This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft File: eHl3C__BTZzftXTshmyq8TVy9Fw.mft (raw, json) Hash identifier: VC1r3ycOuj6AmelY2yeQ1UQ1mfFcit0j0nsWN9AbPcw= Subject key identifier: 93:16:28:73:5A:B4:23:90:43:74:86:58:E4:7E:CF:3E:2C:88:87:A3 Authority key identifier: 78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C Certificate issuer: /CN=7879770bffc14d9cdfb574ec866caaf13572f45c Certificate serial: 019B2588555322AA3E40E849CA23C2BAA4AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft Manifest number: 143C Signing time: Tue 16 Dec 2025 05:00:50 +0000 Manifest this update: Tue 16 Dec 2025 05:00:50 +0000 Manifest next update: Wed 17 Dec 2025 05:00:50 +0000 Files and hashes: 1: WiSq1XaassFeIzQ7VRRmBzOb3-E.roa (hash: kuvzaokAS1drpTQ/4WqXgBODOQIMCPVvcrCFZCP4fDk=) 2: eHl3C__BTZzftXTshmyq8TVy9Fw.crl (hash: 75gET3/3scb9ho8WMkHWqSxKqP79qo291fTNEY8u8SU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 05:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:88:55:53:22:aa:3e:40:e8:49:ca:23:c2:ba:a4:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7879770bffc14d9cdfb574ec866caaf13572f45c Validity Not Before: Dec 16 05:00:50 2025 GMT Not After : Dec 17 05:00:50 2025 GMT Subject: CN=931628735ab4239043748658e47ecf3e2c8887a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f4:a3:7c:01:fa:d9:84:c3:1b:f7:08:f4:5b: 42:a0:68:8a:75:43:f8:3b:c0:a7:c8:8e:04:1e:46: 65:a8:53:eb:b4:e2:be:9f:35:d0:09:b4:d0:43:b0: 18:6f:e6:af:77:75:85:71:dc:0a:28:84:01:84:95: a2:3a:7d:70:46:16:e6:3d:f0:be:35:8e:40:50:4e: 47:fc:6c:7a:ed:b2:59:8e:51:21:da:08:7d:9c:73: 54:cf:89:2c:0d:84:b6:ee:04:29:d9:a1:34:98:be: 4d:a9:19:4c:45:d0:a2:2f:0b:e8:31:a6:72:2a:ac: 41:a2:a2:df:7a:2c:dd:8c:99:46:49:55:44:74:01: 07:33:92:a7:da:b2:22:e4:b5:6a:33:e3:ae:9d:82: 2d:0c:72:11:9c:47:fa:38:3a:f8:97:6e:9e:56:22: ca:1f:bc:b8:bd:e8:45:51:9f:b0:3b:87:27:2e:35: 81:93:5e:a4:0c:10:39:88:d9:07:de:59:9f:b7:63: bf:fe:a5:2e:7e:d7:0c:dd:55:b3:45:5c:7a:c8:79: a5:2a:b4:2c:e1:a6:e2:30:14:d6:bd:6e:89:2d:1f: 3b:fe:ac:35:c7:4e:14:8a:7f:06:eb:3a:21:d6:ba: b7:87:15:8e:e1:71:72:13:e9:6f:59:89:03:18:29: d3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:16:28:73:5A:B4:23:90:43:74:86:58:E4:7E:CF:3E:2C:88:87:A3 X509v3 Authority Key Identifier: keyid:78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:1d:ce:50:52:0a:7b:49:cd:62:db:5a:2b:ee:f0:a1:65:8e: 