This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/ed-J0j-dbc_x-71wtjZnHR7wrZE.mft File: ed-J0j-dbc_x-71wtjZnHR7wrZE.mft (raw, json) Hash identifier: UZfAkCIrFb4nzOX7RWQB144vd/sUBbjtm/cyruSzrVA= Subject key identifier: B5:43:02:32:C3:C2:47:05:33:F8:1B:2B:F5:FF:38:37:C4:6B:25:D7 Authority key identifier: 79:DF:89:D2:3F:9D:6D:CF:F1:FB:BD:70:B6:36:67:1D:1E:F0:AD:91 Certificate issuer: /CN=79df89d23f9d6dcff1fbbd70b636671d1ef0ad91 Certificate serial: 019AF12D73DA86A748F795A26F7750C50E73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ed-J0j-dbc_x-71wtjZnHR7wrZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/ed-J0j-dbc_x-71wtjZnHR7wrZE.mft Manifest number: 07A7 Signing time: Sat 06 Dec 2025 01:01:19 +0000 Manifest this update: Sat 06 Dec 2025 01:01:19 +0000 Manifest next update: Sun 07 Dec 2025 01:01:19 +0000 Files and hashes: 1: ed-J0j-dbc_x-71wtjZnHR7wrZE.crl (hash: 6Q5R4ZAVD6KrsvJfmewdIe4fk+FCPvRV0mmPwDzM0eU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/ed-J0j-dbc_x-71wtjZnHR7wrZE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/ed-J0j-dbc_x-71wtjZnHR7wrZE.mft rsync://rpki.ripe.net/repository/DEFAULT/ed-J0j-dbc_x-71wtjZnHR7wrZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:73:da:86:a7:48:f7:95:a2:6f:77:50:c5:0e:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79df89d23f9d6dcff1fbbd70b636671d1ef0ad91 Validity Not Before: Dec 6 01:01:19 2025 GMT Not After : Dec 7 01:01:19 2025 GMT Subject: CN=b5430232c3c2470533f81b2bf5ff3837c46b25d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d2:b6:f7:04:73:ed:1e:fa:10:b7:3d:99:a3: b6:eb:07:3f:73:6a:d9:80:b6:61:7b:17:0b:ae:b6: 21:45:c2:e3:ba:19:35:3c:de:98:55:43:01:aa:23: 13:fc:f1:9e:c9:a5:90:b2:9c:44:11:fc:67:74:2e: 82:e5:4b:d2:e4:88:8c:64:be:4a:e4:05:a0:ef:5a: 1a:cf:a7:c1:cf:3e:de:8e:aa:5e:3e:91:b6:47:3d: 6a:d1:f0:01:09:38:7d:d4:7b:96:7d:d5:97:d2:c9: 92:6d:a7:96:a6:a5:67:55:22:52:97:1b:dc:fb:09: 9b:dc:9a:bb:cb:84:3e:93:69:fe:df:64:86:a9:5b: a9:0a:96:d9:2d:61:a6:ab:9b:08:24:c7:e3:20:33: 3b:c2:f5:46:6e:56:e1:c0:33:73:ca:7a:ef:c3:da: e7:f8:ef:43:c0:26:e8:91:45:1e:1d:7c:6c:cd:1e: f6:0b:25:bd:f0:3d:dd:c3:04:6b:90:d5:0f:a0:7a: 7a:d5:1a:c4:7e:42:34:86:26:48:49:a0:c2:89:32: f5:9b:3d:51:dd:59:43:6b:c2:e3:3a:3b:32:f3:87: b2:90:36:4a:0b:de:22:f5:d9:f0:62:c2:32:58:91: 0a:10:af:b7:d9:94:00:be:37:89:d1:8e:46:3b:92: 5b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:43:02:32:C3:C2:47:05:33:F8:1B:2B:F5:FF:38:37:C4:6B:25:D7 X509v3 Authority Key Identifier: