This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft File: edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft (raw, json) Hash identifier: NiHgqJMCdQu+xQlnxtQESg7N+1zAAT8KA2ZpUo+IG6w= Subject key identifier: 88:66:5C:2F:74:32:91:B9:0E:43:A6:37:60:E2:04:5B:36:5D:09:8F Authority key identifier: 79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1 Certificate issuer: /CN=79d0d856764a3fee64be14f0a49f59a6865285d1 Certificate serial: 019B3CEC442BA3EEBC985779AFD9D9C3A378 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft Manifest number: 0EAC Signing time: Sat 20 Dec 2025 18:01:15 +0000 Manifest this update: Sat 20 Dec 2025 18:01:15 +0000 Manifest next update: Sun 21 Dec 2025 18:01:15 +0000 Files and hashes: 1: EG5pUxGfwAIBOHWhSA_u40Ull48.roa (hash: j9AIedWxUThIEjIiNQ9a0XQAYjd/0yxU1No/HAT1wlg=) 2: EIlKz_yGKgG9o6LgyJUb5CYuXik.roa (hash: 7XI12BZ8oMxeo0lKGJtUxLNV8B1NZwQt+C2hSEvkeaU=) 3: eZbyMOXwsT8DM_J58p4lb08NYAk.roa (hash: /WC96WsqKWPbAIxaI0PJMY/euc4BODG5VIUj9O8Scw8=) 4: edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl (hash: HdID/UBTzziZ07avT3XN17HLGf7ImQOudEC6tgZLw7s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:44:2b:a3:ee:bc:98:57:79:af:d9:d9:c3:a3:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79d0d856764a3fee64be14f0a49f59a6865285d1 Validity Not Before: Dec 20 18:01:15 2025 GMT Not After : Dec 21 18:01:15 2025 GMT Subject: CN=88665c2f743291b90e43a63760e2045b365d098f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0b:64:0b:99:cc:8b:4f:b9:ed:c3:19:1f:70: 53:bc:9a:13:4f:de:89:50:1c:90:e7:aa:43:6e:73: 30:bb:ec:02:57:bc:0c:b4:ea:1e:0b:40:58:58:a6: ef:00:8a:ad:c6:2f:5d:a7:67:5f:e9:e8:e5:f8:1f: 60:30:85:6d:95:4e:bc:77:59:fc:06:43:7c:3b:d2: 88:39:8b:d7:36:28:25:cf:96:da:47:39:24:a1:80: a7:76:b1:62:57:13:f2:3c:c6:f0:9d:e8:b6:1e:d2: ea:c2:64:8f:63:46:cf:a9:85:37:8c:9b:ac:75:e3: 2c:37:8d:59:b1:31:c6:b3:00:a0:93:6e:c6:6a:a6: 34:71:ca:a3:20:54:d6:9c:9f:e2:dc:5b:bf:97:ec: c9:12:16:de:1f:af:4f:99:27:67:6e:81:7a:86:ce: 4d:20:9c:6a:f2:34:13:e2:42:b3:f3:cb:3f:c2:46: ba:36:71:0d:33:19:2f:56:35:60:92:ac:4c:64:c2: f9:b2:c4:02:f1:dc:12:31:59:7a:50:58:1d:b1:00: 6c:3e:65:7d:e2:41:1e:f1:05:7a:fb:e9:8f:82:81: 40:d8:80:73:98:1d:20:c1:ae:3d:0c:f0:6f:7d:df: ba:a0:5d:0e:4c:8d:c2:28:79:a0:84:2e:36:fd:a8: 51:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:66:5C:2F:74:32:91:B9:0E:43:A6:37:60:E2:04:5B:36:5D:09:8F X509v3 Authority Key Identifier: keyid:79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:35:5e:0b:5c:b4:e1:b7:d1:b1:ea:b5:19:65:74:51:58:ad: 1a:28:40:da:bf:93:19:cd:2d:d8:ef:1f:d9:c7:c9:31:b8:0a: 84:3f:de:73:a5:0b:f5:b3:dc:29:d3:c7:3a:10:a1:3b:21:d8: 0d:09:29:5a:51:e4:cb:6d:20:5c:6d:0b:1c:fe:b8:88:ef:29: 68:f4:4a:27:4f:3e:e4:4b:b8:41:88:53:96:70:d3:c9:c4:16: 5d:7c:62:dc:b4:2b:d4:7c:32:89:3b:eb:46:b0:fe:f5:15:b8: 24:c7:a7:86:a0:8f:98:96:57:76:77:22:ba:ae:f5:e7:4a:50: e7:6d:3d:fc:e8:1b:22:af:35:de:bf:42:c8:75:d2:c8:e7:41: e2:84:35:29:02:44:ea:e8:2d:59:79:2c:7d:ea:7f:5e:98:7e: ce:1a:72:4d:13:bb:d9:c2:dd:a6:79:ee:55:56:60:d2:e7:5d: fe:85:95:1a:e9:97:b9:50:0b:90:5a:4d:50:5d:8a:3c:f3:3e: 0e:a2:5b:29:8d:e8:6a:19:0d:85:09:e5:dc:91:01:ff:3f:fa: 0b:11:f8:01:99:62:91:21:d0:b5:3b:44:31:2f:52:b5:1f:15: 64:ac:10:fd:7b:a9:48:b2:4a:30:a0:d3:65:9c:ac:bc:7b:b7: 50:a8:e8:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87EQro+68mFd5r9nZw6N4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5ZDBkODU2NzY0YTNmZWU2NGJlMTRmMGE0OWY1OWE2ODY1 Mjg1ZDEwHhcNMjUxMjIwMTgwMTE1WhcNMjUxMjIxMTgwMTE1WjAzMTEwLwYDVQQD Eyg4ODY2NWMyZjc0MzI5MWI5MGU0M2E2Mzc2MGUyMDQ1YjM2NWQwOThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gtkC5nMi0+57cMZH3BTvJoTT96J UByQ56pDbnMwu+wCV7wMtOoeC0BYWKbvAIqtxi9dp2df6ejl+B9gMIVtlU68d1n8 BkN8O9KIOYvXNiglz5baRzkkoYCndrFiVxPyPMbwnei2HtLqwmSPY0bPqYU3jJus deMsN41ZsTHGswCgk27GaqY0ccqjIFTWnJ/i3Fu/l+zJEhbeH69PmSdnboF6hs5N IJxq8jQT4kKz88s/wka6NnENMxkvVjVgkqxMZML5ssQC8dwSMVl6UFgdsQBsPmV9 4kEe8QV6++mPgoFA2IBzmB0gwa49DPBvfd+6oF0OTI3CKHmghC42/ahRCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhmXC90MpG5DkOmN2DiBFs2XQmPMB8GA1UdIwQY MBaAFHnQ2FZ2Sj/uZL4U8KSfWaaGUoXRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWREWVZuWktQLTVrdmhUd3BKOVpwb1pTaGRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS80M2UzMDktNzVjNS00ZjQwLTlkYjMt ZjJiYjY5ZTc1ZTc0LzEvZWREWVZuWktQLTVrdmhUd3BKOVpwb1pTaGRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS80M2UzMDktNzVjNS00ZjQwLTlkYjMtZjJiYjY5ZTc1ZTc0 LzEvZWREWVZuWktQLTVrdmhUd3BKOVpwb1pTaGRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPjVeC1y0 4bfRseq1GWV0UVitGihA2r+TGc0t2O8f2cfJMbgKhD/ec6UL9bPcKdPHOhChOyHY DQkpWlHky20gXG0LHP64iO8paPRKJ08+5Eu4QYhTlnDTycQWXXxi3LQr1HwyiTvr RrD+9RW4JMenhqCPmJZXdnciuq7150pQ5209/OgbIq813r9CyHXSyOdB4oQ1KQJE 6ugtWXksfep/Xph+zhpyTRO72cLdpnnuVVZg0udd/oWVGumXuVALkFpNUF2KPPM+ DqJbKY3oahkNhQnl3JEB/z/6CxH4AZlikSHQtTtEMS9StR8VZKwQ/XupSLJKMKDT ZZysvHu3UKjo8Q== -----END CERTIFICATE-----Generated at Sun Dec 21 00:17:25 2025 by rpki-client