This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft File: eh_3AnJudbOmjxGC5H_7zcrlFeU.mft (raw, json) Hash identifier: Wsc9i2JbfmoIYUbzMQi4ZWpfmnT6eVnR0rlDifJY1gs= Subject key identifier: 07:C8:F3:ED:C0:C4:40:76:BF:C2:43:EB:0D:61:C3:D0:12:3D:B4:10 Authority key identifier: 7A:1F:F7:02:72:6E:75:B3:A6:8F:11:82:E4:7F:FB:CD:CA:E5:15:E5 Certificate issuer: /CN=7a1ff702726e75b3a68f1182e47ffbcdcae515e5 Certificate serial: 019B30E8397BDF8741BBC5AEB0BDDE150DF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft Manifest number: 162A Signing time: Thu 18 Dec 2025 10:01:23 +0000 Manifest this update: Thu 18 Dec 2025 10:01:23 +0000 Manifest next update: Fri 19 Dec 2025 10:01:23 +0000 Files and hashes: 1: eh_3AnJudbOmjxGC5H_7zcrlFeU.crl (hash: 2sTGWxvxlBBu4o5nHRbgjajHkYdOK2E0KB02cGGcS00=) 2: mp3Ps9Wb-eE83MSoTQrKorxtZTg.roa (hash: Whr3Evryw6Na+L//5TTMD5LCJqnqbVVaoyp0nqLqIfA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:39:7b:df:87:41:bb:c5:ae:b0:bd:de:15:0d:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a1ff702726e75b3a68f1182e47ffbcdcae515e5 Validity Not Before: Dec 18 10:01:23 2025 GMT Not After : Dec 19 10:01:23 2025 GMT Subject: CN=07c8f3edc0c44076bfc243eb0d61c3d0123db410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1f:6d:85:75:c9:fc:d6:40:31:d9:fb:df:16: 71:9d:cf:d2:95:27:b4:5b:d8:1e:71:22:2d:78:42: 36:97:18:92:35:22:05:7a:b4:4f:dc:f3:69:dc:12: ee:c6:6d:fd:0b:f0:bc:8d:aa:a8:dc:0b:76:f8:1a: 83:24:61:be:4c:15:c0:2f:63:d9:d3:ab:70:8d:23: ff:81:d8:cf:98:8b:1b:22:77:01:a6:90:24:5a:ac: 0f:a4:7d:3f:68:c5:a5:e2:d9:d4:c1:c6:5f:94:e7: f3:fc:a4:1e:cd:86:bc:39:08:4a:99:67:fd:4d:b3: 7b:58:6b:24:0b:1b:f0:81:ac:8a:7f:1a:03:9a:cf: 60:54:ef:76:dc:4f:02:30:0c:90:bb:12:52:9f:7d: cd:06:b7:ff:f0:d7:70:4b:66:db:4e:b8:26:fa:c2: ed:c4:17:ee:30:a7:52:3b:e8:fa:2e:58:e8:d9:be: a7:1e:d5:5a:a7:44:0c:61:66:07:28:85:9e:06:f8: e6:51:29:51:ab:85:ce:e9:dd:4d:1d:5c:ef:2a:46: 0a:ac:a4:ed:8f:5a:15:f6:3e:33:00:fd:51:fa:a7: b3:f7:0a:88:5a:1e:df:2b:7d:bc:10:bc:46:1d:39: b2:1d:f0:83:fc:61:5e:b0:89:99:ec:67:dd:a7:2a: 58:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C8:F3:ED:C0:C4:40:76:BF:C2:43:EB:0D:61:C3:D0:12:3D:B4:10 X509v3 Authority Key Identifier: keyid:7A:1F:F7:02:72:6E:75:B3:A6:8F:11:82:E4:7F:FB:CD:CA:E5:15:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:8a:a9:f2:db:db:a0:96:40:9f:f6:8b:4b:96:b0:4d:95:28: 