This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft File: Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft (raw, json) Hash identifier: uSQj9n8gnwfjKY+UdtNcdL1mLbWg6Ptbg1GyjMC8aAQ= Subject key identifier: 49:A5:E4:ED:B2:F1:1A:3B:27:1E:8C:27:EC:14:FE:F1:47:66:81:F8 Authority key identifier: 12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B Certificate issuer: /CN=121a37282dd992d88658160559e048392798c84b Certificate serial: 019AF98BBAAE16F67C03D8166CA811727861 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft Manifest number: 0F21 Signing time: Sun 07 Dec 2025 16:01:15 +0000 Manifest this update: Sun 07 Dec 2025 16:01:15 +0000 Manifest next update: Mon 08 Dec 2025 16:01:15 +0000 Files and hashes: 1: 7rGhXzCfmOAQtFdCFMtNwQZCGzI.roa (hash: +YzcMttJR4cOnsIWs0CBLy1v8W7l7gh7eA5Qk1ZfF+0=) 2: E-owwaRkGBOgTW0gbT6t0z8jYpA.roa (hash: MzJgxXYLXxOfkRd2uBOOGYCYN+rSmPW8si+rCfGvcKY=) 3: Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl (hash: SVaBSxAI2z5LU0doA6Gd/R2lbzlYleymJusrNlKAFfM=) 4: JMIXuwUBCaOmERtHlzG7ISJ3JvY.roa (hash: Hw2s88epzhilOmADkh2atAnnbAnZEDzpVgH8yNCsz2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 16:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:8b:ba:ae:16:f6:7c:03:d8:16:6c:a8:11:72:78:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=121a37282dd992d88658160559e048392798c84b Validity Not Before: Dec 7 16:01:15 2025 GMT Not After : Dec 8 16:01:15 2025 GMT Subject: CN=49a5e4edb2f11a3b271e8c27ec14fef1476681f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:dc:b8:23:a9:15:cb:56:4b:61:b4:0b:1b:a2: af:70:d9:5a:77:72:23:8a:50:6d:fe:28:89:3e:e2: f9:f2:32:0f:98:88:11:89:a3:46:bb:40:78:0b:8f: 65:81:1e:10:9f:89:b1:75:59:d7:8d:46:7c:e6:e1: ed:82:f4:20:17:4e:66:90:8c:93:4f:af:c5:3c:ac: 86:b4:07:3b:20:0b:73:8e:85:45:ab:65:78:30:5d: 65:04:e5:3a:da:34:cb:1b:35:f4:8c:e4:97:28:c0: e2:2b:3e:35:06:5b:78:74:e8:c4:39:bd:97:ff:76: 28:bc:91:ea:4e:73:eb:df:42:d0:de:94:4a:0e:e3: f9:4e:e0:ab:0f:11:cc:25:fa:87:d0:be:74:ba:3d: 66:0d:99:d3:63:fc:ec:3f:a5:a7:3f:93:cd:eb:a5: 8b:bd:8b:a4:55:0c:29:bd:e1:61:1d:f0:80:5a:a8: 22:db:be:77:42:6d:47:de:f9:20:22:c7:57:88:42: 54:3b:5d:c3:a2:a4:ee:0f:16:49:5a:56:f9:60:17: 69:97:ae:2f:10:ac:15:71:a4:74:cc:2e:b5:af:dc: 63:60:9e:00:fb:84:63:d5:bc:28:b0:8d:db:2f:02: f9:02:0b:62:f5:1b:1c:0c:6a:92:c1:aa:89:85:9d: a8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:A5:E4:ED:B2:F1:1A:3B:27:1E:8C:27:EC:14:FE:F1:47:66:81:F8 X509v3 Authority Key Identifier: keyid:12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:b7:48:92:18:9c:85:50:2a:98:9d:45:7e:5e:20:37:55:a5: fe:ad:9f:9f:5d:d0:f6:3e:c4:15:c8:02:1d:6a:30:a4:e2:e6: d2:3a:37:8b:f2:bd:34:e9:c4:64:dc:e7:69:54:79:00:75:00: ab:a9:29:ae:40:ae:46:bf:97:cf:a9:5c:b7:e8:d7:56:47:17: 31:23:cc:39:8f:e3:ba:0a:09:e5:65:d0:6c:28:c0:b9:6c:f6: 72:71:9b:3f:b2:8d:bc:14:6c:73:2d:77:0b:2c:a6:25:72:0c: 85:48:a7:6e:d2:41:45:99:12:d3:03:70:3d:68:bb:90:15:87: 15:31:5e:5d:67:b8:23:0e:9d:8e:99:ed:c8:20:51:36:65:d1: 73:33:74:c7:3e:00:54:2f:02:23:91:ee:23:e2:59:9f:07:0b: 37:2f:d7:54:1d:60:74:9e:89:a5:e7:c7:52:e2:ff:89:96:44: cc:a8:b3:61:21:1d:76:92:f6:03:a3:e2:81:e6:8c:76:94:c4: e3:c9:45:95:fd:b3:34:d5:fb:83:14:f1:d7:76:40:9e:2b:34: 6b:71:44:5a:b4:ae:06:ea:a3:e3:91:f7:c3:4e:8a:87:1b:d6: e2:cc:92:04:fb:4e:e3:77:84:1d:c8:70:de:ed:c4:7e:71:81: e1:57:4e:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr5i7quFvZ8A9gWbKgRcnhhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMWEzNzI4MmRkOTkyZDg4NjU4MTYwNTU5ZTA0ODM5Mjc5 OGM4NGIwHhcNMjUxMjA3MTYwMTE1WhcNMjUxMjA4MTYwMTE1WjAzMTEwLwYDVQQD Eyg0OWE1ZTRlZGIyZjExYTNiMjcxZThjMjdlYzE0ZmVmMTQ3NjY4MWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ny4I6kVy1ZLYbQLG6KvcNlad3Ij ilBt/iiJPuL58jIPmIgRiaNGu0B4C49lgR4Qn4mxdVnXjUZ85uHtgvQgF05mkIyT T6/FPKyGtAc7IAtzjoVFq2V4MF1lBOU62jTLGzX0jOSXKMDiKz41Blt4dOjEOb2X /3YovJHqTnPr30LQ3pRKDuP5TuCrDxHMJfqH0L50uj1mDZnTY/zsP6WnP5PN66WL vYukVQwpveFhHfCAWqgi2753Qm1H3vkgIsdXiEJUO13DoqTuDxZJWlb5YBdpl64v EKwVcaR0zC61r9xjYJ4A+4Rj1bwosI3bLwL5Agti9RscDGqSwaqJhZ2ogwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEml5O2y8Ro7Jx6MJ+wU/vFHZoH4MB8GA1UdIwQY MBaAFBIaNygt2ZLYhlgWBVngSDknmMhLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWhvM0tDM1prdGlHV0JZRldlQklPU2VZeUVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mZWQxMzEtZjlkNy00MWIyLWI4YmMt MDgyYjFmN2YwZGIyLzEvRWhvM0tDM1prdGlHV0JZRldlQklPU2VZeUVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mZWQxMzEtZjlkNy00MWIyLWI4YmMtMDgyYjFmN2YwZGIy LzEvRWhvM0tDM1prdGlHV0JZRldlQklPU2VZeUVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmLdIkhic hVAqmJ1Ffl4gN1Wl/q2fn13Q9j7EFcgCHWowpOLm0jo3i/K9NOnEZNznaVR5AHUA q6kprkCuRr+Xz6lct+jXVkcXMSPMOY/jugoJ5WXQbCjAuWz2cnGbP7KNvBRscy13 CyymJXIMhUinbtJBRZkS0wNwPWi7kBWHFTFeXWe4Iw6djpntyCBRNmXRczN0xz4A VC8CI5HuI+JZnwcLNy/XVB1gdJ6JpefHUuL/iZZEzKizYSEddpL2A6PigeaMdpTE 48lFlf2zNNX7gxTx13ZAnis0a3FEWrSuBuqj45H3w06KhxvW4sySBPtO43eEHchw 3u3EfnGB4VdOfA== -----END CERTIFICATE-----Generated at Mon Dec 8 01:42:47 2025 by rpki-client