This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft File: Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft (raw, json) Hash identifier: JrmWMFSxXbbxdkDsNMY/OrGDiLT/tm1hMAAiNQl4ovg= Subject key identifier: BE:E5:6B:FD:5C:0F:4E:A6:1A:6C:CE:C8:BE:59:64:89:26:1B:DC:08 Authority key identifier: 12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D Certificate issuer: /CN=121f13882dd06d098ec49a759101329b1f201f1d Certificate serial: 019B4693C47BE92902EBD2CFB0E73E4634FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft Manifest number: 1720 Signing time: Mon 22 Dec 2025 15:00:47 +0000 Manifest this update: Mon 22 Dec 2025 15:00:47 +0000 Manifest next update: Tue 23 Dec 2025 15:00:47 +0000 Files and hashes: 1: Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl (hash: 7y//isauf4/p2oYau1AOVScugzE/sW1WLFr1WJ81qPo=) 2: ge348cXUyfn-a0uMZAg0yuW4_4I.roa (hash: 03wgahHEv0LtvPbFr0SJwLu/Pwx7T9tZQCD+de4AGPQ=) 3: qZ6xkIPJdy-idgTgsFEtWmkTw6s.roa (hash: VC0ta9yHeOo8J3uD8UnwND0HnJaoM4RiZS63UZ+noSE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:93:c4:7b:e9:29:02:eb:d2:cf:b0:e7:3e:46:34:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=121f13882dd06d098ec49a759101329b1f201f1d Validity Not Before: Dec 22 15:00:47 2025 GMT Not After : Dec 23 15:00:47 2025 GMT Subject: CN=bee56bfd5c0f4ea61a6ccec8be596489261bdc08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1f:9c:03:7a:d0:c9:f7:43:9f:8a:1c:2d:bb: 59:fd:70:ab:c7:ea:07:ac:6b:fa:61:f0:e4:7a:2e: 63:3f:9c:68:fa:b2:3d:cd:70:cb:41:5f:77:2d:c5: 6a:cf:3f:47:eb:f9:35:4e:0b:58:c4:cd:62:6f:e4: 3d:88:9c:78:5f:33:35:d5:61:e7:ab:2a:d0:0c:13: 40:77:87:49:7b:ba:a5:38:79:c3:b5:3c:e5:f7:6c: cd:fe:b0:72:8b:aa:70:06:42:3f:00:b2:0f:c1:72: 34:ff:db:57:95:74:c7:25:59:d7:3d:96:46:e5:72: b8:f7:27:69:ec:85:eb:0a:87:8c:cc:17:64:98:bf: d2:1d:3d:65:19:b9:23:17:f0:a3:b7:c9:85:64:ed: b9:00:7b:5b:01:6d:3d:11:46:f4:79:43:5a:7b:08: 2d:2e:dd:0f:af:85:84:74:d8:b5:e0:2c:3d:2f:50: 5f:56:53:ad:eb:69:99:ff:64:ea:4c:99:40:88:87: 4e:17:33:32:11:5f:8c:03:0c:22:ae:13:36:e0:bf: 66:64:ff:fb:60:49:a8:ed:0f:3e:e0:80:18:6e:e8: 79:e8:bb:31:9d:84:21:e5:03:31:be:65:b0:ec:b2: cf:63:3c:e7:1a:5e:b5:2a:10:23:06:e4:6d:25:38: 23:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E5:6B:FD:5C:0F:4E:A6:1A:6C:CE:C8:BE:59:64:89:26:1B:DC:08 X509v3 Authority Key Identifier: keyid:12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:e1:fb:95:ce:93:1c:28:ee:30:2e:f0:7a:12:b4:d1:47:a6: 