This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft File: ehuwNttA15nYYRmKUkOzwD1Wwgo.mft (raw, json) Hash identifier: L2VCv51qkaXosHBRw53eHsy1VWG20T4CVEQ/fA4rAo0= Subject key identifier: 7D:E7:E3:2E:7C:B2:C6:94:C4:F7:2B:EB:A8:07:7E:1A:B1:05:32:95 Authority key identifier: 7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A Certificate issuer: /CN=7a1bb036db40d799d861198a5243b3c03d56c20a Certificate serial: 019B5787B4616AAF9B21DC06994F8317D8C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft Manifest number: 02DD Signing time: Thu 25 Dec 2025 22:01:09 +0000 Manifest this update: Thu 25 Dec 2025 22:01:09 +0000 Manifest next update: Fri 26 Dec 2025 22:01:09 +0000 Files and hashes: 1: XmpF35ngj-yNyTGypvCjCYGlpo8.roa (hash: 8XBhk5d8sjaCG8b1mNcJkFy1C7vdRPz5bf2EYXdWLuY=) 2: ehuwNttA15nYYRmKUkOzwD1Wwgo.crl (hash: 3kS0oJeUlMfN3ppEZRbKIb7DGoUVA8MK0qY2CgkYk4Y=) 3: te8WoSPpdBUUYvd1WKkLZbO72RM.roa (hash: o04bmvCElYlWOOu299mgLz7Vc+VKn0vUSkUyiAJD0o0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:57:87:b4:61:6a:af:9b:21:dc:06:99:4f:83:17:d8:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a1bb036db40d799d861198a5243b3c03d56c20a Validity Not Before: Dec 25 22:01:09 2025 GMT Not After : Dec 26 22:01:09 2025 GMT Subject: CN=7de7e32e7cb2c694c4f72beba8077e1ab1053295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:45:7f:9c:34:d1:f4:33:1e:e8:bf:eb:2b:b7: d2:67:60:ee:a6:65:41:ef:29:95:ad:29:b9:68:b4: 9f:26:d5:c6:52:0d:40:bc:e6:6a:81:eb:83:da:26: 67:d7:2c:be:63:75:14:cf:24:a4:a4:23:f3:6c:55: 57:c1:c1:58:18:25:81:f9:59:63:a2:62:56:55:23: 14:bb:6d:12:65:6c:9b:7c:5d:1a:8f:36:57:2b:8e: e4:a6:fc:99:96:97:63:9a:96:32:86:34:78:1f:8c: dc:2d:2c:ff:44:fb:c1:35:d4:21:b7:28:db:46:6c: 95:35:92:69:c6:6a:57:8a:f4:30:8b:31:23:85:ef: 4a:00:37:cf:bf:e6:87:0d:fb:55:21:fb:06:90:6a: e1:86:9d:71:b5:f5:eb:58:f2:2a:a4:e5:e8:c8:c5: d0:b8:21:a0:4b:38:32:31:07:6b:79:23:fd:e0:0c: 63:ba:7e:7a:de:10:02:9e:c9:4b:5c:a4:e1:19:ba: 8c:15:e5:2b:fb:95:1e:cb:d0:df:96:aa:9e:46:1b: 75:ae:96:3c:a0:83:4e:38:64:af:f3:78:86:5f:40: 89:40:98:2a:8d:aa:a7:d5:c9:7d:8d:43:c9:0a:9d: 9f:0c:3e:f2:ae:bc:11:33:d8:52:4b:69:70:29:03: d1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E7:E3:2E:7C:B2:C6:94:C4:F7:2B:EB:A8:07:7E:1A:B1:05:32:95 X509v3 Authority Key Identifier: keyid:7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:6f:14:e7:e3:5d:2b:b3:7f:b8:ec:db:08:bd:8b:fa:d2:ad: