This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft File: ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft (raw, json) Hash identifier: D57VdHzcCJZrbczdRaOOxyeLtZH1YZwHk7JFlflVO1I= Subject key identifier: C6:92:63:A2:EB:FC:1C:DE:EC:D2:21:18:46:0C:FA:E5:31:80:16:13 Authority key identifier: 7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6 Certificate issuer: /CN=7a17259a863c3d637d457e119b750df95e003fd6 Certificate serial: 019B3AC659CB5032005E33912ED4807D5F97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 08:00:36 +0000 Manifest this update: Sat 20 Dec 2025 08:00:36 +0000 Manifest next update: Sun 21 Dec 2025 08:00:36 +0000 Files and hashes: 1: dUBDyI3Y08c8mTiyeoJMlAL0nl0.roa (hash: J6i7zBjAUQN6Z3eRo+/Gx26n+pN6OCH/O5XrMxGVkXk=) 2: ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl (hash: XKfbde+SPwmK9SGOmIMKRznRbr15F8dBr8BGdmvhQQc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:59:cb:50:32:00:5e:33:91:2e:d4:80:7d:5f:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a17259a863c3d637d457e119b750df95e003fd6 Validity Not Before: Dec 20 08:00:36 2025 GMT Not After : Dec 21 08:00:36 2025 GMT Subject: CN=c69263a2ebfc1cdeecd22118460cfae531801613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0f:0c:f7:d6:1e:f5:57:00:03:59:a0:c4:e3: 4e:35:11:87:9c:50:1e:7a:10:ba:c3:b8:89:62:91: 05:c4:8f:fb:50:b2:cf:c8:3f:c2:61:f7:19:af:f6: 6f:bc:51:99:da:7b:98:f2:48:93:36:f1:b7:05:1e: 77:e2:4e:96:22:a4:24:0f:dc:17:59:78:fb:07:31: 13:2b:7d:4e:93:63:f4:62:c4:45:43:dc:e7:79:57: 62:3e:e0:94:76:81:1f:1c:30:06:8b:67:ee:31:73: 9b:64:01:dd:e0:77:6d:73:74:7a:ed:e0:52:a6:ad: b1:55:c5:e9:eb:48:ba:eb:e6:80:41:46:22:2d:10: fb:79:31:fc:ba:80:90:88:e5:97:50:21:6f:e2:28: 5a:69:bf:5a:5d:e1:ad:5f:af:81:d6:aa:27:7e:35: c7:9e:75:8d:d4:aa:32:93:ae:3b:17:5f:8a:a3:b3: a2:35:c6:75:5a:d2:90:b6:3a:f8:25:cb:6c:dd:d1: cc:06:fe:cc:56:57:23:16:cb:07:84:96:c4:52:4e: 81:70:aa:6a:89:be:68:4d:bf:db:7b:e2:94:47:40: 5e:37:c8:4d:8b:0c:54:f8:7e:aa:cf:04:5a:e6:b2: 04:d8:17:f4:c0:d4:9a:45:94:fb:c3:af:57:a2:f5: 24:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:92:63:A2:EB:FC:1C:DE:EC:D2:21:18:46:0C:FA:E5:31:80:16:13 X509v3 Authority Key Identifier: keyid:7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:63:b3:10:56:c9:34:b8:39:28:85:63:2b:b8:11:02:6b:83: a4:c2:c7:a9:bd:40:1e:83:30:0a:52:15:24:40:47:0f:7c:27: d4:39:5a:d8:66:66:cb:25:8d:7b:54:4e:5f:b6:56:a1:1f:f3: e2:7d:61:c1:b3:ae:6b:16:69:e4:dd:b1:03:cc:8c:aa:7a:2a: b7:d9:5b:08:ed:e4:e4:b6:89:a6:47:40:98:9b:ae:eb:44:b0: 0b:a4:89:c4:92:88:1f:90:cc:c8:8e:02:16:04:4c:bb:77:5b: e3:0d:44:9b:4d:79:72:47:11:9e:f3:a8:57:a6:b8:a7:14:73: 50:ce:b8:aa:b5:0d:e9:ec:19:ce:8a:c9:ea:85:77:d3:83:17: 23:e3:56:1f:92:df:97:c6:88:4d:0d:ca:04:e5:c7:ca:b2:2c: 9f:78:74:6d:32:99:dc:d4:61:7d:f5:1f:ca:a0:c5:25:29:85: a4:06:6b:f1:b7:17:54:bb:a1:e1:fc:76:d6:55:a7:64:32:0a: 96:47:fa:de:19:ed:87:1b:fa:34:1a:63:74:2a:14:8e:bf:5d: 77:cb:65:e8:db:8d:37:14:f9:c1:3f:d7:b5:da:db:d9:07:db: f1:36:6b:64:48:05:bd:98:6a:1d:9c:8f:7b:4c:01:d5:c1:c0: 93:e5:69:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xlnLUDIAXjORLtSAfV+XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMTcyNTlhODYzYzNkNjM3ZDQ1N2UxMTliNzUwZGY5NWUw MDNmZDYwHhcNMjUxMjIwMDgwMDM2WhcNMjUxMjIxMDgwMDM2WjAzMTEwLwYDVQQD EyhjNjkyNjNhMmViZmMxY2RlZWNkMjIxMTg0NjBjZmFlNTMxODAxNjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyw8M99Ye9VcAA1mgxONONRGHnFAe ehC6w7iJYpEFxI/7ULLPyD/CYfcZr/ZvvFGZ2nuY8kiTNvG3BR534k6WIqQkD9wX WXj7BzETK31Ok2P0YsRFQ9zneVdiPuCUdoEfHDAGi2fuMXObZAHd4Hdtc3R67eBS pq2xVcXp60i66+aAQUYiLRD7eTH8uoCQiOWXUCFv4ihaab9aXeGtX6+B1qonfjXH nnWN1Koyk647F1+Ko7OiNcZ1WtKQtjr4Jcts3dHMBv7MVlcjFssHhJbEUk6BcKpq ib5oTb/be+KUR0BeN8hNiwxU+H6qzwRa5rIE2Bf0wNSaRZT7w69XovUkhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMaSY6Lr/Bze7NIhGEYM+uUxgBYTMB8GA1UdIwQY MBaAFHoXJZqGPD1jfUV+EZt1DfleAD/WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWhjbG1vWThQV045Ulg0Um0zVU4tVjRBUDlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wMDg0OWUtZDhlNi00YmIxLWFkMzAt YWQ4YmM4YmM3OTY3LzEvZWhjbG1vWThQV045Ulg0Um0zVU4tVjRBUDlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8wMDg0OWUtZDhlNi00YmIxLWFkMzAtYWQ4YmM4YmM3OTY3 LzEvZWhjbG1vWThQV045Ulg0Um0zVU4tVjRBUDlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJGOzEFbJ NLg5KIVjK7gRAmuDpMLHqb1AHoMwClIVJEBHD3wn1Dla2GZmyyWNe1ROX7ZWoR/z 4n1hwbOuaxZp5N2xA8yMqnoqt9lbCO3k5LaJpkdAmJuu60SwC6SJxJKIH5DMyI4C FgRMu3db4w1Em015ckcRnvOoV6a4pxRzUM64qrUN6ewZzorJ6oV304MXI+NWH5Lf l8aITQ3KBOXHyrIsn3h0bTKZ3NRhffUfyqDFJSmFpAZr8bcXVLuh4fx21lWnZDIK lkf63hnthxv6NBpjdCoUjr9dd8tl6NuNNxT5wT/Xtdrb2Qfb8TZrZEgFvZhqHZyP e0wB1cHAk+Vpyw== -----END CERTIFICATE-----Generated at Sat Dec 20 14:50:43 2025 by rpki-client