This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft File: EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft (raw, json) Hash identifier: r+yTupY4AtsJv3W9+GnbHuqq5b9LTPskZXIP/6lqgjk= Subject key identifier: C7:A8:02:85:DE:75:B8:36:8B:06:2C:93:D7:6A:4E:3B:01:94:3C:EC Authority key identifier: 12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64 Certificate issuer: /CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64 Certificate serial: 019B10B813679CC252A966CDC8432F6931CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft Manifest number: 0872 Signing time: Fri 12 Dec 2025 04:00:57 +0000 Manifest this update: Fri 12 Dec 2025 04:00:57 +0000 Manifest next update: Sat 13 Dec 2025 04:00:57 +0000 Files and hashes: 1: EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl (hash: XcqFKI3i/Er6u8a31BuDfS2LpCS+UI57LMzp19vDKAg=) 2: QB_3GAwgUBDF8MSXTq2uaHbFbVk.roa (hash: kWfvWxwAjwjbMAzYwS2Vj1dVqlEfvEJvCE+9y9lLF0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:b8:13:67:9c:c2:52:a9:66:cd:c8:43:2f:69:31:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64 Validity Not Before: Dec 12 04:00:57 2025 GMT Not After : Dec 13 04:00:57 2025 GMT Subject: CN=c7a80285de75b8368b062c93d76a4e3b01943cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9e:b7:c8:22:78:4c:df:5c:18:e8:4b:99:ce: ad:34:dd:77:92:07:db:24:6e:10:22:e1:85:e7:87: 96:f7:da:5f:33:91:be:e2:4d:0e:4a:df:5b:6d:83: dc:54:bd:e4:02:cd:0c:86:72:31:74:f4:60:e5:33: d8:b7:ab:5e:ff:d7:3d:b6:5f:24:1f:89:cd:8f:6a: f5:31:d0:27:6d:1a:d7:d4:30:71:83:63:d4:3d:35: a8:ef:60:fc:42:48:c1:fb:ad:5e:99:b0:a4:72:fc: 01:7c:c3:59:c6:eb:e3:96:13:fa:82:da:e8:61:a3: bd:34:fd:ec:9e:36:9e:a0:50:a6:a1:67:67:f8:52: 59:b8:ea:a4:7d:92:8c:8a:6e:5b:4c:7c:83:80:b7: a1:74:b1:06:aa:b1:5d:90:fc:d6:ed:cc:f0:68:d1: 7a:2d:7a:43:10:da:a8:d2:ee:d4:d2:c7:11:41:ec: 9d:35:fc:a7:ee:b2:e0:78:e1:40:b0:d6:43:b7:a3: 14:61:71:e1:7c:b0:14:e6:6e:fb:ab:97:cc:47:5e: 99:e3:2a:83:a7:ed:92:a7:fb:93:dd:96:3d:96:90: 25:70:e0:b7:d7:de:8c:ab:f9:f7:57:be:01:97:67: 8a:71:3e:46:a0:85:51:86:0a:73:1b:93:81:60:c6: 0b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A8:02:85:DE:75:B8:36:8B:06:2C:93:D7:6A:4E:3B:01:94:3C:EC X509v3 Authority Key Identifier: keyid:12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:a4:78:5e:7b:29:c6:7c:48:ed:bc:d9:74:50:84:67:87:88: dc:dc:70:fd:dc:b2:39:2e:16:4f:50:e8:6f:29:a3:f9:f4:57: 