This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b4f3d0-b1d1-46be-a190-8e2027695d07/1/ehKIruzRFJyedF-YZT5okK-iU6s.mft File: ehKIruzRFJyedF-YZT5okK-iU6s.mft (raw, json) Hash identifier: 4NbemUFswEBGeu4tAaFKWnaqHzHkJVeggHJsuBPiJ5Q= Subject key identifier: 6C:3C:62:A8:4B:0E:A1:32:91:91:97:D0:9E:85:93:D2:36:75:C1:E3 Authority key identifier: 7A:12:88:AE:EC:D1:14:9C:9E:74:5F:98:65:3E:68:90:AF:A2:53:AB Certificate issuer: /CN=7a1288aeecd1149c9e745f98653e6890afa253ab Certificate serial: 019B6B7C44CAC36B1CC190F52FE501D6E99B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehKIruzRFJyedF-YZT5okK-iU6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b4f3d0-b1d1-46be-a190-8e2027695d07/1/ehKIruzRFJyedF-YZT5okK-iU6s.mft Manifest number: 028E Signing time: Mon 29 Dec 2025 19:01:04 +0000 Manifest this update: Mon 29 Dec 2025 19:01:04 +0000 Manifest next update: Tue 30 Dec 2025 19:01:04 +0000 Files and hashes: 1: ehKIruzRFJyedF-YZT5okK-iU6s.crl (hash: um+4aUPGYvskSlx1XEasneZNUWzHaO7qxjPO/LEAWRE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b4f3d0-b1d1-46be-a190-8e2027695d07/1/ehKIruzRFJyedF-YZT5okK-iU6s.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/b4f3d0-b1d1-46be-a190-8e2027695d07/1/ehKIruzRFJyedF-YZT5okK-iU6s.mft rsync://rpki.ripe.net/repository/DEFAULT/ehKIruzRFJyedF-YZT5okK-iU6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:7c:44:ca:c3:6b:1c:c1:90:f5:2f:e5:01:d6:e9:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a1288aeecd1149c9e745f98653e6890afa253ab Validity Not Before: Dec 29 19:01:04 2025 GMT Not After : Dec 30 19:01:04 2025 GMT Subject: CN=6c3c62a84b0ea132919197d09e8593d23675c1e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:55:a6:19:46:e3:d4:8e:3e:a0:e3:16:a0:48: fa:15:b2:d1:16:9f:eb:21:88:8d:8e:df:b4:8e:22: 34:a8:3e:2f:de:ec:fc:40:31:22:63:d7:b1:86:70: a7:b7:f1:26:d6:05:11:e5:27:5f:d7:d4:0b:b5:47: 2e:58:15:44:f1:17:6f:06:83:77:5e:91:17:d7:7f: 0a:57:be:77:09:65:81:34:b6:ce:47:73:84:2f:fe: 35:9a:86:62:39:66:79:19:ec:5f:8c:78:6b:54:65: 46:23:47:3d:b1:75:2f:c1:92:1c:cd:8a:c7:7e:93: 6e:81:61:fd:8b:ca:54:ad:1e:6d:5c:86:94:3c:c6: 44:ab:e4:f6:39:43:7b:ae:2a:5e:eb:6e:ac:9c:90: b8:9a:53:65:4c:a0:40:32:5c:bc:f7:7c:f2:0a:c7: 08:bf:85:3a:9b:54:ae:6c:1f:47:4a:22:90:89:d3: 68:f9:a7:cd:15:7c:9a:49:7f:37:c7:0f:61:89:2f: 44:95:cc:a1:40:3c:ef:34:72:cd:ab:ae:61:e5:fe: ba:17:1e:78:1b:e0:c0:ab:09:be:77:eb:df:cc:0c: 8a:37:35:d9:3d:dd:19:73:cd:c7:6c:8c:99:99:65: a3:3f:75:6c:8a:92:69:ff:07:fa:e8:b0:d2:9a:a4: 4e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:3C:62:A8:4B:0E:A1:32:91:91:97:D0:9E:85:93:D2:36:75:C1:E3 X509v3 Authority Key Identifier: keyid:7A:12:88:AE:EC:D1:14:9C:9E:74:5F:98:65:3E:68:90:AF:A2:53:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehKIruzRFJyedF-YZT5okK-iU6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b4f3d0-b1d1-46be-a190-8e2027695d07/1/ehKIruzRFJyedF-YZT5okK-iU6s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b4f3d0-b1d1-46be-a190-8e2027695d07/1/ehKIruzRFJyedF-YZT5okK-iU6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:c8:af:ae:4f:19:61:eb:ef:95:ba:48:30:97:01:8f:ec:a1: f8:a7:f1:b2:68:b1:0a:96:1f:a0:82:82:f9:e5:58:da:bc:b1: c6:d6:dc:aa:2f:db:97:f1:ee:82:27:ca:97:83:c3:f7:45:cb: b7:2d:6f:09:e0:df:3e:93:62:ab:dc:1d:7b:d9:ea:c4:75:6d: 32:ba:97:65:b7:5a:d0:26:b0:56:33:d8:38:df:d3:10:e8:78: 0d:8a:67:ef:3a:2b:54:cd:d3:a4:4c:72:1c:ab:bf:7a:e2:49: 68:85:a3:67:ac:8b:a9:ca:cb:21:fa:71:0d:72:d0:e3:e8:86: db:21:f8:25:31:88:b3:84:b3:7a:5e:c1:97:b2:4c:f5:d3:4a: 43:6a:ac:07:45:b2:7c:9c:85:96:ae:f3:1f:9f:a2:e8:b4:84: 13:63:e3:7e:73:d9:41:9a:59:45:5a:34:6a:1f:19:82:7a:db: a9:05:3f:7f:39:e2:4a:a6:18:db:f0:84:7e:6b:64:98:eb:8e: 22:20:2c:4b:a6:d3:fc:9f:03:a1:b5:78:c5:b3:1a:4d:ad:cd: 1f:ec:1e:5c:ec:4c:79:30:64:e0:cb:a0:ec:6f:fa:31:82:02: 95:01:db:79:7a:02:38:b9:db:6d:8b:2f:e4:6b:c4:06:b9:6b: 21:39:02:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrfETKw2scwZD1L+UB1umbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMTI4OGFlZWNkMTE0OWM5ZTc0NWY5ODY1M2U2ODkwYWZh MjUzYWIwHhcNMjUxMjI5MTkwMTA0WhcNMjUxMjMwMTkwMTA0WjAzMTEwLwYDVQQD Eyg2YzNjNjJhODRiMGVhMTMyOTE5MTk3ZDA5ZTg1OTNkMjM2NzVjMWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlWmGUbj1I4+oOMWoEj6FbLRFp/r IYiNjt+0jiI0qD4v3uz8QDEiY9exhnCnt/Em1gUR5Sdf19QLtUcuWBVE8RdvBoN3 XpEX138KV753CWWBNLbOR3OEL/41moZiOWZ5GexfjHhrVGVGI0c9sXUvwZIczYrH fpNugWH9i8pUrR5tXIaUPMZEq+T2OUN7ripe626snJC4mlNlTKBAMly893zyCscI v4U6m1SubB9HSiKQidNo+afNFXyaSX83xw9hiS9ElcyhQDzvNHLNq65h5f66Fx54 G+DAqwm+d+vfzAyKNzXZPd0Zc83HbIyZmWWjP3VsipJp/wf66LDSmqROZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGw8YqhLDqEykZGX0J6Fk9I2dcHjMB8GA1UdIwQY MBaAFHoSiK7s0RScnnRfmGU+aJCvolOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWhLSXJ1elJGSnllZEYtWVpUNW9rSy1pVTZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iNGYzZDAtYjFkMS00NmJlLWExOTAt OGUyMDI3Njk1ZDA3LzEvZWhLSXJ1elJGSnllZEYtWVpUNW9rSy1pVTZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9iNGYzZDAtYjFkMS00NmJlLWExOTAtOGUyMDI3Njk1ZDA3 LzEvZWhLSXJ1elJGSnllZEYtWVpUNW9rSy1pVTZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcMivrk8Z YevvlbpIMJcBj+yh+KfxsmixCpYfoIKC+eVY2ryxxtbcqi/bl/HugifKl4PD90XL ty1vCeDfPpNiq9wde9nqxHVtMrqXZbda0CawVjPYON/TEOh4DYpn7zorVM3TpExy HKu/euJJaIWjZ6yLqcrLIfpxDXLQ4+iG2yH4JTGIs4Szel7Bl7JM9dNKQ2qsB0Wy fJyFlq7zH5+i6LSEE2PjfnPZQZpZRVo0ah8ZgnrbqQU/fzniSqYY2/CEfmtkmOuO IiAsS6bT/J8DobV4xbMaTa3NH+weXOxMeTBk4Mug7G/6MYIClQHbeXoCOLnbbYsv 5GvEBrlrITkCAg== -----END CERTIFICATE-----Generated at Tue Dec 30 00:20:02 2025 by rpki-client