This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft File: ehJ9Y84cnzVXOQryH8BhBypSX04.mft (raw, json) Hash identifier: K4c6uGk9fshr8OCBbJpM2eIppk5B0+NzCdZdRpgBDmM= Subject key identifier: 25:A3:68:76:66:B5:37:6B:FC:E3:A5:5E:8F:15:76:F5:98:F0:92:EA Authority key identifier: 7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E Certificate issuer: /CN=7a127d63ce1c9f3557390af21fc061072a525f4e Certificate serial: 019B5ABFD445DD3FE16D910EF3F44ED13488 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft Manifest number: 02EE Signing time: Fri 26 Dec 2025 13:01:19 +0000 Manifest this update: Fri 26 Dec 2025 13:01:19 +0000 Manifest next update: Sat 27 Dec 2025 13:01:19 +0000 Files and hashes: 1: ehJ9Y84cnzVXOQryH8BhBypSX04.crl (hash: 3HOqAtyOlsKiytg/WJ9ZVezGl6bezSpjIzp4NCgfrak=) 2: ljbcOH4P0wfbZdBmDxC9WVP3jCA.roa (hash: ESZ0DE4a4/PZ75FUD4JmTPdMx0gc6CuklYJy0AZ+qzM=) 3: p7CsWJqhWsLkHyYPLS-R_3le0hU.roa (hash: EeSP4Cc1NDkG1olZjQwIwFAUrprwIWgmtu0OwLvcM94=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:d4:45:dd:3f:e1:6d:91:0e:f3:f4:4e:d1:34:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a127d63ce1c9f3557390af21fc061072a525f4e Validity Not Before: Dec 26 13:01:19 2025 GMT Not After : Dec 27 13:01:19 2025 GMT Subject: CN=25a3687666b5376bfce3a55e8f1576f598f092ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:57:e6:e8:ce:1a:d6:25:46:b9:fc:14:a0:49: b1:e4:66:84:51:b5:27:e9:47:a5:57:6f:41:2c:75: 74:c1:47:68:a9:65:8a:3c:58:44:0a:b8:c2:cb:9f: 87:24:7b:fd:b4:3c:29:da:62:63:33:6c:89:7b:4d: dd:e6:6f:eb:16:06:0f:d3:c4:8c:ab:7a:63:6c:d4: d0:ed:32:aa:2c:dc:0e:cc:27:26:be:a8:e1:dc:c3: 77:56:8a:34:f8:ee:fd:4e:1a:4f:85:16:bd:ec:43: e2:41:66:da:fb:3a:0b:66:e4:05:13:c4:06:10:12: 51:f8:9d:f4:84:26:d6:8d:03:3f:dd:44:fe:57:dd: 52:b2:7b:a7:ec:9f:ec:b6:01:4c:68:cb:85:be:1c: 72:9c:49:c4:2b:a9:7a:9d:96:e3:0f:a5:ee:c9:40: 73:17:6b:5d:9a:42:28:87:eb:47:26:37:87:38:71: 5b:14:34:9f:a0:12:6c:c5:47:be:eb:54:8e:46:42: 41:07:3b:fb:fa:62:0b:3c:1e:05:3d:29:59:71:20: 50:79:ab:93:10:59:7f:c0:a4:3e:f7:8e:e9:2f:2e: 69:e9:82:d6:60:11:c3:1b:11:37:01:5e:81:21:87: b1:d0:d7:a9:67:6b:bf:a2:46:e9:14:52:da:11:fb: 2a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A3:68:76:66:B5:37:6B:FC:E3:A5:5E:8F:15:76:F5:98:F0:92:EA X509v3 Authority Key Identifier: keyid:7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:14:81:c9:de:97:6b:12:e4:f3:fc:92:a4:7f:63:32:7c:e0: 