This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft File: EHTblkAv9c8YdWRWDqjxPu61_-s.mft (raw, json) Hash identifier: gCbiNg3Kgdd6j0XfQeM4nsPC8NmylznheRCUPSn7kDk= Subject key identifier: 35:D1:40:74:98:BA:EB:56:9D:7C:41:05:9C:7A:C2:B9:41:85:8A:F4 Authority key identifier: 10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB Certificate issuer: /CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb Certificate serial: 019B3D59838B0CDB6EB6DED41F55A08E5630 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft Manifest number: 17C9 Signing time: Sat 20 Dec 2025 20:00:34 +0000 Manifest this update: Sat 20 Dec 2025 20:00:34 +0000 Manifest next update: Sun 21 Dec 2025 20:00:34 +0000 Files and hashes: 1: 5Fh8wLq-vAfdSqECF1o7u7so-j4.roa (hash: ZlARtLuw+Q8e0b7Jolz8g+1kXlsunG6VLot0JEG5Rcc=) 2: EHTblkAv9c8YdWRWDqjxPu61_-s.crl (hash: l3CE7Q79o6b+WGNCWVUMuDZqMjErIC/81+9ZhIj4u1g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.crl rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:83:8b:0c:db:6e:b6:de:d4:1f:55:a0:8e:56:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb Validity Not Before: Dec 20 20:00:34 2025 GMT Not After : Dec 21 20:00:34 2025 GMT Subject: CN=35d1407498baeb569d7c41059c7ac2b941858af4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:17:8e:33:7b:03:ef:9f:d2:da:ec:64:f9:77: 7c:03:8c:1f:de:65:da:4e:d6:d7:e7:7a:bc:c3:17: f4:84:4f:c5:f7:7d:76:35:2b:5a:de:eb:89:9d:3e: d3:02:cd:9f:f3:64:5e:d1:22:c1:29:14:87:26:25: 28:76:ae:b9:23:62:fa:64:b2:da:10:16:c9:17:e6: 5c:5a:51:cd:32:d1:f1:b9:d8:cb:90:96:f4:a3:00: 49:de:20:90:25:e4:4f:b1:d0:7c:a9:c0:bb:af:48: a2:cb:40:cd:ca:13:8d:ad:b3:dc:56:75:5d:7e:1b: dd:e6:e3:3e:3e:65:d1:4c:a2:ee:40:1e:5c:71:b1: 3c:23:f2:ff:2d:6d:13:0c:ea:0b:9e:44:20:c5:7b: 63:61:66:ba:83:01:0b:97:b7:b1:1e:63:a9:d6:b0: c1:7b:c8:de:24:04:6b:65:42:3e:58:5a:9c:75:3b: a6:6d:e6:39:c8:df:79:77:7c:55:6f:13:a5:a4:2d: 42:5d:75:dc:3a:db:9f:d3:6a:ac:cc:e2:aa:c0:12: 50:38:27:18:bc:39:8e:16:35:43:4b:4b:03:fd:08: 14:2a:18:75:90:ce:bd:84:54:75:5f:de:9c:3b:7e: 05:75:65:af:c8:34:0e:5c:e4:33:2a:79:4c:8e:eb: 3f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D1:40:74:98:BA:EB:56:9D:7C:41:05:9C:7A:C2:B9:41:85:8A:F4 X509v3 Authority Key Identifier: keyid:10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:4b:e6:c4:4f:ff:d1:c9:be:cb:ee:b7:64:80:88:85:41:27: 47:e6:fa:fd:a7:16:98:f8:9b:d0:ab:ef:67:33:0b:15:76:31: 