This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft File: eDLQYJMtR4WhDKR96AAvZcHvM64.mft (raw, json) Hash identifier: 1AUSDTSSyO5WFw4XTXnJmnMLyQUSf31kdNbkeTHLlgc= Subject key identifier: 21:E5:3F:62:44:40:7B:19:D0:C9:0C:0D:30:8E:F8:6E:A6:B2:D4:33 Authority key identifier: 78:32:D0:60:93:2D:47:85:A1:0C:A4:7D:E8:00:2F:65:C1:EF:33:AE Certificate issuer: /CN=7832d060932d4785a10ca47de8002f65c1ef33ae Certificate serial: 019B3EA33E9E721793F7A9B00C3A9E648F02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft Manifest number: 1287 Signing time: Sun 21 Dec 2025 02:00:44 +0000 Manifest this update: Sun 21 Dec 2025 02:00:44 +0000 Manifest next update: Mon 22 Dec 2025 02:00:44 +0000 Files and hashes: 1: UkvE1AtgzFaEZZjsZiVXyyLbs5o.roa (hash: y7S6KVTG3N2Xe5Mq5Th3G1Pm17a7WWjgGUAMC2Q3dUs=) 2: eDLQYJMtR4WhDKR96AAvZcHvM64.crl (hash: sYNUoUf38ejpVro6hf4N8ZfmRzRW74vuUgL/rOr3x5U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:3e:9e:72:17:93:f7:a9:b0:0c:3a:9e:64:8f:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7832d060932d4785a10ca47de8002f65c1ef33ae Validity Not Before: Dec 21 02:00:44 2025 GMT Not After : Dec 22 02:00:44 2025 GMT Subject: CN=21e53f6244407b19d0c90c0d308ef86ea6b2d433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:7d:6f:28:be:58:1d:f2:d6:a1:da:ad:78:6e: df:fc:c2:11:d3:a7:1d:01:34:e0:f1:69:0d:5b:f7: 14:9e:2a:1e:da:fc:f4:ec:91:13:19:56:bc:5b:5d: f2:88:c0:41:71:c0:24:e8:63:ef:81:aa:7e:57:fc: 40:c3:b3:51:bc:81:aa:a8:24:e9:fa:ef:d6:dd:d4: 6b:2f:60:b0:64:43:57:9d:e2:5d:81:04:6a:2d:53: e7:e9:f1:99:20:db:e4:45:90:1c:4b:78:7e:be:b7: c2:84:87:41:01:7c:6f:b4:6d:b0:ae:8b:f5:f5:d0: 31:91:21:65:b9:cd:76:82:a9:8e:ff:d4:0f:78:6f: ee:ee:3f:d9:36:0a:fc:19:ca:c6:8e:c7:10:a3:89: 52:56:8b:50:23:7c:b0:f5:cb:bc:c6:2a:2e:e3:0c: 54:21:cf:86:e3:80:ea:7f:89:ec:3a:64:0a:ba:83: cf:47:e4:8a:76:5b:f1:48:24:cc:e8:87:73:a3:96: 04:47:91:49:c6:47:f1:db:b9:da:9b:ca:d6:cf:f5: d3:cb:07:1a:18:05:27:01:0b:db:ba:ac:d2:cb:84: 4f:8c:bc:77:54:cb:ba:cb:d3:3c:0a:59:7e:f5:7c: 6a:03:dc:9f:d9:46:7e:dc:1f:69:b8:0d:2c:bd:13: c1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E5:3F:62:44:40:7B:19:D0:C9:0C:0D:30:8E:F8:6E:A6:B2:D4:33 X509v3 Authority Key Identifier: keyid:78:32:D0:60:93:2D:47:85:A1:0C:A4:7D:E8:00:2F:65:C1:EF:33:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:a9:6a:a5:7c:a9:e0:ad:68:32:45:de:53:42:af:08:8c:48: 