This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft File: EharzETJqVVAzfWx3FQux9Ef4Ho.mft (raw, json) Hash identifier: 8RKpVk8u/yYviR/YQwNg3zZnTghoJxh4Rs6AOOiIwKo= Subject key identifier: 86:23:1A:8C:F0:A5:7B:3B:94:05:35:92:F0:0B:BE:A4:C6:5A:46:B0 Authority key identifier: 12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A Certificate issuer: /CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a Certificate serial: 019B4023E5DB7CD355B776313EC06C2DE0E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft Manifest number: 02A6 Signing time: Sun 21 Dec 2025 09:00:52 +0000 Manifest this update: Sun 21 Dec 2025 09:00:52 +0000 Manifest next update: Mon 22 Dec 2025 09:00:52 +0000 Files and hashes: 1: 8Qkj-OL1DBWAUGxyf__SID7DvY0.roa (hash: FohvUxuind4X94r0B623U5wmhvbScHzDNUfxcV28qbg=) 2: 8XAK_n9Ijdz-1TJV-cnMoV4PDJI.roa (hash: hpzRZ9fG9vy0NkMEhpRLlojbHPEYeYp5I8KcchuS0u0=) 3: 9PgT8am9GX2lNTUWeiRs0LXntY0.roa (hash: X5SDKNQRKe6G52wQx4wpF/A5KQNfS5fj8rskXwcraIA=) 4: D8akI8P5Xi8Ifp8LsQyslMH9ydQ.roa (hash: AKGzJiWAK4O0wOeiBq1pBQs9Et3quYVUdawmatMGbA4=) 5: EharzETJqVVAzfWx3FQux9Ef4Ho.crl (hash: m9bjM2j5QIwWqRhVvBHR7aQqGBHjZ7UL/0vnD3F8xjk=) 6: MQJ9Tms8NtZHBjFKGd8tRATLgzU.roa (hash: JQ9FShj97dGuiiKP4b3nhes/Pu/ifqQ1fWpnjpSUqN0=) 7: Ru8ZRa3us3EXd4Kuc_gCxyMaY_w.roa (hash: 8tvJstphtGeZ6QzHvnWs5W3Xee9kE5jmY/6KMv2k9ic=) 8: ScAR3uPyATYgU_nmPSEp-uOF-dw.roa (hash: /Djsq98hUPSTRPRTBh6WF392L0FrLeU6LETIMEXpAeg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:23:e5:db:7c:d3:55:b7:76:31:3e:c0:6c:2d:e0:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a Validity Not Before: Dec 21 09:00:52 2025 GMT Not After : Dec 22 09:00:52 2025 GMT Subject: CN=86231a8cf0a57b3b94053592f00bbea4c65a46b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4d:eb:ce:6b:9c:29:34:c4:67:88:af:b5:d8: bd:d9:92:ab:c4:71:8f:41:a6:e3:ca:a9:f3:59:f2: d0:fa:bf:7d:4f:68:f7:6b:de:c5:9f:56:8b:56:27: c2:8a:b4:cf:b4:17:00:95:9b:ee:9a:6c:bb:7c:80: 02:36:85:5d:61:cc:32:7f:76:e2:34:ae:c9:b8:70: e6:1c:8e:1f:ac:b1:18:61:27:b1:b2:a8:47:67:c5: 06:a9:04:e0:c1:f6:e3:8a:3e:66:aa:eb:4a:d4:ed: 13:fa:e1:23:dd:b6:78:6c:64:7a:fc:c4:92:c7:13: 39:69:48:98:15:41:1b:c3:08:cd:3e:f3:90:15:f2: c6:c8:95:0a:37:52:af:68:37:d9:84:54:0c:19:f4: cf:22:f5:14:f9:7e:ab:0c:ac:dd:67:88:58:de:11: fb:cf:b0:f4:90:70:e6:e6:e9:18:cc:84:3b:73:c1: 04:20:1b:4f:73:59:79:82:d1:58:b9:3d:35:9d:3a: 78:0a:07:30:4f:ef:0c:16:2f:06:84:bf:b1:6c:a3: 07:aa:20:63:dd:6f:51:83:ca:ea:49:0b:78:bb:fe: f5:c4:26:28:ab:57:08:5e:41:b3:b9:20:e5:b6:b0: a6:5a:3f:95:96:2f:37:b0:c6:c3:04:f1:e7:e9:0e: