This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft File: EH6W-USd78RwvMWpH5IXxigawbI.mft (raw, json) Hash identifier: j81gWZR4CS3d01hQpdtf1yiLrHY/IRvFjKWgd4ZWA2Y= Subject key identifier: 2D:87:73:E4:FD:2E:F3:B6:9C:28:91:4F:A0:21:74:04:B1:BB:94:B2 Authority key identifier: 10:7E:96:F9:44:9D:EF:C4:70:BC:C5:A9:1F:92:17:C6:28:1A:C1:B2 Certificate issuer: /CN=107e96f9449defc470bcc5a91f9217c6281ac1b2 Certificate serial: 019B657A59BBABC1D76DD70977A2B3706B90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft Manifest number: 179D Signing time: Sun 28 Dec 2025 15:01:15 +0000 Manifest this update: Sun 28 Dec 2025 15:01:15 +0000 Manifest next update: Mon 29 Dec 2025 15:01:15 +0000 Files and hashes: 1: EH6W-USd78RwvMWpH5IXxigawbI.crl (hash: /HkyKHgdWIa3tWcseOAg8KwbxgYgMAC22OQIgs6wKTc=) 2: zVD3SdCfQBJBOagWM5Ehfl1wO_c.roa (hash: qafSEr3TxyKSts1jwMxTvNR+mmxx5iKNpJETUbfFIKo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:7a:59:bb:ab:c1:d7:6d:d7:09:77:a2:b3:70:6b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=107e96f9449defc470bcc5a91f9217c6281ac1b2 Validity Not Before: Dec 28 15:01:15 2025 GMT Not After : Dec 29 15:01:15 2025 GMT Subject: CN=2d8773e4fd2ef3b69c28914fa0217404b1bb94b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:05:f1:e1:37:04:ee:bc:93:87:20:8b:d5:07: a2:8e:39:8c:12:31:f2:43:0e:9a:40:b3:4f:ea:14: 4a:bf:19:03:97:41:01:3b:3d:36:3b:e9:6d:24:6f: ca:07:b5:36:27:94:f4:e4:5c:4d:6e:6c:88:89:9c: 1c:c2:d7:61:64:79:a9:76:2e:7e:64:1d:3e:62:3c: 29:00:55:97:4b:ba:95:0d:3b:c5:7e:61:26:ec:dc: 3e:76:89:40:03:89:7d:06:c8:68:c3:58:90:1b:7a: a7:0e:56:8a:3e:ae:0c:95:40:63:af:0b:64:17:7d: dc:35:0c:a4:b8:38:f4:40:af:f7:dc:d1:5e:d7:df: 21:27:a5:2d:73:fd:97:f1:10:29:8c:a8:8f:09:3f: b9:6a:60:3c:74:47:0c:f8:ad:9a:fa:2d:16:bf:50: ba:77:c6:52:a7:08:65:e5:50:1a:90:e0:b7:3c:90: 3a:f8:af:53:1d:d7:23:d9:a5:6d:ec:e0:4a:fe:45: a4:eb:f9:8f:5c:1f:58:1c:49:b2:6e:0d:65:86:93: 8f:9e:33:22:81:ad:05:7b:fb:51:3f:f8:45:61:17: f6:8e:06:3a:36:c3:d6:dc:06:c1:7e:e1:17:3e:82: 96:f7:84:4a:a1:ad:61:1d:5c:99:95:32:1f:24:0a: 23:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:87:73:E4:FD:2E:F3:B6:9C:28:91:4F:A0:21:74:04:B1:BB:94:B2 X509v3 Authority Key Identifier: keyid:10:7E:96:F9:44:9D:EF:C4:70:BC:C5:A9:1F:92:17:C6:28:1A:C1:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:01:ce:5a:c8:6c:05:d1:da:7e:8b:76:60:cf:9f:2f:d5:94: 