This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft File: eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft (raw, json) Hash identifier: ehgv+qsxQEPykSjCh84inv8likYnx2VwXFDdA3mmU4U= Subject key identifier: 93:3D:F1:8F:28:F0:18:4F:F5:B3:39:EC:71:3A:6D:AF:8A:51:93:E6 Authority key identifier: 78:70:62:1F:C0:AF:C8:EC:18:EE:F2:06:33:F6:14:88:13:27:99:76 Certificate issuer: /CN=7870621fc0afc8ec18eef20633f6148813279976 Certificate serial: 019B4B152A9AAA1BE5023B4DB1E1F1C150E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft Manifest number: 0655 Signing time: Tue 23 Dec 2025 12:00:36 +0000 Manifest this update: Tue 23 Dec 2025 12:00:36 +0000 Manifest next update: Wed 24 Dec 2025 12:00:36 +0000 Files and hashes: 1: Mg8uBQPef3LyJjKgZxMt4YNcO_E.roa (hash: PmmY7x5LyJJDD6LlXlPdfzSLFcMHWHakThUWPxHgQkY=) 2: eHBiH8CvyOwY7vIGM_YUiBMnmXY.crl (hash: 1s76VQC/0qmdhOpAakA73lxFai/xigFrxKk4yCOhQ8U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft rsync://rpki.ripe.net/repository/DEFAULT/eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:15:2a:9a:aa:1b:e5:02:3b:4d:b1:e1:f1:c1:50:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7870621fc0afc8ec18eef20633f6148813279976 Validity Not Before: Dec 23 12:00:36 2025 GMT Not After : Dec 24 12:00:36 2025 GMT Subject: CN=933df18f28f0184ff5b339ec713a6daf8a5193e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d7:0c:50:11:7a:e2:6b:64:d1:4b:ab:9e:de: 29:ce:00:b8:6d:3d:1c:c5:ad:6d:f3:5f:1e:03:a0: 52:b3:4f:9c:f5:bf:68:23:ae:9b:46:55:c1:c1:01: 25:21:54:ef:ba:26:69:4c:45:35:62:ff:56:dd:47: 22:3c:92:49:b9:74:f2:ee:af:d3:5a:7d:76:6d:9f: ad:75:0a:2d:ea:18:a9:68:ab:31:05:34:7b:7e:c1: 33:97:56:02:76:cb:59:43:c0:fb:fe:12:e1:b4:d4: bb:e6:10:7a:0b:03:0e:f0:53:c5:7e:3b:0a:33:15: 26:6a:0b:4e:67:7b:f5:38:f3:60:58:5a:8c:be:cf: 48:68:be:ba:ff:db:01:c2:cc:4d:26:ba:87:8b:56: 4a:f8:57:7c:d9:21:30:43:7b:2b:1b:1e:57:37:2e: cd:0f:2b:c4:32:9e:bc:81:48:be:93:f4:a1:2b:f7: 3e:4d:0e:ec:9a:d0:31:78:31:49:6f:4f:59:42:c4: ca:28:47:46:2f:18:be:df:90:a7:89:c4:01:d2:76: 33:99:64:6e:93:d8:80:54:c9:1d:01:90:eb:7a:0a: 17:d2:49:2e:ec:c4:e8:73:9f:0b:5e:49:55:4b:42: a6:29:53:78:d0:c6:f2:24:54:ec:11:41:6f:fe:ce: 05:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:3D:F1:8F:28:F0:18:4F:F5:B3:39:EC:71:3A:6D:AF:8A:51:93:E6 X509v3 Authority Key Identifier: keyid:78:70:62:1F:C0:AF:C8:EC:18:EE:F2:06:33:F6:14:88:13:27:99:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:38:eb:e0:e0:2b:c8:8a:16:4f:da:22:9c:a4:f2:d1:45:72: 