This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft File: eIehaWWHX29TvMMfDkk6lhVOt7k.mft (raw, json) Hash identifier: z6+HPYafI2vnSkDtt1DLiSoYu9Rt7EqeIiwQh3QU4jc= Subject key identifier: 1E:37:4A:E2:2D:4B:38:FD:64:CF:B7:5F:65:5E:08:1D:64:E9:2B:D9 Authority key identifier: 78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9 Certificate issuer: /CN=7887a16965875f6f53bcc31f0e493a96154eb7b9 Certificate serial: 019B446ED77393495AED47AC96C3BA22963A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft Manifest number: 14AA Signing time: Mon 22 Dec 2025 05:01:13 +0000 Manifest this update: Mon 22 Dec 2025 05:01:13 +0000 Manifest next update: Tue 23 Dec 2025 05:01:13 +0000 Files and hashes: 1: 6wgIIIZZn9PKkWyj1o24YVKslZY.roa (hash: ItzXFRJIwEcM+B1Foxna1VuLqIlGbg+/9MVYoMgJCug=) 2: HHXGSuGQRW_zAz7Tg7UBxMkUHpE.roa (hash: EXdQKgQbUheeBJFdVxwDKTAaBfIc+np/FEnci5xb95s=) 3: eIehaWWHX29TvMMfDkk6lhVOt7k.crl (hash: 4iqZbslhp+mnSXFz0bq3YZYADb6hMEkGJlw+omQYMGQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 05:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:d7:73:93:49:5a:ed:47:ac:96:c3:ba:22:96:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7887a16965875f6f53bcc31f0e493a96154eb7b9 Validity Not Before: Dec 22 05:01:13 2025 GMT Not After : Dec 23 05:01:13 2025 GMT Subject: CN=1e374ae22d4b38fd64cfb75f655e081d64e92bd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5f:c3:d8:db:7b:af:1f:02:dd:38:c7:46:fe: 1e:cf:b3:df:9b:72:f4:84:85:df:ee:30:ad:d9:65: 50:73:a5:96:e1:38:db:17:ee:e4:e5:52:1b:cb:49: 42:25:8d:cc:78:78:86:31:41:14:d1:a0:5f:e0:6b: 4e:d2:df:88:8a:20:f4:ed:51:50:65:95:bf:b3:4a: b1:5d:f4:8b:f2:fa:39:e1:bc:ca:01:31:e6:55:09: ef:a4:5b:33:51:6e:75:cf:23:b0:ca:f0:b1:ad:58: 24:f0:4a:9f:d0:2c:96:7d:dd:ea:16:a0:11:3f:70: 45:3d:57:b8:ed:b5:a6:c8:ce:ea:3f:27:f1:5e:11: 55:76:27:7a:11:ac:34:f2:86:b0:fa:da:07:6c:b2: c7:ca:54:6a:63:96:20:58:39:43:b5:21:03:3c:d2: 4a:69:c4:d2:02:f7:fd:a6:8e:84:93:80:5f:15:cf: 88:a1:90:ea:ea:e6:8b:62:4c:08:3c:f9:75:89:7c: 49:17:de:43:89:0a:e7:57:b5:05:30:9c:ca:a9:50: 98:1d:06:da:68:be:30:80:2a:89:9a:6c:cf:78:44: c6:c3:51:9e:e4:9c:bb:e7:02:62:89:70:3a:76:e3: d5:2a:21:a4:06:0e:83:6b:41:87:a9:90:c5:a9:96: c5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:37:4A:E2:2D:4B:38:FD:64:CF:B7:5F:65:5E:08:1D:64:E9:2B:D9 X509v3 Authority Key Identifier: keyid:78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:09:62:85:d2:be:a6:ce:00:8a:17:0a:0a:31:c9:76:b9:dc: 