This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft File: EHIerWpFdWQ8twMGLAlodV6Cges.mft (raw, json) Hash identifier: qyRtioIA8o8k8goxtRABWnSe63k6PHL6h6gLlnzt8xc= Subject key identifier: EE:A3:C8:6D:9E:6B:D4:AC:3E:7A:97:9B:A1:26:A1:9B:9A:BF:4E:B8 Authority key identifier: 10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB Certificate issuer: /CN=10721ead6a4575643cb703062c0968755e8281eb Certificate serial: 019B3EA333A512CE7190E0791E730848B2F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft Manifest number: 0FFD Signing time: Sun 21 Dec 2025 02:00:41 +0000 Manifest this update: Sun 21 Dec 2025 02:00:41 +0000 Manifest next update: Mon 22 Dec 2025 02:00:41 +0000 Files and hashes: 1: EHIerWpFdWQ8twMGLAlodV6Cges.crl (hash: OMVspeXF/uzfChcm9RIlBaI6JUm9imoR1+P5Vi3ra3I=) 2: Fi8wX9cISGjJ7ycNTDrnhsS2nfM.roa (hash: HuNKcd4RHVijmwuiGKzg2wYioOAAJSYuv1pU/fwGAiA=) 3: OVlT_pQqA08Q1UrNiKWeQjISths.roa (hash: R9hMVU1azsLDsV2kScsNqSIvknc94xA2JDe9jn5I16c=) 4: QRJe2bGhDZl-uF_MksH_-yAAdPM.roa (hash: sJzer8Dgec7IoDEanf1HmkhPf2w8HE2htP6s/ryl3CE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:33:a5:12:ce:71:90:e0:79:1e:73:08:48:b2:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10721ead6a4575643cb703062c0968755e8281eb Validity Not Before: Dec 21 02:00:41 2025 GMT Not After : Dec 22 02:00:41 2025 GMT Subject: CN=eea3c86d9e6bd4ac3e7a979ba126a19b9abf4eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f1:30:70:a3:c7:c3:50:8e:9b:a0:ac:23:1b: 28:43:ad:82:c5:22:58:9f:1f:1e:16:f2:0a:dc:4c: ad:0e:d2:f0:56:7e:9d:76:31:7e:0e:63:c4:e9:ff: 7c:61:10:f4:56:39:8d:54:52:c8:8a:a6:b0:f0:82: 60:c0:06:b6:f9:f9:d0:aa:af:cc:9a:4b:35:4d:b3: d2:53:6e:dc:71:cb:af:53:30:4a:43:eb:9f:f1:64: 80:b0:42:92:2c:85:bc:98:30:b7:db:fc:21:6e:93: 49:7c:82:fd:ea:b2:57:94:1a:cf:b3:01:92:3d:65: 18:58:d1:7e:87:fe:68:92:eb:25:2b:d7:e2:7d:0f: e0:6b:ff:6f:f0:e8:c4:fb:48:83:59:d3:33:37:d8: d6:1b:8f:b8:ab:71:59:8c:2e:1a:96:87:1a:51:58: 28:b3:14:9f:bd:a6:b9:d8:3f:8d:eb:05:56:ab:38: 06:5b:24:91:63:a5:39:7c:8d:b9:5b:8a:d0:a8:f4: 4d:0d:c7:96:04:09:35:2f:b3:7e:08:4a:c0:a5:98: 01:8e:fb:87:cf:03:f2:17:e9:1b:9c:ff:a6:53:7b: f2:5e:be:34:0a:36:31:76:1d:c9:14:ee:cd:3f:6e: be:1c:56:7f:78:44:64:0b:1e:bd:85:87:21:d6:60: f1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A3:C8:6D:9E:6B:D4:AC:3E:7A:97:9B:A1:26:A1:9B:9A:BF:4E:B8 X509v3 Authority Key Identifier: keyid:10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:2c:af:e2:59:58:1a:c3:c0:50:a1:82:aa:7a:e9:a9:d9:60: 