This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.mft File: 1EdMHAbL_elGFNZcfQX2FKbiOZg.mft (raw, json) Hash identifier: Hs8C2Ak1CQ411taQkPoGBtDCGcshrxO6QlMHBfDM5bM= Subject key identifier: 97:CF:1C:0F:7E:E8:16:A0:41:B2:68:75:96:4E:8A:C1:E8:D3:30:E3 Authority key identifier: D4:47:4C:1C:06:CB:FD:E9:46:14:D6:5C:7D:05:F6:14:A6:E2:39:98 Certificate issuer: /CN=d4474c1c06cbfde94614d65c7d05f614a6e23998 Certificate serial: 019AF164072C83FEE3666C9764A6E0B90EAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EdMHAbL_elGFNZcfQX2FKbiOZg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 02:00:55 +0000 Manifest this update: Sat 06 Dec 2025 02:00:55 +0000 Manifest next update: Sun 07 Dec 2025 02:00:55 +0000 Files and hashes: 1: 1EdMHAbL_elGFNZcfQX2FKbiOZg.crl (hash: wQDRFz9PHhvCZBhAttfefvjWyG1BJeV3EBUnhBucquU=) 2: vHVqwO_nqH9ZrYztprb6WC9Q2ng.roa (hash: hIMtMavbO55tW6Byt6lllDo5443jCsG0h73OMyjZ93A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.mft rsync://rpki.ripe.net/repository/DEFAULT/1EdMHAbL_elGFNZcfQX2FKbiOZg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:07:2c:83:fe:e3:66:6c:97:64:a6:e0:b9:0e:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4474c1c06cbfde94614d65c7d05f614a6e23998 Validity Not Before: Dec 6 02:00:55 2025 GMT Not After : Dec 7 02:00:55 2025 GMT Subject: CN=97cf1c0f7ee816a041b26875964e8ac1e8d330e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:5c:07:66:7d:9c:72:5c:ca:05:73:4d:85:7b: e3:fc:db:ad:26:7e:68:11:6c:65:e8:cb:3b:8e:20: 61:fa:03:b8:2f:c7:b6:44:03:b2:99:02:02:4d:16: fc:d6:23:79:a7:a5:9e:ce:50:f0:f8:9d:4a:3b:38: 08:98:42:d7:b2:27:c1:bc:91:cd:f6:e2:2f:54:56: 17:80:55:f1:0a:79:6f:2e:92:e6:96:a2:c9:7a:00: 88:7b:80:66:91:f2:d0:f5:37:16:f7:6a:78:77:d2: eb:e3:5c:09:4a:33:bd:52:0d:d8:24:d1:98:07:82: 06:5e:c2:6c:49:a8:51:cb:1c:da:a9:34:54:06:24: 48:26:0d:58:fb:92:58:36:f7:73:6b:83:84:5d:e7: 04:78:fe:49:b0:bc:e5:4b:c4:07:11:32:f7:31:9d: c4:91:f5:55:ac:8c:30:72:5f:f5:7e:5c:c8:23:a6: 9d:6e:3e:67:9b:ea:77:a5:ba:14:fe:5f:3d:bc:a8: e8:34:05:43:32:8a:44:e0:b0:43:cd:5b:35:4d:31: 16:be:03:a2:dc:f3:e7:ef:7b:cb:9a:db:28:8d:89: 16:c3:1d:f6:cb:2c:d1:09:f0:5f:36:57:90:c8:33: c3:4a:96:a3:15:8c:eb:40:f6:69:16:2d:77:37:4d: 09:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:CF:1C:0F:7E:E8:16:A0:41:B2:68:75:96:4E:8A:C1:E8:D3:30:E3 X509v3 Authority Key Identifier: keyid:D4:47:4C:1C:06:CB:FD:E9:46:14:D6:5C:7D:05:F6:14:A6:E2:39:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EdMHAbL_elGFNZcfQX2FKbiOZg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:aa:a4:49:f3:f3:e4:3f:5c:8c:57:a5:56:8a:96:65:67:1b: 