This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft File: eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft (raw, json) Hash identifier: An4108439m3ablub9tpVksKl3NEJNKlPPDULDalcuZY= Subject key identifier: 21:F6:F6:50:A7:AB:D8:6F:CB:C2:AC:88:F0:D3:21:38:A7:35:9D:32 Authority key identifier: 78:34:A7:5D:F5:05:64:7C:7F:50:7D:84:C2:E2:40:E9:19:FE:CB:25 Certificate issuer: /CN=7834a75df505647c7f507d84c2e240e919fecb25 Certificate serial: 019AF19AF6222F5375602407339D7238BC7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft Manifest number: 0228 Signing time: Sat 06 Dec 2025 03:00:55 +0000 Manifest this update: Sat 06 Dec 2025 03:00:55 +0000 Manifest next update: Sun 07 Dec 2025 03:00:55 +0000 Files and hashes: 1: eDSnXfUFZHx_UH2EwuJA6Rn-yyU.crl (hash: wLFsSJ1vKOwfSTt2jf7DV0fUN/aMiwFKwcJBO4H5PWY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.crl rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft rsync://rpki.ripe.net/repository/DEFAULT/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:f6:22:2f:53:75:60:24:07:33:9d:72:38:bc:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7834a75df505647c7f507d84c2e240e919fecb25 Validity Not Before: Dec 6 03:00:55 2025 GMT Not After : Dec 7 03:00:55 2025 GMT Subject: CN=21f6f650a7abd86fcbc2ac88f0d32138a7359d32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:6a:ae:6f:1e:66:4a:52:e2:33:d2:98:d7:cf: 4c:96:b9:46:01:62:dc:16:e6:0b:48:f9:6f:89:2a: 88:77:cd:45:28:1b:fb:68:00:12:5f:64:57:90:03: 9e:0d:a3:0f:04:38:c4:5a:e9:f1:08:fc:81:a3:eb: 18:39:6b:3e:e3:35:ca:69:c4:d3:ad:78:48:d7:f5: ef:5c:b0:c3:26:b2:8b:6b:b0:ae:ab:e0:93:9a:69: a8:21:96:77:3d:d3:13:c3:b2:53:f9:a2:0e:f0:6d: 0e:15:38:99:6c:22:da:b8:83:24:47:9a:8e:f9:4a: a2:35:e1:97:b0:21:08:bc:ae:66:08:f3:c2:21:f0: f2:43:35:75:8c:7e:51:c0:8e:d6:de:46:c6:29:8e: 8e:78:66:ed:2b:a7:06:54:a7:c0:97:a9:d4:11:f3: 53:d7:db:f7:64:40:d0:1c:d3:7c:d2:75:63:b4:bd: 7f:1b:e8:d3:96:6d:91:b4:7c:a2:bc:4d:07:5a:d4: da:4d:b8:d1:e2:99:56:06:69:e7:0a:bc:82:42:dc: ec:f5:a8:dd:6f:46:d7:8e:8e:e2:9a:6b:8f:82:13: f9:f1:34:a5:3b:85:26:aa:25:56:2a:cd:91:7d:c1: 8b:6d:b9:0f:35:ff:92:04:c5:5a:2a:21:85:1b:dc: 0a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F6:F6:50:A7:AB:D8:6F:CB:C2:AC:88:F0:D3:21:38:A7:35:9D:32 X509v3 Authority Key Identifier: keyid:78:34:A7:5D:F5:05:64:7C:7F:50:7D:84:C2:E2:40:E9:19:FE:CB:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:85:96:9c:0f:92:78:1b:e6:6a:5a:53:82:aa:b9:d5:f6:51: 