This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/fd6f33-115c-495f-8eac-9a9bc1ea6e3f/1/EDjazpcIXLC3fQOb0N_-VsJoolw.mft File: EDjazpcIXLC3fQOb0N_-VsJoolw.mft (raw, json) Hash identifier: uAs1rDnKl26PRS6my+Iiju0P8vrk5PTM7baQOwNE6Fs= Subject key identifier: C5:98:CB:9B:09:6C:1B:0E:2C:E9:27:22:66:BF:9B:52:43:FA:7E:8B Authority key identifier: 10:38:DA:CE:97:08:5C:B0:B7:7D:03:9B:D0:DF:FE:56:C2:68:A2:5C Certificate issuer: /CN=1038dace97085cb0b77d039bd0dffe56c268a25c Certificate serial: 019AF12E24D67D59A3E13FB2543D492BAE76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDjazpcIXLC3fQOb0N_-VsJoolw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/fd6f33-115c-495f-8eac-9a9bc1ea6e3f/1/EDjazpcIXLC3fQOb0N_-VsJoolw.mft Manifest number: 0215 Signing time: Sat 06 Dec 2025 01:02:04 +0000 Manifest this update: Sat 06 Dec 2025 01:02:04 +0000 Manifest next update: Sun 07 Dec 2025 01:02:04 +0000 Files and hashes: 1: EDjazpcIXLC3fQOb0N_-VsJoolw.crl (hash: j2myNgctdKHIKofbALyQ7MfAz7eRSU4iEfjF3Z9iZEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/fd6f33-115c-495f-8eac-9a9bc1ea6e3f/1/EDjazpcIXLC3fQOb0N_-VsJoolw.crl rsync://rpki.ripe.net/repository/DEFAULT/04/fd6f33-115c-495f-8eac-9a9bc1ea6e3f/1/EDjazpcIXLC3fQOb0N_-VsJoolw.mft rsync://rpki.ripe.net/repository/DEFAULT/EDjazpcIXLC3fQOb0N_-VsJoolw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:24:d6:7d:59:a3:e1:3f:b2:54:3d:49:2b:ae:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1038dace97085cb0b77d039bd0dffe56c268a25c Validity Not Before: Dec 6 01:02:04 2025 GMT Not After : Dec 7 01:02:04 2025 GMT Subject: CN=c598cb9b096c1b0e2ce9272266bf9b5243fa7e8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7d:f6:80:95:c3:a1:3f:02:b0:1b:68:ad:4c: 12:b5:ea:92:a4:18:e6:c2:d7:8c:20:a0:2f:7a:26: a3:39:47:90:4c:dc:87:c2:a0:fd:80:bd:37:96:8a: 71:97:e9:f0:97:d5:43:0d:c9:85:a9:f8:98:62:30: 8a:f5:a6:36:9e:22:17:91:12:6c:d4:5d:cd:c3:d6: b9:5d:0a:53:3e:6d:45:b8:a9:8b:57:24:5d:0d:d4: 15:e7:52:4d:37:84:c5:a6:b0:32:09:a9:d2:b6:0d: 22:58:87:10:1d:20:25:4f:13:da:87:d0:b9:87:cb: ad:6d:45:23:ce:80:92:2d:ce:9a:a1:8a:cf:5d:5e: 62:0b:17:5a:ef:a8:c1:20:af:d6:87:19:a8:ab:47: 27:bf:66:60:ee:36:65:ad:75:76:7e:4e:c0:23:ed: a7:fc:1f:54:49:75:2d:70:07:18:1e:70:ae:18:cb: aa:25:58:34:20:d8:68:26:9d:cf:0e:62:3f:e4:b5: d3:74:ab:d8:2f:db:0c:57:70:b9:d9:3f:8c:1e:dd: 5b:59:c4:07:9d:10:18:43:70:02:97:27:20:55:84: be:b8:35:d6:67:c1:3d:25:0e:a5:bd:67:bc:fc:88: 74:9d:8d:3f:94:9e:b1:ea:d4:78:2c:0c:2e:58:b1: 66:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:98:CB:9B:09:6C:1B:0E:2C:E9:27:22:66:BF:9B:52:43:FA:7E:8B X509v3 Authority Key Identifier: keyid:10:38:DA:CE:97:08:5C:B0:B7:7D:03:9B:D0:DF:FE:56:C2:68:A2:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDjazpcIXLC3fQOb0N_-VsJoolw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/fd6f33-115c-495f-8eac-9a9bc1ea6e3f/1/EDjazpcIXLC3fQOb0N_-VsJoolw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/fd6f33-115c-495f-8eac-9a9bc1ea6e3f/1/EDjazpcIXLC3fQOb0N_-VsJoolw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:79:3c:8e:ec:32:3a:bb:25:af:4e:12:c0:0c:d4:77:5d:41: 4c:5e:55:11:2a:5c:e2:0e:23:c5:a1:15:6a:3e:73:ba:0b:14: df:db:4d:04:0b:f9:a3:14:49:4c:de:e8:f2:e9:3b:37:4e:a0: 6f:ba:bf:4b:5b:7e:e7:85:36:67:0e:24:c1:bc:77:f5:b7:10: ba:ea:bd:c9:ea:ae:5f:eb:8d:82:cd:39:38:e0:e6:ce:a9:76: 93:24:47:bb:08:4f:cc:0a:15:6f:9f:a3:1d:a0:83:cb:4d:fa: 57:0a:08:c0:09:31:0a:aa:2b:12:30:11:f2:2d:2f:0c:b4:c5: bc:d9:80:69:cf:d5:70:8a:d2:8b:c8:a5:56:6e:50:0e:a5:4b: ca:74:22:68:52:ca:9b:8d:23:d6:e3:d3:6b:12:b6:4e:95:a9: 51:26:87:75:34:86:a1:a6:2c:11:bf:be:b9:b8:73:05:95:8d: 7b:48:aa:bb:8e:c7:52:5c:72:99:55:ff:76:9e:00:48:6a:a7: 60:7c:ed:26:77:ce:47:93:e0:77:2b:34:d4:2d:ed:0e:a9:af: 58:25:28:21:dd:b1:a4:4d:85:f7:57:f9:af:82:ed:95:19:56: 75:a6:b2:8a:8f:5b:b4:ca:93:98:2a:b0:d7:13:af:9d:e5:26: 5a:08:82:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLiTWfVmj4T+yVD1JK652MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMzhkYWNlOTcwODVjYjBiNzdkMDM5YmQwZGZmZTU2YzI2 OGEyNWMwHhcNMjUxMjA2MDEwMjA0WhcNMjUxMjA3MDEwMjA0WjAzMTEwLwYDVQQD EyhjNTk4Y2I5YjA5NmMxYjBlMmNlOTI3MjI2NmJmOWI1MjQzZmE3ZThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxH32gJXDoT8CsBtorUwSteqSpBjm wteMIKAveiajOUeQTNyHwqD9gL03lopxl+nwl9VDDcmFqfiYYjCK9aY2niIXkRJs 1F3Nw9a5XQpTPm1FuKmLVyRdDdQV51JNN4TFprAyCanStg0iWIcQHSAlTxPah9C5 h8utbUUjzoCSLc6aoYrPXV5iCxda76jBIK/Whxmoq0cnv2Zg7jZlrXV2fk7AI+2n /B9USXUtcAcYHnCuGMuqJVg0INhoJp3PDmI/5LXTdKvYL9sMV3C52T+MHt1bWcQH nRAYQ3AClycgVYS+uDXWZ8E9JQ6lvWe8/Ih0nY0/lJ6x6tR4LAwuWLFm7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMWYy5sJbBsOLOknIma/m1JD+n6LMB8GA1UdIwQY MBaAFBA42s6XCFywt30Dm9Df/lbCaKJcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRURqYXpwY0lYTEMzZlFPYjBOXy1Wc0pvb2x3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9mZDZmMzMtMTE1Yy00OTVmLThlYWMt OWE5YmMxZWE2ZTNmLzEvRURqYXpwY0lYTEMzZlFPYjBOXy1Wc0pvb2x3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9mZDZmMzMtMTE1Yy00OTVmLThlYWMtOWE5YmMxZWE2ZTNm LzEvRURqYXpwY0lYTEMzZlFPYjBOXy1Wc0pvb2x3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI3k8juwy Orslr04SwAzUd11BTF5VESpc4g4jxaEVaj5zugsU39tNBAv5oxRJTN7o8uk7N06g b7q/S1t+54U2Zw4kwbx39bcQuuq9yequX+uNgs05OODmzql2kyRHuwhPzAoVb5+j HaCDy036VwoIwAkxCqorEjAR8i0vDLTFvNmAac/VcIrSi8ilVm5QDqVLynQiaFLK m40j1uPTaxK2TpWpUSaHdTSGoaYsEb++ubhzBZWNe0iqu47HUlxymVX/dp4ASGqn YHztJnfOR5Pgdys01C3tDqmvWCUoId2xpE2F91f5r4LtlRlWdaayio9btMqTmCqw 1xOvneUmWgiCEA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:54:47 2025 by rpki-client