1c:17:98:26:c7:f7:94:d1:ae:0d:5f:b6:92:9c:0f:68:91:c3: e0:1c:55:55:2e:f4:48:e7:26:19:e0:6a:74:a8:67:52:1e:87: f5:2e:df:09:4a:82:86:b9:ca:d1:bd:8a:6a:df:47:b4:3e:9a: 7e:dd:40:03:77:ad:be:80:c1:0c:62:02:06:92:ec:3a:65:3c: 1b:61:5e:9c:53:a5:78:91:9a:5a:0b:da:f2:94:08:a0:fc:61: bf:45:06:27:ec:15:da:07:3b:37:c9:a9:9e:ab:cd:ae:d7:a4: 96:15:cd:dc:92:f6:4e:0c:d0:ff:e8:90:9f:3d:b6:53:25:59: 29:f3:50:58:03:94:9e:83:30:59:29:78:94:f1:39:2b:ec:64: 17:56:9a:63:9e:25:06:0f:99:07:13:75:df:b1:19:62:ea:e4: 0d:8b:e9:d0:3b:80:5e:58:55:d9:7d:8c:44:9f:fe:db:1c:02: 78:ce:d3:34:15:2f:56:71:a7:52:7d:28:4f:8b:0e:cb:79:c8: 68:48:9e:8a:e0:3a:51:77:dd:10:28:d1:5c:32:83:ef:2f:24: 6d:f1:96:8b:52:ee:89:af:0f:92:6b:9e:6b:15:96:7d:dc:be: 5b:83:55:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZAcsg/7jZmyXZKbguQ6tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NDc0YzFjMDZjYmZkZTk0NjE0ZDY1YzdkMDVmNjE0YTZl MjM5OTgwHhcNMjUxMjA2MDIwMDU1WhcNMjUxMjA3MDIwMDU1WjAzMTEwLwYDVQQD Eyg5N2NmMWMwZjdlZTgxNmEwNDFiMjY4NzU5NjRlOGFjMWU4ZDMzMGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71wHZn2cclzKBXNNhXvj/NutJn5o EWxl6Ms7jiBh+gO4L8e2RAOymQICTRb81iN5p6WezlDw+J1KOzgImELXsifBvJHN 9uIvVFYXgFXxCnlvLpLmlqLJegCIe4BmkfLQ9TcW92p4d9Lr41wJSjO9Ug3YJNGY B4IGXsJsSahRyxzaqTRUBiRIJg1Y+5JYNvdza4OEXecEeP5JsLzlS8QHETL3MZ3E kfVVrIwwcl/1flzII6adbj5nm+p3pboU/l89vKjoNAVDMopE4LBDzVs1TTEWvgOi 3PPn73vLmtsojYkWwx32yyzRCfBfNleQyDPDSpajFYzrQPZpFi13N00JqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJfPHA9+6BagQbJodZZOisHo0zDjMB8GA1UdIwQY MBaAFNRHTBwGy/3pRhTWXH0F9hSm4jmYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUVkTUhBYkxfZWxHRk5aY2ZRWDJGS2JpT1pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9kNzU3NTktOGRjYi00NTMyLThiZmUt NWI2ODhhY2RiNjc2LzEvMUVkTUhBYkxfZWxHRk5aY2ZRWDJGS2JpT1pnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9kNzU3NTktOGRjYi00NTMyLThiZmUtNWI2ODhhY2RiNjc2 LzEvMUVkTUhBYkxfZWxHRk5aY2ZRWDJGS2JpT1pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiaqkSfPz 5D9cjFelVoqWZWcbHBeYJsf3lNGuDV+2kpwPaJHD4BxVVS70SOcmGeBqdKhnUh6H 9S7fCUqChrnK0b2Kat9HtD6aft1AA3etvoDBDGICBpLsOmU8G2FenFOleJGaWgva 8pQIoPxhv0UGJ+wV2gc7N8mpnqvNrteklhXN3JL2TgzQ/+iQnz22UyVZKfNQWAOU noMwWSl4lPE5K+xkF1aaY54lBg+ZBxN137EZYurkDYvp0DuAXlhV2X2MRJ/+2xwC eM7TNBUvVnGnUn0oT4sOy3nIaEieiuA6UXfdECjRXDKD7y8kbfGWi1Luia8Pkmue axWWfdy+W4NVJg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:38:19 2025 by rpki-client