12:a4:9d:ac:d9:d8:f9:5a:5d:9a:09:6e:01:6e:bf:d6:52:76: 02:83:1f:95:5f:63:ce:b3:a0:d8:78:15:79:e9:72:a9:af:3d: b9:e4:b9:ac:60:eb:01:3f:91:8b:4d:5c:7c:c3:8b:41:2a:c9: 37:ba:8a:e6:e2:ae:42:71:d3:18:53:db:20:ca:f9:36:32:04: b1:43:9e:64:1c:e7:1d:4e:4c:ce:0d:0f:15:ca:8a:ca:d0:6d: 05:21:e4:ae:df:03:4f:42:09:95:0e:f9:89:ca:27:d4:5a:07: 9f:f6:9d:4b:9e:11:13:7e:c4:3d:de:3d:e6:6c:91:de:51:64: 8e:db:74:c2:a9:5e:7e:60:fd:70:bb:48:39:d4:ab:38:10:a9: 6e:48:9d:33:7d:1c:12:e2:76:0b:3c:be:f1:0e:6b:8c:b6:3f: 42:bd:0c:f2:b5:69:db:b2:7c:3d:0f:d9:50:b8:c0:e6:30:1c: 0b:88:88:8c:e6:47:12:2c:7e:91:36:96:48:22:67:2f:f5:05: 10:bd:b7:88:f0:a4:15:b4:08:6a:f4:f7:dd:e4:c1:85:7e:b5: 2c:a0:aa:1d:fd:db:dc:8e:d4:70:cf:73:a8:61:2e:dd:98:eb: d4:f5:45:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlelm7q8HXbdcJd6KzcGuQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwN2U5NmY5NDQ5ZGVmYzQ3MGJjYzVhOTFmOTIxN2M2Mjgx YWMxYjIwHhcNMjUxMjI4MTUwMTE1WhcNMjUxMjI5MTUwMTE1WjAzMTEwLwYDVQQD EygyZDg3NzNlNGZkMmVmM2I2OWMyODkxNGZhMDIxNzQwNGIxYmI5NGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6AXx4TcE7ryThyCL1QeijjmMEjHy Qw6aQLNP6hRKvxkDl0EBOz02O+ltJG/KB7U2J5T05FxNbmyIiZwcwtdhZHmpdi5+ ZB0+YjwpAFWXS7qVDTvFfmEm7Nw+dolAA4l9Bshow1iQG3qnDlaKPq4MlUBjrwtk F33cNQykuDj0QK/33NFe198hJ6Utc/2X8RApjKiPCT+5amA8dEcM+K2a+i0Wv1C6 d8ZSpwhl5VAakOC3PJA6+K9THdcj2aVt7OBK/kWk6/mPXB9YHEmybg1lhpOPnjMi ga0Fe/tRP/hFYRf2jgY6NsPW3AbBfuEXPoKW94RKoa1hHVyZlTIfJAojKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC2Hc+T9LvO2nCiRT6AhdASxu5SyMB8GA1UdIwQY MBaAFBB+lvlEne/EcLzFqR+SF8YoGsGyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUg2Vy1VU2Q3OFJ3dk1XcEg1SVh4aWdhd2JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jZjE0ODQtZjk2MS00MDM3LWJkYmYt NjZhNzE1YWQzNzgzLzEvRUg2Vy1VU2Q3OFJ3dk1XcEg1SVh4aWdhd2JJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jZjE0ODQtZjk2MS00MDM3LWJkYmYtNjZhNzE1YWQzNzgz LzEvRUg2Vy1VU2Q3OFJ3dk1XcEg1SVh4aWdhd2JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATQHOWshs BdHafot2YM+fL9WUEqSdrNnY+VpdmgluAW6/1lJ2AoMflV9jzrOg2HgVeelyqa89 ueS5rGDrAT+Ri01cfMOLQSrJN7qK5uKuQnHTGFPbIMr5NjIEsUOeZBznHU5Mzg0P FcqKytBtBSHkrt8DT0IJlQ75icon1FoHn/adS54RE37EPd495myR3lFkjtt0wqle fmD9cLtIOdSrOBCpbkidM30cEuJ2Czy+8Q5rjLY/Qr0M8rVp27J8PQ/ZULjA5jAc C4iIjOZHEix+kTaWSCJnL/UFEL23iPCkFbQIavT33eTBhX61LKCqHf3b3I7UcM9z qGEu3Zjr1PVF7A== -----END CERTIFICATE-----Generated at Sun Dec 28 18:55:40 2025 by rpki-client