This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft File: EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft (raw, json) Hash identifier: IsndxqidUVYAV+ZD8Rn9pwuhUXUfqe4Cqi1dhDu8tWc= Subject key identifier: 8F:1D:07:39:8C:71:87:CB:2D:65:2E:82:79:05:8E:9D:82:61:84:D2 Authority key identifier: 12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64 Certificate issuer: /CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64 Certificate serial: 019B3F11DAE394E4137E5218B3E22829FF14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft Manifest number: 088A Signing time: Sun 21 Dec 2025 04:01:33 +0000 Manifest this update: Sun 21 Dec 2025 04:01:33 +0000 Manifest next update: Mon 22 Dec 2025 04:01:33 +0000 Files and hashes: 1: EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl (hash: 70u+XmtZDwDXVJ+C/kb7WNZU78CSPtsTE04dnCYgwkc=) 2: QB_3GAwgUBDF8MSXTq2uaHbFbVk.roa (hash: kWfvWxwAjwjbMAzYwS2Vj1dVqlEfvEJvCE+9y9lLF0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:da:e3:94:e4:13:7e:52:18:b3:e2:28:29:ff:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64 Validity Not Before: Dec 21 04:01:33 2025 GMT Not After : Dec 22 04:01:33 2025 GMT Subject: CN=8f1d07398c7187cb2d652e8279058e9d826184d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:50:38:98:53:82:5c:dc:01:43:60:8a:21:8f: 4f:06:19:6c:0b:c9:68:a9:4c:49:0f:e1:4f:c6:14: 8a:23:2f:92:a0:39:f2:40:cc:3c:bd:4a:ba:5c:29: 44:fb:d2:fc:8a:0d:ba:08:d2:15:3a:af:98:bd:68: da:ea:39:42:72:3c:23:af:f0:99:1f:3e:59:bb:69: 8c:51:50:c1:39:95:7c:e8:5e:f3:6f:d2:51:c5:de: 87:89:e3:f2:cf:c0:4b:b5:47:73:ee:e6:01:00:f7: 6f:e7:98:36:0f:9b:0d:e7:17:98:82:41:a5:0e:92: 67:7d:26:26:72:b4:d8:20:46:05:ca:cf:6b:c4:a2: fa:27:73:e5:4c:6a:a4:cd:b2:97:e9:c2:42:fa:79: a8:7c:92:fd:fa:af:83:f3:db:6a:ee:d9:01:1b:47: 8c:9a:8c:fe:1f:d7:1c:fa:2c:fc:26:d4:54:33:87: 53:a5:37:e3:b2:54:c2:ac:d2:84:aa:9a:a9:51:0e: 70:e7:09:45:d9:3b:ae:7e:77:30:85:63:b8:01:65: 91:15:c1:a5:f7:1f:13:69:69:ba:7e:82:4c:d3:52: 74:83:16:43:c8:9b:c4:22:08:5b:9b:4c:11:73:04: 36:b8:33:40:44:ea:28:d6:6e:18:de:68:fe:4a:bc: 12:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:1D:07:39:8C:71:87:CB:2D:65:2E:82:79:05:8E:9D:82:61:84:D2 X509v3 Authority Key Identifier: keyid:12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:3a:98:28:05:c9:fb:6e:fb:f8:a8:48:3b:93:14:1f:be:c9: e4:d8:c3:fb:db:86:07:ef:77:47:20:19:2a:e4:1a:9a:fe:e8: 