This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft File: ewjhaHh0S4i4QgPu_i13qH2rkLE.mft (raw, json) Hash identifier: yEbDYZOAFbwwdxYmxNXI1raHMPxtDDA590trg5tSsLo= Subject key identifier: 7F:55:E8:1A:75:49:25:86:82:8C:D8:7E:14:D2:53:98:62:5B:84:3F Authority key identifier: 7B:08:E1:68:78:74:4B:88:B8:42:03:EE:FE:2D:77:A8:7D:AB:90:B1 Certificate issuer: /CN=7b08e16878744b88b84203eefe2d77a87dab90b1 Certificate serial: 019B0DB716BC3165E7CAFD6B8F7581D1C969 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft Manifest number: 0F26 Signing time: Thu 11 Dec 2025 14:01:01 +0000 Manifest this update: Thu 11 Dec 2025 14:01:01 +0000 Manifest next update: Fri 12 Dec 2025 14:01:01 +0000 Files and hashes: 1: SPkSmU2cuYPaslq98jH650uCm8U.roa (hash: 3l9S6s2Phg4ZgQxgg2kV0SAhmKBDDFr+VpsMCOZHDtE=) 2: ewjhaHh0S4i4QgPu_i13qH2rkLE.crl (hash: k135pQ0/quohI0BJqTrKRaoY8jUx3ZlUv4yMNjXA3lQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.crl rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b7:16:bc:31:65:e7:ca:fd:6b:8f:75:81:d1:c9:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b08e16878744b88b84203eefe2d77a87dab90b1 Validity Not Before: Dec 11 14:01:01 2025 GMT Not After : Dec 12 14:01:01 2025 GMT Subject: CN=7f55e81a75492586828cd87e14d25398625b843f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9e:7e:13:63:4b:57:97:a8:57:96:0a:c5:d6: 31:29:09:fa:a8:f0:d6:83:a0:bc:6f:5e:e7:3b:95: e1:ca:ee:32:fa:c5:44:35:9d:99:bc:af:3b:a8:66: db:d3:34:41:ec:97:97:09:4a:8d:6c:1c:ce:d8:4b: bc:54:ea:fc:4c:96:2e:c1:b4:45:54:de:e3:f2:06: 76:4c:3b:f2:9e:cf:f2:ae:88:ea:ff:0a:16:57:e7: 77:c9:5a:4c:c7:30:da:ba:05:e0:f7:8b:37:0b:12: 8d:e5:9b:10:81:b9:2f:21:eb:21:e5:6c:62:9c:25: 19:d1:71:a7:c4:ab:03:b6:5f:76:05:61:65:ae:8c: 78:df:49:8e:32:e7:71:5b:90:36:25:4d:7f:c1:1f: 42:e3:e4:da:22:1e:e2:fb:7c:64:b2:01:1a:3b:78: bc:ee:92:a2:ee:69:3d:91:0a:3e:19:e2:10:19:a8: 47:71:cc:3b:62:cc:c5:0b:7e:ca:61:91:c4:f2:66: 4a:b3:0d:54:98:b6:26:5c:0f:5e:e2:91:84:c7:74: 3a:1f:e3:5f:78:af:88:35:60:ad:b4:33:fc:51:03: b5:83:42:c2:37:0d:1b:54:f0:23:36:86:f9:53:7d: 5c:81:88:0c:b1:6e:de:20:28:ac:73:ac:11:4e:a9: 24:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:55:E8:1A:75:49:25:86:82:8C:D8:7E:14:D2:53:98:62:5B:84:3F X509v3 Authority Key Identifier: keyid:7B:08:E1:68:78:74:4B:88:B8:42:03:EE:FE:2D:77:A8:7D:AB:90:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:54:0a:2b:50:9b:04:48:0f:a1:3a:d1:45:a5:17:e3:99:82: 