This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft File: ehuEnDQHAlATY6H5J-xCQJm5RyY.mft (raw, json) Hash identifier: 0jlLP0RANtOvrgzzhi5gk4hSuIDaaiTYfxhbXHESSfA= Subject key identifier: E4:88:2C:A7:B8:E4:83:3E:95:8C:F7:80:EC:FC:FE:11:3C:A9:35:11 Authority key identifier: 7A:1B:84:9C:34:07:02:50:13:63:A1:F9:27:EC:42:40:99:B9:47:26 Certificate issuer: /CN=7a1b849c340702501363a1f927ec424099b94726 Certificate serial: 019ABAAC8B96CD2B1738AC530BC47C506666 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehuEnDQHAlATY6H5J-xCQJm5RyY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft Manifest number: 1745 Signing time: Tue 25 Nov 2025 11:01:01 +0000 Manifest this update: Tue 25 Nov 2025 11:01:01 +0000 Manifest next update: Wed 26 Nov 2025 11:01:01 +0000 Files and hashes: 1: ehuEnDQHAlATY6H5J-xCQJm5RyY.crl (hash: DOWhmKWmcVAvMqaUNB296TQ+ImirAQAtv7apPWQPELg=) 2: pVRh1H8i6hpGm0AJsVhAXpoV0YM.roa (hash: yQAZF8uKUbV2hSWHi72VMNtufOdhujdp62Q8WwrqslI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft rsync://rpki.ripe.net/repository/DEFAULT/ehuEnDQHAlATY6H5J-xCQJm5RyY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Nov 2025 10:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ba:ac:8b:96:cd:2b:17:38:ac:53:0b:c4:7c:50:66:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a1b849c340702501363a1f927ec424099b94726 Validity Not Before: Nov 25 11:01:01 2025 GMT Not After : Nov 26 11:01:01 2025 GMT Subject: CN=e4882ca7b8e4833e958cf780ecfcfe113ca93511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d9:c9:6b:b9:4c:ed:79:ed:c0:9b:86:62:eb: 6e:f8:4c:29:4c:8d:c3:31:86:89:53:7b:47:8f:06: 20:f0:e9:ac:1d:de:27:3a:2e:f6:7b:71:f7:bb:44: 7d:bf:95:10:16:5d:51:ee:1d:af:cc:81:1d:23:76: 83:89:d1:68:f0:9f:38:79:29:09:b9:5c:df:34:33: 66:f3:08:25:0f:31:ef:4b:54:0a:28:e6:a0:7c:71: b4:9e:4a:d2:1b:c4:01:38:d5:e8:83:58:4a:cf:d8: f9:f3:d7:da:84:98:91:72:9c:60:ae:14:98:dc:5c: 38:2e:b6:20:2f:93:cc:8b:a8:78:ec:a7:fd:c1:cd: 12:1c:27:fb:f9:dc:c9:2c:8a:b4:2f:e8:9c:7d:9a: 02:75:dd:22:05:ef:ce:d6:5a:0b:76:48:f0:10:b8: f8:81:65:29:48:2d:f2:d1:40:96:31:b7:46:a9:88: eb:c4:23:92:0f:cd:7e:cf:e4:49:2f:4d:04:66:31: b2:b8:07:de:df:07:ee:aa:9d:94:d7:58:a1:0c:47: 37:c5:19:18:14:85:2d:4a:3f:04:16:ae:a7:0b:9a: 65:7b:60:f3:08:b9:f1:eb:2c:bc:d3:ce:ed:62:3a: 3b:2d:79:2e:75:70:8c:36:83:51:a4:2f:a3:54:06: 5a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:88:2C:A7:B8:E4:83:3E:95:8C:F7:80:EC:FC:FE:11:3C:A9:35:11 X509v3 Authority Key Identifier: keyid:7A:1B:84:9C:34:07:02:50:13:63:A1:F9:27:EC:42:40:99:B9:47:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehuEnDQHAlATY6H5J-xCQJm5RyY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:c5:b9:88:c2:9b:ec:3b:65:45:f7:c7:4c:34:c3:29:06:7e: bd:1b:b0:83:8c:51:e9:15:9d:f3:f3:db:47:df:f2:d7:9a:c9: df:46:44:65:cf:d8:82:8d:ed:81:05:f6:2d:6b:6f:94:fa:bb: 3e:7d:ae:75:b1:65:e4:97:e3:ec:c1:38:a5:90:30:3b:af:e0: b5:64:93:7b:4d:a5:68:8e:d3:0e:68:4d:89:96:2f:12:f8:d5: 0a:27:81:f2:f8:92:67:00:ab:08:3c:00:ab:95:85:46:22:49: df:63:ce:7e:a7:30:af:9b:d8:11:17:78:41:d1:93:62:55:48: 5c:5e:b4:ae:31:52:62:8f:a7:a0:a1:42:88:ed:03:b1:1c:3f: 2b:a5:6e:7e:28:77:3a:3d:f8:67:00:9a:ed:05:4b:d3:f2:2f: ed:3d:ee:cf:c9:8a:fd:33:8f:4a:ad:bb:80:5b:8b:e5:80:b9: 42:b0:f4:ab:ba:d6:24:f1:d4:5f:14:23:18:37:45:93:65:d6: b1:b8:a4:55:ce:fc:dd:3b:c0:6e:76:36:d4:03:47:72:28:b2: da:0f:eb:35:8f:9d:2c:97:0a:9a:42:34:51:27:40:85:ef:0d: f1:a9:03:20:eb:f3:d3:60:49:7d:76:b2:f1:21:58:be:bb:1a: 93:bc:62:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZq6rIuWzSsXOKxTC8R8UGZmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMWI4NDljMzQwNzAyNTAxMzYzYTFmOTI3ZWM0MjQwOTli OTQ3MjYwHhcNMjUxMTI1MTEwMTAxWhcNMjUxMTI2MTEwMTAxWjAzMTEwLwYDVQQD EyhlNDg4MmNhN2I4ZTQ4MzNlOTU4Y2Y3ODBlY2ZjZmUxMTNjYTkzNTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9nJa7lM7XntwJuGYutu+EwpTI3D MYaJU3tHjwYg8OmsHd4nOi72e3H3u0R9v5UQFl1R7h2vzIEdI3aDidFo8J84eSkJ uVzfNDNm8wglDzHvS1QKKOagfHG0nkrSG8QBONXog1hKz9j589fahJiRcpxgrhSY 3Fw4LrYgL5PMi6h47Kf9wc0SHCf7+dzJLIq0L+icfZoCdd0iBe/O1loLdkjwELj4 gWUpSC3y0UCWMbdGqYjrxCOSD81+z+RJL00EZjGyuAfe3wfuqp2U11ihDEc3xRkY FIUtSj8EFq6nC5ple2DzCLnx6yy8087tYjo7LXkudXCMNoNRpC+jVAZa2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOSILKe45IM+lYz3gOz8/hE8qTURMB8GA1UdIwQY MBaAFHobhJw0BwJQE2Oh+SfsQkCZuUcmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWh1RW5EUUhBbEFUWTZINUoteENRSm01UnlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8yNzczMzMtZTFmMy00MmVjLWE4YWMt YjFmNTZhNDU0ZDgyLzEvZWh1RW5EUUhBbEFUWTZINUoteENRSm01UnlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8yNzczMzMtZTFmMy00MmVjLWE4YWMtYjFmNTZhNDU0ZDgy LzEvZWh1RW5EUUhBbEFUWTZINUoteENRSm01UnlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwcW5iMKb 7DtlRffHTDTDKQZ+vRuwg4xR6RWd8/PbR9/y15rJ30ZEZc/Ygo3tgQX2LWtvlPq7 Pn2udbFl5Jfj7ME4pZAwO6/gtWSTe02laI7TDmhNiZYvEvjVCieB8viSZwCrCDwA q5WFRiJJ32POfqcwr5vYERd4QdGTYlVIXF60rjFSYo+noKFCiO0DsRw/K6Vufih3 Oj34ZwCa7QVL0/Iv7T3uz8mK/TOPSq27gFuL5YC5QrD0q7rWJPHUXxQjGDdFk2XW sbikVc783TvAbnY21ANHciiy2g/rNY+dLJcKmkI0USdAhe8N8akDIOvz02BJfXay 8SFYvrsak7xidA== -----END CERTIFICATE-----Generated at Tue Nov 25 13:17:35 2025 by rpki-client