12:ac:6f:ae:b2:e1:80:c7:c3:69:9b:a0:7c:94:56:c6:ba:90: 70:58:2d:e8:9e:d7:10:15:65:2a:5e:15:64:70:22:09:de:33: 18:78:bd:c4:a3:41:af:43:e5:cc:17:a1:48:e3:91:58:7d:69: ab:af:80:75:2b:24:ea:8a:66:92:53:53:8e:6f:75:57:2a:17: 5e:9e:89:c8:aa:5f:81:0b:ca:b1:17:43:c7:0f:2a:f1:1d:f9: 64:3a:a4:2a:62:7b:07:34:d5:78:74:08:1c:cd:32:83:a7:a1: 27:87:4c:75:3e:36:23:9c:98:2d:18:d2:8e:91:aa:0f:df:d7: 1c:cb:88:fb:90:e5:31:33:93:a7:8f:57:4e:47:96:09:aa:02: 2e:d6:5b:b7:1b:fa:95:0f:7d:f0:b1:77:c3:6c:b8:33:75:c7: bb:36:0f:8b:8d:79:70:64:98:3e:15:2f:5c:21:36:a9:ae:0c: 04:bd:a5:c2:c7:24:44:5d:62:ca:d7:a5:73:f7:31:d7:78:00: 40:18:b2:b1:92:a8:94:17:d4:9e:2b:8c:fa:56:c4:e4:d2:8c: 64:72:7f:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQuBNnnMJSqWbNyEMvaTHLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMTMzYTY1MjNlMmVkMGEwYzlhMzZlYThhN2M2ZjBlNzJh NWRkNjQwHhcNMjUxMjEyMDQwMDU3WhcNMjUxMjEzMDQwMDU3WjAzMTEwLwYDVQQD EyhjN2E4MDI4NWRlNzViODM2OGIwNjJjOTNkNzZhNGUzYjAxOTQzY2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu563yCJ4TN9cGOhLmc6tNN13kgfb JG4QIuGF54eW99pfM5G+4k0OSt9bbYPcVL3kAs0MhnIxdPRg5TPYt6te/9c9tl8k H4nNj2r1MdAnbRrX1DBxg2PUPTWo72D8QkjB+61embCkcvwBfMNZxuvjlhP6gtro YaO9NP3snjaeoFCmoWdn+FJZuOqkfZKMim5bTHyDgLehdLEGqrFdkPzW7czwaNF6 LXpDENqo0u7U0scRQeydNfyn7rLgeOFAsNZDt6MUYXHhfLAU5m77q5fMR16Z4yqD p+2Sp/uT3ZY9lpAlcOC3196Mq/n3V74Bl2eKcT5GoIVRhgpzG5OBYMYL6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMeoAoXedbg2iwYsk9dqTjsBlDzsMB8GA1UdIwQY MBaAFBITOmUj4u0KDJo26op8bw5ypd1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWhNNlpTUGk3UW9NbWpicWlueHZEbktsM1dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85MzRlYzMtYjc2YS00MGQwLThhM2Et ODI0NzI5YWI0YjlhLzEvRWhNNlpTUGk3UW9NbWpicWlueHZEbktsM1dRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC85MzRlYzMtYjc2YS00MGQwLThhM2EtODI0NzI5YWI0Yjlh LzEvRWhNNlpTUGk3UW9NbWpicWlueHZEbktsM1dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaKR4Xnsp xnxI7bzZdFCEZ4eI3Nxw/dyyOS4WT1Dobymj+fRXEqxvrrLhgMfDaZugfJRWxrqQ cFgt6J7XEBVlKl4VZHAiCd4zGHi9xKNBr0PlzBehSOORWH1pq6+AdSsk6opmklNT jm91VyoXXp6JyKpfgQvKsRdDxw8q8R35ZDqkKmJ7BzTVeHQIHM0yg6ehJ4dMdT42 I5yYLRjSjpGqD9/XHMuI+5DlMTOTp49XTkeWCaoCLtZbtxv6lQ998LF3w2y4M3XH uzYPi415cGSYPhUvXCE2qa4MBL2lwsckRF1iytelc/cx13gAQBiysZKolBfUniuM +lbE5NKMZHJ/7w== -----END CERTIFICATE-----Generated at Fri Dec 12 07:45:29 2025 by rpki-client