28:e0:1a:d4:db:58:fb:da:95:12:16:f3:b2:8a:a1:d1:ff:d6: 28:08:82:ec:d9:dd:c7:1b:e5:ad:6e:2a:a8:f6:7b:65:e0:da: d2:6f:8b:74:40:0d:63:b1:37:d9:22:51:54:4b:5a:ee:e9:4f: 97:43:4a:f4:44:75:ca:c4:03:0d:eb:fc:cd:e3:56:43:64:02: 44:fb:11:1a:21:f0:fa:0f:7d:16:84:ef:b8:81:be:d5:4c:83: 5d:0c:1a:c1:e7:6c:de:c6:b7:20:02:2c:52:e6:31:bc:c8:3e: 27:99:f6:24:8c:cb:7f:ce:43:c8:90:ff:bd:23:7b:e6:98:56: db:6c:49:0d:56:d9:9d:9b:0c:e9:ab:66:66:3e:7e:a3:84:b7: 22:d7:99:5f:ce:7f:30:fe:db:3e:db:68:7a:3a:6e:7e:15:53: c0:fa:e7:17:de:32:d7:cf:6a:9b:51:a7:83:7d:b7:4d:1b:20: 00:48:89:d5:f6:2a:2f:91:92:12:61:59:39:19:e4:fa:23:f5: fb:4c:8b:f8:de:fb:55:a1:c6:2b:c1:03:ac:e2:39:53:07:62: e5:b2:6e:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EdrjlOQTflIYs+IoKf8UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMTMzYTY1MjNlMmVkMGEwYzlhMzZlYThhN2M2ZjBlNzJh NWRkNjQwHhcNMjUxMjIxMDQwMTMzWhcNMjUxMjIyMDQwMTMzWjAzMTEwLwYDVQQD Eyg4ZjFkMDczOThjNzE4N2NiMmQ2NTJlODI3OTA1OGU5ZDgyNjE4NGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA81A4mFOCXNwBQ2CKIY9PBhlsC8lo qUxJD+FPxhSKIy+SoDnyQMw8vUq6XClE+9L8ig26CNIVOq+YvWja6jlCcjwjr/CZ Hz5Zu2mMUVDBOZV86F7zb9JRxd6HiePyz8BLtUdz7uYBAPdv55g2D5sN5xeYgkGl DpJnfSYmcrTYIEYFys9rxKL6J3PlTGqkzbKX6cJC+nmofJL9+q+D89tq7tkBG0eM moz+H9cc+iz8JtRUM4dTpTfjslTCrNKEqpqpUQ5w5wlF2TuufncwhWO4AWWRFcGl 9x8TaWm6foJM01J0gxZDyJvEIghbm0wRcwQ2uDNAROoo1m4Y3mj+SrwSpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8dBzmMcYfLLWUugnkFjp2CYYTSMB8GA1UdIwQY MBaAFBITOmUj4u0KDJo26op8bw5ypd1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWhNNlpTUGk3UW9NbWpicWlueHZEbktsM1dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85MzRlYzMtYjc2YS00MGQwLThhM2Et ODI0NzI5YWI0YjlhLzEvRWhNNlpTUGk3UW9NbWpicWlueHZEbktsM1dRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC85MzRlYzMtYjc2YS00MGQwLThhM2EtODI0NzI5YWI0Yjlh LzEvRWhNNlpTUGk3UW9NbWpicWlueHZEbktsM1dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApDqYKAXJ +277+KhIO5MUH77J5NjD+9uGB+93RyAZKuQamv7oKOAa1NtY+9qVEhbzsoqh0f/W KAiC7NndxxvlrW4qqPZ7ZeDa0m+LdEANY7E32SJRVEta7ulPl0NK9ER1ysQDDev8 zeNWQ2QCRPsRGiHw+g99FoTvuIG+1UyDXQwaweds3sa3IAIsUuYxvMg+J5n2JIzL f85DyJD/vSN75phW22xJDVbZnZsM6atmZj5+o4S3IteZX85/MP7bPttoejpufhVT wPrnF94y189qm1Gng323TRsgAEiJ1fYqL5GSEmFZORnk+iP1+0yL+N77VaHGK8ED rOI5Uwdi5bJudg== -----END CERTIFICATE-----Generated at Sun Dec 21 06:29:41 2025 by rpki-client