This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft File: brhre7AKRC4IyzuFpj57SEh0LnY.mft (raw, json) Hash identifier: IGPW5T7eh1XMs4I8Q0OFf+y9n5MOI7QITUsIycqlx6g= Subject key identifier: 2A:50:80:40:74:4D:4E:2A:C7:6C:39:C0:CF:47:B9:74:20:EE:03:81 Authority key identifier: 6E:B8:6B:7B:B0:0A:44:2E:08:CB:3B:85:A6:3E:7B:48:48:74:2E:76 Certificate issuer: /CN=6eb86b7bb00a442e08cb3b85a63e7b4848742e76 Certificate serial: 019B41A481E62AB633C7C8ECF90635A6961D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft Manifest number: 0E60 Signing time: Sun 21 Dec 2025 16:00:58 +0000 Manifest this update: Sun 21 Dec 2025 16:00:58 +0000 Manifest next update: Mon 22 Dec 2025 16:00:58 +0000 Files and hashes: 1: V-vZgRS8mAjoRUqoJ2bRVighD-g.roa (hash: UA46xIFUmg6Yei6BvPPyRg4XYtnlQ4qpnfSfvDj9Jd0=) 2: brhre7AKRC4IyzuFpj57SEh0LnY.crl (hash: jmZklRd0lnu2DWwZaY0bSyNTdcWcGHe62jbUTBuHdDo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:81:e6:2a:b6:33:c7:c8:ec:f9:06:35:a6:96:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eb86b7bb00a442e08cb3b85a63e7b4848742e76 Validity Not Before: Dec 21 16:00:58 2025 GMT Not After : Dec 22 16:00:58 2025 GMT Subject: CN=2a508040744d4e2ac76c39c0cf47b97420ee0381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:15:32:85:f3:95:64:0d:15:53:b7:37:da:04: 12:69:9a:fe:d7:14:fb:ea:5f:f6:e1:c9:00:a8:44: f3:90:20:33:15:3c:d9:ec:2e:aa:69:72:5d:6c:9e: f3:f1:98:e2:f6:4e:88:d0:16:e8:20:b1:a6:3c:89: 5d:f5:21:92:5b:3c:7a:13:68:bb:96:33:76:94:39: 1a:0d:6a:df:61:35:a5:6d:40:3e:b2:86:38:c0:86: b4:1a:fc:fd:2f:98:40:36:56:84:39:7d:43:c1:17: 0f:7f:16:10:49:64:87:65:41:1b:dc:0f:29:6d:77: 78:c7:58:6e:b1:93:c2:62:b4:bd:7a:b0:ac:1a:c2: ea:40:66:4f:2d:44:db:b3:9b:ee:b2:60:27:0c:e5: e0:0c:19:62:49:8a:f4:3f:35:2b:e4:b1:89:63:ab: c8:89:20:60:f5:ed:99:5f:f0:5c:f9:0b:e1:13:59: e5:58:7a:a6:fe:a9:b9:2d:f4:42:3d:53:e1:c7:18: fa:a4:84:51:bb:fa:00:c2:a8:c0:2d:a9:75:26:f6: 12:6d:76:a6:a8:70:77:34:22:e0:bf:a0:95:af:74: eb:f5:00:e8:a8:4b:de:4e:6f:54:b8:74:16:4f:d1: 62:1c:53:4f:7b:92:2f:d0:66:22:4e:6b:34:cc:06: 19:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:50:80:40:74:4D:4E:2A:C7:6C:39:C0:CF:47:B9:74:20:EE:03:81 X509v3 Authority Key Identifier: keyid:6E:B8:6B:7B:B0:0A:44:2E:08:CB:3B:85:A6:3E:7B:48:48:74:2E:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:71:d3:0e:26:2b:29:a0:67:8a:3c:42:71:79:4d:56:c3:38: 