This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft File: ehuEnDQHAlATY6H5J-xCQJm5RyY.mft (raw, json) Hash identifier: o6VBBw7ssupSbr9mnt6zwmpvxmFZfYCVZ2N4sSCqdOk= Subject key identifier: 0C:97:55:BE:F8:0B:06:5F:D4:61:F4:89:0B:3E:64:D0:78:67:E9:C5 Authority key identifier: 7A:1B:84:9C:34:07:02:50:13:63:A1:F9:27:EC:42:40:99:B9:47:26 Certificate issuer: /CN=7a1b849c340702501363a1f927ec424099b94726 Certificate serial: 019B6A69AAE1AF3E40F85331681F05C0050E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehuEnDQHAlATY6H5J-xCQJm5RyY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft Manifest number: 17A0 Signing time: Mon 29 Dec 2025 14:01:08 +0000 Manifest this update: Mon 29 Dec 2025 14:01:08 +0000 Manifest next update: Tue 30 Dec 2025 14:01:08 +0000 Files and hashes: 1: ehuEnDQHAlATY6H5J-xCQJm5RyY.crl (hash: esQv29jv2edgQ6IW4nFVChkZ+Usk1EjjmfeUmMzI5PU=) 2: pVRh1H8i6hpGm0AJsVhAXpoV0YM.roa (hash: yQAZF8uKUbV2hSWHi72VMNtufOdhujdp62Q8WwrqslI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft rsync://rpki.ripe.net/repository/DEFAULT/ehuEnDQHAlATY6H5J-xCQJm5RyY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 14:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:69:aa:e1:af:3e:40:f8:53:31:68:1f:05:c0:05:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a1b849c340702501363a1f927ec424099b94726 Validity Not Before: Dec 29 14:01:08 2025 GMT Not After : Dec 30 14:01:08 2025 GMT Subject: CN=0c9755bef80b065fd461f4890b3e64d07867e9c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ec:78:a2:0e:34:03:89:2e:7b:86:2d:0e:ab: bb:d4:ae:a7:f1:e6:49:90:3f:57:6f:16:7d:82:6d: 5f:da:e9:f3:7c:ab:02:97:1b:13:0b:21:28:19:11: 0e:1b:53:23:d8:96:e7:a5:b5:72:9a:aa:80:b4:7d: 7c:b7:41:23:98:c5:cd:0e:32:5e:09:b4:da:21:3e: 3c:d6:8d:cd:dc:e5:76:29:e4:3d:60:f1:c2:b2:d6: 76:69:97:2a:ee:df:5d:e7:c9:a8:d9:e0:f4:5d:c6: 16:98:fe:dd:dc:e5:24:65:26:0b:b2:92:b7:5c:8d: 55:8e:e6:90:b3:4c:21:c0:da:f0:fb:94:2c:63:99: c9:f7:5f:b3:d6:85:10:d4:12:04:28:8d:66:4a:db: 8a:a0:79:cd:d0:32:22:f4:33:27:d2:72:93:db:c3: 5a:27:e8:4f:0f:89:70:ea:f3:a3:3f:cb:6e:c3:0f: c8:f9:64:f7:d7:0b:74:2b:b2:d8:71:bf:39:33:55: 1a:70:0a:c3:a6:57:b5:25:dd:b1:e5:bd:75:fa:fd: 9e:25:38:16:14:fb:65:14:0e:83:ff:56:cc:72:e6: e8:35:dd:05:8e:c6:64:d2:df:fc:8c:de:64:a9:e2: 7b:46:45:2b:10:41:0e:e1:f3:ac:a5:0a:ea:cf:fd: 5c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:97:55:BE:F8:0B:06:5F:D4:61:F4:89:0B:3E:64:D0:78:67:E9:C5 X509v3 Authority Key Identifier: keyid:7A:1B:84:9C:34:07:02:50:13:63:A1:F9:27:EC:42:40:99:B9:47:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehuEnDQHAlATY6H5J-xCQJm5RyY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:3b:c5:01:2d:16:86:b2:7c:57:ca:fb:a1:a4:c9:59:fa:63: 66:c6:15:2a:c2:64:d6:8c:67:83:ca:4a:83:27:e5:ad:ef:da: 0b:ec:26:27:10:dd:ed:63:c9:d7:41:2a:f1:98:f4:76:55:c5: e5:6c:90:92:c5:35:96:f5:38:12:71:2d:33:30:cd:57:f8:cd: f2:3e:b2:1b:30:98:22:98:f3:a1:91:17:cc:d0:39:2b:2e:a6: 90:24:dc:28:e5:2c:69:11:b1:07:15:f0:17:3e:13:aa:36:f1: 46:8a:b6:a9:e7:24:1c:84:db:db:ce:ce:70:69:75:fe:57:17: be:79:71:3b:c9:64:c4:d9:a8:0e:83:55:56:32:d8:3a:77:b7: ed:4e:34:ad:e4:26:aa:7a:fb:40:4d:51:5c:4c:9a:38:2d:c8: a2:85:c2:47:25:52:cb:cb:57:2d:fb:f7:73:c2:3f:58:4c:e4: ea:e2:0f:3c:b2:a1:97:58:76:1d:84:8c:4e:2c:98:ab:68:f7: ee:9f:7a:93:84:0e:06:4f:42:12:ac:cb:40:a4:73:82:dd:c5: f2:1d:99:b3:89:87:af:29:81:20:81:da:6e:3f:69:83:5f:a8: 37:80:2c:7e:b9:89:92:d8:19:25:cd:71:7e:8d:9c:85:60:7d: d4:e0:18:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtqaarhrz5A+FMxaB8FwAUOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMWI4NDljMzQwNzAyNTAxMzYzYTFmOTI3ZWM0MjQwOTli OTQ3MjYwHhcNMjUxMjI5MTQwMTA4WhcNMjUxMjMwMTQwMTA4WjAzMTEwLwYDVQQD EygwYzk3NTViZWY4MGIwNjVmZDQ2MWY0ODkwYjNlNjRkMDc4NjdlOWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ox4og40A4kue4YtDqu71K6n8eZJ kD9XbxZ9gm1f2unzfKsClxsTCyEoGREOG1Mj2JbnpbVymqqAtH18t0EjmMXNDjJe CbTaIT481o3N3OV2KeQ9YPHCstZ2aZcq7t9d58mo2eD0XcYWmP7d3OUkZSYLspK3 XI1VjuaQs0whwNrw+5QsY5nJ91+z1oUQ1BIEKI1mStuKoHnN0DIi9DMn0nKT28Na J+hPD4lw6vOjP8tuww/I+WT31wt0K7LYcb85M1UacArDple1Jd2x5b11+v2eJTgW FPtlFA6D/1bMcuboNd0FjsZk0t/8jN5kqeJ7RkUrEEEO4fOspQrqz/1cAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAyXVb74CwZf1GH0iQs+ZNB4Z+nFMB8GA1UdIwQY MBaAFHobhJw0BwJQE2Oh+SfsQkCZuUcmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWh1RW5EUUhBbEFUWTZINUoteENRSm01UnlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8yNzczMzMtZTFmMy00MmVjLWE4YWMt YjFmNTZhNDU0ZDgyLzEvZWh1RW5EUUhBbEFUWTZINUoteENRSm01UnlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8yNzczMzMtZTFmMy00MmVjLWE4YWMtYjFmNTZhNDU0ZDgy LzEvZWh1RW5EUUhBbEFUWTZINUoteENRSm01UnlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaTvFAS0W hrJ8V8r7oaTJWfpjZsYVKsJk1oxng8pKgyflre/aC+wmJxDd7WPJ10Eq8Zj0dlXF 5WyQksU1lvU4EnEtMzDNV/jN8j6yGzCYIpjzoZEXzNA5Ky6mkCTcKOUsaRGxBxXw Fz4TqjbxRoq2qeckHITb287OcGl1/lcXvnlxO8lkxNmoDoNVVjLYOne37U40reQm qnr7QE1RXEyaOC3IooXCRyVSy8tXLfv3c8I/WEzk6uIPPLKhl1h2HYSMTiyYq2j3 7p96k4QOBk9CEqzLQKRzgt3F8h2Zs4mHrymBIIHabj9pg1+oN4AsfrmJktgZJc1x fo2chWB91OAYVQ== -----END CERTIFICATE-----Generated at Mon Dec 29 17:41:54 2025 by rpki-client