This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft File: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft (raw, json) Hash identifier: qXc7DGrNCyk/dgJqZT+1p9JBn3ySW0bSkCcxvtUJg/I= Subject key identifier: 2A:56:14:BA:8A:DD:C7:47:FF:54:68:DB:D3:2A:A5:DD:F2:73:3F:4F Authority key identifier: 7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59 Certificate issuer: /CN=7be907dd202152cf1902bedbecb19a2d72ac0859 Certificate serial: 019B26D22B79CC8EBB2DAD2DF5C1D74AE292 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft Manifest number: 0EB5 Signing time: Tue 16 Dec 2025 11:01:06 +0000 Manifest this update: Tue 16 Dec 2025 11:01:06 +0000 Manifest next update: Wed 17 Dec 2025 11:01:06 +0000 Files and hashes: 1: 7HrDROWVcljE8-8l6AcztjVNWWw.roa (hash: aPUy9G990LG8Gt7ev2zQpoBPfmmiK94lRTjU13MQxug=) 2: AC883ZSFeLZkC1mvfN3COR1ZIn0.roa (hash: yFCKOZ3uJ8W8rt1Xv99w8FDNXVYQbjjKrbhWZG8+e8A=) 3: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl (hash: XnL3cJ5y/7PZsxCSywIcUye6bMHUhMFmXv1cwa2gDhc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 11:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:d2:2b:79:cc:8e:bb:2d:ad:2d:f5:c1:d7:4a:e2:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7be907dd202152cf1902bedbecb19a2d72ac0859 Validity Not Before: Dec 16 11:01:06 2025 GMT Not After : Dec 17 11:01:06 2025 GMT Subject: CN=2a5614ba8addc747ff5468dbd32aa5ddf2733f4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:05:8e:60:76:0e:57:b4:39:24:54:9b:30:d2: 61:6a:c5:71:59:81:de:31:64:5e:30:d9:a1:e0:9c: 90:9d:e7:2c:25:5c:b2:7f:7a:65:5c:72:55:db:bc: ba:6a:2d:f7:f8:38:9c:15:90:44:51:c0:ee:f6:d5: 6f:4e:b3:54:2a:40:1d:62:82:23:7f:26:81:36:7d: 22:9b:b8:6f:fe:ca:a9:ef:d2:09:06:03:e6:5f:c9: 51:84:1c:e7:1d:92:e1:d9:cf:9e:08:2d:82:80:74: 99:fe:b6:f9:26:78:3f:5e:7a:ae:6b:77:89:4e:fe: b4:82:80:65:66:55:5e:b3:2d:be:c2:0b:c9:c2:18: e9:5b:52:13:8f:7b:f7:91:e8:96:13:a7:23:b0:c1: 2c:02:ac:f3:00:af:19:b7:95:64:1f:a8:94:af:e7: f1:b4:ce:5a:ca:96:7f:97:f7:a0:82:fc:02:8a:8a: 9f:76:c9:c4:aa:c6:50:74:da:55:1d:47:48:8a:6e: bd:dd:47:2c:1b:b0:df:fb:52:0c:70:e7:28:8e:ab: ed:7d:05:c6:e0:77:e9:dd:e9:19:0f:fd:1a:68:9b: eb:5b:16:4f:8f:4b:35:0f:95:4c:a6:eb:36:6e:89: 2e:64:c6:08:b0:f7:63:c0:9e:df:f0:37:c4:74:98: 7d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:56:14:BA:8A:DD:C7:47:FF:54:68:DB:D3:2A:A5:DD:F2:73:3F:4F X509v3 Authority Key Identifier: keyid:7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:d3:17:8e:f1:de:01:34:76:fa:09:87:0c:b8:05:d9:a5:4c: 