72:18:a3:77:de:2b:f2:05:cc:6a:89:ed:ad:d6:27:e5:b4:37: 37:cf:a8:09:aa:25:5b:ff:b2:e9:d7:0f:e8:ec:db:8d:33:99: fe:15:f1:85:6e:b3:76:e6:80:ad:71:bf:83:7e:b8:0b:0e:20: c1:d0:e1:4b:5a:f6:30:83:b7:f6:c9:3b:23:6b:fb:b0:d1:42: f8:78:14:98:3b:c3:a9:68:95:4d:14:5d:bc:38:68:7f:98:b3: 77:97:ed:58:97:c8:22:62:95:75:8b:7c:da:79:f9:c6:7b:ba: a2:e4:82:46:ea:03:3e:7f:87:ca:3d:c3:3e:fe:70:24:01:1b: a1:98:8e:5d:63:7c:da:df:b7:2a:26:1d:76:6e:1a:1e:7d:65: 8a:5c:1c:39:7a:8b:30:28:9e:ed:4d:a5:f7:c2:52:15:d8:1e: ee:4d:a5:27:1a:3c:30:9f:a8:09:5b:4a:76:ab:a3:ad:8e:f9: 08:48:09:ef:47:b2:88:be:6b:57:26:e2:57:c1:a0:15:e1:a7: 94:ee:56:31:a6:8f:52:e3:1e:85:b4:28:78:f4:0f:cf:2d:62: 5a:76:10:2c:b2:2f:cb:55:b2:4b:85:ec:5d:0f:e3:26:47:d0: 0e:75:46:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpIHmKrYzx8js+QY1ppYdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYjg2YjdiYjAwYTQ0MmUwOGNiM2I4NWE2M2U3YjQ4NDg3 NDJlNzYwHhcNMjUxMjIxMTYwMDU4WhcNMjUxMjIyMTYwMDU4WjAzMTEwLwYDVQQD EygyYTUwODA0MDc0NGQ0ZTJhYzc2YzM5YzBjZjQ3Yjk3NDIwZWUwMzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhUyhfOVZA0VU7c32gQSaZr+1xT7 6l/24ckAqETzkCAzFTzZ7C6qaXJdbJ7z8Zji9k6I0BboILGmPIld9SGSWzx6E2i7 ljN2lDkaDWrfYTWlbUA+soY4wIa0Gvz9L5hANlaEOX1DwRcPfxYQSWSHZUEb3A8p bXd4x1husZPCYrS9erCsGsLqQGZPLUTbs5vusmAnDOXgDBliSYr0PzUr5LGJY6vI iSBg9e2ZX/Bc+QvhE1nlWHqm/qm5LfRCPVPhxxj6pIRRu/oAwqjALal1JvYSbXam qHB3NCLgv6CVr3Tr9QDoqEveTm9UuHQWT9FiHFNPe5Iv0GYiTms0zAYZKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCpQgEB0TU4qx2w5wM9HuXQg7gOBMB8GA1UdIwQY MBaAFG64a3uwCkQuCMs7haY+e0hIdC52MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnJocmU3QUtSQzRJeXp1RnBqNTdTRWgwTG5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iODFlNmUtMmZlZi00NjRjLTg5MzUt MDc3OTAyOWFlMjIyLzEvYnJocmU3QUtSQzRJeXp1RnBqNTdTRWgwTG5ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9iODFlNmUtMmZlZi00NjRjLTg5MzUtMDc3OTAyOWFlMjIy LzEvYnJocmU3QUtSQzRJeXp1RnBqNTdTRWgwTG5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEHHTDiYr KaBnijxCcXlNVsM4chijd94r8gXMaontrdYn5bQ3N8+oCaolW/+y6dcP6OzbjTOZ /hXxhW6zduaArXG/g364Cw4gwdDhS1r2MIO39sk7I2v7sNFC+HgUmDvDqWiVTRRd vDhof5izd5ftWJfIImKVdYt82nn5xnu6ouSCRuoDPn+Hyj3DPv5wJAEboZiOXWN8 2t+3KiYddm4aHn1lilwcOXqLMCie7U2l98JSFdge7k2lJxo8MJ+oCVtKdqujrY75 CEgJ70eyiL5rVybiV8GgFeGnlO5WMaaPUuMehbQoePQPzy1iWnYQLLIvy1WyS4Xs XQ/jJkfQDnVGaw== -----END CERTIFICATE-----Generated at Sun Dec 21 19:17:22 2025 by rpki-client