73:42:8a:22:b1:61:49:ca:2d:d0:18:7a:b7:86:b4:f2:83:5c: f1:8e:08:a4:c0:fd:d3:f4:33:b3:bc:65:e3:9f:bf:00:0b:e8: 9f:28:53:75:08:d1:96:f7:61:44:47:ea:a2:95:51:49:5c:54: 54:bb:89:6f:d8:d2:82:4a:f5:76:90:f1:94:3d:86:cc:c6:3e: d1:11:48:48:ae:60:96:22:17:26:c2:b4:f5:3f:8a:67:c0:72: 77:bc:f4:29:b3:78:df:ce:4f:f1:57:a3:2c:bf:8e:1b:fb:01: c8:34:02:0c:78:5d:43:79:2a:72:9c:3b:da:bd:10:3f:51:c7: eb:e3:5f:1a:05:ec:91:93:ef:2a:05:3b:7f:ac:ee:5a:4a:bd: b2:a4:0e:01:9d:b7:98:78:2e:db:1f:d4:34:fe:f9:eb:cf:bb: 20:b6:e0:7c:77:68:73:15:a4:98:c7:53:51:38:65:14:eb:dc: 2c:e9:e1:56:22:bc:fb:25:80:28:cc:98:38:5c:52:ad:23:26: dd:98:5f:48:7b:18:b6:b3:a4:55:93:52:92:2f:58:8c:f9:51: ec:67:14:fb:ac:a2:36:7d:fe:fe:6c:96:95:89:32:6e:87:e0: b2:49:20:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmvYiL1N1YCQHM51yOLx8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4MzRhNzVkZjUwNTY0N2M3ZjUwN2Q4NGMyZTI0MGU5MTlm ZWNiMjUwHhcNMjUxMjA2MDMwMDU1WhcNMjUxMjA3MDMwMDU1WjAzMTEwLwYDVQQD EygyMWY2ZjY1MGE3YWJkODZmY2JjMmFjODhmMGQzMjEzOGE3MzU5ZDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGqubx5mSlLiM9KY189MlrlGAWLc FuYLSPlviSqId81FKBv7aAASX2RXkAOeDaMPBDjEWunxCPyBo+sYOWs+4zXKacTT rXhI1/XvXLDDJrKLa7Cuq+CTmmmoIZZ3PdMTw7JT+aIO8G0OFTiZbCLauIMkR5qO +UqiNeGXsCEIvK5mCPPCIfDyQzV1jH5RwI7W3kbGKY6OeGbtK6cGVKfAl6nUEfNT 19v3ZEDQHNN80nVjtL1/G+jTlm2RtHyivE0HWtTaTbjR4plWBmnnCryCQtzs9ajd b0bXjo7immuPghP58TSlO4UmqiVWKs2RfcGLbbkPNf+SBMVaKiGFG9wK/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCH29lCnq9hvy8KsiPDTITinNZ0yMB8GA1UdIwQY MBaAFHg0p131BWR8f1B9hMLiQOkZ/sslMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZURTblhmVUZaSHhfVUgyRXd1SkE2Um4teXlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9kMDllNmItODI4Yy00ZGQ2LWJmNWUt YTdlZWEyZWViYzMyLzEvZURTblhmVUZaSHhfVUgyRXd1SkE2Um4teXlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9kMDllNmItODI4Yy00ZGQ2LWJmNWUtYTdlZWEyZWViYzMy LzEvZURTblhmVUZaSHhfVUgyRXd1SkE2Um4teXlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASYWWnA+S eBvmalpTgqq51fZRc0KKIrFhScot0Bh6t4a08oNc8Y4IpMD90/Qzs7xl45+/AAvo nyhTdQjRlvdhREfqopVRSVxUVLuJb9jSgkr1dpDxlD2GzMY+0RFISK5gliIXJsK0 9T+KZ8Byd7z0KbN4385P8VejLL+OG/sByDQCDHhdQ3kqcpw72r0QP1HH6+NfGgXs kZPvKgU7f6zuWkq9sqQOAZ23mHgu2x/UNP7568+7ILbgfHdocxWkmMdTUThlFOvc LOnhViK8+yWAKMyYOFxSrSMm3ZhfSHsYtrOkVZNSki9YjPlR7GcU+6yiNn3+/myW lYkybofgskkgRA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:52:47 2025 by rpki-client