93:82:4b:e3:db:d3:3e:65:ff:aa:04:bf:ee:69:bc:73:fd:d6: be:20:2d:de:bd:45:8c:a6:c1:14:cb:0b:cf:b5:f9:a1:59:d7: 20:4d:25:37:0c:19:08:65:17:bb:8a:9b:c4:4f:f8:50:e2:97: b6:2d:5a:15:16:11:53:ae:c7:3a:83:b1:0b:d8:f2:ca:cb:50: 00:d8:6f:57:86:c1:4c:07:a6:07:20:15:50:1b:b6:ed:80:4e: 3b:ee:c3:e2:0c:91:eb:4f:db:63:a8:c3:90:6b:b2:7a:02:45: 49:e8:34:d9:5d:77:8c:ce:62:4e:4e:6c:c6:a8:f8:75:7e:18: 6e:1c:fd:3a:20:73:7a:f1:4b:d3:87:51:9a:1b:b8:eb:6e:75: e2:18:cd:32:44:33:99:b5:bb:fa:ed:23:f5:90:3a:88:b3:bd: 80:8c:67:62:29:5f:6a:a5:5f:ca:87:d1:45:6e:43:d1:e1:58: 90:98:76:57:1a:e3:85:4e:b1:fc:d3:59:41:50:10:be:f1:59: 8f:cd:ce:6a:85:34:ee:fa:85:fc:a3:8a:90:1e:08:54:3e:e5: 6b:48:33:5d:d7:a4:7a:36:bc:69:ca:37:2f:bc:b4:c5:7d:57: 33:7e:79:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEbtdzk0la7UeslsO6IpY6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ODdhMTY5NjU4NzVmNmY1M2JjYzMxZjBlNDkzYTk2MTU0 ZWI3YjkwHhcNMjUxMjIyMDUwMTEzWhcNMjUxMjIzMDUwMTEzWjAzMTEwLwYDVQQD EygxZTM3NGFlMjJkNGIzOGZkNjRjZmI3NWY2NTVlMDgxZDY0ZTkyYmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArF/D2Nt7rx8C3TjHRv4ez7Pfm3L0 hIXf7jCt2WVQc6WW4TjbF+7k5VIby0lCJY3MeHiGMUEU0aBf4GtO0t+IiiD07VFQ ZZW/s0qxXfSL8vo54bzKATHmVQnvpFszUW51zyOwyvCxrVgk8Eqf0CyWfd3qFqAR P3BFPVe47bWmyM7qPyfxXhFVdid6Eaw08oaw+toHbLLHylRqY5YgWDlDtSEDPNJK acTSAvf9po6Ek4BfFc+IoZDq6uaLYkwIPPl1iXxJF95DiQrnV7UFMJzKqVCYHQba aL4wgCqJmmzPeETGw1Ge5Jy75wJiiXA6duPVKiGkBg6Da0GHqZDFqZbFxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB43SuItSzj9ZM+3X2VeCB1k6SvZMB8GA1UdIwQY MBaAFHiHoWllh19vU7zDHw5JOpYVTre5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUllaGFXV0hYMjlUdk1NZkRrazZsaFZPdDdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xOTdlZWMtNzYyYS00ZTQyLWI5ZDIt NzU2OGExMGRmNDQzLzEvZUllaGFXV0hYMjlUdk1NZkRrazZsaFZPdDdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8xOTdlZWMtNzYyYS00ZTQyLWI5ZDItNzU2OGExMGRmNDQz LzEvZUllaGFXV0hYMjlUdk1NZkRrazZsaFZPdDdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACglihdK+ ps4AihcKCjHJdrnck4JL49vTPmX/qgS/7mm8c/3WviAt3r1FjKbBFMsLz7X5oVnX IE0lNwwZCGUXu4qbxE/4UOKXti1aFRYRU67HOoOxC9jyystQANhvV4bBTAemByAV UBu27YBOO+7D4gyR60/bY6jDkGuyegJFSeg02V13jM5iTk5sxqj4dX4Ybhz9OiBz evFL04dRmhu462514hjNMkQzmbW7+u0j9ZA6iLO9gIxnYilfaqVfyofRRW5D0eFY kJh2VxrjhU6x/NNZQVAQvvFZj83OaoU07vqF/KOKkB4IVD7la0gzXdekeja8aco3 L7y0xX1XM355Ag== -----END CERTIFICATE-----Generated at Mon Dec 22 11:32:53 2025 by rpki-client