This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft File: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft (raw, json) Hash identifier: iloA0tP194d3uklodCmpwAKIK13hiXVxNqofepUKZIc= Subject key identifier: FE:7E:FE:9D:A1:3A:47:17:80:FF:00:0A:09:B4:21:08:F3:CF:58:F3 Authority key identifier: 7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59 Certificate issuer: /CN=7be907dd202152cf1902bedbecb19a2d72ac0859 Certificate serial: 019B533CCF07F6B1DEB33859211F60B72A41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft Manifest number: 0ECC Signing time: Thu 25 Dec 2025 02:00:52 +0000 Manifest this update: Thu 25 Dec 2025 02:00:52 +0000 Manifest next update: Fri 26 Dec 2025 02:00:52 +0000 Files and hashes: 1: 7HrDROWVcljE8-8l6AcztjVNWWw.roa (hash: aPUy9G990LG8Gt7ev2zQpoBPfmmiK94lRTjU13MQxug=) 2: AC883ZSFeLZkC1mvfN3COR1ZIn0.roa (hash: yFCKOZ3uJ8W8rt1Xv99w8FDNXVYQbjjKrbhWZG8+e8A=) 3: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl (hash: RnQWqf92AwnU9s4KCX4DLi60/uuhiDn7Bv0lCJJqG6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:3c:cf:07:f6:b1:de:b3:38:59:21:1f:60:b7:2a:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7be907dd202152cf1902bedbecb19a2d72ac0859 Validity Not Before: Dec 25 02:00:52 2025 GMT Not After : Dec 26 02:00:52 2025 GMT Subject: CN=fe7efe9da13a471780ff000a09b42108f3cf58f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:99:e2:bd:39:63:ae:ed:dc:ac:fc:26:55:de: 91:f7:cc:52:4a:4f:da:7f:3d:69:e5:c0:28:ca:cc: 35:73:64:15:d0:8a:65:4b:04:66:8d:97:a6:10:69: 95:1a:1c:7d:00:6f:28:3a:6c:02:56:bb:7f:0d:a0: 85:dc:93:d4:ed:1c:dc:3b:c0:54:c2:ad:1a:60:9d: da:50:b5:82:30:0f:e6:27:74:3c:2b:e1:f7:a2:e9: 94:28:d2:f0:11:6f:a9:04:0f:2c:a5:1c:fb:03:0f: d6:57:43:ba:30:bb:49:d3:3e:e2:e5:9a:a8:20:3b: 82:8d:94:40:41:53:59:07:a4:53:9e:8d:b8:b2:57: 8b:45:8e:8e:a1:be:d4:61:57:24:1b:6d:ec:e1:5e: cb:28:42:d1:c0:d5:d9:4a:f7:ad:18:a8:de:97:cb: b6:58:8f:6c:db:d2:15:65:bb:32:3e:a7:38:e5:25: 30:bb:80:0a:f7:bf:e4:17:ee:38:f7:0b:a5:c0:cf: 48:78:b9:b5:02:b3:9e:2e:94:22:89:c4:1f:2c:94: 46:4d:ed:ed:f9:c2:77:29:42:56:17:81:79:10:3f: e5:16:f1:eb:bf:ba:57:72:d9:09:9c:c6:1b:48:93: 0e:05:fa:37:c8:34:aa:f3:2d:54:bf:c0:90:fe:6b: 9f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:7E:FE:9D:A1:3A:47:17:80:FF:00:0A:09:B4:21:08:F3:CF:58:F3 X509v3 Authority Key Identifier: keyid:7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:6c:8f:d3:a7:d5:e6:02:3e:23:05:85:73:96:de:f8:54:cb: ce:39:bc:75:f1:48:90:3d:70:53:fa:a9:1c:05:b7:b6:0e:15: 16:30:b6:2e:b9:b0:dd:99:1b:14:a0:85:12:6b:47:e7:2b:b2: ac:99:be:09:1c:59:3f:24:78:6f:18:02:3b:66:38:f8:d2:7e: c2:db:97:17:1d:48:23:6c:1f:50:24:87:4b:29:e7:c7:74:60: cd:ec:d5:1d:da:6f:77:d8:fd:c4:f4:02:19:fb:5b:70:80:3e: 4a:14:91:34:e4:fb:82:62:a3:f5:8c:42:75:f2:f5:de:b1:37: 10:3f:64:2e:a3:3b:5b:43:cb:e8:6e:c8:49:f7:a3:bd:08:ac: 7f:c8:34:e1:0d:28:b8:48:f7:da:99:7f:17:6f:03:68:b1:fc: 6d:e5:71:55:b9:d2:3d:a7:00:90:a0:f0:6a:de:56:00:74:29: 24:e2:9d:4c:28:b6:eb:7d:1c:4d:ee:dc:69:8c:b1:a0:5e:3f: 52:90:6b:8e:d7:66:45:96:b2:d0:57:c9:f0:79:14:c1:a6:06: 0f:b4:85:77:d9:9d:a7:0d:59:f1:58:d6:9d:6d:4e:aa:65:1f: 70:25:4d:19:fb:a7:67:52:20:a4:18:c8:8e:a2:ff:fc:f9:c8: b2:8b:f9:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTPM8H9rHeszhZIR9gtypBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiZTkwN2RkMjAyMTUyY2YxOTAyYmVkYmVjYjE5YTJkNzJh YzA4NTkwHhcNMjUxMjI1MDIwMDUyWhcNMjUxMjI2MDIwMDUyWjAzMTEwLwYDVQQD EyhmZTdlZmU5ZGExM2E0NzE3ODBmZjAwMGEwOWI0MjEwOGYzY2Y1OGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJnivTljru3crPwmVd6R98xSSk/a fz1p5cAoysw1c2QV0IplSwRmjZemEGmVGhx9AG8oOmwCVrt/DaCF3JPU7RzcO8BU wq0aYJ3aULWCMA/mJ3Q8K+H3oumUKNLwEW+pBA8spRz7Aw/WV0O6MLtJ0z7i5Zqo IDuCjZRAQVNZB6RTno24sleLRY6Oob7UYVckG23s4V7LKELRwNXZSvetGKjel8u2 WI9s29IVZbsyPqc45SUwu4AK97/kF+449wulwM9IeLm1ArOeLpQiicQfLJRGTe3t +cJ3KUJWF4F5ED/lFvHrv7pXctkJnMYbSJMOBfo3yDSq8y1Uv8CQ/mufywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP5+/p2hOkcXgP8ACgm0IQjzz1jzMB8GA1UdIwQY MBaAFHvpB90gIVLPGQK+2+yxmi1yrAhZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZS1rSDNTQWhVczhaQXI3YjdMR2FMWEtzQ0ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yNWU3NmEtZDE0MC00ZTBiLTg4ZTQt ZWYyMTkzODFmMTBlLzEvZS1rSDNTQWhVczhaQXI3YjdMR2FMWEtzQ0ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8yNWU3NmEtZDE0MC00ZTBiLTg4ZTQtZWYyMTkzODFmMTBl LzEvZS1rSDNTQWhVczhaQXI3YjdMR2FMWEtzQ0ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASWyP06fV 5gI+IwWFc5be+FTLzjm8dfFIkD1wU/qpHAW3tg4VFjC2Lrmw3ZkbFKCFEmtH5yuy rJm+CRxZPyR4bxgCO2Y4+NJ+wtuXFx1II2wfUCSHSynnx3RgzezVHdpvd9j9xPQC GftbcIA+ShSRNOT7gmKj9YxCdfL13rE3ED9kLqM7W0PL6G7ISfejvQisf8g04Q0o uEj32pl/F28DaLH8beVxVbnSPacAkKDwat5WAHQpJOKdTCi2630cTe7caYyxoF4/ UpBrjtdmRZay0FfJ8HkUwaYGD7SFd9mdpw1Z8VjWnW1OqmUfcCVNGfunZ1IgpBjI jqL//PnIsov5Nw== -----END CERTIFICATE-----Generated at Thu Dec 25 03:15:54 2025 by rpki-client