This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft File: ehJ9Y84cnzVXOQryH8BhBypSX04.mft (raw, json) Hash identifier: Is+5BJ7M6ORQoR1GEgXbGiq0HM/PPi1GOftduv8NJyY= Subject key identifier: A3:7E:E4:36:CB:D5:8F:F3:27:78:1E:F7:34:7E:BF:81:8E:01:17:7A Authority key identifier: 7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E Certificate issuer: /CN=7a127d63ce1c9f3557390af21fc061072a525f4e Certificate serial: 019B3DC7BC8C3B706602177A570796E19216 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft Manifest number: 02DF Signing time: Sat 20 Dec 2025 22:00:58 +0000 Manifest this update: Sat 20 Dec 2025 22:00:58 +0000 Manifest next update: Sun 21 Dec 2025 22:00:58 +0000 Files and hashes: 1: ehJ9Y84cnzVXOQryH8BhBypSX04.crl (hash: 6l/UaMd/jLXByf92BWgYcokXOuq2rnOxeYYUtDxRLfU=) 2: ljbcOH4P0wfbZdBmDxC9WVP3jCA.roa (hash: ESZ0DE4a4/PZ75FUD4JmTPdMx0gc6CuklYJy0AZ+qzM=) 3: p7CsWJqhWsLkHyYPLS-R_3le0hU.roa (hash: EeSP4Cc1NDkG1olZjQwIwFAUrprwIWgmtu0OwLvcM94=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:bc:8c:3b:70:66:02:17:7a:57:07:96:e1:92:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a127d63ce1c9f3557390af21fc061072a525f4e Validity Not Before: Dec 20 22:00:58 2025 GMT Not After : Dec 21 22:00:58 2025 GMT Subject: CN=a37ee436cbd58ff327781ef7347ebf818e01177a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:12:c7:88:f1:79:bb:4f:75:d3:7f:d2:c5:b1: fa:b4:a4:57:86:5b:f4:50:3f:3b:36:47:22:c6:a8: f3:b6:34:f2:61:60:20:f5:c4:fc:03:5f:84:e8:6b: 65:de:4f:ae:3a:f4:51:62:fb:06:a1:95:f1:6f:b3: 7e:e0:6f:d7:26:89:2c:2e:c8:af:d5:8a:a4:98:35: a0:b2:30:18:ee:52:d9:3d:d6:82:cd:a7:a5:93:b0: 60:93:19:6c:6e:59:c9:65:8f:59:6e:37:29:84:74: 08:d0:b7:80:54:1e:7a:b9:7a:73:fd:fc:c1:ad:92: 75:1a:bb:dc:e8:60:d3:2a:f8:69:20:28:47:0d:44: 8a:e7:8d:c8:d0:3d:3c:97:38:0e:21:e4:07:13:bd: e6:45:5d:8b:25:d9:3e:d3:d7:35:7e:af:92:cb:23: 4d:56:a6:c1:62:46:6a:d0:f2:b5:3a:9e:62:e5:54: fb:b3:d5:b9:97:b8:a7:16:db:7e:ae:03:0a:16:30: 20:d8:9a:e1:72:e1:d1:8e:2c:ab:8c:21:ba:25:ed: 12:de:2b:df:79:45:27:c7:29:de:cf:23:94:b2:4e: 48:9c:a4:7c:51:ae:5a:91:88:39:4f:48:4b:b2:e7: 08:78:63:63:74:d3:bd:87:73:60:c6:02:7e:5e:9c: 72:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:7E:E4:36:CB:D5:8F:F3:27:78:1E:F7:34:7E:BF:81:8E:01:17:7A X509v3 Authority Key Identifier: keyid:7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:b7:e8:6d:12:79:0c:cf:2a:00:be:14:48:70:3a:2b:15:1f: 