This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/ed-J0j-dbc_x-71wtjZnHR7wrZE.mft File: ed-J0j-dbc_x-71wtjZnHR7wrZE.mft (raw, json) Hash identifier: 2N4QTi+mJkr5A1N2LWyotYPO8HAMSA3KxUBjwvia0fo= Subject key identifier: 93:B4:80:F1:DC:74:DE:83:EE:24:A6:66:05:5D:D3:2C:11:1F:0A:9B Authority key identifier: 79:DF:89:D2:3F:9D:6D:CF:F1:FB:BD:70:B6:36:67:1D:1E:F0:AD:91 Certificate issuer: /CN=79df89d23f9d6dcff1fbbd70b636671d1ef0ad91 Certificate serial: 019B32D7D0E1EF198A4F2D3707D1243E2753 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ed-J0j-dbc_x-71wtjZnHR7wrZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/ed-J0j-dbc_x-71wtjZnHR7wrZE.mft Manifest number: 07C9 Signing time: Thu 18 Dec 2025 19:02:43 +0000 Manifest this update: Thu 18 Dec 2025 19:02:43 +0000 Manifest next update: Fri 19 Dec 2025 19:02:43 +0000 Files and hashes: 1: ed-J0j-dbc_x-71wtjZnHR7wrZE.crl (hash: 9zviOnbp1yFGT84TE5IvqCS1Y45f9o5xn0x9cxF7WzU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/ed-J0j-dbc_x-71wtjZnHR7wrZE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/ed-J0j-dbc_x-71wtjZnHR7wrZE.mft rsync://rpki.ripe.net/repository/DEFAULT/ed-J0j-dbc_x-71wtjZnHR7wrZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:d0:e1:ef:19:8a:4f:2d:37:07:d1:24:3e:27:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79df89d23f9d6dcff1fbbd70b636671d1ef0ad91 Validity Not Before: Dec 18 19:02:43 2025 GMT Not After : Dec 19 19:02:43 2025 GMT Subject: CN=93b480f1dc74de83ee24a666055dd32c111f0a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ad:dc:1e:41:6a:f2:6c:d8:7b:6f:b6:8d:48: 62:c4:dc:af:80:93:ca:3d:5d:29:5b:84:45:4c:ba: 61:4c:50:93:46:8e:11:7f:75:89:23:e8:f9:92:71: b4:ab:aa:14:3e:ff:3f:72:75:64:1d:c0:df:e1:f5: 97:01:36:fe:9c:4c:a1:2b:ea:97:18:52:2b:2f:f6: a9:a5:fa:03:33:fe:fc:78:fe:bb:1b:e5:62:d5:a7: 48:27:54:e7:96:17:7b:78:09:05:c8:13:bc:94:a9: 08:41:59:b6:3c:1a:3d:e3:b7:dc:79:f1:34:9d:f2: ba:bf:5b:27:72:3f:ba:68:c8:9a:eb:e0:e8:18:5a: 1f:f8:bd:58:5f:fa:67:d4:dd:08:42:bd:e5:0e:03: 70:52:07:05:99:46:f0:2c:5c:a0:c9:b3:24:cf:b2: f5:b0:24:59:1c:00:54:c1:5c:6b:b3:9e:19:66:9c: a5:21:6c:03:48:0d:5f:8e:ba:38:b9:a1:e7:1c:8b: f0:4e:a7:ef:d0:74:40:70:56:31:26:66:99:26:cd: 92:a2:f0:04:f4:fc:df:32:11:ff:75:89:97:c7:74: 64:d9:7b:41:cd:38:97:29:eb:19:eb:fa:d5:a0:fb: 7b:e9:82:20:68:13:5c:29:9b:7e:9c:6d:0f:86:f8: aa:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B4:80:F1:DC:74:DE:83:EE:24:A6:66:05:5D:D3:2C:11:1F:0A:9B X509v3 Authority Key Identifier: keyid:79:DF:89:D2:3F:9D:6D:CF:F1:FB:BD:70:B6:36:67:1D:1E:F0:AD:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed-J0j-dbc_x-71wtjZnHR7wrZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/ed-J0j-dbc_x-71wtjZnHR7wrZE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/ed-J0j-dbc_x-71wtjZnHR7wrZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:75:8e:4c:03:c9:a2:54:53:90:b9:2a:ed:d0:ae:5b:1b:75: 45:75:fd:67:a8:4a:e4:c4:41:10:06:ef:ed:cb:c7:30:fe:0b: 6e:c0:01:d8:c3:52:da:40:21:66:f9:ee:db:da:90:ea:e6:30: 85:d2:c7:d6:fd:c2:75:50:79:fb:c2:d0:47:dd:6b:1c:19:40: ae:32:31:58:df:56:75:39:2c:f0:38:bc:7a:2c:4b:63:16:90: 07:e8:38:d3:54:f4:6f:c9:0d:38:f5:c1:2c:18:85:76:ec:94: 1c:6f:3c:97:5c:ba:b6:25:f9:2b:61:78:af:58:0c:e4:c3:6d: 16:d1:b9:d4:2f:98:ed:26:fc:d9:03:eb:9d:5c:f7:52:ee:7f: 7b:9d:d3:38:76:91:d8:27:83:a5:e7:c3:f6:a5:53:54:ed:0e: 82:26:53:e4:b8:3f:58:f6:65:7f:9a:b0:94:b6:fc:3e:25:73: 96:8d:11:ac:bf:b7:b8:83:6b:2e:42:06:e2:81:db:ea:ad:fd: 79:98:5b:86:e4:1c:14:96:e1:53:42:1a:17:ac:22:0b:7f:4e: 34:2f:95:9e:c3:74:b9:8f:14:85:0d:7a:10:60:34:d8:f4:91: bf:82:e2:27:0e:02:13:28:f7:a0:0d:d5:e2:6d:4a:74:c4:80: da:9b:fb:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy19Dh7xmKTy03B9EkPidTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5ZGY4OWQyM2Y5ZDZkY2ZmMWZiYmQ3MGI2MzY2NzFkMWVm MGFkOTEwHhcNMjUxMjE4MTkwMjQzWhcNMjUxMjE5MTkwMjQzWjAzMTEwLwYDVQQD Eyg5M2I0ODBmMWRjNzRkZTgzZWUyNGE2NjYwNTVkZDMyYzExMWYwYTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA263cHkFq8mzYe2+2jUhixNyvgJPK PV0pW4RFTLphTFCTRo4Rf3WJI+j5knG0q6oUPv8/cnVkHcDf4fWXATb+nEyhK+qX GFIrL/appfoDM/78eP67G+Vi1adIJ1Tnlhd7eAkFyBO8lKkIQVm2PBo947fcefE0 nfK6v1sncj+6aMia6+DoGFof+L1YX/pn1N0IQr3lDgNwUgcFmUbwLFygybMkz7L1 sCRZHABUwVxrs54ZZpylIWwDSA1fjro4uaHnHIvwTqfv0HRAcFYxJmaZJs2SovAE 9PzfMhH/dYmXx3Rk2XtBzTiXKesZ6/rVoPt76YIgaBNcKZt+nG0PhviqtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJO0gPHcdN6D7iSmZgVd0ywRHwqbMB8GA1UdIwQY MBaAFHnfidI/nW3P8fu9cLY2Zx0e8K2RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWQtSjBqLWRiY194LTcxd3RqWm5IUjd3clpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi80ZGM1OGMtN2NlOC00NWJiLWJhY2Ut MWZlNzQ4MTMzY2VmLzEvZWQtSjBqLWRiY194LTcxd3RqWm5IUjd3clpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi80ZGM1OGMtN2NlOC00NWJiLWJhY2UtMWZlNzQ4MTMzY2Vm LzEvZWQtSjBqLWRiY194LTcxd3RqWm5IUjd3clpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaHWOTAPJ olRTkLkq7dCuWxt1RXX9Z6hK5MRBEAbv7cvHMP4LbsAB2MNS2kAhZvnu29qQ6uYw hdLH1v3CdVB5+8LQR91rHBlArjIxWN9WdTks8Di8eixLYxaQB+g401T0b8kNOPXB LBiFduyUHG88l1y6tiX5K2F4r1gM5MNtFtG51C+Y7Sb82QPrnVz3Uu5/e53TOHaR 2CeDpefD9qVTVO0OgiZT5Lg/WPZlf5qwlLb8PiVzlo0RrL+3uINrLkIG4oHb6q39 eZhbhuQcFJbhU0IaF6wiC39ONC+VnsN0uY8UhQ16EGA02PSRv4LiJw4CEyj3oA3V 4m1KdMSA2pv74A== -----END CERTIFICATE-----Generated at Thu Dec 18 20:34:12 2025 by rpki-client