This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft File: eh_3AnJudbOmjxGC5H_7zcrlFeU.mft (raw, json) Hash identifier: pvoI+hAyTiDNhr9NIy9S2liVbLJomN+/K+/fFSazPGw= Subject key identifier: B7:3A:D3:3E:CD:76:08:27:13:7A:2E:9F:DE:3E:FF:2B:A4:04:6F:60 Authority key identifier: 7A:1F:F7:02:72:6E:75:B3:A6:8F:11:82:E4:7F:FB:CD:CA:E5:15:E5 Certificate issuer: /CN=7a1ff702726e75b3a68f1182e47ffbcdcae515e5 Certificate serial: 019B1F86E09D00513031A663D90A1A18555F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft Manifest number: 1621 Signing time: Mon 15 Dec 2025 01:01:31 +0000 Manifest this update: Mon 15 Dec 2025 01:01:31 +0000 Manifest next update: Tue 16 Dec 2025 01:01:31 +0000 Files and hashes: 1: eh_3AnJudbOmjxGC5H_7zcrlFeU.crl (hash: iKl0vNGZlWW/MOkt0YqJB91jrCP1TYgvPww8aPjtZ+E=) 2: mp3Ps9Wb-eE83MSoTQrKorxtZTg.roa (hash: Whr3Evryw6Na+L//5TTMD5LCJqnqbVVaoyp0nqLqIfA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:86:e0:9d:00:51:30:31:a6:63:d9:0a:1a:18:55:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a1ff702726e75b3a68f1182e47ffbcdcae515e5 Validity Not Before: Dec 15 01:01:31 2025 GMT Not After : Dec 16 01:01:31 2025 GMT Subject: CN=b73ad33ecd760827137a2e9fde3eff2ba4046f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:77:7c:dd:7b:2d:96:c8:f3:7f:10:98:5d:f5: 68:81:9f:9f:9a:ec:2e:75:00:0c:4d:0c:05:3d:ec: 93:10:a5:89:d4:91:e9:96:b6:fb:ad:5d:12:de:0d: 0e:ac:64:3a:72:28:92:68:2e:8d:6e:61:ac:2a:dd: f3:fb:88:89:fa:ec:b8:5a:36:21:82:59:24:df:3a: ec:16:7d:92:84:3b:a2:03:98:8d:b0:8a:c8:2f:31: 2a:a7:20:f8:41:1d:2b:4f:65:2f:28:60:93:46:12: 8f:03:d1:4c:69:f0:a2:68:21:5b:5a:d6:53:e2:7b: 63:b2:52:74:a5:d2:e9:e7:e9:11:65:5b:a7:18:4f: ff:16:f5:0f:2e:39:2e:47:52:78:1d:15:eb:8a:68: 59:29:e9:3b:1c:6e:f7:92:31:5b:55:e6:38:33:74: 96:64:4a:f6:63:33:fa:16:72:b6:ee:84:1a:f8:51: 6b:dd:74:9c:21:23:a5:26:63:ea:54:7a:8e:6c:15: d9:17:a9:ac:98:24:74:fa:7f:ea:cc:61:fd:8f:cf: 1f:1b:15:33:ec:04:54:e0:5a:6d:18:a7:72:dd:88: ca:d2:96:0e:97:de:38:a4:f1:91:c8:47:84:af:bc: cc:bc:e5:1b:e3:11:39:7a:f2:ad:48:fa:70:96:32: 84:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:3A:D3:3E:CD:76:08:27:13:7A:2E:9F:DE:3E:FF:2B:A4:04:6F:60 X509v3 Authority Key Identifier: keyid:7A:1F:F7:02:72:6E:75:B3:A6:8F:11:82:E4:7F:FB:CD:CA:E5:15:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:fa:e5:8f:72:fa:9f:a1:42:0c:8a:28:3b:7e:e4:84:96:93: c1:41:9c:82:0e:25:8a:d9:52:a5:29:d5:02:b8:70:31:95:82: 43:31:71:9f:9f:7f:f4:b7:79:45:3f:6e:f2:4c:f3:88:2b:96: 8c:e9:a2:de:ba:82:7c:7a:41:99:92:78:4b:ff:68:fc:aa:47: 58:35:24:5e:9a:0f:46:5e:40:fd:d9:0d:08:a2:21:49:26:33: 80:db:4a:55:fa:73:54:25:0c:9e:be:62:28:79:f2:0a:96:c9: aa:dc:a9:72:5d:b0:a9:87:ed:82:81:cc:f1:16:95:04:61:f6: c2:9b:f0:94:33:54:f3:4c:f4:0b:f1:aa:dc:23:71:de:e5:f1: 32:40:4a:7f:01:0b:07:ed:29:07:d6:35:86:9d:9d:7a:18:4d: ae:94:8b:a8:d2:98:8c:3a:e4:4e:db:95:00:5f:0b:f3:bc:c5: 65:9a:d0:e7:af:29:f2:67:ee:96:21:52:67:0e:6a:66:72:9b: 4a:24:91:3e:fb:23:8c:52:76:03:72:c4:3f:94:70:8e:6d:04: e8:51:dc:f2:1b:f1:57:45:fe:92:d2:61:bf:ca:a0:88:7e:05: 57:ba:ca:04:5b:c0:8d:52:15:09:c4:64:2c:6a:7f:50:c1:9e: a9:c7:da:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfhuCdAFEwMaZj2QoaGFVfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMWZmNzAyNzI2ZTc1YjNhNjhmMTE4MmU0N2ZmYmNkY2Fl NTE1ZTUwHhcNMjUxMjE1MDEwMTMxWhcNMjUxMjE2MDEwMTMxWjAzMTEwLwYDVQQD EyhiNzNhZDMzZWNkNzYwODI3MTM3YTJlOWZkZTNlZmYyYmE0MDQ2ZjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3d83XstlsjzfxCYXfVogZ+fmuwu dQAMTQwFPeyTEKWJ1JHplrb7rV0S3g0OrGQ6ciiSaC6NbmGsKt3z+4iJ+uy4WjYh glkk3zrsFn2ShDuiA5iNsIrILzEqpyD4QR0rT2UvKGCTRhKPA9FMafCiaCFbWtZT 4ntjslJ0pdLp5+kRZVunGE//FvUPLjkuR1J4HRXrimhZKek7HG73kjFbVeY4M3SW ZEr2YzP6FnK27oQa+FFr3XScISOlJmPqVHqObBXZF6msmCR0+n/qzGH9j88fGxUz 7ARU4FptGKdy3YjK0pYOl944pPGRyEeEr7zMvOUb4xE5evKtSPpwljKEgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLc60z7NdggnE3oun94+/yukBG9gMB8GA1UdIwQY MBaAFHof9wJybnWzpo8RguR/+83K5RXlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWhfM0FuSnVkYk9tanhHQzVIXzd6Y3JsRmVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82ZmVmMDMtMDY3MC00MWFiLWE2Yzkt NDNhZGI2MDVmNjhhLzEvZWhfM0FuSnVkYk9tanhHQzVIXzd6Y3JsRmVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC82ZmVmMDMtMDY3MC00MWFiLWE2YzktNDNhZGI2MDVmNjhh LzEvZWhfM0FuSnVkYk9tanhHQzVIXzd6Y3JsRmVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiPrlj3L6 n6FCDIooO37khJaTwUGcgg4litlSpSnVArhwMZWCQzFxn59/9Ld5RT9u8kzziCuW jOmi3rqCfHpBmZJ4S/9o/KpHWDUkXpoPRl5A/dkNCKIhSSYzgNtKVfpzVCUMnr5i KHnyCpbJqtypcl2wqYftgoHM8RaVBGH2wpvwlDNU80z0C/Gq3CNx3uXxMkBKfwEL B+0pB9Y1hp2dehhNrpSLqNKYjDrkTtuVAF8L87zFZZrQ568p8mfuliFSZw5qZnKb SiSRPvsjjFJ2A3LEP5Rwjm0E6FHc8hvxV0X+ktJhv8qgiH4FV7rKBFvAjVIVCcRk LGp/UMGeqcfaCQ== -----END CERTIFICATE-----Generated at Mon Dec 15 04:52:30 2025 by rpki-client