This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft File: EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft (raw, json) Hash identifier: oyQpdIfYXShowl826R3UgfjfEhm3XB3TVO2e5bt/hpY= Subject key identifier: 1A:2C:52:8C:87:B0:D0:DA:72:35:C2:DA:87:07:1F:2C:1C:C3:12:FE Authority key identifier: 12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64 Certificate issuer: /CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64 Certificate serial: 019B6D6A327D8A8049941C45F52A5280E067 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft Manifest number: 08A2 Signing time: Tue 30 Dec 2025 04:00:34 +0000 Manifest this update: Tue 30 Dec 2025 04:00:34 +0000 Manifest next update: Wed 31 Dec 2025 04:00:34 +0000 Files and hashes: 1: EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl (hash: ktnU8ea6D+IEsyNOo4oNtikomWMejWSmdG+3SERtao4=) 2: QB_3GAwgUBDF8MSXTq2uaHbFbVk.roa (hash: kWfvWxwAjwjbMAzYwS2Vj1dVqlEfvEJvCE+9y9lLF0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:6a:32:7d:8a:80:49:94:1c:45:f5:2a:52:80:e0:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64 Validity Not Before: Dec 30 04:00:34 2025 GMT Not After : Dec 31 04:00:34 2025 GMT Subject: CN=1a2c528c87b0d0da7235c2da87071f2c1cc312fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:52:54:45:8e:27:a5:cc:07:51:f8:e2:39:21: 45:cc:ed:bf:44:a5:38:c6:d5:7a:b9:94:c8:45:84: aa:18:40:07:94:ea:b4:f4:52:5f:72:22:e7:32:12: 58:55:10:78:1d:4b:6f:ae:9a:7a:bf:e7:cb:e5:8b: f1:da:59:ec:73:9e:97:79:e6:11:81:73:75:7b:36: 33:7a:bb:50:14:92:b3:07:bb:a8:2f:9a:6b:24:f7: 0f:22:a3:f3:f8:67:ca:eb:e0:89:63:b5:aa:f5:6c: d7:c4:39:44:89:80:ca:ed:fd:80:c0:2e:b2:74:da: 4e:55:b2:c9:b1:6a:3a:70:be:49:ff:a3:ed:7e:52: a6:c0:60:20:0e:f5:71:3a:6f:47:9b:97:ad:5f:ac: 7b:fe:d6:1b:12:0a:9d:1a:9b:66:03:ff:f9:3f:c3: ac:65:33:74:47:f4:7b:d5:c7:81:0c:8c:06:98:23: 5f:d7:8e:62:e2:c5:53:c4:d9:49:9c:16:6d:b4:8a: 64:d4:b3:94:92:0a:f2:d8:49:ff:4a:5a:80:5a:44: 23:0d:ed:a4:fb:cf:ea:60:54:02:79:9a:96:f2:ca: d4:7c:ed:71:ff:2a:5d:02:6d:03:41:67:8b:70:8f: 65:56:20:4a:d3:43:97:c7:fd:13:47:25:9c:33:b1: 55:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2C:52:8C:87:B0:D0:DA:72:35:C2:DA:87:07:1F:2C:1C:C3:12:FE X509v3 Authority Key Identifier: keyid:12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:67:92:f2:0f:7a:3b:4b:b4:06:8d:08:d4:85:40:2c:88:8d: c6:3d:1d:70:6f:a4:b3:fa:e8:77:e2:97:55:09:fe:83:67:5b: 