keyid:79:DF:89:D2:3F:9D:6D:CF:F1:FB:BD:70:B6:36:67:1D:1E:F0:AD:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed-J0j-dbc_x-71wtjZnHR7wrZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/ed-J0j-dbc_x-71wtjZnHR7wrZE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/ed-J0j-dbc_x-71wtjZnHR7wrZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:57:28:a1:fd:4f:ed:b4:c1:f7:3d:75:05:96:92:14:24:29: 7c:5f:d3:9c:01:3f:b2:2d:fd:05:55:37:30:1f:66:cd:21:7c: e0:c4:7b:70:ae:ed:23:01:fe:08:57:24:e7:ff:ee:b3:63:57: 93:85:39:f8:4d:8a:da:dd:1c:e6:92:1c:9b:79:62:84:bf:1f: 34:16:12:d4:53:de:b9:7a:1f:5b:f6:82:94:e7:40:ef:b8:01: 87:7b:77:d6:00:90:8a:de:65:13:ce:62:98:2b:91:0e:11:48: b0:5f:d6:c3:6c:67:0d:c0:59:5e:32:db:55:f7:0a:07:94:be: 7b:d6:5d:79:8c:65:be:10:3c:1b:52:c6:18:63:c4:67:a6:fd: 00:50:4e:95:85:ad:6d:c1:ea:1b:15:de:da:fa:06:70:f5:17: b4:d7:39:1e:b2:39:a3:50:95:10:5c:38:9d:cb:ef:a6:c0:9d: 52:5c:ae:4b:b6:19:47:0e:7f:87:fe:8d:d3:1d:ef:d5:83:dd: 68:51:81:3f:fc:bd:fb:54:c8:29:01:a5:67:73:c0:c6:72:9d: db:9d:61:49:0e:e5:74:c8:d8:00:4c:07:fc:a5:09:e3:20:4c: e5:ca:09:d1:2d:00:a1:3e:5c:65:ce:2f:aa:2e:c6:f4:35:84: 4c:22:97:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLXPahqdI95Wib3dQxQ5zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5ZGY4OWQyM2Y5ZDZkY2ZmMWZiYmQ3MGI2MzY2NzFkMWVm MGFkOTEwHhcNMjUxMjA2MDEwMTE5WhcNMjUxMjA3MDEwMTE5WjAzMTEwLwYDVQQD EyhiNTQzMDIzMmMzYzI0NzA1MzNmODFiMmJmNWZmMzgzN2M0NmIyNWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttK29wRz7R76ELc9maO26wc/c2rZ gLZhexcLrrYhRcLjuhk1PN6YVUMBqiMT/PGeyaWQspxEEfxndC6C5UvS5IiMZL5K 5AWg71oaz6fBzz7ejqpePpG2Rz1q0fABCTh91HuWfdWX0smSbaeWpqVnVSJSlxvc +wmb3Jq7y4Q+k2n+32SGqVupCpbZLWGmq5sIJMfjIDM7wvVGblbhwDNzynrvw9rn +O9DwCbokUUeHXxszR72CyW98D3dwwRrkNUPoHp61RrEfkI0hiZISaDCiTL1mz1R 3VlDa8LjOjsy84eykDZKC94i9dnwYsIyWJEKEK+32ZQAvjeJ0Y5GO5JbpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLVDAjLDwkcFM/gbK/X/ODfEayXXMB8GA1UdIwQY MBaAFHnfidI/nW3P8fu9cLY2Zx0e8K2RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWQtSjBqLWRiY194LTcxd3RqWm5IUjd3clpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi80ZGM1OGMtN2NlOC00NWJiLWJhY2Ut MWZlNzQ4MTMzY2VmLzEvZWQtSjBqLWRiY194LTcxd3RqWm5IUjd3clpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi80ZGM1OGMtN2NlOC00NWJiLWJhY2UtMWZlNzQ4MTMzY2Vm LzEvZWQtSjBqLWRiY194LTcxd3RqWm5IUjd3clpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQFcoof1P 7bTB9z11BZaSFCQpfF/TnAE/si39BVU3MB9mzSF84MR7cK7tIwH+CFck5//us2NX k4U5+E2K2t0c5pIcm3lihL8fNBYS1FPeuXofW/aClOdA77gBh3t31gCQit5lE85i mCuRDhFIsF/Ww2xnDcBZXjLbVfcKB5S+e9ZdeYxlvhA8G1LGGGPEZ6b9AFBOlYWt bcHqGxXe2voGcPUXtNc5HrI5o1CVEFw4ncvvpsCdUlyuS7YZRw5/h/6N0x3v1YPd aFGBP/y9+1TIKQGlZ3PAxnKd251hSQ7ldMjYAEwH/KUJ4yBM5coJ0S0AoT5cZc4v qi7G9DWETCKXwQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:23 2025 by rpki-client