2r5Gm RfgNX11GbXO2jaNT62FjtTdjp4n436tMsApOJd7RauLeSFOUW6JdY/AjMDrFFlVz rcu6ZWZcUOZLow== -----END CERTIFICATE-----Generated at Sat Dec 6 23:31:40 2025 by rpki-client