This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft File: EHMSpQFqPNzAt-Ydx59V09Xss34.mft (raw, json) Hash identifier: OCm4BzL2DItoKQ1fl5L0jq2UMABQWBxlQZaq4WJbIqk= Subject key identifier: 80:65:88:2D:45:99:F0:8E:29:F8:97:6B:ED:32:76:FC:17:55:A7:E8 Authority key identifier: 10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E Certificate issuer: /CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e Certificate serial: 019B3A90CA73919CD70B3840D65797F5E521 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft Manifest number: 1490 Signing time: Sat 20 Dec 2025 07:02:06 +0000 Manifest this update: Sat 20 Dec 2025 07:02:06 +0000 Manifest next update: Sun 21 Dec 2025 07:02:06 +0000 Files and hashes: 1: 1-mZSuN8jPSBbxpJ0doddwA6wFPs.roa (hash: Sk05O6P4hwRcAJcaUWnZwocsNzWFPwC5OreYAuAopME=) 2: EHMSpQFqPNzAt-Ydx59V09Xss34.crl (hash: QZNBAENaMetcXjK/dNMFp9GjkWwCuv8gY07jnTZc88o=) 3: OSWE1sIIbzFSVSZXWSe38hTA_Qg.roa (hash: wDvkUp5iZcHAQjx5TJixiXfTzob9BfdiEP7CxXAI0TQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:ca:73:91:9c:d7:0b:38:40:d6:57:97:f5:e5:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e Validity Not Before: Dec 20 07:02:06 2025 GMT Not After : Dec 21 07:02:06 2025 GMT Subject: CN=8065882d4599f08e29f8976bed3276fc1755a7e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:85:ca:c0:e4:69:d2:ea:fe:88:d6:7a:bd:8f: b8:6f:23:c5:fe:56:db:7a:b4:cb:3c:d9:d0:5f:38: a3:d7:51:83:b5:4f:67:22:a2:88:a3:cd:09:6b:11: f1:c0:7c:1f:46:1b:c5:2f:ac:fb:62:05:0b:dc:b6: 8d:df:1f:5f:3b:7d:14:a3:a8:cf:2b:df:4d:33:6f: 74:96:32:5b:28:3f:ca:b9:b3:08:b7:c8:8c:4d:30: 3e:b3:70:f9:b1:be:87:b4:9b:0d:bf:85:2c:af:9f: 62:d6:4b:6c:e0:15:ad:7c:74:c4:03:27:53:c2:d3: 89:ba:7a:4d:48:76:73:e4:25:40:87:9a:7c:7b:e5: dc:fa:57:01:2e:03:2c:91:73:16:16:1a:7e:23:41: 57:cb:1e:a8:ec:f6:dd:c7:f5:81:cc:d4:4b:b6:c4: d6:2a:73:59:a7:de:88:c7:92:24:9a:ca:43:88:aa: c9:4a:e7:67:59:4c:90:1a:74:a3:f7:b2:84:7b:9c: 6d:bb:4f:73:84:ca:b1:0f:91:ee:eb:9d:d1:b1:f5: 85:30:37:92:ae:67:98:3f:a5:24:7a:0c:bc:5b:bf: 77:63:ff:c3:97:1a:cc:cf:0a:21:5d:be:bf:27:ad: 02:30:3b:25:ff:01:97:4c:a5:06:00:38:67:d1:8c: 00:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:65:88:2D:45:99:F0:8E:29:F8:97:6B:ED:32:76:FC:17:55:A7:E8 X509v3 Authority Key Identifier: keyid:10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:b6:5e:29:fe:55:85:9c:ae:77:aa:4e:d7:a4:ea:5d:f9:f4: 