This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft File: EhSn4qjHASMlrpc-0aK7oFsrucE.mft (raw, json) Hash identifier: LOjztE42+nmwq37xV/GY1YTqVsGaHe22MTIK6xUbO+I= Subject key identifier: 49:0D:AF:22:1B:50:00:11:00:B4:5B:F0:3F:E6:A7:80:87:3E:1B:D7 Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1 Certificate issuer: /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1 Certificate serial: 019B28F6F041E41711EF48D0E3B6744D9159 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft Manifest number: 1786 Signing time: Tue 16 Dec 2025 21:00:30 +0000 Manifest this update: Tue 16 Dec 2025 21:00:30 +0000 Manifest next update: Wed 17 Dec 2025 21:00:30 +0000 Files and hashes: 1: 1DU-9zpdMFnLCpRFqEpUKjP1_SU.roa (hash: ECSzVL8H6djguciJDERoW94dzwpyxXLeOE5CnliCEPY=) 2: BH1qEokqqzS6QZQI0vKu4oCRwq0.roa (hash: FAUeRE2dz1nIQh6oaxPr0ilW7qqs+jlIqjguVCoEOyM=) 3: EhSn4qjHASMlrpc-0aK7oFsrucE.crl (hash: zSqlF0HSCgnUGUGHzmirtFojTyB8aC0kcRtJgkhxajs=) 4: QhIb9pU2TFz78TnVhDlEb28bLew.roa (hash: RCBq8YAUky5FP3KjBMjIj1v3CgulfdLRMkZuDyWMETw=) 5: gOoOuIZOmTcmldEZvCq4XtMtjO0.roa (hash: hmwK87HYYcPAKwIEHNLhFiTNPFHHx/u4UOy/l/S/Aj8=) 6: m_k3Aqy-aX7CwHacvMO7KscI6WI.roa (hash: FW7of+gpwTivV7HfNQEL7I3Yftx4/Lrk33rZymDJAac=) 7: nie0Mmy1gieDJiKDb3rzMQ7GKsE.roa (hash: yfewYdidxvBmXesHwdrJgftWGHYEK1CBv49h98D7XZY=) 8: ykCEDMwt0gSfj-8Dck34ZSuRxP4.roa (hash: Al22oIYh8E5aXL0ywXKSqrnxU2vRdMQS4zIM1t7Q1JQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:f6:f0:41:e4:17:11:ef:48:d0:e3:b6:74:4d:91:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1 Validity Not Before: Dec 16 21:00:30 2025 GMT Not After : Dec 17 21:00:30 2025 GMT Subject: CN=490daf221b50001100b45bf03fe6a780873e1bd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:6a:85:02:a2:c0:2d:67:9d:f7:ef:53:0f:1e: 20:7d:f0:a3:1a:e5:3f:d4:75:a0:58:44:1d:b9:6e: 06:32:79:d5:3f:9b:fc:f7:a3:98:3d:c4:4b:c2:98: d4:5f:e4:8c:94:f0:dd:33:ba:5a:9b:6a:7c:23:d1: 63:af:91:58:47:f1:c8:c1:fd:04:a1:48:a6:5f:68: d9:e9:82:7f:5c:7e:9e:3c:40:ed:42:4d:d0:46:e9: f3:e7:0e:d7:5f:ce:19:d6:ba:dd:29:44:47:75:02: c1:14:dc:39:bc:46:a8:8e:61:4c:3d:38:d7:01:4e: d8:d4:ca:a7:f2:70:ba:26:58:bd:a4:c8:91:88:a7: ea:70:fc:32:0f:fd:07:a9:94:63:7b:3e:72:89:57: d9:c1:a8:3f:65:e1:65:3c:43:7d:8f:5b:3f:c4:af: cb:1a:dd:2c:08:8c:46:ad:5e:92:cf:a8:65:57:68: 69:60:87:74:23:32:9b:54:16:19:41:3f:27:bd:91: f5:a8:40:02:2e:6c:09:98:bb:bc:1b:78:fd:84:86: 8e:5c:d8:05:8c:5f:38:81:6b:e4:14:0e:b5:26:65: 43:20:2a:fe:c1:52:02:26:2b:42:46:12:58:32:6f: 1a:7c:c0:2f:9d:51:82:29:74:40:94:a3:7f:f4:bb: 74:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:0D:AF:22:1B:50:00:11:00:B4:5B:F0:3F:E6:A7:80:87:3E:1B:D7 X509v3 Authority Key Identifier: keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:d9:30:35:62:7a:1d:fe:d8:e1:a0:2f:db:58:cf:0a:86:e5: d8:04:4c:ac:b6:72:5f:bc:5a:24:52:61:17:4e:d6:6f:3a:9f: f3:6f:01:5d:80:3c:99:91:a8:bf:96:b0:18:15:7b:ee:d0:d3: d5:71:67:d8:d7:7a:9f:46:e5:b2:76:10:be:bf:c1:9d:10:d0: 4b:db:07:98:60:fb:0a:90:4d:48:10:85:6d:95:dc:c1:5a:5d: 05:7d:75:ca:e1:08:d7:c4:0c:bb:5b:9f:10:54:d8:e0:ce:8a: 42:54:35:85:f3:0f:ea:a9:de:4e:8c:c1:9d:45:44:d0:96:f3: ac:24:18:a7:02:d1:5b:30:fa:85:b6:9a:d4:94:9c:bb:11:58: 38:b7:36:46:f8:c9:0c:68:45:06:91:cb:b9:a7:51:b0:07:b2: c5:fa:6c:dd:5d:c2:29:6d:b1:aa:3f:21:8e:a6:c8:93:cb:49: 3d:a5:45:f1:68:d1:b1:33:16:0b:2b:5d:3d:4c:f6:16:d0:5f: 38:6e:4a:5b:9d:7d:c0:28:ff:b0:cd:df:fa:f5:eb:de:bf:b8: 4d:9a:30:39:01:e5:12:2d:b8:1e:1e:fb:21:d2:e3:2c:b2:84: 31:f1:65:5e:89:00:9b:a2:5a:f0:60:6d:bf:28:07:00:b4:04: c0:12:26:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZso9vBB5BcR70jQ47Z0TZFZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMTRhN2UyYThjNzAxMjMyNWFlOTczZWQxYTJiYmEwNWIy YmI5YzEwHhcNMjUxMjE2MjEwMDMwWhcNMjUxMjE3MjEwMDMwWjAzMTEwLwYDVQQD Eyg0OTBkYWYyMjFiNTAwMDExMDBiNDViZjAzZmU2YTc4MDg3M2UxYmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGqFAqLALWed9+9TDx4gffCjGuU/ 1HWgWEQduW4GMnnVP5v896OYPcRLwpjUX+SMlPDdM7pam2p8I9Fjr5FYR/HIwf0E oUimX2jZ6YJ/XH6ePEDtQk3QRunz5w7XX84Z1rrdKURHdQLBFNw5vEaojmFMPTjX AU7Y1Mqn8nC6Jli9pMiRiKfqcPwyD/0HqZRjez5yiVfZwag/ZeFlPEN9j1s/xK/L Gt0sCIxGrV6Sz6hlV2hpYId0IzKbVBYZQT8nvZH1qEACLmwJmLu8G3j9hIaOXNgF jF84gWvkFA61JmVDICr+wVICJitCRhJYMm8afMAvnVGCKXRAlKN/9Lt0OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEkNryIbUAARALRb8D/mp4CHPhvXMB8GA1UdIwQY MBaAFBIUp+KoxwEjJa6XPtGiu6BbK7nBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hNjhkYmMtM2Y5NC00ZmVkLThkOWQt ZTljMzY0OWMxMjE4LzEvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9hNjhkYmMtM2Y5NC00ZmVkLThkOWQtZTljMzY0OWMxMjE4 LzEvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNkwNWJ6 Hf7Y4aAv21jPCobl2ARMrLZyX7xaJFJhF07Wbzqf828BXYA8mZGov5awGBV77tDT 1XFn2Nd6n0blsnYQvr/BnRDQS9sHmGD7CpBNSBCFbZXcwVpdBX11yuEI18QMu1uf EFTY4M6KQlQ1hfMP6qneTozBnUVE0JbzrCQYpwLRWzD6hbaa1JScuxFYOLc2RvjJ DGhFBpHLuadRsAeyxfps3V3CKW2xqj8hjqbIk8tJPaVF8WjRsTMWCytdPUz2FtBf OG5KW519wCj/sM3f+vXr3r+4TZowOQHlEi24Hh77IdLjLLKEMfFlXokAm6Ja8GBt vygHALQEwBImbA== -----END CERTIFICATE-----Generated at Tue Dec 16 22:34:51 2025 by rpki-client