9d:4a:15:87:df:46:8e:22:db:91:6e:ba:12:cd:55:31:cf:78: ee:74:20:cc:99:5d:e8:58:bd:9a:08:8d:ab:28:76:4e:65:97: 95:a6:8c:68:cd:3d:80:89:a8:5a:fd:47:16:c6:dc:4e:15:d0: 87:5d:f4:8b:84:63:db:67:33:76:68:f1:16:a4:95:26:f6:43: a5:da:46:08:6e:8b:9c:dc:fa:3a:48:58:35:a7:fc:84:25:8e: ba:22:a8:0c:80:6a:75:9f:6f:76:67:5a:69:2a:14:6e:fb:52: 20:45:12:a3:c1:8a:b2:8d:2e:47:ec:99:87:1f:bd:89:04:ed: 6e:74:de:83:22:b6:6f:a8:80:28:c6:f2:d1:21:e9:2d:8f:06: ff:3f:ff:79:31:9b:38:b5:f0:36:6d:22:be:be:bb:c7:7d:ea: c6:da:c3:41:50:49:26:d7:63:bc:82:31:79:64:33:67:39:c2: 3b:ef:45:f2:83:84:ee:b8:7a:fe:cd:62:5d:c1:fb:6c:8c:1b: 9f:e3:03:61:bc:30:50:bb:c7:8c:3a:6c:0e:de:82:e3:fc:87: c6:40:e0:53:81:3f:a7:07:71:f3:f5:e3:e5:2d:75:57:0e:46: 83:2e:d5:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+oz6echeT96mwDDqeZI8CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4MzJkMDYwOTMyZDQ3ODVhMTBjYTQ3ZGU4MDAyZjY1YzFl ZjMzYWUwHhcNMjUxMjIxMDIwMDQ0WhcNMjUxMjIyMDIwMDQ0WjAzMTEwLwYDVQQD EygyMWU1M2Y2MjQ0NDA3YjE5ZDBjOTBjMGQzMDhlZjg2ZWE2YjJkNDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA531vKL5YHfLWodqteG7f/MIR06cd ATTg8WkNW/cUnioe2vz07JETGVa8W13yiMBBccAk6GPvgap+V/xAw7NRvIGqqCTp +u/W3dRrL2CwZENXneJdgQRqLVPn6fGZINvkRZAcS3h+vrfChIdBAXxvtG2wrov1 9dAxkSFluc12gqmO/9QPeG/u7j/ZNgr8GcrGjscQo4lSVotQI3yw9cu8xiou4wxU Ic+G44Dqf4nsOmQKuoPPR+SKdlvxSCTM6Idzo5YER5FJxkfx27nam8rWz/XTywca GAUnAQvbuqzSy4RPjLx3VMu6y9M8Cll+9XxqA9yf2UZ+3B9puA0svRPBnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCHlP2JEQHsZ0MkMDTCO+G6mstQzMB8GA1UdIwQY MBaAFHgy0GCTLUeFoQykfegAL2XB7zOuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZURMUVlKTXRSNFdoREtSOTZBQXZaY0h2TTY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9hYTAzN2MtMzJjZS00NDA2LWIwYmMt ODk5NDlmY2M3YWZiLzEvZURMUVlKTXRSNFdoREtSOTZBQXZaY0h2TTY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9hYTAzN2MtMzJjZS00NDA2LWIwYmMtODk5NDlmY2M3YWZi LzEvZURMUVlKTXRSNFdoREtSOTZBQXZaY0h2TTY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT6lqpXyp 4K1oMkXeU0KvCIxInUoVh99GjiLbkW66Es1VMc947nQgzJld6Fi9mgiNqyh2TmWX laaMaM09gImoWv1HFsbcThXQh130i4Rj22czdmjxFqSVJvZDpdpGCG6LnNz6OkhY Naf8hCWOuiKoDIBqdZ9vdmdaaSoUbvtSIEUSo8GKso0uR+yZhx+9iQTtbnTegyK2 b6iAKMby0SHpLY8G/z//eTGbOLXwNm0ivr67x33qxtrDQVBJJtdjvIIxeWQzZznC O+9F8oOE7rh6/s1iXcH7bIwbn+MDYbwwULvHjDpsDt6C4/yHxkDgU4E/pwdx8/Xj 5S11Vw5Ggy7VjQ== -----END CERTIFICATE-----Generated at Sun Dec 21 10:02:29 2025 by rpki-client