32:1d:ea:40:e2:99:b4:39:5e:08:1f:40:c2:9d:4f:20:e6:28: af:5b:e8:11:44:f1:30:77:fd:d5:20:50:cf:d7:6f:90:0e:31: db:11:18:c8:09:dd:8c:a2:8d:49:b6:fc:6e:36:43:d6:30:d7: 68:ca:30:6a:54:48:72:1d:a5:4d:e2:62:21:4b:3b:69:5b:4b: 12:69:93:70:20:c9:74:50:70:c8:13:52:80:31:8b:4c:0f:12: 88:90:71:4e:cf:ec:e1:75:b2:7b:03:2b:cc:fb:78:71:ca:d0: e8:9c:3d:35:a0:91:78:ec:6e:c4:7e:80:13:0e:95:05:6d:72: 3b:64:b9:69:24:0b:87:59:01:63:ea:0c:52:c4:e0:52:00:22: 81:61:81:4b:72:0b:ce:4f:25:16:42:cf:5f:be:8b:36:05:88: 55:4c:b3:f8:62:91:1c:0c:40:fc:7c:74:06:7c:84:1c:92:04: 1d:1d:8f:83:a7:b8:12:0b:a8:73:00:4b:ea:c3:90:8d:b6:b3: 0a:fa:8c:f4:a8:a7:18:40:73:3a:f4:1e:dd:58:bd:9d:f7:7d: 80:ae:6f:23:66:30:d9:f5:be:55:77:5c:c6:47:5d:20:4d:10: db:50:3e:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsliFVTIqo+QOhJyiPCuqSqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4Nzk3NzBiZmZjMTRkOWNkZmI1NzRlYzg2NmNhYWYxMzU3 MmY0NWMwHhcNMjUxMjE2MDUwMDUwWhcNMjUxMjE3MDUwMDUwWjAzMTEwLwYDVQQD Eyg5MzE2Mjg3MzVhYjQyMzkwNDM3NDg2NThlNDdlY2YzZTJjODg4N2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPSjfAH62YTDG/cI9FtCoGiKdUP4 O8CnyI4EHkZlqFPrtOK+nzXQCbTQQ7AYb+avd3WFcdwKKIQBhJWiOn1wRhbmPfC+ NY5AUE5H/Gx67bJZjlEh2gh9nHNUz4ksDYS27gQp2aE0mL5NqRlMRdCiLwvoMaZy KqxBoqLfeizdjJlGSVVEdAEHM5Kn2rIi5LVqM+OunYItDHIRnEf6ODr4l26eViLK H7y4vehFUZ+wO4cnLjWBk16kDBA5iNkH3lmft2O//qUuftcM3VWzRVx6yHmlKrQs 4abiMBTWvW6JLR87/qw1x04Uin8G6zoh1rq3hxWO4XFyE+lvWYkDGCnTAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJMWKHNatCOQQ3SGWOR+zz4siIejMB8GA1UdIwQY MBaAFHh5dwv/wU2c37V07IZsqvE1cvRcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUhsM0NfX0JUWnpmdFhUc2hteXE4VFZ5OUZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zN2UyNmYtNTdiOC00MDgwLWI4MzIt ZWU3MzEzNzE2NDk4LzEvZUhsM0NfX0JUWnpmdFhUc2hteXE4VFZ5OUZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8zN2UyNmYtNTdiOC00MDgwLWI4MzItZWU3MzEzNzE2NDk4 LzEvZUhsM0NfX0JUWnpmdFhUc2hteXE4VFZ5OUZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUh3OUFIK e0nNYttaK+7woWWOMh3qQOKZtDleCB9Awp1PIOYor1voEUTxMHf91SBQz9dvkA4x 2xEYyAndjKKNSbb8bjZD1jDXaMowalRIch2lTeJiIUs7aVtLEmmTcCDJdFBwyBNS gDGLTA8SiJBxTs/s4XWyewMrzPt4ccrQ6Jw9NaCReOxuxH6AEw6VBW1yO2S5aSQL h1kBY+oMUsTgUgAigWGBS3ILzk8lFkLPX76LNgWIVUyz+GKRHAxA/Hx0BnyEHJIE HR2Pg6e4EguocwBL6sOQjbazCvqM9KinGEBzOvQe3Vi9nfd9gK5vI2Yw2fW+VXdc xkddIE0Q21A+og== -----END CERTIFICATE-----Generated at Tue Dec 16 12:18:09 2025 by rpki-client