79:ce:93:4f:21:04:06:53:5f:03:3a:2b:05:63:84:55:64:28: fd:7f:89:e4:21:1a:3f:1e:36:35:ea:a2:9b:25:ed:33:15:f6: 73:6d:00:b3:46:58:a4:81:e3:a1:80:fe:e4:ff:e7:05:8d:4a: fc:64:48:85:ff:b4:1b:a9:9b:65:ee:5c:ff:69:22:44:dc:89: ce:d4:e1:d0:98:ba:7f:e0:f0:34:48:db:6d:9c:9b:ef:00:09: 04:48:35:2a:18:30:b6:f1:da:89:f0:b5:37:f9:fd:c4:a2:e8: 0f:91:b6:5f:2b:f3:8f:d5:73:14:2e:b8:51:3f:99:f0:c1:07: 84:09:93:23:20:87:c6:45:02:d2:63:e1:f4:9e:aa:bd:51:d6: 10:6e:96:7f:e6:46:21:1a:c5:6b:ba:87:e1:9e:52:62:8f:aa: 85:08:1b:0d:5b:8f:6b:82:4f:b0:c5:83:2b:91:1f:3d:8f:43: 6d:7c:cf:ff:56:57:3a:84:02:70:90:8c:3d:59:ca:77:b9:a3: 25:e9:69:4d:6d:1a:ba:69:98:d1:5b:8b:ad:5b:62:33:44:aa: a9:ab:25:af:60:99:c8:20:1f:5a:5d:47:0a:2f:90:e2:43:51: 1b:a9:ce:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6Dl734dBu8WusL3eFQ34MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMWZmNzAyNzI2ZTc1YjNhNjhmMTE4MmU0N2ZmYmNkY2Fl NTE1ZTUwHhcNMjUxMjE4MTAwMTIzWhcNMjUxMjE5MTAwMTIzWjAzMTEwLwYDVQQD EygwN2M4ZjNlZGMwYzQ0MDc2YmZjMjQzZWIwZDYxYzNkMDEyM2RiNDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxB9thXXJ/NZAMdn73xZxnc/SlSe0 W9gecSIteEI2lxiSNSIFerRP3PNp3BLuxm39C/C8jaqo3At2+BqDJGG+TBXAL2PZ 06twjSP/gdjPmIsbIncBppAkWqwPpH0/aMWl4tnUwcZflOfz/KQezYa8OQhKmWf9 TbN7WGskCxvwgayKfxoDms9gVO923E8CMAyQuxJSn33NBrf/8NdwS2bbTrgm+sLt xBfuMKdSO+j6Lljo2b6nHtVap0QMYWYHKIWeBvjmUSlRq4XO6d1NHVzvKkYKrKTt j1oV9j4zAP1R+qez9wqIWh7fK328ELxGHTmyHfCD/GFesImZ7GfdpypY3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAfI8+3AxEB2v8JD6w1hw9ASPbQQMB8GA1UdIwQY MBaAFHof9wJybnWzpo8RguR/+83K5RXlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWhfM0FuSnVkYk9tanhHQzVIXzd6Y3JsRmVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82ZmVmMDMtMDY3MC00MWFiLWE2Yzkt NDNhZGI2MDVmNjhhLzEvZWhfM0FuSnVkYk9tanhHQzVIXzd6Y3JsRmVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC82ZmVmMDMtMDY3MC00MWFiLWE2YzktNDNhZGI2MDVmNjhh LzEvZWhfM0FuSnVkYk9tanhHQzVIXzd6Y3JsRmVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWoqp8tvb oJZAn/aLS5awTZUoec6TTyEEBlNfAzorBWOEVWQo/X+J5CEaPx42NeqimyXtMxX2 c20As0ZYpIHjoYD+5P/nBY1K/GRIhf+0G6mbZe5c/2kiRNyJztTh0Ji6f+DwNEjb bZyb7wAJBEg1KhgwtvHaifC1N/n9xKLoD5G2Xyvzj9VzFC64UT+Z8MEHhAmTIyCH xkUC0mPh9J6qvVHWEG6Wf+ZGIRrFa7qH4Z5SYo+qhQgbDVuPa4JPsMWDK5EfPY9D bXzP/1ZXOoQCcJCMPVnKd7mjJelpTW0aummY0VuLrVtiM0Sqqaslr2CZyCAfWl1H Ci+Q4kNRG6nOsg== -----END CERTIFICATE-----Generated at Thu Dec 18 14:07:43 2025 by rpki-client