This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft File: EHcd196iLjX9rxm1G4OfQ3IScLo.mft (raw, json) Hash identifier: IpllYnwujBSbUmv1OGJo8LPkHh0WCpETeuE3V/7jOi8= Subject key identifier: 3C:16:1D:EF:8E:A7:93:1B:F7:4A:7E:87:3E:2C:62:DB:32:78:BA:E9 Authority key identifier: 10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA Certificate issuer: /CN=10771dd7dea22e35fdaf19b51b839f43721270ba Certificate serial: 019B2BF8ABB4ADB799505DE8CBDC69F878F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft Manifest number: 1783 Signing time: Wed 17 Dec 2025 11:01:15 +0000 Manifest this update: Wed 17 Dec 2025 11:01:15 +0000 Manifest next update: Thu 18 Dec 2025 11:01:15 +0000 Files and hashes: 1: 2W0mVYMtUj2Armlmk_FP_3q5ESY.roa (hash: w5Ej5+Qvny/iMXD/R+qRLBIbP+3L75HhJ+B0EUJmp8o=) 2: EHcd196iLjX9rxm1G4OfQ3IScLo.crl (hash: 9BqH6SqkBu7OPv382QQCjVWULJ5O7xAsqMMQqO+Gc34=) 3: Lh4ykTJQfzCAQTP8wtaXdQr_9Fk.roa (hash: QG3UN2HjFfGKFrQvhtxeeeXreoHXBK1yS6QHGjO5Etg=) 4: VbGX6V55_AUgh-706a5pCl3f9Kg.roa (hash: IviXGlaLtNBbBi+wGZOwysY/nW7XfiJY8zoOrjfnvG8=) 5: efQyVpTfdzTLxoeY6EZRaCPb9ME.roa (hash: osXy82VNbyBuJJhgosvmVAstSYEdkdV+Zv1r3Rp3SjY=) 6: vPKCfihyP4aceHhSVf5O5t7dhks.roa (hash: BSL3nS6RO+KWTxuVXzJtjXxdHmqwKWboA1DQ+yINRvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:ab:b4:ad:b7:99:50:5d:e8:cb:dc:69:f8:78:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10771dd7dea22e35fdaf19b51b839f43721270ba Validity Not Before: Dec 17 11:01:15 2025 GMT Not After : Dec 18 11:01:15 2025 GMT Subject: CN=3c161def8ea7931bf74a7e873e2c62db3278bae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:09:46:14:88:e8:fc:ab:b2:3b:31:d1:9b:8d: 14:3a:1b:5c:9d:d6:5c:dd:36:a3:8c:a1:96:0b:c6: e7:9c:0a:b8:1a:68:66:19:69:df:fb:ba:56:15:7c: 48:02:70:5a:76:fe:c0:28:28:07:93:3b:65:b3:04: cb:ac:65:57:b7:7b:a5:90:90:d3:75:39:c5:14:48: d5:95:2a:59:03:fa:6c:6a:a3:d9:e7:29:80:4a:94: 3d:0c:c3:47:3e:a5:5a:3d:d1:9f:97:55:de:9f:d9: d0:73:87:b0:bc:b4:a9:1e:58:54:a2:33:c9:a5:0c: 3a:95:1f:30:bb:32:9b:c7:5d:0a:64:a3:19:6e:34: 0d:fe:21:76:7e:dc:a7:e8:51:41:7c:83:e1:2c:91: 02:c7:20:9b:7f:29:11:d8:af:3b:c6:54:f7:8c:ed: 0d:4b:ee:a0:a7:0a:6d:43:11:99:80:69:a9:c2:80: 55:e7:f4:59:c2:69:e1:88:4c:e2:2b:f7:29:df:d5: 9a:fe:fb:75:11:ef:d6:c9:97:1b:c3:73:cb:34:fc: 3d:fc:ec:b3:b5:bb:06:2d:31:64:cc:59:6b:3a:14: ad:59:e3:08:09:25:02:0a:e6:d5:bb:77:22:dc:85: 35:d9:72:7e:8c:71:b9:16:ad:a0:a0:60:18:f0:e7: 3c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:16:1D:EF:8E:A7:93:1B:F7:4A:7E:87:3E:2C:62:DB:32:78:BA:E9 X509v3 Authority