This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft File: ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft (raw, json) Hash identifier: JVsnpm0jndku8/xOWoczfiaqpmtlDbIVI3CR5CIL294= Subject key identifier: 4C:EF:2D:24:AC:0A:72:B1:14:33:8D:56:D3:78:79:B4:EE:3B:CD:8D Authority key identifier: 7A:18:FC:AA:C6:C8:40:9F:24:D3:FA:90:DF:8E:30:21:8E:E9:C3:FF Certificate issuer: /CN=7a18fcaac6c8409f24d3fa90df8e30218ee9c3ff Certificate serial: 019B24AC6FA909FF55383BF1F621C1F19528 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft Manifest number: 177C Signing time: Tue 16 Dec 2025 01:00:39 +0000 Manifest this update: Tue 16 Dec 2025 01:00:39 +0000 Manifest next update: Wed 17 Dec 2025 01:00:39 +0000 Files and hashes: 1: 8XphOJkPtZHC_4MC2PQEPr0m2ac.roa (hash: dXWM6e00IU0bRpxg53QiBkBA19LCXMaHdPOkhO8paFI=) 2: ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl (hash: AmQIyS/BmY2Rtc7iIgNCKKV3VkppZPWw3Ta2u3HefIo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 01:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:ac:6f:a9:09:ff:55:38:3b:f1:f6:21:c1:f1:95:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a18fcaac6c8409f24d3fa90df8e30218ee9c3ff Validity Not Before: Dec 16 01:00:39 2025 GMT Not After : Dec 17 01:00:39 2025 GMT Subject: CN=4cef2d24ac0a72b114338d56d37879b4ee3bcd8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a8:fc:b4:a9:cf:30:4f:ae:5c:04:8a:8f:36: 5a:b1:cd:c7:07:66:37:7b:28:e4:40:31:e7:25:0a: 39:fc:5f:fe:8f:9c:4b:64:5f:44:55:bd:de:12:92: 96:d3:40:40:b1:99:6b:9f:64:f8:21:10:b0:8f:41: b3:d4:cb:39:2c:3e:d6:c6:2e:ce:7d:21:8a:af:ff: ad:7f:fa:aa:05:be:f2:56:57:c2:6d:d1:c8:c7:73: 91:a6:94:60:6b:f4:6c:0f:48:09:33:e5:dc:a3:37: 95:ab:4f:4e:c6:db:3a:92:f7:ad:65:6e:56:64:70: 69:5b:97:b7:a7:2a:64:29:44:c6:f4:3d:39:81:40: 28:8b:4c:ab:21:77:05:28:bb:02:e4:c0:75:5b:83: 94:40:1a:2d:3f:2a:86:a6:96:c9:99:f3:e7:4b:2d: 05:f0:58:68:3a:6f:20:70:f8:be:0a:92:50:2f:8b: b1:a9:0c:98:7d:f5:5f:27:5b:6d:21:06:60:fb:3b: 56:d2:9b:c4:37:0c:b2:ba:35:4e:c3:74:e3:3c:42: 08:4f:51:2b:b6:dd:b8:1b:b5:f0:56:81:25:32:4f: 6c:20:ac:18:c6:8d:5a:cc:a1:88:e8:20:3a:ab:1a: b3:84:62:a1:f4:dd:2a:a1:24:a5:14:b6:cd:6b:c3: 7c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:EF:2D:24:AC:0A:72:B1:14:33:8D:56:D3:78:79:B4:EE:3B:CD:8D X509v3 Authority Key Identifier: keyid:7A:18:FC:AA:C6:C8:40:9F:24:D3:FA:90:DF:8E:30:21:8E:E9:C3:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:7d:96:9d:67:3b:fb:5b:ed:63:a2:93:85:e8:e5:29:36:3c: 