This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft File: EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft (raw, json) Hash identifier: 9Uew4xuOwIjdgMGNIb3lHRdBD9dGi/5J6yADe+PoXhs= Subject key identifier: C9:DF:DD:9E:EE:F8:B6:D3:B3:F7:AE:54:2A:FE:39:84:D8:8D:C9:48 Authority key identifier: 10:7A:5A:F1:96:B8:A0:EA:96:0C:28:F6:B3:E7:52:91:C7:E8:61:CD Certificate issuer: /CN=107a5af196b8a0ea960c28f6b3e75291c7e861cd Certificate serial: 019B589A83DB434DA78EEAD8FD28AD789310 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 03:01:19 +0000 Manifest this update: Fri 26 Dec 2025 03:01:19 +0000 Manifest next update: Sat 27 Dec 2025 03:01:19 +0000 Files and hashes: 1: EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl (hash: BM5wuZBLVbE1mKo2r87yN3sXlCxLG8iJ0/Z/Cg18wN0=) 2: NmHfVOAq428sUSSIRO7nZKCwlXg.roa (hash: 7cV2xNe1q0M48rtVit0uJemlcGCJGSiYbHDZVWgEp6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 03:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:9a:83:db:43:4d:a7:8e:ea:d8:fd:28:ad:78:93:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=107a5af196b8a0ea960c28f6b3e75291c7e861cd Validity Not Before: Dec 26 03:01:19 2025 GMT Not After : Dec 27 03:01:19 2025 GMT Subject: CN=c9dfdd9eeef8b6d3b3f7ae542afe3984d88dc948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f2:e7:24:18:ad:67:10:fc:81:ee:65:db:7a: d7:07:f5:bd:2d:b6:84:18:49:4f:40:96:a6:4e:f0: ed:20:f9:64:7d:f5:05:c6:77:50:bd:e9:35:22:cc: fc:b3:63:61:a5:72:36:d6:df:7f:0e:d4:39:47:2d: 08:b2:22:a2:49:d1:d7:07:bc:66:ea:80:a6:98:ae: a8:87:d9:7f:3c:62:bd:ee:e8:d0:25:c0:e0:eb:bf: cf:43:1b:11:dc:12:0b:9a:1e:54:5b:df:fd:88:22: ce:34:6b:d7:b5:e1:36:26:fc:04:49:07:ee:b6:f3: 7c:cb:ca:79:dc:b9:27:d2:b3:52:e5:1a:7e:99:1d: 37:70:a4:bf:4b:52:fb:58:7d:af:f9:22:30:fb:56: 8b:b5:ca:84:c4:af:d7:e5:a2:4a:fb:de:01:00:9e: 0f:9b:75:70:25:c9:b5:f0:7c:30:ff:b9:96:a1:11: 0d:40:38:1f:e6:cf:5c:76:95:52:45:a1:f6:32:f5: 4e:c8:54:41:7b:25:7f:e4:00:a4:23:1a:57:cf:f8: ce:6b:e0:a5:d9:c8:14:29:6f:83:c3:65:ea:b9:14: 59:a5:29:0d:64:9c:1d:8f:03:2e:09:21:f2:d4:02: ba:97:f2:6f:88:65:27:33:b7:76:20:af:92:9c:bb: c6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:DF:DD:9E:EE:F8:B6:D3:B3:F7:AE:54:2A:FE:39:84:D8:8D:C9:48 X509v3 Authority Key Identifier: keyid:10:7A:5A:F1:96:B8:A0:EA:96:0C:28:F6:B3:E7:52:91:C7:E8:61:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:6d:36:dc:48:c1:d5:ad:e9:94:c2:4c:f0:66:d8:9e:d1:7a: 