18:71:ff:0b:dc:39:16:47:25:fa:15:c8:3b:ab:c7:88:63:f5: ac:e0:cf:bf:a2:53:2c:91:f4:51:26:3b:5b:31:1b:cb:0d:8d: 1c:9a:28:b7:71:46:6c:7e:65:81:3a:df:5d:2b:43:63:15:48: b3:f0:3f:15:a6:62:59:21:28:57:da:a2:2e:30:e4:b8:d2:2f: 20:79:2d:4b:62:e3:28:81:6e:9c:72:a8:91:80:ed:48:4c:41: 29:b8:c2:95:a5:d1:04:f0:4d:9f:77:64:48:80:c6:c1:db:bd: cf:7b:8a:53:e6:6a:b3:8b:17:02:9d:22:f4:f6:70:24:9e:5e: c7:10:62:27:5e:bc:99:98:6b:8a:85:02:62:80:8a:6f:a3:d4: 17:80:8d:78:60:12:ae:66:ad:3c:dc:6b:e0:ee:92:38:88:f2: 09:3a:b7:81:ca:36:45:10:b8:d9:47:26:2b:00:24:bb:7d:a9: fa:86:df:93:16:02:f3:32:17:16:13:3f:83:68:5e:6e:e8:e7: 0e:33:7e:e4:ba:4b:ce:b9:55:9b:75:7e:b3:41:fd:f1:12:f0: bb:bb:d5:a9:ee:17:62:64:49:3f:88:2f:37:d4:82:43:c2:f0: 45:02:b1:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGk8R76SkC69LPsOc+RjT7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMWYxMzg4MmRkMDZkMDk4ZWM0OWE3NTkxMDEzMjliMWYy MDFmMWQwHhcNMjUxMjIyMTUwMDQ3WhcNMjUxMjIzMTUwMDQ3WjAzMTEwLwYDVQQD EyhiZWU1NmJmZDVjMGY0ZWE2MWE2Y2NlYzhiZTU5NjQ4OTI2MWJkYzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwR+cA3rQyfdDn4ocLbtZ/XCrx+oH rGv6YfDkei5jP5xo+rI9zXDLQV93LcVqzz9H6/k1TgtYxM1ib+Q9iJx4XzM11WHn qyrQDBNAd4dJe7qlOHnDtTzl92zN/rByi6pwBkI/ALIPwXI0/9tXlXTHJVnXPZZG 5XK49ydp7IXrCoeMzBdkmL/SHT1lGbkjF/Cjt8mFZO25AHtbAW09EUb0eUNaewgt Lt0Pr4WEdNi14Cw9L1BfVlOt62mZ/2TqTJlAiIdOFzMyEV+MAwwirhM24L9mZP/7 YEmo7Q8+4IAYbuh56LsxnYQh5QMxvmWw7LLPYzznGl61KhAjBuRtJTgj1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL7la/1cD06mGmzOyL5ZZIkmG9wIMB8GA1UdIwQY MBaAFBIfE4gt0G0JjsSadZEBMpsfIB8dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWg4VGlDM1FiUW1PeEpwMWtRRXlteDhnSHgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8zNWRmMGEtOGFmNi00ZmYwLWIzNDUt MGQyNzc2NzM3NGVjLzEvRWg4VGlDM1FiUW1PeEpwMWtRRXlteDhnSHgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8zNWRmMGEtOGFmNi00ZmYwLWIzNDUtMGQyNzc2NzM3NGVj LzEvRWg4VGlDM1FiUW1PeEpwMWtRRXlteDhnSHgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMuH7lc6T HCjuMC7wehK00UemGHH/C9w5Fkcl+hXIO6vHiGP1rODPv6JTLJH0USY7WzEbyw2N HJoot3FGbH5lgTrfXStDYxVIs/A/FaZiWSEoV9qiLjDkuNIvIHktS2LjKIFunHKo kYDtSExBKbjClaXRBPBNn3dkSIDGwdu9z3uKU+Zqs4sXAp0i9PZwJJ5exxBiJ168 mZhrioUCYoCKb6PUF4CNeGASrmatPNxr4O6SOIjyCTq3gco2RRC42UcmKwAku32p +obfkxYC8zIXFhM/g2hebujnDjN+5LpLzrlVm3V+s0H98RLwu7vVqe4XYmRJP4gv N9SCQ8LwRQKxrg== -----END CERTIFICATE-----Generated at Mon Dec 22 20:28:41 2025 by rpki-client