50:d5:b5:49:57:88:cc:a7:f9:8c:6e:99:cd:6d:54:f5:6a:41: 9a:55:c9:7b:16:f2:e8:d7:50:cd:4d:53:49:2b:57:1b:dc:64: 02:0a:c9:e3:af:b7:a0:4f:49:99:31:67:05:82:9c:0e:aa:a4: 66:da:ec:95:a3:44:74:ee:6f:0e:a9:0f:6e:fe:dd:8f:14:6b: e0:1c:1f:dd:e8:cc:fe:7a:63:46:8a:05:46:db:f1:63:d1:0a: f1:22:68:b3:08:c0:3c:29:0e:c5:29:1d:f1:1a:79:1c:53:5c: 62:4d:9b:1d:af:ca:d7:56:07:0a:64:dc:4f:97:6d:37:30:3b: e8:7c:f3:10:81:5f:de:d1:5e:eb:e0:ec:6e:84:0e:63:81:0a: e1:45:bf:05:3d:87:28:ca:54:a4:0a:fd:e1:a7:f8:26:ce:2e: 96:9a:62:65:db:96:88:85:06:27:4b:93:38:7e:41:2b:8d:84: a4:a3:bc:c8:5e:16:35:2c:dd:f4:23:71:53:83:d4:d1:42:be: 3a:1a:66:e5:f2:1b:2b:f9:65:ff:79:68:f6:88:a7:7e:3a:b4: d0:51:d2:6e:5c:e8:fd:65:07:40:15:c8:9e:19:33:3c:9b:60: fd:83:83:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsm0it5zI67La0t9cHXSuKSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiZTkwN2RkMjAyMTUyY2YxOTAyYmVkYmVjYjE5YTJkNzJh YzA4NTkwHhcNMjUxMjE2MTEwMTA2WhcNMjUxMjE3MTEwMTA2WjAzMTEwLwYDVQQD EygyYTU2MTRiYThhZGRjNzQ3ZmY1NDY4ZGJkMzJhYTVkZGYyNzMzZjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AWOYHYOV7Q5JFSbMNJhasVxWYHe MWReMNmh4JyQnecsJVyyf3plXHJV27y6ai33+DicFZBEUcDu9tVvTrNUKkAdYoIj fyaBNn0im7hv/sqp79IJBgPmX8lRhBznHZLh2c+eCC2CgHSZ/rb5Jng/Xnqua3eJ Tv60goBlZlVesy2+wgvJwhjpW1ITj3v3keiWE6cjsMEsAqzzAK8Zt5VkH6iUr+fx tM5aypZ/l/eggvwCioqfdsnEqsZQdNpVHUdIim693UcsG7Df+1IMcOcojqvtfQXG 4Hfp3ekZD/0aaJvrWxZPj0s1D5VMpus2bokuZMYIsPdjwJ7f8DfEdJh9bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCpWFLqK3cdH/1Ro29Mqpd3ycz9PMB8GA1UdIwQY MBaAFHvpB90gIVLPGQK+2+yxmi1yrAhZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZS1rSDNTQWhVczhaQXI3YjdMR2FMWEtzQ0ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yNWU3NmEtZDE0MC00ZTBiLTg4ZTQt ZWYyMTkzODFmMTBlLzEvZS1rSDNTQWhVczhaQXI3YjdMR2FMWEtzQ0ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8yNWU3NmEtZDE0MC00ZTBiLTg4ZTQtZWYyMTkzODFmMTBl LzEvZS1rSDNTQWhVczhaQXI3YjdMR2FMWEtzQ0ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABtMXjvHe ATR2+gmHDLgF2aVMUNW1SVeIzKf5jG6ZzW1U9WpBmlXJexby6NdQzU1TSStXG9xk AgrJ46+3oE9JmTFnBYKcDqqkZtrslaNEdO5vDqkPbv7djxRr4Bwf3ejM/npjRooF RtvxY9EK8SJoswjAPCkOxSkd8Rp5HFNcYk2bHa/K11YHCmTcT5dtNzA76HzzEIFf 3tFe6+DsboQOY4EK4UW/BT2HKMpUpAr94af4Js4ulppiZduWiIUGJ0uTOH5BK42E pKO8yF4WNSzd9CNxU4PU0UK+Ohpm5fIbK/ll/3lo9oinfjq00FHSblzo/WUHQBXI nhkzPJtg/YODWA== -----END CERTIFICATE-----Generated at Tue Dec 16 19:49:03 2025 by rpki-client