7c:12:3d:51:51:44:15:b7:08:23:26:7b:c7:41:87:26:69:06: 29:18:e0:8b:49:f2:e1:47:24:81:44:37:21:ab:71:b5:7e:6a: 4f:d2:7c:f1:92:f2:0e:15:b5:34:7a:b5:b2:79:92:61:d1:71: 56:82:af:4c:b3:e8:49:82:b3:1e:8c:cf:e1:58:be:29:24:40: d3:14:5b:89:b0:d7:79:de:7f:66:23:bb:ca:c4:ed:3b:6e:ab: 4c:d2:62:c8:06:19:62:ac:74:f0:65:0d:2b:6c:9d:b3:bb:0b: f1:1f:61:b3:93:1b:75:67:07:12:40:61:68:84:4f:22:6e:97: 5f:58:7a:c7:6d:76:b8:4f:ee:7d:93:15:92:e6:c5:65:17:28: 97:9d:10:b6:53:14:e9:3e:5f:0c:71:6a:2f:6d:87:f2:51:51: a8:83:72:4a:ee:28:21:3c:3c:d3:e1:77:04:07:e2:14:70:f2: b4:69:b0:50:e5:46:32:92:cb:e1:38:30:a6:a6:f2:39:b4:77: 2a:b8:37:be:f5:3e:1a:bb:e7:4d:d3:b3:27:13:76:29:8b:2a: 5f:ca:69:d5:f2:4a:39:73:b1:af:3d:5b:26:38:cf:f6:10:4a: 9d:a9:72:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav9RF3T/hbZEO8/RO0TSIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMTI3ZDYzY2UxYzlmMzU1NzM5MGFmMjFmYzA2MTA3MmE1 MjVmNGUwHhcNMjUxMjI2MTMwMTE5WhcNMjUxMjI3MTMwMTE5WjAzMTEwLwYDVQQD EygyNWEzNjg3NjY2YjUzNzZiZmNlM2E1NWU4ZjE1NzZmNTk4ZjA5MmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ffm6M4a1iVGufwUoEmx5GaEUbUn 6UelV29BLHV0wUdoqWWKPFhECrjCy5+HJHv9tDwp2mJjM2yJe03d5m/rFgYP08SM q3pjbNTQ7TKqLNwOzCcmvqjh3MN3Voo0+O79ThpPhRa97EPiQWba+zoLZuQFE8QG EBJR+J30hCbWjQM/3UT+V91Ssnun7J/stgFMaMuFvhxynEnEK6l6nZbjD6XuyUBz F2tdmkIoh+tHJjeHOHFbFDSfoBJsxUe+61SORkJBBzv7+mILPB4FPSlZcSBQeauT EFl/wKQ+947pLy5p6YLWYBHDGxE3AV6BIYex0NepZ2u/okbpFFLaEfsqjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCWjaHZmtTdr/OOlXo8VdvWY8JLqMB8GA1UdIwQY MBaAFHoSfWPOHJ81VzkK8h/AYQcqUl9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWhKOVk4NGNuelZYT1FyeUg4QmhCeXBTWDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82OWU1M2YtYTQ4Yy00OWIwLTkwZTQt OGQyNDgxNmQ5N2RlLzEvZWhKOVk4NGNuelZYT1FyeUg4QmhCeXBTWDA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC82OWU1M2YtYTQ4Yy00OWIwLTkwZTQtOGQyNDgxNmQ5N2Rl LzEvZWhKOVk4NGNuelZYT1FyeUg4QmhCeXBTWDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASRSByd6X axLk8/ySpH9jMnzgfBI9UVFEFbcIIyZ7x0GHJmkGKRjgi0ny4UckgUQ3IatxtX5q T9J88ZLyDhW1NHq1snmSYdFxVoKvTLPoSYKzHozP4Vi+KSRA0xRbibDXed5/ZiO7 ysTtO26rTNJiyAYZYqx08GUNK2yds7sL8R9hs5MbdWcHEkBhaIRPIm6XX1h6x212 uE/ufZMVkubFZRcol50QtlMU6T5fDHFqL22H8lFRqINySu4oITw80+F3BAfiFHDy tGmwUOVGMpLL4TgwpqbyObR3Krg3vvU+GrvnTdOzJxN2KYsqX8pp1fJKOXOxrz1b JjjP9hBKnalyvw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:20 2025 by rpki-client