4c:94:5e:4b:a0:3a:2e:ce:c1:17:73:ed:33:93:e2:e7:59:8c: cf:77:45:90:96:40:41:3b:90:81:52:85:32:22:af:39:20:a8: ed:7c:d8:b9:76:bc:80:f6:a7:e4:8c:9c:d9:77:da:f8:fa:15: ab:00:fc:bc:d8:f3:20:a9:ce:e0:05:4f:30:17:64:04:00:0a: 6b:5b:ee:42:7d:db:60:e3:08:6c:9b:3f:5c:b2:26:c0:85:48: 4d:fb:9f:64:dc:3b:c9:25:89:99:ad:53:87:cc:4c:ed:81:cc: 30:ee:72:97:65:30:b3:1d:33:37:96:31:56:0d:87:2c:43:74: b3:69:6d:da:e6:a2:96:1f:62:aa:1b:40:84:16:e9:2d:c9:6b: dc:29:36:bc:b0:90:33:aa:8a:df:60:cc:a2:31:6a:2a:51:4c: 9d:cf:8a:a9:d0:b6:71:c6:84:01:29:7c:5b:e4:e6:a7:7f:6b: 11:36:de:d9:b2:61:7c:3e:43:8b:a1:7e:76:e9:50:cf:b1:a2: dd:8c:2c:d9:a2:93:45:28:f8:e3:d7:8a:bf:7f:18:da:ff:c4: 50:28:68:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WYOLDNtutt7UH1WgjlYwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNzRkYjk2NDAyZmY1Y2YxODc1NjQ1NjBlYThmMTNlZWVi NWZmZWIwHhcNMjUxMjIwMjAwMDM0WhcNMjUxMjIxMjAwMDM0WjAzMTEwLwYDVQQD EygzNWQxNDA3NDk4YmFlYjU2OWQ3YzQxMDU5YzdhYzJiOTQxODU4YWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBeOM3sD75/S2uxk+Xd8A4wf3mXa TtbX53q8wxf0hE/F9312NSta3uuJnT7TAs2f82Re0SLBKRSHJiUodq65I2L6ZLLa EBbJF+ZcWlHNMtHxudjLkJb0owBJ3iCQJeRPsdB8qcC7r0iiy0DNyhONrbPcVnVd fhvd5uM+PmXRTKLuQB5ccbE8I/L/LW0TDOoLnkQgxXtjYWa6gwELl7exHmOp1rDB e8jeJARrZUI+WFqcdTumbeY5yN95d3xVbxOlpC1CXXXcOtuf02qszOKqwBJQOCcY vDmOFjVDS0sD/QgUKhh1kM69hFR1X96cO34FdWWvyDQOXOQzKnlMjus/qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDXRQHSYuutWnXxBBZx6wrlBhYr0MB8GA1UdIwQY MBaAFBB025ZAL/XPGHVkVg6o8T7utf/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUhUYmxrQXY5YzhZZFdSV0RxanhQdTYxXy1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8xZTFkNjktMGJmZC00MGFmLTg4YjEt YWI0MGI1OGEyODkyLzEvRUhUYmxrQXY5YzhZZFdSV0RxanhQdTYxXy1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8xZTFkNjktMGJmZC00MGFmLTg4YjEtYWI0MGI1OGEyODky LzEvRUhUYmxrQXY5YzhZZFdSV0RxanhQdTYxXy1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI0vmxE// 0cm+y+63ZICIhUEnR+b6/acWmPib0KvvZzMLFXYxTJReS6A6Ls7BF3PtM5Pi51mM z3dFkJZAQTuQgVKFMiKvOSCo7XzYuXa8gPan5Iyc2Xfa+PoVqwD8vNjzIKnO4AVP MBdkBAAKa1vuQn3bYOMIbJs/XLImwIVITfufZNw7ySWJma1Th8xM7YHMMO5yl2Uw sx0zN5YxVg2HLEN0s2lt2uailh9iqhtAhBbpLclr3Ck2vLCQM6qK32DMojFqKlFM nc+KqdC2ccaEASl8W+Tmp39rETbe2bJhfD5Di6F+dulQz7Gi3Yws2aKTRSj449eK v38Y2v/EUChoEA== -----END CERTIFICATE-----Generated at Sun Dec 21 02:56:56 2025 by rpki-client