This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft File: EdnXl1uM2pIypCR8yd6abf28YGk.mft (raw, json) Hash identifier: gjXV9mnkw9JlyQsdvjxIBfqlw587lRFCkjCH2RYkVGc= Subject key identifier: A8:A8:8F:32:D9:F6:93:0C:54:A6:B0:EF:0E:9C:96:BA:90:2E:05:8C Authority key identifier: 11:D9:D7:97:5B:8C:DA:92:32:A4:24:7C:C9:DE:9A:6D:FD:BC:60:69 Certificate issuer: /CN=11d9d7975b8cda9232a4247cc9de9a6dfdbc6069 Certificate serial: 019AF20972A2F841696534DF375841F35C5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdnXl1uM2pIypCR8yd6abf28YGk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 05:01:36 +0000 Manifest this update: Sat 06 Dec 2025 05:01:36 +0000 Manifest next update: Sun 07 Dec 2025 05:01:36 +0000 Files and hashes: 1: DsnYhz3l-UjW4BEfkskBQyPqFHg.roa (hash: Ca24yg0KQW8MlNf8yUGGudiupYhIqA/czyOnT3n44ic=) 2: EdnXl1uM2pIypCR8yd6abf28YGk.crl (hash: iOqnussfTcrYfRu+MyusK+Yz4PD22iEau9u2p3AHyK0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft rsync://rpki.ripe.net/repository/DEFAULT/EdnXl1uM2pIypCR8yd6abf28YGk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:72:a2:f8:41:69:65:34:df:37:58:41:f3:5c:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11d9d7975b8cda9232a4247cc9de9a6dfdbc6069 Validity Not Before: Dec 6 05:01:36 2025 GMT Not After : Dec 7 05:01:36 2025 GMT Subject: CN=a8a88f32d9f6930c54a6b0ef0e9c96ba902e058c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:73:ab:ea:6e:00:74:a8:71:92:d5:0a:31:83: 0d:13:91:b4:87:fb:22:c6:38:98:70:92:16:ee:ec: b2:56:5e:a5:65:cd:b2:7c:2f:7e:01:f8:f1:5b:c7: 55:e1:0a:1a:0f:cc:df:c3:c6:9b:07:5a:95:38:04: 60:79:50:fc:49:24:88:a5:7d:1b:0e:46:7c:c4:19: 39:5f:a3:ae:e2:0f:ff:4c:77:52:ad:8e:b0:d2:60: 39:34:37:56:1d:98:d1:01:e7:1a:44:54:33:7e:14: 2b:83:d1:5f:7e:76:50:4b:ae:3a:56:d7:8a:72:56: 65:0d:de:6a:ec:6d:eb:6f:be:c8:30:8d:d0:0a:03: 85:97:ce:4d:d1:b5:95:69:3d:3f:fd:2d:38:9c:c8: 38:3b:ad:06:12:35:4a:c7:b5:b9:00:6c:ad:d6:57: 85:e8:e8:a3:8f:d6:cd:a6:28:f1:0d:02:21:3f:ed: 06:60:fe:9b:f5:e9:3e:54:3f:4f:b1:21:55:49:21: 18:67:f9:58:e8:e9:f6:7e:89:b3:64:f3:ec:e9:5c: d5:67:d2:74:92:01:df:98:ad:55:20:28:2a:6f:52: 45:09:d4:e8:f5:c7:f3:03:8e:22:cb:a3:0e:0a:8e: 15:18:03:a2:98:91:a2:a6:1e:62:c7:b7:51:ed:d5: bf:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A8:8F:32:D9:F6:93:0C:54:A6:B0:EF:0E:9C:96:BA:90:2E:05:8C X509v3 Authority Key Identifier: keyid:11:D9:D7:97:5B:8C:DA:92:32:A4:24:7C:C9:DE:9A:6D:FD:BC:60:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdnXl1uM2pIypCR8yd6abf28YGk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:c3:8f:b6:12:9e:80:c1:e9:1a:41:a5:7b:95:9c:21:cd:36: fb:d0:d9:32:6e:bd:2c:6a:57:20:8f:38:e1:99:ca:3b:a7:03: 16:01:50:42:2b:04:a9:67:80:1f:04:a8:cd:6e:2d:97:6e:2a: a1:9e:19:bc:06:08:d0:66:b8:03:c8:9e:a2:d1:72:ca:a6:97: cc:cc:2b:b9:a1:06:7e:df:af:f6:14:d4:0a:54:c6:95:25:b8: e8:d6:68:26:10:94:06:9a:61:ed:df:ed:00:54:f6:d3:f2:74: 61:93:e3:d6:03:c9:ac:da:49:a5:60:dc:69:9c:94:12:53:3f: 54:cc:c7:d9:96:19:6b:1d:df:0a:db:e9:18:69:76:ec:b9:bd: 30:58:45:17:15:9d:a1:ac:70:74:84:1d:3c:ec:6b:4a:86:f8: 35:ce:a8:ea:b5:e9:b5:71:1f:ae:08:d6:bc:30:3e:8c:c6:ce: 50:c2:2e:b8:4d:cb:53:55:41:7b:21:48:63:21:6c:73:dd:c0: c6:d3:ca:31:f7:0c:e8:e6:5c:8b:66:02:58:ed:01:60:f3:2b: 23:9e:cb:10:98:7c:18:fc:52:ae:62:f7:99:a1:2c:14:a1:84: 32:cb:54:04:79:b8:ef:00:78:7b:d1:0a:b0:c4:76:b7:49:21: db:0c:37:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCXKi+EFpZTTfN1hB81xaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExZDlkNzk3NWI4Y2RhOTIzMmE0MjQ3Y2M5ZGU5YTZkZmRi YzYwNjkwHhcNMjUxMjA2MDUwMTM2WhcNMjUxMjA3MDUwMTM2WjAzMTEwLwYDVQQD EyhhOGE4OGYzMmQ5ZjY5MzBjNTRhNmIwZWYwZTljOTZiYTkwMmUwNThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3Or6m4AdKhxktUKMYMNE5G0h/si xjiYcJIW7uyyVl6lZc2yfC9+AfjxW8dV4QoaD8zfw8abB1qVOARgeVD8SSSIpX0b DkZ8xBk5X6Ou4g//THdSrY6w0mA5NDdWHZjRAecaRFQzfhQrg9FffnZQS646VteK clZlDd5q7G3rb77IMI3QCgOFl85N0bWVaT0//S04nMg4O60GEjVKx7W5AGyt1leF 6Oijj9bNpijxDQIhP+0GYP6b9ek+VD9PsSFVSSEYZ/lY6On2fomzZPPs6VzVZ9J0 kgHfmK1VICgqb1JFCdTo9cfzA44iy6MOCo4VGAOimJGiph5ix7dR7dW/lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKiojzLZ9pMMVKaw7w6clrqQLgWMMB8GA1UdIwQY MBaAFBHZ15dbjNqSMqQkfMnemm39vGBpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWRuWGwxdU0ycEl5cENSOHlkNmFiZjI4WUdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9iMDY2OGItNmVjMi00ZGI0LWE5NTct YWY3MzgyMzk1ZTAwLzEvRWRuWGwxdU0ycEl5cENSOHlkNmFiZjI4WUdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9iMDY2OGItNmVjMi00ZGI0LWE5NTctYWY3MzgyMzk1ZTAw LzEvRWRuWGwxdU0ycEl5cENSOHlkNmFiZjI4WUdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu8OPthKe gMHpGkGle5WcIc02+9DZMm69LGpXII844ZnKO6cDFgFQQisEqWeAHwSozW4tl24q oZ4ZvAYI0Ga4A8ieotFyyqaXzMwruaEGft+v9hTUClTGlSW46NZoJhCUBpph7d/t AFT20/J0YZPj1gPJrNpJpWDcaZyUElM/VMzH2ZYZax3fCtvpGGl27Lm9MFhFFxWd oaxwdIQdPOxrSob4Nc6o6rXptXEfrgjWvDA+jMbOUMIuuE3LU1VBeyFIYyFsc93A xtPKMfcM6OZci2YCWO0BYPMrI57LEJh8GPxSrmL3maEsFKGEMstUBHm47wB4e9EK sMR2t0kh2ww37Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:51:23 2025 by rpki-client