Key Identifier: keyid:10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:5c:e0:49:35:c0:d9:de:6a:ec:95:92:ae:7d:f0:56:b6:4a: 3c:9f:62:52:ea:3d:f0:c2:32:f6:de:c4:5c:7e:68:45:af:65: b4:f7:9d:b4:35:78:5e:ee:d5:a1:53:c6:29:29:80:49:0e:e5: 28:be:7c:a8:a3:d8:ba:bc:d9:d9:45:29:03:b0:4e:76:12:7c: ec:b8:f6:31:a6:26:7e:99:08:cc:dc:47:30:06:c0:82:ce:b1: 21:48:32:44:77:49:93:63:51:34:03:55:6f:13:2c:a7:f4:2b: 4d:ac:79:74:f3:ee:3a:fc:c3:ac:fd:f1:d3:69:a3:92:8b:84: fa:82:a4:8d:86:20:79:44:03:86:70:8a:b7:1e:00:6b:5b:b2: a3:e9:9e:c9:72:86:b3:a0:23:d7:db:7a:68:68:ab:bd:ae:e1: 56:24:74:5d:39:65:24:14:96:85:b2:e5:4f:9e:70:60:0b:cd: f7:f5:1a:f3:0f:4e:68:50:f8:d0:36:7f:7f:7e:85:b3:b4:00: 5c:96:03:7c:e4:77:9d:24:db:4d:a3:4e:34:dc:f1:d9:63:40: 67:c7:91:51:1f:90:1c:b8:08:fb:a7:4f:96:63:8b:94:b7:29: a6:a6:80:42:64:de:af:6f:81:af:ef:0a:6e:b2:a5:43:c7:ff: 7a:62:a4:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+Ku0rbeZUF3oy9xp+HjwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNzcxZGQ3ZGVhMjJlMzVmZGFmMTliNTFiODM5ZjQzNzIx MjcwYmEwHhcNMjUxMjE3MTEwMTE1WhcNMjUxMjE4MTEwMTE1WjAzMTEwLwYDVQQD EygzYzE2MWRlZjhlYTc5MzFiZjc0YTdlODczZTJjNjJkYjMyNzhiYWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAlGFIjo/KuyOzHRm40UOhtcndZc 3TajjKGWC8bnnAq4GmhmGWnf+7pWFXxIAnBadv7AKCgHkztlswTLrGVXt3ulkJDT dTnFFEjVlSpZA/psaqPZ5ymASpQ9DMNHPqVaPdGfl1Xen9nQc4ewvLSpHlhUojPJ pQw6lR8wuzKbx10KZKMZbjQN/iF2ftyn6FFBfIPhLJECxyCbfykR2K87xlT3jO0N S+6gpwptQxGZgGmpwoBV5/RZwmnhiEziK/cp39Wa/vt1Ee/WyZcbw3PLNPw9/Oyz tbsGLTFkzFlrOhStWeMICSUCCubVu3ci3IU12XJ+jHG5Fq2goGAY8Oc8CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDwWHe+Op5Mb90p+hz4sYtsyeLrpMB8GA1UdIwQY MBaAFBB3Hdfeoi41/a8ZtRuDn0NyEnC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUhjZDE5NmlMalg5cnhtMUc0T2ZRM0lTY0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy83NTE0OGEtZTQwZS00MDlmLThhMGIt ZGE4NTFhNzE1ZmE0LzEvRUhjZDE5NmlMalg5cnhtMUc0T2ZRM0lTY0xvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy83NTE0OGEtZTQwZS00MDlmLThhMGItZGE4NTFhNzE1ZmE0 LzEvRUhjZDE5NmlMalg5cnhtMUc0T2ZRM0lTY0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsVzgSTXA 2d5q7JWSrn3wVrZKPJ9iUuo98MIy9t7EXH5oRa9ltPedtDV4Xu7VoVPGKSmASQ7l KL58qKPYurzZ2UUpA7BOdhJ87Lj2MaYmfpkIzNxHMAbAgs6xIUgyRHdJk2NRNANV bxMsp/QrTax5dPPuOvzDrP3x02mjkouE+oKkjYYgeUQDhnCKtx4Aa1uyo+meyXKG s6Aj19t6aGirva7hViR0XTllJBSWhbLlT55wYAvN9/Ua8w9OaFD40DZ/f36Fs7QA XJYDfOR3nSTbTaNONNzx2WNAZ8eRUR+QHLgI+6dPlmOLlLcppqaAQmTer2+Br+8K brKlQ8f/emKkbw== -----END CERTIFICATE-----Generated at Wed Dec 17 15:11:46 2025 by rpki-client