29:06:56:a6:01:7b:45:72:22:34:65:39:57:f5:20:09:a6:78: a8:02:72:b7:0a:bf:98:14:c1:8c:6a:f6:a3:0d:52:73:bf:ed: 07:18:f1:dc:cf:0f:1a:a5:74:f9:fe:76:84:2f:39:5f:d5:cd: 7d:52:b1:6f:fb:37:85:b2:ea:fa:26:1a:a3:d6:ea:f8:5a:49: 47:c2:69:f5:7b:ed:3b:d0:13:af:bf:2a:5a:4b:bc:df:21:42: 1b:65:7f:35:a8:bb:de:d4:03:0c:8c:51:75:57:c5:f3:91:49: 77:10:40:db:54:f3:a0:96:20:9a:3c:a4:7e:9b:3d:bb:d2:70: 85:49:35:7d:d8:82:74:cc:c5:2b:6e:3a:f6:35:b0:bb:98:71: c0:e3:c4:89:0f:7a:2a:0f:19:76:70:f2:29:e2:08:dd:a0:cb: 3d:55:34:d1:bc:ce:a3:bd:8c:7c:bc:36:07:31:7c:1e:ef:f0: 40:25:c3:68:db:71:57:40:8c:20:aa:70:7d:81:ca:cb:2a:7f: 86:fa:34:e7:4a:30:e4:9d:74:12:02:cc:0a:99:86:45:d2:ae: 5b:bb:64:25:9b:9e:b5:0d:70:e5:e2:a8:34:13:4f:09:c1:a1: 22:d4:5b:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtYmoPbQ02njurY/SiteJMQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwN2E1YWYxOTZiOGEwZWE5NjBjMjhmNmIzZTc1MjkxYzdl ODYxY2QwHhcNMjUxMjI2MDMwMTE5WhcNMjUxMjI3MDMwMTE5WjAzMTEwLwYDVQQD EyhjOWRmZGQ5ZWVlZjhiNmQzYjNmN2FlNTQyYWZlMzk4NGQ4OGRjOTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/LnJBitZxD8ge5l23rXB/W9LbaE GElPQJamTvDtIPlkffUFxndQvek1Isz8s2NhpXI21t9/DtQ5Ry0IsiKiSdHXB7xm 6oCmmK6oh9l/PGK97ujQJcDg67/PQxsR3BILmh5UW9/9iCLONGvXteE2JvwESQfu tvN8y8p53Lkn0rNS5Rp+mR03cKS/S1L7WH2v+SIw+1aLtcqExK/X5aJK+94BAJ4P m3VwJcm18Hww/7mWoRENQDgf5s9cdpVSRaH2MvVOyFRBeyV/5ACkIxpXz/jOa+Cl 2cgUKW+Dw2XquRRZpSkNZJwdjwMuCSHy1AK6l/JviGUnM7d2IK+SnLvGNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMnf3Z7u+LbTs/euVCr+OYTYjclIMB8GA1UdIwQY MBaAFBB6WvGWuKDqlgwo9rPnUpHH6GHNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUhwYThaYTRvT3FXRENqMnMtZFNrY2ZvWWMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9iYjIzZTEtNDZjYS00NjRhLWIzZjIt ZjkyOWUyNTUxNjI3LzEvRUhwYThaYTRvT3FXRENqMnMtZFNrY2ZvWWMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9iYjIzZTEtNDZjYS00NjRhLWIzZjItZjkyOWUyNTUxNjI3 LzEvRUhwYThaYTRvT3FXRENqMnMtZFNrY2ZvWWMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaW023EjB 1a3plMJM8GbYntF6KQZWpgF7RXIiNGU5V/UgCaZ4qAJytwq/mBTBjGr2ow1Sc7/t Bxjx3M8PGqV0+f52hC85X9XNfVKxb/s3hbLq+iYao9bq+FpJR8Jp9XvtO9ATr78q Wku83yFCG2V/Nai73tQDDIxRdVfF85FJdxBA21TzoJYgmjykfps9u9JwhUk1fdiC dMzFK2469jWwu5hxwOPEiQ96Kg8ZdnDyKeII3aDLPVU00bzOo72MfLw2BzF8Hu/w QCXDaNtxV0CMIKpwfYHKyyp/hvo050ow5J10EgLMCpmGRdKuW7tkJZuetQ1w5eKo NBNPCcGhItRbEA== -----END CERTIFICATE-----Generated at Fri Dec 26 11:05:09 2025 by rpki-client