This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft File: EharzETJqVVAzfWx3FQux9Ef4Ho.mft (raw, json) Hash identifier: +qcHsrPhCv5cxmxd+5lw9cXSonPypHfzfHEIZmAiZ1Y= Subject key identifier: 26:21:28:5F:F4:94:9D:27:4B:BB:6B:C9:00:CE:40:45:1E:85:2E:47 Authority key identifier: 12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A Certificate issuer: /CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a Certificate serial: 019B66C378E3E3F70838E1C6CC64EB7A97A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft Manifest number: 02BA Signing time: Sun 28 Dec 2025 21:00:45 +0000 Manifest this update: Sun 28 Dec 2025 21:00:45 +0000 Manifest next update: Mon 29 Dec 2025 21:00:45 +0000 Files and hashes: 1: 8Qkj-OL1DBWAUGxyf__SID7DvY0.roa (hash: FohvUxuind4X94r0B623U5wmhvbScHzDNUfxcV28qbg=) 2: 8XAK_n9Ijdz-1TJV-cnMoV4PDJI.roa (hash: hpzRZ9fG9vy0NkMEhpRLlojbHPEYeYp5I8KcchuS0u0=) 3: 9PgT8am9GX2lNTUWeiRs0LXntY0.roa (hash: X5SDKNQRKe6G52wQx4wpF/A5KQNfS5fj8rskXwcraIA=) 4: D8akI8P5Xi8Ifp8LsQyslMH9ydQ.roa (hash: AKGzJiWAK4O0wOeiBq1pBQs9Et3quYVUdawmatMGbA4=) 5: EharzETJqVVAzfWx3FQux9Ef4Ho.crl (hash: jrn0ubx8z7FojjScRGfMvtezanw2rTF7sFVGrAR9tlU=) 6: MQJ9Tms8NtZHBjFKGd8tRATLgzU.roa (hash: JQ9FShj97dGuiiKP4b3nhes/Pu/ifqQ1fWpnjpSUqN0=) 7: Ru8ZRa3us3EXd4Kuc_gCxyMaY_w.roa (hash: 8tvJstphtGeZ6QzHvnWs5W3Xee9kE5jmY/6KMv2k9ic=) 8: ScAR3uPyATYgU_nmPSEp-uOF-dw.roa (hash: /Djsq98hUPSTRPRTBh6WF392L0FrLeU6LETIMEXpAeg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:c3:78:e3:e3:f7:08:38:e1:c6:cc:64:eb:7a:97:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a Validity Not Before: Dec 28 21:00:45 2025 GMT Not After : Dec 29 21:00:45 2025 GMT Subject: CN=2621285ff4949d274bbb6bc900ce40451e852e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2b:47:9c:3f:36:ee:1a:9b:28:98:ca:b3:ac: 33:c6:78:68:c0:f0:11:eb:0f:f4:0d:42:3e:f6:ae: 3d:75:ef:24:56:1c:af:ed:74:55:de:03:a9:2d:c8: 9f:45:f6:8e:72:36:09:3f:f4:dd:42:0a:9e:f7:72: 71:2a:ce:7a:b7:ca:45:54:9d:5a:5e:c0:b5:54:9a: 45:84:c9:37:94:24:7a:dc:77:ce:f5:d3:1e:53:eb: 41:ed:6e:06:ee:16:da:c3:6c:84:f0:ce:d0:ac:72: 72:81:de:60:6f:a5:27:2c:70:fd:2d:18:f4:ae:34: 17:7c:f7:c8:65:ec:ea:60:b6:0c:46:32:f2:75:69: 33:58:c5:ae:36:c2:c4:23:e2:6b:63:e6:c0:28:1a: 5b:f1:dd:bd:57:81:5f:d0:70:1c:ee:cd:e5:16:4a: bb:d0:27:69:d4:90:ec:99:d5:33:36:81:89:d8:92: 23:f4:ab:a8:86:80:23:3a:96:06:1a:8e:71:ae:6f: 7f:3d:99:8e:27:c4:95:48:e5:f6:cb:b1:d6:8b:7d: f7:a0:21:ab:c4:52:50:31:84:f3:e2:79:0d:61:49: f7:3b:4c:94:42:e6:5b:bc:2c:4c:61:66:ad:ab:c6: 0d:e7:ec:25:70:28:a1:84:45:e1:c4:cc:26:0f:d4: 99:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:21:28:5F:F4:94:9D:27:4B:BB:6B:C9:00:CE:40:45:1E:85:2E:47 X509v3 Authority Key Identifier: keyid:12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:f8:2e:3e:64:5f:00:41:ff:65:71:32:fb:0e:a4:75:81:d4: 25:58:f9:f9:f0:a9:50:bf:91:e9:df:85:98:66:a4:72:dd:17: 7d:f6:b4:e2:52:67:0d:77:6c:40:06:d8:3f:18:50:48:29:20: 4f:69:c1:c1:a4:ca:a9:fa:75:bc:5b:7b:ed:8e:b8:25:78:41: 7b:86:c6:23:12:64:3b:93:50:c7:41:85:dc:ab:0a:fd:ac:56: c8:3d:81:be:d6:dc:e7:51:55:8c:17:5a:9b:2b:4c:28:c3:36: c0:4c:5e:66:3e:df:39:9d:70:60:a9:f0:7e:1d:8f:e5:eb:dc: be:c9:fc:61:77:7d:de:9e:50:4f:02:ed:cb:86:85:ac:15:b3: e0:b8:f0:ab:3e:b3:6c:57:36:4e:71:77:29:37:80:8e:a9:32: 22:fe:77:13:65:60:25:e2:3e:e7:88:ec:81:8b:f9:74:76:4c: 71:d1:74:15:00:86:37:4a:01:d2:8d:21:96:fd:12:34:96:c3: 22:16:90:f0:d4:e9:51:98:4c:46:0d:b0:1e:ba:90:44:a8:b0: 18:aa:62:44:09:bc:d2:7f:68:82:eb:85:71:16:18:a9:af:3b: cb:9e:9e:97:0f:45:f2:09:c3:f0:56:74:97:85:f0:bf:57:8e: 30:24:23:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmw3jj4/cIOOHGzGTrepelMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMTZhYmNjNDRjOWE5NTU0MGNkZjViMWRjNTQyZWM3ZDEx ZmUwN2EwHhcNMjUxMjI4MjEwMDQ1WhcNMjUxMjI5MjEwMDQ1WjAzMTEwLwYDVQQD EygyNjIxMjg1ZmY0OTQ5ZDI3NGJiYjZiYzkwMGNlNDA0NTFlODUyZTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCtHnD827hqbKJjKs6wzxnhowPAR 6w/0DUI+9q49de8kVhyv7XRV3gOpLcifRfaOcjYJP/TdQgqe93JxKs56t8pFVJ1a XsC1VJpFhMk3lCR63HfO9dMeU+tB7W4G7hbaw2yE8M7QrHJygd5gb6UnLHD9LRj0 rjQXfPfIZezqYLYMRjLydWkzWMWuNsLEI+JrY+bAKBpb8d29V4Ff0HAc7s3lFkq7 0Cdp1JDsmdUzNoGJ2JIj9KuohoAjOpYGGo5xrm9/PZmOJ8SVSOX2y7HWi333oCGr xFJQMYTz4nkNYUn3O0yUQuZbvCxMYWatq8YN5+wlcCihhEXhxMwmD9SZsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCYhKF/0lJ0nS7tryQDOQEUehS5HMB8GA1UdIwQY MBaAFBIWq8xEyalVQM31sdxULsfRH+B6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWhhcnpFVEpxVlZBemZXeDNGUXV4OUVmNEhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9hYzljZjYtMWJlYy00MjRiLWFhNTEt YTA5NjJkOTk4ZTYwLzEvRWhhcnpFVEpxVlZBemZXeDNGUXV4OUVmNEhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9hYzljZjYtMWJlYy00MjRiLWFhNTEtYTA5NjJkOTk4ZTYw LzEvRWhhcnpFVEpxVlZBemZXeDNGUXV4OUVmNEhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgvguPmRf AEH/ZXEy+w6kdYHUJVj5+fCpUL+R6d+FmGakct0Xffa04lJnDXdsQAbYPxhQSCkg T2nBwaTKqfp1vFt77Y64JXhBe4bGIxJkO5NQx0GF3KsK/axWyD2Bvtbc51FVjBda mytMKMM2wExeZj7fOZ1wYKnwfh2P5evcvsn8YXd93p5QTwLty4aFrBWz4Ljwqz6z bFc2TnF3KTeAjqkyIv53E2VgJeI+54jsgYv5dHZMcdF0FQCGN0oB0o0hlv0SNJbD IhaQ8NTpUZhMRg2wHrqQRKiwGKpiRAm80n9oguuFcRYYqa87y56elw9F8gnD8FZ0 l4Xwv1eOMCQj9A== -----END CERTIFICATE-----Generated at Sun Dec 28 23:41:01 2025 by rpki-client