This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft File: Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft (raw, json) Hash identifier: k+Gpt//1YMXFsmicjRZfGWPk2pSpzs43eviQCDenKz4= Subject key identifier: 7C:2B:3B:2F:44:ED:86:2B:D0:7C:E9:66:D2:28:96:03:BF:B9:4C:AA Authority key identifier: 11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66 Certificate issuer: /CN=11dd0ebff5ba38a8758b794d04d62905194a3266 Certificate serial: 019AF5E64B7149ACC395AAEB11BCDE7FC45C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft Manifest number: 1277 Signing time: Sat 06 Dec 2025 23:01:41 +0000 Manifest this update: Sat 06 Dec 2025 23:01:41 +0000 Manifest next update: Sun 07 Dec 2025 23:01:41 +0000 Files and hashes: 1: Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl (hash: seBS22HM8ro39i+0ame6uPI2sqO+ZcnJN5wTDNUF/uw=) 2: HfwZH-0Lv6Ty3b-JyanUXRcRv4M.roa (hash: tXi7iyniS0PtgxKru69nf5MitATyW1mHStve5TknjLM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:4b:71:49:ac:c3:95:aa:eb:11:bc:de:7f:c4:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11dd0ebff5ba38a8758b794d04d62905194a3266 Validity Not Before: Dec 6 23:01:41 2025 GMT Not After : Dec 7 23:01:41 2025 GMT Subject: CN=7c2b3b2f44ed862bd07ce966d2289603bfb94caa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:85:5d:8f:ad:ea:fc:a2:f7:90:96:92:06:b2: f1:5f:1e:6b:2a:ae:da:29:86:e5:03:95:7a:42:75: db:24:71:27:f3:91:05:aa:b7:a5:9e:e7:bb:4a:5c: ee:df:dc:bc:88:f8:8e:06:dd:da:c0:24:13:f9:f7: 75:97:b0:87:a5:30:fd:e8:02:51:05:0a:b5:40:08: 9c:69:51:8b:6b:d2:25:f9:e6:97:ad:37:b2:bf:6f: 6a:2b:71:c6:2c:ac:4e:d0:c5:52:9d:9a:e4:68:07: 79:29:5e:dd:ba:94:15:e3:8d:dd:f1:96:50:b3:6f: 18:cb:01:6c:a0:d8:95:18:b8:50:dc:6f:fa:52:76: 02:f1:e8:c9:bb:20:1f:06:83:64:e9:88:83:be:65: 39:91:42:68:32:b4:ed:5c:75:50:3b:0a:64:d3:ad: e5:b4:b3:98:e7:a3:ba:53:be:a8:1b:34:2a:7d:74: 09:82:1c:6d:ff:62:37:8c:0f:58:ba:a8:92:ef:80: 9a:8f:a8:49:e7:2d:5d:61:19:7b:bc:80:44:96:3d: 81:c0:fd:40:40:9f:aa:9c:8a:4f:55:d7:dc:1e:1a: a7:b2:50:96:7d:e8:4a:8e:e4:c8:e4:7a:5e:6b:de: 55:17:10:6a:60:3f:59:20:4d:17:7a:c3:0a:15:1c: 37:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:2B:3B:2F:44:ED:86:2B:D0:7C:E9:66:D2:28:96:03:BF:B9:4C:AA X509v3 Authority Key Identifier: keyid:11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:74:1f:d4:46:d5:da:79:26:f9:0e:01:73:cb:9b:92:07:cc: e6:87:ac:c7:e7:c5:40:f9:aa:90:d6:a5:e4:9c:73:0b:da:8d: 9f:3f:6c:2e:ce:da:9b:ae:c5:3d:f8:91:25:d6:c6:45:44:21: ac:c7:17:6f:ce:35:8d:f5:60:91:e8:d3:d0:05:cd:96:23:95: 5e:29:16:2b:0c:16:8b:9e:f9:bb:1e:7c:f8:98:7e:b7:46:d6: 97:bd:0f:a7:75:df:4c:5b:81:fd:3a:ca:34:20:e4:af:f8:45: 38:8f:f0:09:58:13:87:0a:26:ed:dc:8f:74:e4:b2:c3:df:4b: a1:d5:e1:24:44:d3:b2:e9:66:68:68:58:5c:36:21:c7:41:11: d2:81:82:8a:f3:57:db:0f:e9:93:eb:29:15:c6:c2:c7:09:26: 06:fe:8c:91:6c:c3:01:aa:b9:78:f6:27:4c:97:2c:ea:cf:22: b7:b9:3e:a9:42:81:5a:fa:e1:c2:5a:21:92:8a:63:1e:76:68: fe:27:c9:da:7f:9b:99:2a:30:68:77:10:b3:18:74:64:5d:3d: a4:35:68:4f:2e:e4:c4:29:aa:87:e3:b4:16:67:bd:3f:3b:08: 3f:fe:17:10:21:dd:61:21:8d:fa:3b:c9:1c:bd:94:90:aa:16: e4:6f:3e:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15ktxSazDlarrEbzef8RcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExZGQwZWJmZjViYTM4YTg3NThiNzk0ZDA0ZDYyOTA1MTk0 YTMyNjYwHhcNMjUxMjA2MjMwMTQxWhcNMjUxMjA3MjMwMTQxWjAzMTEwLwYDVQQD Eyg3YzJiM2IyZjQ0ZWQ4NjJiZDA3Y2U5NjZkMjI4OTYwM2JmYjk0Y2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64Vdj63q/KL3kJaSBrLxXx5rKq7a KYblA5V6QnXbJHEn85EFqrelnue7Slzu39y8iPiOBt3awCQT+fd1l7CHpTD96AJR BQq1QAicaVGLa9Il+eaXrTeyv29qK3HGLKxO0MVSnZrkaAd5KV7dupQV443d8ZZQ s28YywFsoNiVGLhQ3G/6UnYC8ejJuyAfBoNk6YiDvmU5kUJoMrTtXHVQOwpk063l tLOY56O6U76oGzQqfXQJghxt/2I3jA9YuqiS74Caj6hJ5y1dYRl7vIBElj2BwP1A QJ+qnIpPVdfcHhqnslCWfehKjuTI5Hpea95VFxBqYD9ZIE0XesMKFRw3LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHwrOy9E7YYr0HzpZtIolgO/uUyqMB8GA1UdIwQY MBaAFBHdDr/1ujiodYt5TQTWKQUZSjJmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWQwT3ZfVzZPS2gxaTNsTkJOWXBCUmxLTW1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9hNjZhMjktNTFjYy00YmE5LTg4NGYt ZjE3NjEzZWE0OWU3LzEvRWQwT3ZfVzZPS2gxaTNsTkJOWXBCUmxLTW1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9hNjZhMjktNTFjYy00YmE5LTg4NGYtZjE3NjEzZWE0OWU3 LzEvRWQwT3ZfVzZPS2gxaTNsTkJOWXBCUmxLTW1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtXQf1EbV 2nkm+Q4Bc8ubkgfM5oesx+fFQPmqkNal5JxzC9qNnz9sLs7am67FPfiRJdbGRUQh rMcXb841jfVgkejT0AXNliOVXikWKwwWi575ux58+Jh+t0bWl70Pp3XfTFuB/TrK NCDkr/hFOI/wCVgThwom7dyPdOSyw99LodXhJETTsulmaGhYXDYhx0ER0oGCivNX 2w/pk+spFcbCxwkmBv6MkWzDAaq5ePYnTJcs6s8it7k+qUKBWvrhwlohkopjHnZo /ifJ2n+bmSowaHcQsxh0ZF09pDVoTy7kxCmqh+O0Fme9PzsIP/4XECHdYSGN+jvJ HL2UkKoW5G8+IQ== -----END CERTIFICATE-----Generated at Sun Dec 7 06:59:41 2025 by rpki-client