This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft File: EhUb9X9TFrLdXNij95hSfqwUt3Q.mft (raw, json) Hash identifier: MgQ5mJTD/EjNo8y+2Pf0PBWe6xPPPsERyl2I9uP29H8= Subject key identifier: 82:78:26:58:FD:91:87:B6:1C:BD:CA:49:51:C0:71:60:38:43:61:61 Authority key identifier: 12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74 Certificate issuer: /CN=12151bf57f5316b2dd5cd8a3f798527eac14b774 Certificate serial: 019B1CBBD71DEA6BD87A198463BE2A11197F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft Manifest number: 170A Signing time: Sun 14 Dec 2025 12:00:30 +0000 Manifest this update: Sun 14 Dec 2025 12:00:30 +0000 Manifest next update: Mon 15 Dec 2025 12:00:30 +0000 Files and hashes: 1: EhUb9X9TFrLdXNij95hSfqwUt3Q.crl (hash: LsqwCYl5pMZzq+N8vihNI5odGbAoS+QWdGUakq8d6X4=) 2: x-Ub1K3iVEUvOwIGizK6jbPSp6k.roa (hash: jQUeTI5H0B7Y7vHRq3Ah33YVd5ztXAEnsoOlx3Qa8Rs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:bb:d7:1d:ea:6b:d8:7a:19:84:63:be:2a:11:19:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12151bf57f5316b2dd5cd8a3f798527eac14b774 Validity Not Before: Dec 14 12:00:30 2025 GMT Not After : Dec 15 12:00:30 2025 GMT Subject: CN=82782658fd9187b61cbdca4951c0716038436161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fe:bb:a8:97:47:8b:0a:19:c2:11:cd:d9:c0: ff:bb:db:b3:a3:c3:c3:e8:3e:f0:d3:34:f8:09:84: 9a:f4:c4:85:fd:6c:2d:e8:3d:20:41:34:2c:41:a1: 0c:42:67:ac:fb:52:f8:8e:1e:73:11:8f:b8:23:07: 6d:c1:05:31:9f:45:d7:5d:6b:2c:c5:09:a6:c6:16: 30:6b:7e:f7:41:ff:97:c2:41:95:d0:07:52:95:2c: ca:bc:2f:90:d2:0d:4a:5a:2c:ed:b2:4e:1f:15:f3: 79:58:c4:37:f1:26:69:e1:75:8f:f5:6b:f4:f1:fe: 45:e1:85:e4:e9:50:59:03:a5:d5:4b:92:7b:70:bc: fb:f1:a7:ce:e5:c0:7c:98:6a:a2:f1:7e:d0:81:a2: 77:f6:fa:f1:59:bd:59:5d:34:7d:fe:81:14:58:42: 2b:e5:72:9d:25:62:fc:2e:dc:50:f1:b8:5a:5a:c6: 95:11:12:27:1b:d2:33:88:c8:ff:40:21:26:0d:f8: b7:ae:da:72:ed:d1:64:07:51:5a:d9:5a:ac:0b:21: 9a:39:7b:8e:83:5b:51:db:e6:31:60:07:b6:0f:54: 50:14:c0:49:28:0f:ed:4e:d3:b5:1f:8e:be:5f:3c: 1f:fd:a6:44:ce:e9:e8:c8:b4:f3:bd:6b:07:04:0e: a8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:78:26:58:FD:91:87:B6:1C:BD:CA:49:51:C0:71:60:38:43:61:61 X509v3 Authority Key Identifier: keyid:12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:8f:2a:00:9d:e7:8e:74:41:db:32:2d:20:a3:dd:c5:24:59: 62:74:f0:65:9c:b1:06:f3:94:9b:f8:08:71:4b:99:9d:9d:8c: f4:f3:da:6f:65:02:b7:fb:f2:b8:3c:56:9d:f1:63:b1:bb:30: af:8c:a7:b7:8b:65:d2:38:ce:e5:3c:b7:3a:00:84:01:22:61: ea:1b:14:24:b2:da:c6:a0:c8:00:fe:71:75:3a:d7:25:11:41: fb:1f:d0:00:84:36:2e:4b:56:77:e6:67:a3:d1:b1:79:66:84: 96:84:e4:54:1e:98:d5:8a:fe:fb:5f:0a:94:cd:ee:35:d3:42: d6:82:79:19:ab:39:5a:cc:8b:6b:a2:81:12:e8:1c:2a:e5:6b: 18:63:aa:42:da:f0:00:44:8f:56:62:6a:78:5e:74:18:f5:a5: 0b:45:95:2b:a9:79:d3:ce:b4:d1:97:94:8b:8e:5b:68:21:32: 1b:28:c7:ca:b3:15:95:2d:7c:df:7d:38:aa:47:11:1a:fc:49: bf:e9:49:2e:47:88:bc:31:92:38:dd:9b:37:0a:d1:a4:39:3f: fd:ce:37:d3:aa:a8:4d:0c:20:d0:9b:c9:f7:cd:8b:ad:9d:ac: 3d:9a:d4:76:81:b6:09:2c:b7:eb:f8:e5:38:2a:04:43:a9:56: cd:49:58:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscu9cd6mvYehmEY74qERl/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMTUxYmY1N2Y1MzE2YjJkZDVjZDhhM2Y3OTg1MjdlYWMx NGI3NzQwHhcNMjUxMjE0MTIwMDMwWhcNMjUxMjE1MTIwMDMwWjAzMTEwLwYDVQQD Eyg4Mjc4MjY1OGZkOTE4N2I2MWNiZGNhNDk1MWMwNzE2MDM4NDM2MTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov67qJdHiwoZwhHN2cD/u9uzo8PD 6D7w0zT4CYSa9MSF/Wwt6D0gQTQsQaEMQmes+1L4jh5zEY+4IwdtwQUxn0XXXWss xQmmxhYwa373Qf+XwkGV0AdSlSzKvC+Q0g1KWiztsk4fFfN5WMQ38SZp4XWP9Wv0 8f5F4YXk6VBZA6XVS5J7cLz78afO5cB8mGqi8X7QgaJ39vrxWb1ZXTR9/oEUWEIr 5XKdJWL8LtxQ8bhaWsaVERInG9IziMj/QCEmDfi3rtpy7dFkB1Fa2VqsCyGaOXuO g1tR2+YxYAe2D1RQFMBJKA/tTtO1H46+Xzwf/aZEzunoyLTzvWsHBA6odwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIJ4Jlj9kYe2HL3KSVHAcWA4Q2FhMB8GA1UdIwQY MBaAFBIVG/V/Uxay3VzYo/eYUn6sFLd0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWhVYjlYOVRGckxkWE5pajk1aFNmcXdVdDNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9jNTBkMGMtMzg4ZS00YzAwLWJlZjQt NGRjNmE0ZjRlZTU1LzEvRWhVYjlYOVRGckxkWE5pajk1aFNmcXdVdDNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9jNTBkMGMtMzg4ZS00YzAwLWJlZjQtNGRjNmE0ZjRlZTU1 LzEvRWhVYjlYOVRGckxkWE5pajk1aFNmcXdVdDNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoY8qAJ3n jnRB2zItIKPdxSRZYnTwZZyxBvOUm/gIcUuZnZ2M9PPab2UCt/vyuDxWnfFjsbsw r4ynt4tl0jjO5Ty3OgCEASJh6hsUJLLaxqDIAP5xdTrXJRFB+x/QAIQ2LktWd+Zn o9GxeWaEloTkVB6Y1Yr++18KlM3uNdNC1oJ5Gas5WsyLa6KBEugcKuVrGGOqQtrw AESPVmJqeF50GPWlC0WVK6l508600ZeUi45baCEyGyjHyrMVlS183304qkcRGvxJ v+lJLkeIvDGSON2bNwrRpDk//c4306qoTQwg0JvJ982LrZ2sPZrUdoG2CSy36/jl OCoEQ6lWzUlYIg== -----END CERTIFICATE-----Generated at Sun Dec 14 15:07:24 2025 by rpki-client