47:65:88:34:80:11:3d:69:00:a2:8d:6c:e6:ab:3c:c5:76:77: 1c:fd:55:58:ca:20:3e:40:9e:1c:ed:b6:01:57:39:9a:37:a0: e3:2a:f0:bf:b4:f2:63:52:f0:72:75:dd:2e:c5:3d:28:98:ef: 70:9f:81:29:68:7b:8d:a2:41:1e:ae:b3:5d:c4:c7:68:38:85: a8:c0:4c:f2:5b:15:9d:94:da:2c:86:a6:38:34:fe:47:64:26: 6b:ab:2e:11:16:a4:a4:38:4c:ac:27:59:b2:82:cc:a9:c4:39: c7:65:19:24:68:8d:5f:6a:ce:d0:8b:d7:61:71:f0:d1:ba:57: 05:f2:38:aa:ac:4b:3a:25:7a:20:5f:13:56:73:51:71:59:cf: aa:f3:54:a5:8b:a8:7c:02:2a:41:ad:bc:38:93:ac:90:86:9f: b3:72:4b:05:ff:93:1d:9a:69:8b:82:89:9c:c9:03:9f:38:a4: 4f:68:c2:7f:96:50:b3:fa:4d:67:3b:5f:a8:ca:6d:1f:47:39: 56:29:34:b5:ef:f3:12:31:7e:59:b4:aa:ce:06:41:40:23:89: e0:a8:e8:37:07:f4:ae:9a:19:cd:bb:25:f5:14:7c:c6:e2:ce: e3:21:fd:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLFSqaqhvlAjtNseHxwVDkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4NzA2MjFmYzBhZmM4ZWMxOGVlZjIwNjMzZjYxNDg4MTMy Nzk5NzYwHhcNMjUxMjIzMTIwMDM2WhcNMjUxMjI0MTIwMDM2WjAzMTEwLwYDVQQD Eyg5MzNkZjE4ZjI4ZjAxODRmZjViMzM5ZWM3MTNhNmRhZjhhNTE5M2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9cMUBF64mtk0Uurnt4pzgC4bT0c xa1t818eA6BSs0+c9b9oI66bRlXBwQElIVTvuiZpTEU1Yv9W3UciPJJJuXTy7q/T Wn12bZ+tdQot6hipaKsxBTR7fsEzl1YCdstZQ8D7/hLhtNS75hB6CwMO8FPFfjsK MxUmagtOZ3v1OPNgWFqMvs9IaL66/9sBwsxNJrqHi1ZK+Fd82SEwQ3srGx5XNy7N DyvEMp68gUi+k/ShK/c+TQ7smtAxeDFJb09ZQsTKKEdGLxi+35CnicQB0nYzmWRu k9iAVMkdAZDregoX0kku7MToc58LXklVS0KmKVN40MbyJFTsEUFv/s4FCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJM98Y8o8BhP9bM57HE6ba+KUZPmMB8GA1UdIwQY MBaAFHhwYh/Ar8jsGO7yBjP2FIgTJ5l2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUhCaUg4Q3Z5T3dZN3ZJR01fWVVpQk1ubVhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi84YjRlODQtYmVjZC00ZWNmLWJlYjUt OTZhNzlhMWQxYmIzLzEvZUhCaUg4Q3Z5T3dZN3ZJR01fWVVpQk1ubVhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi84YjRlODQtYmVjZC00ZWNmLWJlYjUtOTZhNzlhMWQxYmIz LzEvZUhCaUg4Q3Z5T3dZN3ZJR01fWVVpQk1ubVhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZTjr4OAr yIoWT9oinKTy0UVyR2WINIARPWkAoo1s5qs8xXZ3HP1VWMogPkCeHO22AVc5mjeg 4yrwv7TyY1LwcnXdLsU9KJjvcJ+BKWh7jaJBHq6zXcTHaDiFqMBM8lsVnZTaLIam ODT+R2Qma6suERakpDhMrCdZsoLMqcQ5x2UZJGiNX2rO0IvXYXHw0bpXBfI4qqxL OiV6IF8TVnNRcVnPqvNUpYuofAIqQa28OJOskIafs3JLBf+THZppi4KJnMkDnzik T2jCf5ZQs/pNZztfqMptH0c5Vik0te/zEjF+WbSqzgZBQCOJ4KjoNwf0rpoZzbsl 9RR8xuLO4yH9fw== -----END CERTIFICATE-----Generated at Tue Dec 23 20:34:48 2025 by rpki-client