89:9d:06:a3:c6:e7:e2:37:f9:bb:f3:be:f3:2e:d5:15:3d:bb: 32:83:5b:d3:97:ca:db:52:9d:12:08:5a:1a:27:5c:4e:9f:5d: a8:67:28:41:96:75:df:ae:b4:06:d3:08:aa:87:d1:27:c5:e7: 6f:e7:b0:20:3c:b1:c6:63:0d:b4:de:ee:9e:3f:d8:24:be:e5: c4:ef:03:3e:6b:8b:cb:20:34:2b:64:58:35:57:db:a0:0a:ee: a7:f2:4e:8a:64:bc:77:59:c8:24:44:3f:a8:b0:89:8e:5f:52: 79:76:fb:f4:1e:86:9e:67:bf:46:e5:83:8a:46:ab:83:0f:4e: ea:ee:44:98:da:49:4a:f8:0b:f3:92:f8:71:14:7b:75:4f:2c: 58:1d:c3:53:e2:9b:ef:5a:0c:0d:8f:27:33:65:fe:2a:81:29: 32:e7:ac:60:18:f4:5a:26:e5:55:6d:3e:8a:3c:99:14:be:55: 0f:77:94:a9:2b:e0:b2:4e:5c:9d:54:9d:4a:b6:d6:04:21:af: 28:ba:a1:f9:aa:cf:54:d3:03:58:4b:b8:16:63:d0:50:60:56: 49:66:41:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttajJ9ioBJlBxF9SpSgOBnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMTMzYTY1MjNlMmVkMGEwYzlhMzZlYThhN2M2ZjBlNzJh NWRkNjQwHhcNMjUxMjMwMDQwMDM0WhcNMjUxMjMxMDQwMDM0WjAzMTEwLwYDVQQD EygxYTJjNTI4Yzg3YjBkMGRhNzIzNWMyZGE4NzA3MWYyYzFjYzMxMmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFJURY4npcwHUfjiOSFFzO2/RKU4 xtV6uZTIRYSqGEAHlOq09FJfciLnMhJYVRB4HUtvrpp6v+fL5Yvx2lnsc56XeeYR gXN1ezYzertQFJKzB7uoL5prJPcPIqPz+GfK6+CJY7Wq9WzXxDlEiYDK7f2AwC6y dNpOVbLJsWo6cL5J/6PtflKmwGAgDvVxOm9Hm5etX6x7/tYbEgqdGptmA//5P8Os ZTN0R/R71ceBDIwGmCNf145i4sVTxNlJnBZttIpk1LOUkgry2En/SlqAWkQjDe2k +8/qYFQCeZqW8srUfO1x/ypdAm0DQWeLcI9lViBK00OXx/0TRyWcM7FVrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBosUoyHsNDacjXC2ocHHywcwxL+MB8GA1UdIwQY MBaAFBITOmUj4u0KDJo26op8bw5ypd1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWhNNlpTUGk3UW9NbWpicWlueHZEbktsM1dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85MzRlYzMtYjc2YS00MGQwLThhM2Et ODI0NzI5YWI0YjlhLzEvRWhNNlpTUGk3UW9NbWpicWlueHZEbktsM1dRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC85MzRlYzMtYjc2YS00MGQwLThhM2EtODI0NzI5YWI0Yjlh LzEvRWhNNlpTUGk3UW9NbWpicWlueHZEbktsM1dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB2eS8g96 O0u0Bo0I1IVALIiNxj0dcG+ks/rod+KXVQn+g2dbiZ0Go8bn4jf5u/O+8y7VFT27 MoNb05fK21KdEghaGidcTp9dqGcoQZZ13660BtMIqofRJ8Xnb+ewIDyxxmMNtN7u nj/YJL7lxO8DPmuLyyA0K2RYNVfboArup/JOimS8d1nIJEQ/qLCJjl9SeXb79B6G nme/RuWDikargw9O6u5EmNpJSvgL85L4cRR7dU8sWB3DU+Kb71oMDY8nM2X+KoEp MuesYBj0WiblVW0+ijyZFL5VD3eUqSvgsk5cnVSdSrbWBCGvKLqh+arPVNMDWEu4 FmPQUGBWSWZBjw== -----END CERTIFICATE-----Generated at Tue Dec 30 08:50:17 2025 by rpki-client