e4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:23:1A:8C:F0:A5:7B:3B:94:05:35:92:F0:0B:BE:A4:C6:5A:46:B0 X509v3 Authority Key Identifier: keyid:12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:f4:30:e5:11:4d:37:ff:d9:73:d8:1d:c1:14:4f:8a:d4:b0: e6:cf:6f:b9:60:82:b4:e3:08:fa:48:20:7e:dc:b4:75:f9:5e: 85:27:18:34:8f:fa:e8:30:b2:fa:39:00:21:07:e2:05:6a:09: c2:39:27:1e:72:6c:19:95:d3:53:06:b8:03:68:23:2a:fc:66: d7:d0:b7:6b:15:37:22:33:be:d4:2b:bd:ef:88:15:9d:b9:83: 30:d3:86:71:ac:97:26:a3:e1:93:61:82:16:ce:db:5c:d6:bf: 4d:1b:8c:2b:51:ad:57:6b:c5:6d:9c:f6:6e:53:8d:3e:97:b6: ce:ee:30:b5:a9:0e:72:01:0c:ca:26:42:d5:85:ce:60:fb:e6: 06:60:b1:2e:af:fd:7d:a0:e2:ee:e9:f3:12:65:d5:04:f7:d0: fa:31:2d:67:b8:83:4b:af:92:f5:b4:4f:73:a7:2a:8c:88:90: ac:70:a9:98:75:6e:5e:82:d2:32:90:80:ed:b9:c4:6e:eb:cf: 7d:95:ec:da:c0:62:31:1e:fc:78:9e:d0:1e:f6:db:3f:eb:32: 40:27:8a:9b:8a:06:bd:bd:a1:f0:25:04:b8:3a:76:a7:ac:96: ce:9d:31:19:cc:ef:24:c6:97:d6:8c:cd:30:42:07:e1:8d:ed: 19:75:65:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAI+XbfNNVt3YxPsBsLeDhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMTZhYmNjNDRjOWE5NTU0MGNkZjViMWRjNTQyZWM3ZDEx ZmUwN2EwHhcNMjUxMjIxMDkwMDUyWhcNMjUxMjIyMDkwMDUyWjAzMTEwLwYDVQQD Eyg4NjIzMWE4Y2YwYTU3YjNiOTQwNTM1OTJmMDBiYmVhNGM2NWE0NmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk3rzmucKTTEZ4ivtdi92ZKrxHGP QabjyqnzWfLQ+r99T2j3a97Fn1aLVifCirTPtBcAlZvummy7fIACNoVdYcwyf3bi NK7JuHDmHI4frLEYYSexsqhHZ8UGqQTgwfbjij5mqutK1O0T+uEj3bZ4bGR6/MSS xxM5aUiYFUEbwwjNPvOQFfLGyJUKN1KvaDfZhFQMGfTPIvUU+X6rDKzdZ4hY3hH7 z7D0kHDm5ukYzIQ7c8EEIBtPc1l5gtFYuT01nTp4CgcwT+8MFi8GhL+xbKMHqiBj 3W9Rg8rqSQt4u/71xCYoq1cIXkGzuSDltrCmWj+Vli83sMbDBPHn6Q7kfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYjGozwpXs7lAU1kvALvqTGWkawMB8GA1UdIwQY MBaAFBIWq8xEyalVQM31sdxULsfRH+B6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWhhcnpFVEpxVlZBemZXeDNGUXV4OUVmNEhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9hYzljZjYtMWJlYy00MjRiLWFhNTEt YTA5NjJkOTk4ZTYwLzEvRWhhcnpFVEpxVlZBemZXeDNGUXV4OUVmNEhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9hYzljZjYtMWJlYy00MjRiLWFhNTEtYTA5NjJkOTk4ZTYw LzEvRWhhcnpFVEpxVlZBemZXeDNGUXV4OUVmNEhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyPQw5RFN N//Zc9gdwRRPitSw5s9vuWCCtOMI+kggfty0dflehScYNI/66DCy+jkAIQfiBWoJ wjknHnJsGZXTUwa4A2gjKvxm19C3axU3IjO+1Cu974gVnbmDMNOGcayXJqPhk2GC Fs7bXNa/TRuMK1GtV2vFbZz2blONPpe2zu4wtakOcgEMyiZC1YXOYPvmBmCxLq/9 faDi7unzEmXVBPfQ+jEtZ7iDS6+S9bRPc6cqjIiQrHCpmHVuXoLSMpCA7bnEbuvP fZXs2sBiMR78eJ7QHvbbP+syQCeKm4oGvb2h8CUEuDp2p6yWzp0xGczvJMaX1ozN MEIH4Y3tGXVlcQ== -----END CERTIFICATE-----Generated at Sun Dec 21 11:41:03 2025 by rpki-client