56:1c:88:6f:d9:44:5c:68:10:74:75:48:a2:89:ef:9c:89:d6: d9:f6:94:38:74:2d:d4:86:ff:5c:ae:1a:ab:1e:49:e9:20:a0: 6c:63:b9:60:05:98:02:1c:f6:51:00:65:90:af:c5:98:fd:1d: e5:7a:c0:b4:49:34:09:86:35:7d:e3:f9:e3:ba:f7:33:05:b1: ad:0c:10:1c:56:40:be:24:9f:af:9e:cf:c6:9a:8b:35:4a:82: c5:94:e9:36:a2:b4:e0:73:5e:95:0d:3f:1f:36:fc:88:10:e2: 67:aa:f9:4b:6f:b3:ed:41:30:39:2f:58:b5:ab:8c:d4:66:9d: bb:39:78:57:e3:db:8e:62:26:33:32:65:77:3e:4a:ed:a6:cf: f9:50:30:3f:d1:4d:71:d5:27:ed:e9:d7:9e:d9:dd:4d:98:33: 46:77:73:5d:d1:6a:b3:d8:69:7d:20:7f:6b:86:b6:1c:ca:de: 07:85:e7:8f:31:89:2d:3e:04:d5:0e:e1:2a:5f:a5:89:14:6d: db:47:af:af:c2:40:75:e0:55:01:71:d5:5b:94:4e:c5:64:6a: b8:10:06:1c:b0:94:13:bc:da:21:34:f2:5a:93:d8:36:bd:42: fe:c0:b2:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kMpzkZzXCzhA1leX9eUhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNzMxMmE1MDE2YTNjZGNjMGI3ZTYxZGM3OWY1NWQzZDVl Y2IzN2UwHhcNMjUxMjIwMDcwMjA2WhcNMjUxMjIxMDcwMjA2WjAzMTEwLwYDVQQD Eyg4MDY1ODgyZDQ1OTlmMDhlMjlmODk3NmJlZDMyNzZmYzE3NTVhN2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYXKwORp0ur+iNZ6vY+4byPF/lbb erTLPNnQXzij11GDtU9nIqKIo80JaxHxwHwfRhvFL6z7YgUL3LaN3x9fO30Uo6jP K99NM290ljJbKD/KubMIt8iMTTA+s3D5sb6HtJsNv4Usr59i1kts4BWtfHTEAydT wtOJunpNSHZz5CVAh5p8e+Xc+lcBLgMskXMWFhp+I0FXyx6o7Pbdx/WBzNRLtsTW KnNZp96Ix5IkmspDiKrJSudnWUyQGnSj97KEe5xtu09zhMqxD5Hu653RsfWFMDeS rmeYP6Ukegy8W793Y//DlxrMzwohXb6/J60CMDsl/wGXTKUGADhn0YwA2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIBliC1FmfCOKfiXa+0ydvwXVafoMB8GA1UdIwQY MBaAFBBzEqUBajzcwLfmHcefVdPV7LN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUhNU3BRRnFQTnpBdC1ZZHg1OVYwOVhzczM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC85OWY1YzMtNmI3NS00OGJjLWE4YWEt M2ZkYmE5NzY5MzAyLzEvRUhNU3BRRnFQTnpBdC1ZZHg1OVYwOVhzczM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC85OWY1YzMtNmI3NS00OGJjLWE4YWEtM2ZkYmE5NzY5MzAy LzEvRUhNU3BRRnFQTnpBdC1ZZHg1OVYwOVhzczM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhLZeKf5V hZyud6pO16TqXfn0VhyIb9lEXGgQdHVIoonvnInW2faUOHQt1Ib/XK4aqx5J6SCg bGO5YAWYAhz2UQBlkK/FmP0d5XrAtEk0CYY1feP547r3MwWxrQwQHFZAviSfr57P xpqLNUqCxZTpNqK04HNelQ0/Hzb8iBDiZ6r5S2+z7UEwOS9YtauM1Gaduzl4V+Pb jmImMzJldz5K7abP+VAwP9FNcdUn7enXntndTZgzRndzXdFqs9hpfSB/a4a2HMre B4XnjzGJLT4E1Q7hKl+liRRt20evr8JAdeBVAXHVW5ROxWRquBAGHLCUE7zaITTy WpPYNr1C/sCyIw== -----END CERTIFICATE-----Generated at Sat Dec 20 17:05:06 2025 by rpki-client