This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft File: eHl3C__BTZzftXTshmyq8TVy9Fw.mft (raw, json) Hash identifier: GhM7Al/Kc1CxFdQjFs18WC+4nWdxO4/aK3fMEHZjesM= Subject key identifier: 97:3E:FC:33:14:84:0D:14:6B:06:F9:AA:F9:46:59:98:45:A5:A0:A7 Authority key identifier: 78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C Certificate issuer: /CN=7879770bffc14d9cdfb574ec866caaf13572f45c Certificate serial: 019B4E1654FBC8E48EA5A38A874E88890D50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft Manifest number: 1451 Signing time: Wed 24 Dec 2025 02:00:44 +0000 Manifest this update: Wed 24 Dec 2025 02:00:44 +0000 Manifest next update: Thu 25 Dec 2025 02:00:44 +0000 Files and hashes: 1: WiSq1XaassFeIzQ7VRRmBzOb3-E.roa (hash: kuvzaokAS1drpTQ/4WqXgBODOQIMCPVvcrCFZCP4fDk=) 2: eHl3C__BTZzftXTshmyq8TVy9Fw.crl (hash: g0IvkfGLUS0ZxpubFzWUypxnt10e1qCQCDX3YQYR48Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:16:54:fb:c8:e4:8e:a5:a3:8a:87:4e:88:89:0d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7879770bffc14d9cdfb574ec866caaf13572f45c Validity Not Before: Dec 24 02:00:44 2025 GMT Not After : Dec 25 02:00:44 2025 GMT Subject: CN=973efc3314840d146b06f9aaf946599845a5a0a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2a:5f:ba:57:80:53:4d:fd:98:f7:83:69:74: 21:12:64:ca:d2:7c:d4:5c:80:cd:2a:75:c5:8d:24: a8:20:e5:ac:d4:aa:30:7b:be:36:49:48:3d:c9:d7: cd:b8:a5:0a:43:61:7e:93:5f:2d:86:77:ee:52:2c: 81:67:e4:2a:f8:60:84:69:4e:5b:ac:c1:cc:ce:78: d2:99:f2:1c:45:18:dc:bd:35:13:90:53:fd:09:0b: 80:97:c4:06:f9:d4:a9:82:e0:2b:b6:60:46:5f:46: d9:ab:b9:f5:d2:12:b7:91:ec:f6:82:bc:28:3d:f8: 88:6f:b4:33:4b:60:79:54:f2:f0:ab:b6:35:7a:16: b8:8f:67:e2:f3:99:32:7f:fd:cd:f5:fa:e3:66:22: e6:d2:79:2e:bc:53:61:e4:b5:05:f6:93:e2:53:57: aa:78:7d:58:c5:96:e0:19:fc:d6:e5:dc:5c:03:e0: a4:e6:56:22:b9:51:53:eb:7d:5b:08:55:ea:c2:46: cf:fa:b7:e3:45:8c:eb:14:cb:8d:34:64:86:66:e1: e3:ef:1b:1c:d3:02:00:d0:ad:a4:41:fe:ec:92:9b: e7:8e:39:80:51:46:3d:d8:e9:57:92:3c:7e:4d:95: 4f:fe:b1:53:ec:9c:1a:fa:5f:34:f8:12:b2:3a:6a: 69:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:3E:FC:33:14:84:0D:14:6B:06:F9:AA:F9:46:59:98:45:A5:A0:A7 X509v3 Authority Key Identifier: keyid:78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:f6:2d:72:5f:46:4c:4a:12:ff:b4:30:37:6a:06:77:3b:b8: 57:8d:79:bb:8d:22:2b:00:9e:b4:d4:0d:f6:a7:ff:79:67:de: ff:b7:8c:f3:65:83:00:eb:53:8f:ac:70:73:31:f4:c4:2d:74: e2:4b:b0:2e:ab:0e:cb:5c:8a:6a:76:f6:15:de:b6:be:4a:1d: 1b:ca:18:34:a0:47:d7:3e:ec:b1:b4:55:3c:86:d2:5b:89:4f: 27:ea:3a:fb:e3:86:57:19:5d:ad:61:36:aa:72:d2:88:d8:94: 43:64:b6:3a:51:21:f3:77:c1:f5:88:15:ef:d0:c3:ad:6f:d5: 0b:80:64:72:98:9d:d5:76:43:65:cc:c7:c1:1e:a5:28:a7:3e: 83:79:73:21:a4:de:98:38:8d:13:16:d7:14:f8:07:60:23:8a: 9f:e8:34:51:db:07:ab:a9:5c:54:a5:ed:dd:87:f0:ab:0d:f7: 49:66:86:19:f1:24:51:e8:eb:59:c2:9d:63:a5:68:e4:a4:79: 73:45:6f:eb:96:06:bc:45:94:3e:66:e1:6b:f7:87:57:e5:0f: 03:0d:7a:8f:ec:46:b9:1d:87:59:7c:fe:fc:7e:9c:3b:3f:f1: c1:27:57:77:c7:ef:bc:83:13:a8:6f:ff:4a:4b:1d:00:aa:4f: 91:f3:1c:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOFlT7yOSOpaOKh06IiQ1QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4Nzk3NzBiZmZjMTRkOWNkZmI1NzRlYzg2NmNhYWYxMzU3 MmY0NWMwHhcNMjUxMjI0MDIwMDQ0WhcNMjUxMjI1MDIwMDQ0WjAzMTEwLwYDVQQD Eyg5NzNlZmMzMzE0ODQwZDE0NmIwNmY5YWFmOTQ2NTk5ODQ1YTVhMGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqypfuleAU039mPeDaXQhEmTK0nzU XIDNKnXFjSSoIOWs1Kowe742SUg9ydfNuKUKQ2F+k18thnfuUiyBZ+Qq+GCEaU5b rMHMznjSmfIcRRjcvTUTkFP9CQuAl8QG+dSpguArtmBGX0bZq7n10hK3kez2grwo PfiIb7QzS2B5VPLwq7Y1eha4j2fi85kyf/3N9frjZiLm0nkuvFNh5LUF9pPiU1eq eH1YxZbgGfzW5dxcA+Ck5lYiuVFT631bCFXqwkbP+rfjRYzrFMuNNGSGZuHj7xsc 0wIA0K2kQf7skpvnjjmAUUY92OlXkjx+TZVP/rFT7Jwa+l80+BKyOmppSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJc+/DMUhA0Uawb5qvlGWZhFpaCnMB8GA1UdIwQY MBaAFHh5dwv/wU2c37V07IZsqvE1cvRcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUhsM0NfX0JUWnpmdFhUc2hteXE4VFZ5OUZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zN2UyNmYtNTdiOC00MDgwLWI4MzIt ZWU3MzEzNzE2NDk4LzEvZUhsM0NfX0JUWnpmdFhUc2hteXE4VFZ5OUZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8zN2UyNmYtNTdiOC00MDgwLWI4MzItZWU3MzEzNzE2NDk4 LzEvZUhsM0NfX0JUWnpmdFhUc2hteXE4VFZ5OUZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPPYtcl9G TEoS/7QwN2oGdzu4V415u40iKwCetNQN9qf/eWfe/7eM82WDAOtTj6xwczH0xC10 4kuwLqsOy1yKanb2Fd62vkodG8oYNKBH1z7ssbRVPIbSW4lPJ+o6++OGVxldrWE2 qnLSiNiUQ2S2OlEh83fB9YgV79DDrW/VC4Bkcpid1XZDZczHwR6lKKc+g3lzIaTe mDiNExbXFPgHYCOKn+g0UdsHq6lcVKXt3Yfwqw33SWaGGfEkUejrWcKdY6Vo5KR5 c0Vv65YGvEWUPmbha/eHV+UPAw16j+xGuR2HWXz+/H6cOz/xwSdXd8fvvIMTqG// SksdAKpPkfMcYg== -----END CERTIFICATE-----Generated at Wed Dec 24 08:48:59 2025 by rpki-client