63:01:36:9b:01:c4:61:87:88:15:04:42:5f:33:9b:17:55:0c: 15:2b:06:57:c5:9c:88:99:d7:05:a3:d4:25:16:59:b0:90:7f: e4:a9:43:5a:a3:3a:e6:dd:95:2a:21:c7:f0:3a:30:8f:fa:45: f6:12:ac:22:b1:e1:6c:9c:3b:84:1c:c4:6f:b0:09:53:b7:49: 73:b5:e1:fa:16:09:74:aa:65:c0:c6:55:c4:34:66:09:b1:99: 43:f1:83:47:b7:f3:13:47:24:7b:c4:f7:37:e5:f8:6b:a4:51: e5:fc:32:a2:c3:bf:03:cf:ca:a3:4f:61:92:4d:3e:60:4e:09: 45:3c:66:a0:0e:57:16:e3:89:b0:d8:8a:28:dc:71:fa:73:4b: 8a:a8:31:9c:a9:fc:c5:08:6a:88:23:d1:2e:f5:cf:77:52:3e: 11:84:c4:0b:a6:0f:25:3a:15:49:94:7b:22:fd:6b:2d:3a:da: e0:94:bd:27:e6:78:ff:fd:e7:6b:f7:a5:0c:63:d5:7a:42:96: 2d:e5:92:61:43:ff:d8:1c:3d:5c:50:14:a4:c5:a8:b7:f8:1e: 9a:58:d3:a2:ff:a7:7e:11:18:03:6f:f2:ee:ff:df:77:7b:c0: 59:0b:8b:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskrG+pCf9VODvx9iHB8ZUoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMThmY2FhYzZjODQwOWYyNGQzZmE5MGRmOGUzMDIxOGVl OWMzZmYwHhcNMjUxMjE2MDEwMDM5WhcNMjUxMjE3MDEwMDM5WjAzMTEwLwYDVQQD Eyg0Y2VmMmQyNGFjMGE3MmIxMTQzMzhkNTZkMzc4NzliNGVlM2JjZDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaj8tKnPME+uXASKjzZasc3HB2Y3 eyjkQDHnJQo5/F/+j5xLZF9EVb3eEpKW00BAsZlrn2T4IRCwj0Gz1Ms5LD7Wxi7O fSGKr/+tf/qqBb7yVlfCbdHIx3ORppRga/RsD0gJM+XcozeVq09Oxts6kvetZW5W ZHBpW5e3pypkKUTG9D05gUAoi0yrIXcFKLsC5MB1W4OUQBotPyqGppbJmfPnSy0F 8FhoOm8gcPi+CpJQL4uxqQyYffVfJ1ttIQZg+ztW0pvENwyyujVOw3TjPEIIT1Er tt24G7XwVoElMk9sIKwYxo1azKGI6CA6qxqzhGKh9N0qoSSlFLbNa8N8/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEzvLSSsCnKxFDONVtN4ebTuO82NMB8GA1UdIwQY MBaAFHoY/KrGyECfJNP6kN+OMCGO6cP/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWhqOHFzYklRSjhrMF9xUTM0NHdJWTdwd184LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC81OGE4NmMtYjg4Mi00MmZmLWI3NDMt YzQxYjhhYTJkZjk1LzEvZWhqOHFzYklRSjhrMF9xUTM0NHdJWTdwd184Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC81OGE4NmMtYjg4Mi00MmZmLWI3NDMtYzQxYjhhYTJkZjk1 LzEvZWhqOHFzYklRSjhrMF9xUTM0NHdJWTdwd184LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEX2WnWc7 +1vtY6KThejlKTY8YwE2mwHEYYeIFQRCXzObF1UMFSsGV8WciJnXBaPUJRZZsJB/ 5KlDWqM65t2VKiHH8Dowj/pF9hKsIrHhbJw7hBzEb7AJU7dJc7Xh+hYJdKplwMZV xDRmCbGZQ/GDR7fzE0cke8T3N+X4a6RR5fwyosO/A8/Ko09hkk0+YE4JRTxmoA5X FuOJsNiKKNxx+nNLiqgxnKn8xQhqiCPRLvXPd1I+EYTEC6YPJToVSZR7Iv1rLTra 4JS9J+Z4//3na/elDGPVekKWLeWSYUP/2Bw9XFAUpMWot/gemljTov+nfhEYA2/y 7v/fd3vAWQuL9A== -----END CERTIFICATE-----Generated at Tue Dec 16 12:11:07 2025 by rpki-client