This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft File: ezhehhZ9XMwi_YWJJWCudgtfKJg.mft (raw, json) Hash identifier: XjyXyI2mWzRqfzwRdi8CxPtvqogCiJRUqYql6sSaq8A= Subject key identifier: 70:48:32:37:7A:63:CA:49:36:7D:43:21:30:6B:2D:1E:E9:66:ED:2E Authority key identifier: 7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98 Certificate issuer: /CN=7b385e86167d5ccc22fd85892560ae760b5f2898 Certificate serial: 019B3CEC7B2D60CE8C99852F36532581A56F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 18:01:29 +0000 Manifest this update: Sat 20 Dec 2025 18:01:29 +0000 Manifest next update: Sun 21 Dec 2025 18:01:29 +0000 Files and hashes: 1: 1-15VXX8nVt-lY3LiGzv1Jr6OcwM.roa (hash: SlkmWz0jcL6xUXUhTFQpLdotJEVgcyVB/xztx7GovmM=) 2: ezhehhZ9XMwi_YWJJWCudgtfKJg.crl (hash: 9SphNuzh94tThJYVRB0LRJcrqKes+7KiZTXKchuFJuU=) 3: gp4Lcl-XthpiQz3Pgjj2aofu5Eg.roa (hash: +WQhnu3iWgtDqgj16Fdo45N/RQNl/1eQLYZcURm+NBk=) 4: tMCKKQ7T7_7JMjdc5UvMftnS0Sc.roa (hash: kzZ53feDoHQUM5QIs7aC6l1igadYhsq3pYnx3tG/SUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:7b:2d:60:ce:8c:99:85:2f:36:53:25:81:a5:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b385e86167d5ccc22fd85892560ae760b5f2898 Validity Not Before: Dec 20 18:01:29 2025 GMT Not After : Dec 21 18:01:29 2025 GMT Subject: CN=704832377a63ca49367d4321306b2d1ee966ed2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:92:79:d1:6c:01:15:3e:1f:a8:94:e7:c3:a3: 91:64:a1:e0:1c:36:14:b1:a9:ea:19:90:05:4d:bd: 8e:74:e9:63:85:f9:12:c0:81:11:1a:3e:16:51:f7: 63:c0:e7:cc:c6:03:7a:f8:c1:7b:c3:42:60:b5:42: 24:7a:aa:b5:de:4a:90:4e:61:95:83:e8:4d:a9:1d: 44:e9:a9:6b:60:f5:09:e9:f4:d3:3c:44:25:55:77: c0:f0:87:d0:cd:9c:ed:82:be:b1:89:4d:5c:7d:b9: 15:85:f9:27:04:41:e3:85:c4:8c:e8:fd:79:52:b3: 53:a4:6d:10:ca:10:0a:b5:c1:70:ed:ef:3a:0c:60: 09:c5:e9:a1:8c:3f:f4:b6:40:23:18:06:e7:34:33: 14:c1:0a:3f:19:f5:72:dc:a6:07:96:be:cf:3e:31: 77:41:05:6f:43:38:68:04:90:df:32:b6:e4:b2:a9: e1:62:81:a9:35:cc:e8:44:d2:78:39:de:92:05:c8: b2:69:6e:c3:e6:4a:f7:8e:eb:bd:3d:20:1a:75:2e: 07:bf:4f:25:73:57:d8:83:89:db:75:e7:c5:46:54: d9:83:c0:ac:19:2b:99:80:c3:1b:72:0e:d6:42:46: 9f:8c:df:f8:88:52:77:6e:77:1e:6d:5d:0c:d3:33: 22:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:48:32:37:7A:63:CA:49:36:7D:43:21:30:6B:2D:1E:E9:66:ED:2E X509v3 Authority Key Identifier: keyid:7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:c0:ea:77:6f:20:a1:8f:94:1e:c3:49:c7:d6:f1:97:ac:af: f0:70:9e:32:e3:18:4b:da:11:64:be:70:c2:9c:dd:2f:e4:69: d8:e0:9f:c0:84:2e:24:c9:d1:8b:08:6e:61:06:03:b7:21:f3: b5:5e:b5:bf:29:93:ba:47:c2:7f:00:0f:86:f1:11:53:bf:81: 46:91:69:16:fe:fc:9e:cb:48:1e:26:01:7e:13:32:8b:04:54: 3f:4e:76:84:8f:27:32:47:24:26:db:4b:d6:88:43:df:6b:29: cd:59:27:d4:3b:66:65:17:0a:5f:26:3f:91:8e:a3:9d:8b:ab: 9e:43:d5:18:9d:99:bb:8a:c1:f1:01:8e:72:d9:8a:50:13:97: 22:36:d5:96:98:a0:2f:c5:6d:8f:2c:0b:bd:fe:95:f1:b1:06: e9:91:f1:fe:fe:69:65:54:1e:f2:8b:24:2f:5c:0d:5c:14:4c: 09:5e:bf:6c:8e:21:07:84:2a:e5:bc:fb:21:85:93:79:52:df: 41:81:cc:9a:d8:8c:2a:f0:b6:c2:e7:8a:9c:be:2a:cd:9b:f1: 01:a5:bf:d3:4f:a3:11:f4:52:34:3c:b1:fe:5a:94:03:49:19: 9f:f8:cc:09:fd:c4:b5:71:1c:2d:a0:df:09:d2:91:76:e1:c0: 45:9c:bd:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87HstYM6MmYUvNlMlgaVvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMzg1ZTg2MTY3ZDVjY2MyMmZkODU4OTI1NjBhZTc2MGI1 ZjI4OTgwHhcNMjUxMjIwMTgwMTI5WhcNMjUxMjIxMTgwMTI5WjAzMTEwLwYDVQQD Eyg3MDQ4MzIzNzdhNjNjYTQ5MzY3ZDQzMjEzMDZiMmQxZWU5NjZlZDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6JJ50WwBFT4fqJTnw6ORZKHgHDYU sanqGZAFTb2OdOljhfkSwIERGj4WUfdjwOfMxgN6+MF7w0JgtUIkeqq13kqQTmGV g+hNqR1E6alrYPUJ6fTTPEQlVXfA8IfQzZztgr6xiU1cfbkVhfknBEHjhcSM6P15 UrNTpG0QyhAKtcFw7e86DGAJxemhjD/0tkAjGAbnNDMUwQo/GfVy3KYHlr7PPjF3 QQVvQzhoBJDfMrbksqnhYoGpNczoRNJ4Od6SBciyaW7D5kr3juu9PSAadS4Hv08l c1fYg4nbdefFRlTZg8CsGSuZgMMbcg7WQkafjN/4iFJ3bncebV0M0zMi1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHBIMjd6Y8pJNn1DITBrLR7pZu0uMB8GA1UdIwQY MBaAFHs4XoYWfVzMIv2FiSVgrnYLXyiYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXpoZWhoWjlYTXdpX1lXSkpXQ3VkZ3RmS0pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9iNDU5ZjEtNjQ5OS00ZTE0LWFjZmIt ZWE3ODhhZDMyOTZhLzEvZXpoZWhoWjlYTXdpX1lXSkpXQ3VkZ3RmS0pnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9iNDU5ZjEtNjQ5OS00ZTE0LWFjZmItZWE3ODhhZDMyOTZh LzEvZXpoZWhoWjlYTXdpX1lXSkpXQ3VkZ3RmS0pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw8Dqd28g oY+UHsNJx9bxl6yv8HCeMuMYS9oRZL5wwpzdL+Rp2OCfwIQuJMnRiwhuYQYDtyHz tV61vymTukfCfwAPhvERU7+BRpFpFv78nstIHiYBfhMyiwRUP052hI8nMkckJttL 1ohD32spzVkn1DtmZRcKXyY/kY6jnYurnkPVGJ2Zu4rB8QGOctmKUBOXIjbVlpig L8VtjywLvf6V8bEG6ZHx/v5pZVQe8oskL1wNXBRMCV6/bI4hB4Qq5bz7IYWTeVLf QYHMmtiMKvC2wueKnL4qzZvxAaW/00+jEfRSNDyx/lqUA0kZn/jMCf3EtXEcLaDf CdKRduHARZy9iA== -----END CERTIFICATE-----Generated at Sat Dec 20 23:38:11 2025 by rpki-client