1f:7b:a7:1d:91:7a:76:01:dc:04:b4:cb:14:13:61:60:fc:0d: 31:98:65:8b:77:62:02:bc:b4:2e:7e:8b:2d:1c:6f:a3:c6:6d: 39:46:60:e2:ef:86:b2:51:49:85:78:6b:90:4e:3c:04:49:bc: ee:fa:eb:1a:f3:e8:ba:ab:68:ad:b5:a6:3b:fc:77:85:36:23: 06:11:fe:27:ed:eb:82:29:4c:4c:62:43:bf:df:20:15:ec:a1: bb:19:aa:c9:dd:57:ee:15:b0:be:55:29:ce:f1:69:9d:ef:02: 7d:fc:a2:fb:d8:c5:92:5a:c6:36:f7:95:6b:6d:94:1c:7e:e5: e1:05:c8:58:ff:a6:a8:23:36:1c:1c:aa:a8:62:f5:16:eb:30: 12:1d:86:e0:88:63:37:22:eb:59:75:7b:64:5b:0b:39:df:a8: 5b:2a:f3:ab:ee:2a:6f:18:19:cd:cb:38:fb:d8:9a:a5:6b:82: 51:07:08:65:56:35:0c:13:24:66:d5:48:2a:4a:71:1f:3e:d5: e4:f2:b6:4c:a3:ef:99:59:97:76:b8:aa:01:45:90:cf:2e:99: c6:0e:4d:ac:a7:d7:28:66:0b:dd:9b:ab:27:6b:2d:70:65:e3: aa:18:83:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+ozOlEs5xkOB5HnMISLL0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNzIxZWFkNmE0NTc1NjQzY2I3MDMwNjJjMDk2ODc1NWU4 MjgxZWIwHhcNMjUxMjIxMDIwMDQxWhcNMjUxMjIyMDIwMDQxWjAzMTEwLwYDVQQD EyhlZWEzYzg2ZDllNmJkNGFjM2U3YTk3OWJhMTI2YTE5YjlhYmY0ZWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovEwcKPHw1COm6CsIxsoQ62CxSJY nx8eFvIK3EytDtLwVn6ddjF+DmPE6f98YRD0VjmNVFLIiqaw8IJgwAa2+fnQqq/M mks1TbPSU27cccuvUzBKQ+uf8WSAsEKSLIW8mDC32/whbpNJfIL96rJXlBrPswGS PWUYWNF+h/5okuslK9fifQ/ga/9v8OjE+0iDWdMzN9jWG4+4q3FZjC4alocaUVgo sxSfvaa52D+N6wVWqzgGWySRY6U5fI25W4rQqPRNDceWBAk1L7N+CErApZgBjvuH zwPyF+kbnP+mU3vyXr40CjYxdh3JFO7NP26+HFZ/eERkCx69hYch1mDx7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO6jyG2ea9SsPnqXm6EmoZuav064MB8GA1UdIwQY MBaAFBByHq1qRXVkPLcDBiwJaHVegoHrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUhJZXJXcEZkV1E4dHdNR0xBbG9kVjZDZ2VzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9jYTkzNWItMjQ4NC00MDIwLWI4MTQt M2Q0YWU4MGZjNDVkLzEvRUhJZXJXcEZkV1E4dHdNR0xBbG9kVjZDZ2VzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9jYTkzNWItMjQ4NC00MDIwLWI4MTQtM2Q0YWU4MGZjNDVk LzEvRUhJZXJXcEZkV1E4dHdNR0xBbG9kVjZDZ2VzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKyyv4llY GsPAUKGCqnrpqdlgH3unHZF6dgHcBLTLFBNhYPwNMZhli3diAry0Ln6LLRxvo8Zt OUZg4u+GslFJhXhrkE48BEm87vrrGvPouqtorbWmO/x3hTYjBhH+J+3rgilMTGJD v98gFeyhuxmqyd1X7hWwvlUpzvFpne8Cffyi+9jFklrGNveVa22UHH7l4QXIWP+m qCM2HByqqGL1FuswEh2G4IhjNyLrWXV7ZFsLOd+oWyrzq+4qbxgZzcs4+9iapWuC UQcIZVY1DBMkZtVIKkpxHz7V5PK2TKPvmVmXdriqAUWQzy6Zxg5NrKfXKGYL3Zur J2stcGXjqhiDZA== -----END CERTIFICATE-----Generated at Sun Dec 21 07:02:07 2025 by rpki-client