This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft File: EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft (raw, json) Hash identifier: aLoKQTYdwjfzEjKNchSl020AlE1iFCRAp2FTLT9OlvM= Subject key identifier: 98:F5:6B:D3:F2:ED:81:82:6F:E0:81:E6:F1:BE:88:3C:C3:64:82:DA Authority key identifier: 10:76:8D:39:F9:32:79:10:07:A0:97:20:9B:09:83:FE:85:56:0C:B8 Certificate issuer: /CN=10768d39f932791007a097209b0983fe85560cb8 Certificate serial: 019B4A7121496DE172738C247EA05FDE4194 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft Manifest number: 178D Signing time: Tue 23 Dec 2025 09:01:26 +0000 Manifest this update: Tue 23 Dec 2025 09:01:26 +0000 Manifest next update: Wed 24 Dec 2025 09:01:26 +0000 Files and hashes: 1: EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl (hash: ftr8MrsTZiit3sNkcHVf2vCua5j4+B+o5MXmsqrq1Xo=) 2: Nvbyv1PpytUaMC6H5xpJ11kc-dg.roa (hash: SbERHfQI9Tu/9a/EQjXNeCBB9RcFRF7Qffhnwr+U0O8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:71:21:49:6d:e1:72:73:8c:24:7e:a0:5f:de:41:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10768d39f932791007a097209b0983fe85560cb8 Validity Not Before: Dec 23 09:01:26 2025 GMT Not After : Dec 24 09:01:26 2025 GMT Subject: CN=98f56bd3f2ed81826fe081e6f1be883cc36482da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1e:cf:73:b3:5e:dc:30:5b:62:4b:34:ee:30: e4:f8:fe:ba:72:87:7e:02:69:e9:1e:d6:59:b3:5b: f7:5f:ab:3a:22:f8:6c:2b:cd:d0:05:04:1a:38:16: ca:00:7f:f8:40:46:c0:c5:42:b7:dc:03:a1:87:1b: 0f:a5:16:06:07:55:49:00:3f:45:cb:83:1e:20:c8: ff:bc:25:a6:69:4a:b8:1a:54:a7:63:49:b5:76:63: 86:1b:f0:7e:54:13:76:28:09:ec:e0:99:58:10:9e: 0b:3c:8e:91:aa:56:3a:b6:52:31:b8:03:75:f2:96: 53:a7:00:e6:f8:3c:48:1b:89:01:d5:b3:7e:d0:ad: 47:e2:e8:1e:3f:30:4e:82:7a:c2:fc:d7:f8:4f:bc: b7:8e:90:da:ef:ec:b8:76:ad:45:e5:fb:90:cb:30: 7c:a9:d9:35:8b:e1:84:fa:68:87:a4:ce:84:46:11: 47:ef:33:85:13:f3:c2:e2:74:6a:ca:73:23:86:18: 09:83:64:bc:76:5e:c3:04:d6:e8:52:c6:ed:6a:ea: 30:a8:d9:fd:1e:5e:02:57:f2:7e:65:78:4c:4a:75: aa:bd:bf:c8:7f:41:0f:01:38:a4:6a:bb:cc:0d:20: e1:f7:0e:14:21:21:e0:43:26:d2:d9:74:7f:4e:16: 6c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:F5:6B:D3:F2:ED:81:82:6F:E0:81:E6:F1:BE:88:3C:C3:64:82:DA X509v3 Authority Key Identifier: keyid:10:76:8D:39:F9:32:79:10:07:A0:97:20:9B:09:83:FE:85:56:0C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:f6:ca:75:4a:e8:12:dc:43:76:04:b3:ca:e2:d9:93:32:12: 