This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.mft File: EdGfiLDcG4kCVNuUqbYgRta-eUs.mft (raw, json) Hash identifier: e1advallqlXKBRZemj+XQup5thNPUjRUtLv1OCQwjkQ= Subject key identifier: 14:DC:B6:DE:89:03:87:CA:93:41:76:4C:36:52:15:B0:CD:2A:A7:7D Authority key identifier: 11:D1:9F:88:B0:DC:1B:89:02:54:DB:94:A9:B6:20:46:D6:BE:79:4B Certificate issuer: /CN=11d19f88b0dc1b890254db94a9b62046d6be794b Certificate serial: 019AF12CF570389F5EA45E3012F1DD89CEE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdGfiLDcG4kCVNuUqbYgRta-eUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.mft Manifest number: 0CAD Signing time: Sat 06 Dec 2025 01:00:46 +0000 Manifest this update: Sat 06 Dec 2025 01:00:46 +0000 Manifest next update: Sun 07 Dec 2025 01:00:46 +0000 Files and hashes: 1: EdGfiLDcG4kCVNuUqbYgRta-eUs.crl (hash: 8hf+YWXBsvPD4tqHqscKNqtzyiDQnNYtbqYituccX2E=) 2: iEka4Vv56ltOb2j3jT-ILWz-_Es.roa (hash: eHAQPRCUs+jzFQIPkgWCN2IRqlhuSuMwK3wcNPLkVsk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.crl rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.mft rsync://rpki.ripe.net/repository/DEFAULT/EdGfiLDcG4kCVNuUqbYgRta-eUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:f5:70:38:9f:5e:a4:5e:30:12:f1:dd:89:ce:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11d19f88b0dc1b890254db94a9b62046d6be794b Validity Not Before: Dec 6 01:00:46 2025 GMT Not After : Dec 7 01:00:46 2025 GMT Subject: CN=14dcb6de890387ca9341764c365215b0cd2aa77d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:12:ab:9b:80:a0:ac:69:19:8c:0a:6b:77:a8: 84:3f:94:47:29:46:db:98:d5:89:46:b1:b9:dd:71: 90:d7:75:99:90:40:d9:7f:92:ad:c5:09:a6:c8:18: 38:43:0b:f4:ca:f2:09:81:8a:9c:90:c9:b1:85:2b: 4d:94:e0:9b:80:b6:39:7c:dd:f7:2c:3b:7e:4b:2b: 75:c8:69:4d:82:2a:36:75:a7:71:39:2e:22:31:48: 87:16:3d:46:80:cf:81:9e:3b:8a:7e:dc:15:8a:19: e1:e8:c1:56:ba:1c:77:1b:84:07:1f:c9:59:7b:b3: c4:dd:ba:34:1a:58:7d:49:28:18:94:6d:3e:b5:c1: 79:d0:fb:3f:fb:32:ad:a3:7e:7f:1c:30:a3:57:c4: d3:ff:c1:39:95:15:ec:92:72:2f:af:00:59:ac:aa: 6b:4b:7f:e8:ef:53:1d:91:1a:18:7b:1d:f9:1f:dd: 39:6f:82:a8:39:7c:19:b1:ab:24:63:b3:8f:c1:b1: e6:12:10:27:42:6d:9a:1a:e7:5c:ee:cf:b2:aa:56: 0a:e8:66:1e:0f:69:31:a8:a2:24:c0:07:82:a3:ce: 9e:f5:09:25:20:91:17:3c:34:a2:ba:b5:69:8b:a8: f5:cc:2d:dc:db:4a:e4:26:45:3c:ef:aa:c7:05:37: 6e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:DC:B6:DE:89:03:87:CA:93:41:76:4C:36:52:15:B0:CD:2A:A7:7D X509v3 Authority Key Identifier: keyid:11:D1:9F:88:B0:DC:1B:89:02:54:DB:94:A9:B6:20:46:D6:BE:79:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdGfiLDcG4kCVNuUqbYgRta-eUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:62:e3:2a:1a:22:c7:05:04:b6:c6:29:4b:7e:d3:65:61:03: 4b:d9:f3:d3:35:ce:79:60:3f:8a:d2:80:b7:33:b3:d3:85:d4: cf:a5:82:ad:b1:96:86:01:91:9b:48:97:5e:30:2e:5b:d4:ce: 3f:eb:0c:b1:92:57:61:14:b0:11:f9:62:84:88:68:39:19:90: e2:ab:91:0e:97:8b:ca:61:24:c7:ca:10:af:58:88:c2:52:e9: d4:12:13:bf:a0:c1:43:44:fb:71:64:dd:c2:bb:7c:df:ba:5d: 44:e3:16:87:c5:02:13:55:de:dd:84:ef:3d:a0:db:52:bb:85: 9d:4f:a5:8a:ec:56:49:09:77:52:2e:a1:b4:80:26:a4:39:2d: f7:70:65:3c:2f:29:ae:38:62:19:e3:c2:88:a6:e0:1a:05:7b: f3:71:65:3a:da:4c:10:d3:19:ef:26:e8:8d:74:56:74:90:02: 31:bc:ac:d6:b7:29:c6:67:6c:43:37:4a:ef:58:78:50:18:4b: be:f1:60:34:02:d2:5b:9e:ea:cf:88:ac:4b:49:81:1f:0d:3c: fa:4b:0c:78:d6:e6:23:08:f3:38:fc:f9:95:30:b2:f1:38:8c: c8:72:1d:48:a8:79:ef:33:c5:91:a2:c8:38:f4:2b:27:41:1c: bf:32:e8:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLPVwOJ9epF4wEvHdic7iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExZDE5Zjg4YjBkYzFiODkwMjU0ZGI5NGE5YjYyMDQ2ZDZi ZTc5NGIwHhcNMjUxMjA2MDEwMDQ2WhcNMjUxMjA3MDEwMDQ2WjAzMTEwLwYDVQQD EygxNGRjYjZkZTg5MDM4N2NhOTM0MTc2NGMzNjUyMTViMGNkMmFhNzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBKrm4CgrGkZjAprd6iEP5RHKUbb mNWJRrG53XGQ13WZkEDZf5KtxQmmyBg4Qwv0yvIJgYqckMmxhStNlOCbgLY5fN33 LDt+Syt1yGlNgio2dadxOS4iMUiHFj1GgM+BnjuKftwVihnh6MFWuhx3G4QHH8lZ e7PE3bo0Glh9SSgYlG0+tcF50Ps/+zKto35/HDCjV8TT/8E5lRXsknIvrwBZrKpr S3/o71MdkRoYex35H905b4KoOXwZsaskY7OPwbHmEhAnQm2aGudc7s+yqlYK6GYe D2kxqKIkwAeCo86e9QklIJEXPDSiurVpi6j1zC3c20rkJkU876rHBTdu1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTctt6JA4fKk0F2TDZSFbDNKqd9MB8GA1UdIwQY MBaAFBHRn4iw3BuJAlTblKm2IEbWvnlLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWRHZmlMRGNHNGtDVk51VXFiWWdSdGEtZVVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85Yjc4M2MtOWY1OS00Njk2LTgyYzQt NDhiNDk1NWYwNjAwLzEvRWRHZmlMRGNHNGtDVk51VXFiWWdSdGEtZVVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS85Yjc4M2MtOWY1OS00Njk2LTgyYzQtNDhiNDk1NWYwNjAw LzEvRWRHZmlMRGNHNGtDVk51VXFiWWdSdGEtZVVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjWLjKhoi xwUEtsYpS37TZWEDS9nz0zXOeWA/itKAtzOz04XUz6WCrbGWhgGRm0iXXjAuW9TO P+sMsZJXYRSwEflihIhoORmQ4quRDpeLymEkx8oQr1iIwlLp1BITv6DBQ0T7cWTd wrt837pdROMWh8UCE1Xe3YTvPaDbUruFnU+liuxWSQl3Ui6htIAmpDkt93BlPC8p rjhiGePCiKbgGgV783FlOtpMENMZ7ybojXRWdJACMbys1rcpxmdsQzdK71h4UBhL vvFgNALSW57qz4isS0mBHw08+ksMeNbmIwjzOPz5lTCy8TiMyHIdSKh57zPFkaLI OPQrJ0EcvzLoeQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:13:47 2025 by rpki-client