8e:16:66:e6:04:8d:a1:14:ce:2f:8f:ab:4d:46:5c:ba:15:e2: 32:19:ec:92:17:b4:7e:97:89:f3:2f:45:28:54:fd:a0:da:94: 72:69:36:0d:39:46:f1:85:71:c7:37:d0:2c:a5:29:7b:db:b2: ce:c6:3c:16:08:4d:a4:79:75:c8:86:40:47:76:28:bd:24:86: b5:df:34:a3:bf:b1:a6:6d:b4:eb:b9:9f:f4:d4:5c:c5:e8:0e: bb:de:99:fa:87:46:92:41:af:40:7a:e6:86:3c:85:69:0a:d5: 33:0c:72:f8:4e:f6:bc:04:bc:25:36:e8:05:c9:2a:5b:4c:70: 8c:73:da:1c:2c:90:e9:5f:ba:ca:b3:9a:b2:a3:0f:ca:82:72: c6:c7:31:ae:2a:e8:b4:6d:75:06:c5:f6:16:a2:09:e1:46:21: 3d:76:e1:a5:0a:97:fa:f2:e3:37:02:6d:b6:2f:72:36:0f:05: d4:92:9f:38:b9:54:0e:84:78:15:fd:86:cb:92:83:fc:ce:ca: 34:a3:3e:04:4a:19:08:85:d4:f8:d3:7a:78:6e:66:bd:1e:e3: 08:5c:01:ca:57:f7:fa:c1:a6:c1:ee:36:83:24:34:a9:a3:cb: 81:7d:f8:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x7yMO3BmAhd6VweW4ZIWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMTI3ZDYzY2UxYzlmMzU1NzM5MGFmMjFmYzA2MTA3MmE1 MjVmNGUwHhcNMjUxMjIwMjIwMDU4WhcNMjUxMjIxMjIwMDU4WjAzMTEwLwYDVQQD EyhhMzdlZTQzNmNiZDU4ZmYzMjc3ODFlZjczNDdlYmY4MThlMDExNzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxLHiPF5u09103/SxbH6tKRXhlv0 UD87NkcixqjztjTyYWAg9cT8A1+E6Gtl3k+uOvRRYvsGoZXxb7N+4G/XJoksLsiv 1YqkmDWgsjAY7lLZPdaCzaelk7BgkxlsblnJZY9ZbjcphHQI0LeAVB56uXpz/fzB rZJ1Grvc6GDTKvhpIChHDUSK543I0D08lzgOIeQHE73mRV2LJdk+09c1fq+SyyNN VqbBYkZq0PK1Op5i5VT7s9W5l7inFtt+rgMKFjAg2JrhcuHRjiyrjCG6Je0S3ivf eUUnxynezyOUsk5InKR8Ua5akYg5T0hLsucIeGNjdNO9h3NgxgJ+XpxywwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKN+5DbL1Y/zJ3ge9zR+v4GOARd6MB8GA1UdIwQY MBaAFHoSfWPOHJ81VzkK8h/AYQcqUl9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWhKOVk4NGNuelZYT1FyeUg4QmhCeXBTWDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82OWU1M2YtYTQ4Yy00OWIwLTkwZTQt OGQyNDgxNmQ5N2RlLzEvZWhKOVk4NGNuelZYT1FyeUg4QmhCeXBTWDA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC82OWU1M2YtYTQ4Yy00OWIwLTkwZTQtOGQyNDgxNmQ5N2Rl LzEvZWhKOVk4NGNuelZYT1FyeUg4QmhCeXBTWDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFbfobRJ5 DM8qAL4USHA6KxUfjhZm5gSNoRTOL4+rTUZcuhXiMhnskhe0fpeJ8y9FKFT9oNqU cmk2DTlG8YVxxzfQLKUpe9uyzsY8FghNpHl1yIZAR3YovSSGtd80o7+xpm2067mf 9NRcxegOu96Z+odGkkGvQHrmhjyFaQrVMwxy+E72vAS8JTboBckqW0xwjHPaHCyQ 6V+6yrOasqMPyoJyxscxrirotG11BsX2FqIJ4UYhPXbhpQqX+vLjNwJtti9yNg8F 1JKfOLlUDoR4Ff2Gy5KD/M7KNKM+BEoZCIXU+NN6eG5mvR7jCFwBylf3+sGmwe42 gyQ0qaPLgX34LQ== -----END CERTIFICATE-----Generated at Sun Dec 21 04:48:20 2025 by rpki-client