This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.mft File: _edsqF6WVBpa3Tysrx5eEU-qR-8.mft (raw, json) Hash identifier: aFxmu6iOa35F0RU5HzHRRTIHWpaaHCY5j56LqCZ5hsY= Subject key identifier: E1:F2:CE:08:82:E6:42:5D:0D:22:D3:77:82:5D:C6:1B:B2:A6:BE:62 Authority key identifier: FD:E7:6C:A8:5E:96:54:1A:5A:DD:3C:AC:AF:1E:5E:11:4F:AA:47:EF Certificate issuer: /CN=fde76ca85e96541a5add3cacaf1e5e114faa47ef Certificate serial: 019B2BC1D922FBB8E79939B731D4DB6991C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_edsqF6WVBpa3Tysrx5eEU-qR-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.mft Manifest number: 08B6 Signing time: Wed 17 Dec 2025 10:01:22 +0000 Manifest this update: Wed 17 Dec 2025 10:01:22 +0000 Manifest next update: Thu 18 Dec 2025 10:01:22 +0000 Files and hashes: 1: KFrROomQMJBnIrzsgZU84yvQLdQ.roa (hash: CshrhqcbJrkLcDCTTw3Y7CjvQ9onI+0d2hk5a/aWW9U=) 2: _edsqF6WVBpa3Tysrx5eEU-qR-8.crl (hash: wYXXHlaaW2QshXZFzhLky+nuA+CNhH1D//TgdPZ2bgs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.crl rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.mft rsync://rpki.ripe.net/repository/DEFAULT/_edsqF6WVBpa3Tysrx5eEU-qR-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c1:d9:22:fb:b8:e7:99:39:b7:31:d4:db:69:91:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde76ca85e96541a5add3cacaf1e5e114faa47ef Validity Not Before: Dec 17 10:01:22 2025 GMT Not After : Dec 18 10:01:22 2025 GMT Subject: CN=e1f2ce0882e6425d0d22d377825dc61bb2a6be62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e7:5e:e9:68:35:81:8f:66:55:09:b3:4f:3c: 53:96:12:b2:6d:c7:81:36:14:5c:3c:be:cf:6b:28: 9f:a2:ea:1e:65:a0:93:55:ff:f7:64:34:7e:49:d7: 6e:c2:51:83:63:42:a4:f5:59:41:48:44:f3:c8:65: af:c1:a2:79:21:53:13:bf:4c:e2:f5:e8:28:ea:2d: 66:b9:37:61:16:62:0d:4e:48:1b:c6:7e:0e:d1:7a: 83:82:10:a6:db:a9:64:db:bc:2d:60:d8:b2:f5:eb: 9a:4a:90:77:23:53:85:74:3d:3d:d7:40:e5:dd:da: 9b:78:8a:fe:02:ca:11:a5:b1:dc:cc:cc:4a:b0:58: 67:85:8a:2c:c3:33:c7:4b:d1:72:6e:07:13:b7:bf: f8:8a:18:d4:18:a3:9a:27:e6:a7:86:87:a6:53:60: 84:f7:62:4b:db:55:15:11:6c:3f:11:9f:9f:f1:6e: a7:b5:1b:f1:4f:19:28:a7:0d:0c:c9:52:dc:2f:bd: ad:6e:0a:55:6a:a4:4e:9e:e6:94:7c:6e:7b:9e:d8: e7:cd:68:79:16:0d:57:15:88:0b:61:3d:bd:04:d5: f3:c6:c7:96:81:53:5d:5e:3b:a4:1c:77:06:f7:0f: 8a:cf:8c:17:ca:37:cf:1f:06:42:ae:29:9e:b6:c2: 11:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F2:CE:08:82:E6:42:5D:0D:22:D3:77:82:5D:C6:1B:B2:A6:BE:62 X509v3 Authority Key Identifier: keyid:FD:E7:6C:A8:5E:96:54:1A:5A:DD:3C:AC:AF:1E:5E:11:4F:AA:47:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_edsqF6WVBpa3Tysrx5eEU-qR-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:bc:b1:da:43:50:82:29:df:fd:09:c6:5b:83:84:a9:41:a5: 8c:33:4c:64:17:99:e6:1a:ea:1a:a8:23:73:ad:9a:ae:cd:4d: 8b:74:84:2f:0c:ca:e2:d6:8b:d9:9f:4c:d5:dc:3b:37:4d:22: d0:24:1d:41:19:89:78:f6:5b:49:38:3c:4a:b7:58:43:e7:73: 52:6f:f4:78:dd:f9:91:00:d6:5b:52:c1:0d:d1:77:20:0d:a0: 8d:6b:b7:03:c6:cc:ae:59:a4:4b:60:57:ab:67:28:e9:05:1a: cf:1d:d2:ae:1e:89:e9:0c:91:91:22:19:7e:16:c0:bc:6e:ea: 7b:1b:22:00:75:8e:c8:41:25:cd:c7:e1:9a:67:52:2e:03:35: 95:28:a6:08:3c:6f:f1:e3:11:7f:72:2e:2f:d4:46:21:7f:4b: fd:08:b7:30:82:00:f4:61:05:71:8f:5f:88:28:be:b6:7f:e6: 6d:db:d2:56:91:fc:10:3f:19:49:24:de:ac:e5:23:dd:1a:38: 46:2b:d1:64:9a:6c:52:b4:1c:5d:7a:59:f3:e7:7e:a9:c4:b4: 48:0c:eb:3a:95:7d:5d:a4:cd:8b:56:cf:d9:4a:32:f0:1e:5a: 77:c7:4a:f6:76:a9:d3:74:95:1d:ce:21:74:a2:70:e1:5d:81: 0c:6b:b4:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwdki+7jnmTm3MdTbaZHIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZTc2Y2E4NWU5NjU0MWE1YWRkM2NhY2FmMWU1ZTExNGZh YTQ3ZWYwHhcNMjUxMjE3MTAwMTIyWhcNMjUxMjE4MTAwMTIyWjAzMTEwLwYDVQQD EyhlMWYyY2UwODgyZTY0MjVkMGQyMmQzNzc4MjVkYzYxYmIyYTZiZTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmude6Wg1gY9mVQmzTzxTlhKybceB NhRcPL7PayifouoeZaCTVf/3ZDR+SdduwlGDY0Kk9VlBSETzyGWvwaJ5IVMTv0zi 9ego6i1muTdhFmINTkgbxn4O0XqDghCm26lk27wtYNiy9euaSpB3I1OFdD0910Dl 3dqbeIr+AsoRpbHczMxKsFhnhYoswzPHS9FybgcTt7/4ihjUGKOaJ+anhoemU2CE 92JL21UVEWw/EZ+f8W6ntRvxTxkopw0MyVLcL72tbgpVaqROnuaUfG57ntjnzWh5 Fg1XFYgLYT29BNXzxseWgVNdXjukHHcG9w+Kz4wXyjfPHwZCrimetsIRUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOHyzgiC5kJdDSLTd4Jdxhuypr5iMB8GA1UdIwQY MBaAFP3nbKhellQaWt08rK8eXhFPqkfvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2Vkc3FGNldWQnBhM1R5c3J4NWVFVS1xUi04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9mODUyYWMtOWU5OC00NWI3LTg3N2Yt MjI5ZTJjYjBmNjZjLzEvX2Vkc3FGNldWQnBhM1R5c3J4NWVFVS1xUi04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9mODUyYWMtOWU5OC00NWI3LTg3N2YtMjI5ZTJjYjBmNjZj LzEvX2Vkc3FGNldWQnBhM1R5c3J4NWVFVS1xUi04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO7yx2kNQ ginf/QnGW4OEqUGljDNMZBeZ5hrqGqgjc62ars1Ni3SELwzK4taL2Z9M1dw7N00i 0CQdQRmJePZbSTg8SrdYQ+dzUm/0eN35kQDWW1LBDdF3IA2gjWu3A8bMrlmkS2BX q2co6QUazx3Srh6J6QyRkSIZfhbAvG7qexsiAHWOyEElzcfhmmdSLgM1lSimCDxv 8eMRf3IuL9RGIX9L/Qi3MIIA9GEFcY9fiCi+tn/mbdvSVpH8ED8ZSSTerOUj3Ro4 RivRZJpsUrQcXXpZ8+d+qcS0SAzrOpV9XaTNi1bP2Uoy8B5ad8dK9nap03SVHc4h dKJw4V2BDGu0NA== -----END CERTIFICATE-----Generated at Wed Dec 17 18:39:55 2025 by rpki-client