98:5b:17:e6:15:bd:03:a4:5a:e7:f8:85:8f:3c:73:57:d2:98: 80:d0:c4:7a:d7:d7:fd:0c:a4:bf:69:4c:83:d7:24:7f:8d:85: d1:21:1d:75:a6:87:26:93:bd:41:8d:80:0b:61:1d:a5:18:4e: 4d:4d:39:d1:ed:08:99:be:1b:43:5c:b9:23:d2:4b:5e:35:6c: 34:2e:43:bd:27:a7:a5:1a:fb:32:23:e3:78:fd:18:8a:e9:6e: cf:cf:f4:8d:df:ea:55:13:0a:d7:73:2c:3e:02:dc:db:69:be: 25:12:e6:f8:2d:c4:ae:d1:6b:31:dd:e9:78:43:de:31:c0:52: 01:b7:39:94:21:37:8a:14:10:e3:ed:e9:43:83:28:5b:da:db: a9:ce:c6:cf:f5:ae:c4:8d:e4:75:73:57:98:d4:6a:4d:dd:6e: ed:14:6f:e1:63:34:c1:84:9c:eb:9f:b5:35:c4:98:8e:32:32: 52:06:2c:4e:0f:8e:f2:09:a7:ed:37:cd:2e:8d:c0:7e:8b:8d: a7:85:8f:d9:31:07:bb:7e:89:49:b7:14:59:31:46:12:fb:6d: 9a:a3:45:25:30:47:3a:da:67:c8:65:46:11:ab:b3:36:79:02: 68:a9:84:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNtxa8MWXnyv1rj3WB0clpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMDhlMTY4Nzg3NDRiODhiODQyMDNlZWZlMmQ3N2E4N2Rh YjkwYjEwHhcNMjUxMjExMTQwMTAxWhcNMjUxMjEyMTQwMTAxWjAzMTEwLwYDVQQD Eyg3ZjU1ZTgxYTc1NDkyNTg2ODI4Y2Q4N2UxNGQyNTM5ODYyNWI4NDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZ5+E2NLV5eoV5YKxdYxKQn6qPDW g6C8b17nO5Xhyu4y+sVENZ2ZvK87qGbb0zRB7JeXCUqNbBzO2Eu8VOr8TJYuwbRF VN7j8gZ2TDvyns/yrojq/woWV+d3yVpMxzDaugXg94s3CxKN5ZsQgbkvIesh5Wxi nCUZ0XGnxKsDtl92BWFlrox430mOMudxW5A2JU1/wR9C4+TaIh7i+3xksgEaO3i8 7pKi7mk9kQo+GeIQGahHccw7YszFC37KYZHE8mZKsw1UmLYmXA9e4pGEx3Q6H+Nf eK+INWCttDP8UQO1g0LCNw0bVPAjNob5U31cgYgMsW7eICisc6wRTqkk9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH9V6Bp1SSWGgozYfhTSU5hiW4Q/MB8GA1UdIwQY MBaAFHsI4Wh4dEuIuEID7v4td6h9q5CxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXdqaGFIaDBTNGk0UWdQdV9pMTNxSDJya0xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC81ZWM3OTQtMWJiMy00YzY1LWFjNDIt YTE4YzA2ZWM1MmU4LzEvZXdqaGFIaDBTNGk0UWdQdV9pMTNxSDJya0xFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC81ZWM3OTQtMWJiMy00YzY1LWFjNDItYTE4YzA2ZWM1MmU4 LzEvZXdqaGFIaDBTNGk0UWdQdV9pMTNxSDJya0xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEFQKK1Cb BEgPoTrRRaUX45mCmFsX5hW9A6Ra5/iFjzxzV9KYgNDEetfX/Qykv2lMg9ckf42F 0SEddaaHJpO9QY2AC2EdpRhOTU050e0Imb4bQ1y5I9JLXjVsNC5DvSenpRr7MiPj eP0Yiuluz8/0jd/qVRMK13MsPgLc22m+JRLm+C3ErtFrMd3peEPeMcBSAbc5lCE3 ihQQ4+3pQ4MoW9rbqc7Gz/WuxI3kdXNXmNRqTd1u7RRv4WM0wYSc65+1NcSYjjIy UgYsTg+O8gmn7TfNLo3AfouNp4WP2TEHu36JSbcUWTFGEvttmqNFJTBHOtpnyGVG EauzNnkCaKmEuA== -----END CERTIFICATE-----Generated at Thu Dec 11 23:54:46 2025 by rpki-client