This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft File: EH6W-USd78RwvMWpH5IXxigawbI.mft (raw, json) Hash identifier: fTRFnfFzIPv/bWeHthHBMHpEvNPbkyAqpLMECQkemr4= Subject key identifier: CB:1C:9B:63:18:CD:CD:27:AD:8D:67:01:C9:C6:CA:42:D7:F0:00:44 Authority key identifier: 10:7E:96:F9:44:9D:EF:C4:70:BC:C5:A9:1F:92:17:C6:28:1A:C1:B2 Certificate issuer: /CN=107e96f9449defc470bcc5a91f9217c6281ac1b2 Certificate serial: 019AF3899AADE3C9FC4D40BCF2A562BA519C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 12:01:12 +0000 Manifest this update: Sat 06 Dec 2025 12:01:12 +0000 Manifest next update: Sun 07 Dec 2025 12:01:12 +0000 Files and hashes: 1: EH6W-USd78RwvMWpH5IXxigawbI.crl (hash: Kcso8HGj6mLWT48bP+MGX954kjATm0AT+fN+g/8Y2EI=) 2: zVD3SdCfQBJBOagWM5Ehfl1wO_c.roa (hash: qafSEr3TxyKSts1jwMxTvNR+mmxx5iKNpJETUbfFIKo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:9a:ad:e3:c9:fc:4d:40:bc:f2:a5:62:ba:51:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=107e96f9449defc470bcc5a91f9217c6281ac1b2 Validity Not Before: Dec 6 12:01:12 2025 GMT Not After : Dec 7 12:01:12 2025 GMT Subject: CN=cb1c9b6318cdcd27ad8d6701c9c6ca42d7f00044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:64:20:e2:39:ab:d0:d2:54:b6:f5:c8:3b:e6: 3d:e8:09:b9:ba:1a:a7:4a:1b:f0:47:f6:be:1d:7e: 2e:21:a6:4c:f1:35:2b:ca:f1:37:07:5c:50:5d:ee: cc:9c:95:37:17:1e:dc:ac:6b:d4:39:c3:0b:b2:ab: 6f:b8:9d:a7:c1:7f:89:28:16:70:53:37:72:d8:5d: 01:b1:55:a1:ca:36:d8:e9:e0:e9:f8:a5:e1:b6:fa: 75:bd:a7:d9:70:6b:91:44:0e:27:d2:bc:7b:10:6a: a8:5e:41:64:ea:b0:ad:0b:e1:a4:eb:8d:ca:4b:43: b4:f8:21:5b:30:ac:70:b9:fc:de:f5:29:e4:ed:c5: a3:97:7c:d8:92:8a:f6:fd:6a:b1:72:30:51:25:61: ce:60:e0:e8:a9:f8:03:8c:8a:7a:95:62:cf:d4:f8: e9:70:bf:e9:85:6b:8b:06:64:8d:00:ff:43:69:30: f0:d3:11:5f:f4:70:98:11:61:1b:20:30:98:18:ec: a8:e3:95:f3:80:7d:f0:b1:5d:18:0c:33:f6:48:6c: 92:34:06:86:4b:be:6b:0c:b2:14:2d:cb:b7:96:01: 2b:01:7d:69:a6:0a:b4:a0:b6:ff:87:8a:55:c0:e0: 98:87:fb:19:ce:39:52:48:59:11:21:72:0c:b4:a9: 1e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:1C:9B:63:18:CD:CD:27:AD:8D:67:01:C9:C6:CA:42:D7:F0:00:44 X509v3 Authority Key Identifier: keyid:10:7E:96:F9:44:9D:EF:C4:70:BC:C5:A9:1F:92:17:C6:28:1A:C1:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:6f:63:49:d4:29:b0:f3:7e:a6:87:d5:ad:69:d5:9b:87:6c: dc:58:5e:24:a5:f8:f0:ea:69:28:10:56:32:b9:92:af:15:72: c5:aa:c2:a4:cc:f9:b5:33:15:53:04:52:be:fb:0e:78:62:5d: 3e:4d:c9:10:2f:81:e4:b7:5c:f5:3e:cd:e9:4d:bd:c5:89:99: 1f:11:d5:37:4a:b7:b5:7f:e3:c3:47:1d:89:96:33:45:ba:33: 29:b4:7a:50:3b:8f:29:68:f4:8b:5f:1c:31:14:82:16:b8:e6: 16:4a:5c:fd:9a:57:9f:15:5c:34:76:5a:93:c2:7c:55:36:e3: 8e:6a:d0:6f:4f:bf:f3:37:b5:c8:45:e0:3a:1f:f9:3c:8d:63: fb:58:29:29:9d:57:62:e4:56:ad:14:65:8e:f1:38:96:67:c9: 86:15:28:ad:99:da:69:7e:50:15:62:0b:5e:9f:94:a1:d9:6d: f7:b1:bc:10:bf:a0:62:64:1e:59:55:ea:26:62:dd:84:4b:09: 17:af:3a:a3:3a:37:ee:14:b3:d5:60:7d:4a:fc:4f:49:47:40: 9f:68:bb:b6:80:c4:5f:c0:1c:11:ef:72:0e:ba:b0:d0:32:bc: 38:10:a9:6e:7d:19:26:39:68:b2:17:b0:72:86:1a:b0:ca:9e: 6e:13:a2:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziZqt48n8TUC88qViulGcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwN2U5NmY5NDQ5ZGVmYzQ3MGJjYzVhOTFmOTIxN2M2Mjgx YWMxYjIwHhcNMjUxMjA2MTIwMTEyWhcNMjUxMjA3MTIwMTEyWjAzMTEwLwYDVQQD EyhjYjFjOWI2MzE4Y2RjZDI3YWQ4ZDY3MDFjOWM2Y2E0MmQ3ZjAwMDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WQg4jmr0NJUtvXIO+Y96Am5uhqn ShvwR/a+HX4uIaZM8TUryvE3B1xQXe7MnJU3Fx7crGvUOcMLsqtvuJ2nwX+JKBZw Uzdy2F0BsVWhyjbY6eDp+KXhtvp1vafZcGuRRA4n0rx7EGqoXkFk6rCtC+Gk643K S0O0+CFbMKxwufze9Snk7cWjl3zYkor2/WqxcjBRJWHOYODoqfgDjIp6lWLP1Pjp cL/phWuLBmSNAP9DaTDw0xFf9HCYEWEbIDCYGOyo45XzgH3wsV0YDDP2SGySNAaG S75rDLIULcu3lgErAX1ppgq0oLb/h4pVwOCYh/sZzjlSSFkRIXIMtKke4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMscm2MYzc0nrY1nAcnGykLX8ABEMB8GA1UdIwQY MBaAFBB+lvlEne/EcLzFqR+SF8YoGsGyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUg2Vy1VU2Q3OFJ3dk1XcEg1SVh4aWdhd2JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jZjE0ODQtZjk2MS00MDM3LWJkYmYt NjZhNzE1YWQzNzgzLzEvRUg2Vy1VU2Q3OFJ3dk1XcEg1SVh4aWdhd2JJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jZjE0ODQtZjk2MS00MDM3LWJkYmYtNjZhNzE1YWQzNzgz LzEvRUg2Vy1VU2Q3OFJ3dk1XcEg1SVh4aWdhd2JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKW9jSdQp sPN+pofVrWnVm4ds3FheJKX48OppKBBWMrmSrxVyxarCpMz5tTMVUwRSvvsOeGJd Pk3JEC+B5Ldc9T7N6U29xYmZHxHVN0q3tX/jw0cdiZYzRbozKbR6UDuPKWj0i18c MRSCFrjmFkpc/ZpXnxVcNHZak8J8VTbjjmrQb0+/8ze1yEXgOh/5PI1j+1gpKZ1X YuRWrRRljvE4lmfJhhUorZnaaX5QFWILXp+Uodlt97G8EL+gYmQeWVXqJmLdhEsJ F686ozo37hSz1WB9SvxPSUdAn2i7toDEX8AcEe9yDrqw0DK8OBCpbn0ZJjloshew coYasMqebhOiZg== -----END CERTIFICATE-----Generated at Sat Dec 6 16:49:17 2025 by rpki-client