36:e4:76:20:fb:a8:84:dc:59:3b:6a:92:2b:8b:ba:73:1f:46: 72:2b:95:71:43:f5:48:60:3e:7b:e7:51:17:1b:3c:95:6f:44: e6:19:ce:ac:1a:27:02:6d:d8:ca:55:dc:ee:27:13:38:23:96: 11:19:57:1e:e0:06:40:4b:78:64:10:aa:b8:6f:0a:d3:1c:6b: 44:db:e6:ba:9e:cd:1d:80:e7:37:3b:ac:5e:4d:e2:58:86:c6: 6c:1e:45:54:5f:7c:fd:d6:d7:8f:e6:42:c7:3c:d9:6b:ea:cc: f6:6f:67:d1:8b:57:19:36:b7:c5:a6:5b:59:6f:95:f7:c4:46: 2e:2b:3d:d0:3f:30:5a:fb:a9:39:5e:bf:8a:11:0d:a2:23:47: 6c:50:28:9d:ce:af:62:54:5e:5c:0e:ca:4c:e8:a8:1a:74:fa: 32:32:76:9d:6a:1e:9b:38:d0:b8:51:c5:40:5c:d4:45:ad:01: 99:bc:0d:c4:0c:2c:aa:fc:84:18:74:b9:a9:33:23:4b:18:49: 3f:54:28:fd:78:a5:29:7b:04:b1:ab:2f:33:aa:77:bb:27:d3: f9:80:55:a1:48:a7:34:3c:ef:6d:00:a3:8f:90:3f:cc:4d:1a: 54:99:6f:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcSFJbeFyc4wkfqBf3kGUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNzY4ZDM5ZjkzMjc5MTAwN2EwOTcyMDliMDk4M2ZlODU1 NjBjYjgwHhcNMjUxMjIzMDkwMTI2WhcNMjUxMjI0MDkwMTI2WjAzMTEwLwYDVQQD Eyg5OGY1NmJkM2YyZWQ4MTgyNmZlMDgxZTZmMWJlODgzY2MzNjQ4MmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4R7Pc7Ne3DBbYks07jDk+P66cod+ AmnpHtZZs1v3X6s6IvhsK83QBQQaOBbKAH/4QEbAxUK33AOhhxsPpRYGB1VJAD9F y4MeIMj/vCWmaUq4GlSnY0m1dmOGG/B+VBN2KAns4JlYEJ4LPI6RqlY6tlIxuAN1 8pZTpwDm+DxIG4kB1bN+0K1H4ugePzBOgnrC/Nf4T7y3jpDa7+y4dq1F5fuQyzB8 qdk1i+GE+miHpM6ERhFH7zOFE/PC4nRqynMjhhgJg2S8dl7DBNboUsbtauowqNn9 Hl4CV/J+ZXhMSnWqvb/If0EPATikarvMDSDh9w4UISHgQybS2XR/ThZs6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJj1a9Py7YGCb+CB5vG+iDzDZILaMB8GA1UdIwQY MBaAFBB2jTn5MnkQB6CXIJsJg/6FVgy4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUhhTk9ma3llUkFIb0pjZ213bURfb1ZXRExnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy85M2MxN2UtODQ5MC00ZTkxLTk4MTUt NzJjMzNkYWYzMTU2LzEvRUhhTk9ma3llUkFIb0pjZ213bURfb1ZXRExnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy85M2MxN2UtODQ5MC00ZTkxLTk4MTUtNzJjMzNkYWYzMTU2 LzEvRUhhTk9ma3llUkFIb0pjZ213bURfb1ZXRExnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADfbKdUro EtxDdgSzyuLZkzISNuR2IPuohNxZO2qSK4u6cx9GciuVcUP1SGA+e+dRFxs8lW9E 5hnOrBonAm3YylXc7icTOCOWERlXHuAGQEt4ZBCquG8K0xxrRNvmup7NHYDnNzus Xk3iWIbGbB5FVF98/dbXj+ZCxzzZa+rM9m9n0YtXGTa3xaZbWW+V98RGLis90D8w WvupOV6/ihENoiNHbFAonc6vYlReXA7KTOioGnT6MjJ2nWoemzjQuFHFQFzURa0B mbwNxAwsqvyEGHS5qTMjSxhJP1Qo/XilKXsEsasvM6p3uyfT+YBVoUinNDzvbQCj j5A/zE0aVJlv/w== -----END CERTIFICATE-----Generated at Tue Dec 23 11:01:33 2025 by rpki-client