d5:e3:b9:0f:11:cb:eb:6b:e5:b3:bf:61:36:2b:73:b7:ef:2d: 7f:e2:f0:90:2a:a4:84:db:79:ca:5c:1f:e8:8e:fa:60:e9:88: 5b:7e:29:86:25:21:6e:57:56:e5:39:01:0e:68:38:19:6c:e4: da:52:07:e2:21:d5:f2:eb:fe:e9:8f:9f:87:34:d2:2b:0b:4a: d2:64:ef:dd:5d:c3:1a:ee:5d:43:83:35:2e:22:83:03:5d:b0: 04:07:e2:88:48:ca:14:0f:24:d4:50:d5:2e:9d:a4:18:74:3c: 73:b2:6b:c3:a7:63:ba:47:74:eb:5a:6f:c0:4d:4a:a6:55:fc: 63:b5:e0:dd:b1:85:67:c6:56:0a:dc:72:68:46:e8:74:4f:75: 88:1c:26:80:bf:5c:92:85:05:0c:3b:b9:c2:3f:01:b1:d9:26: 3f:cc:25:fe:32:de:85:fd:e8:1c:a4:9b:08:ba:05:93:c3:51: f3:50:d3:76:65:ab:9d:62:8a:39:e9:61:67:07:33:ee:5d:e5: 96:37:54:2a:5a:ae:10:dd:e9:fa:5f:bd:87:32:d4:71:f7:1c: 0d:3e:79:57:ef:e0:d7:c5:eb:92:b5:dd:bf:6e:97:98:f1:4d: e1:69:b9:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtXh7Rhaq+bIdwGmU+DF9jDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMWJiMDM2ZGI0MGQ3OTlkODYxMTk4YTUyNDNiM2MwM2Q1 NmMyMGEwHhcNMjUxMjI1MjIwMTA5WhcNMjUxMjI2MjIwMTA5WjAzMTEwLwYDVQQD Eyg3ZGU3ZTMyZTdjYjJjNjk0YzRmNzJiZWJhODA3N2UxYWIxMDUzMjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkV/nDTR9DMe6L/rK7fSZ2DupmVB 7ymVrSm5aLSfJtXGUg1AvOZqgeuD2iZn1yy+Y3UUzySkpCPzbFVXwcFYGCWB+Vlj omJWVSMUu20SZWybfF0ajzZXK47kpvyZlpdjmpYyhjR4H4zcLSz/RPvBNdQhtyjb RmyVNZJpxmpXivQwizEjhe9KADfPv+aHDftVIfsGkGrhhp1xtfXrWPIqpOXoyMXQ uCGgSzgyMQdreSP94Axjun563hACnslLXKThGbqMFeUr+5Uey9DflqqeRht1rpY8 oINOOGSv83iGX0CJQJgqjaqn1cl9jUPJCp2fDD7yrrwRM9hSS2lwKQPR2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH3n4y58ssaUxPcr66gHfhqxBTKVMB8GA1UdIwQY MBaAFHobsDbbQNeZ2GEZilJDs8A9VsIKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWh1d050dEExNW5ZWVJtS1VrT3p3RDFXd2dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ZGE1YjMtMjRjNy00ZWU1LTk1ZGMt YjA4ZGIzYzM2ZmJiLzEvZWh1d050dEExNW5ZWVJtS1VrT3p3RDFXd2dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ZGE1YjMtMjRjNy00ZWU1LTk1ZGMtYjA4ZGIzYzM2ZmJi LzEvZWh1d050dEExNW5ZWVJtS1VrT3p3RDFXd2dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgW8U5+Nd K7N/uOzbCL2L+tKt1eO5DxHL62vls79hNitzt+8tf+LwkCqkhNt5ylwf6I76YOmI W34phiUhbldW5TkBDmg4GWzk2lIH4iHV8uv+6Y+fhzTSKwtK0mTv3V3DGu5dQ4M1 LiKDA12wBAfiiEjKFA8k1FDVLp2kGHQ8c7Jrw6djukd061pvwE1KplX8Y7Xg3bGF Z8ZWCtxyaEbodE91iBwmgL9ckoUFDDu5wj8BsdkmP8wl/jLehf3oHKSbCLoFk8NR 81DTdmWrnWKKOelhZwcz7l3lljdUKlquEN3p+l+9hzLUcfccDT55V+/g18XrkrXd v26XmPFN4Wm5IQ== -----END CERTIFICATE-----Generated at Fri Dec 26 00:16:46 2025 by rpki-client