This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft File: nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft (raw, json) Hash identifier: 74WEPGc8eaNcgv4KJISXJt8iVTR4xOAhN/DDsT2o+IY= Subject key identifier: 68:EA:6B:33:55:6B:4E:89:33:2D:CF:FC:30:6A:BE:FE:CC:45:0D:E3 Authority key identifier: 9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D Certificate issuer: /CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d Certificate serial: 019AF65382CDAC1E195E5894CDF8B89D2856 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft Manifest number: 153E Signing time: Sun 07 Dec 2025 01:00:59 +0000 Manifest this update: Sun 07 Dec 2025 01:00:59 +0000 Manifest next update: Mon 08 Dec 2025 01:00:59 +0000 Files and hashes: 1: EovVJfg3z9mSoPRLqdQrySDONz0.roa (hash: oZlmneGtk7nFcNF1eQjRZHNEgK8ZEfrOqUTxDl2I1wI=) 2: nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl (hash: O6XVBSjgGs/FOI682vKKgy106pGqF/sCtLePlIl6ZlU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:82:cd:ac:1e:19:5e:58:94:cd:f8:b8:9d:28:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d Validity Not Before: Dec 7 01:00:59 2025 GMT Not After : Dec 8 01:00:59 2025 GMT Subject: CN=68ea6b33556b4e89332dcffc306abefecc450de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:15:44:ff:72:9b:11:e5:a1:e5:14:9b:99:19: c1:de:f7:7e:11:d7:45:9f:78:82:65:3e:a0:d8:5e: 0d:b9:1a:d7:e5:c2:59:fa:d6:c6:db:e1:5e:01:e7: 3d:2d:57:fd:5e:47:4c:aa:3d:88:c7:c4:f3:2b:55: d0:f3:f5:a6:3a:41:6a:15:1e:fd:a5:5a:e9:f1:07: fa:fc:59:83:e0:d5:1f:2f:67:0c:1c:c1:ca:5e:fb: 0f:bc:3f:5d:be:d6:50:0d:9c:57:6b:ef:71:2e:54: 35:9d:db:79:91:63:da:9d:c3:55:ad:5c:8a:49:47: 0f:4e:4a:46:8a:ca:f8:93:c5:6c:b5:38:22:44:1a: 4f:63:87:d3:be:95:6b:47:9c:bc:65:06:55:6e:ea: 68:3a:ea:5d:0e:9f:72:b4:fd:ba:fd:db:ee:a4:cb: 13:53:d0:a3:c3:c9:69:34:1a:81:b3:c6:00:82:09: 65:61:64:80:21:7b:51:f7:32:d8:71:53:8a:7f:32: c7:67:b4:a5:4e:27:58:5b:65:c0:1d:a5:a0:23:95: 51:48:80:65:a7:3f:bf:3d:c6:1c:ee:f8:a8:41:39: 88:22:74:a6:4b:0e:5d:00:82:d2:c9:03:33:3e:67: be:8b:6f:db:1c:f2:ea:87:0f:ae:39:3a:8b:de:3a: ef:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:EA:6B:33:55:6B:4E:89:33:2D:CF:FC:30:6A:BE:FE:CC:45:0D:E3 X509v3 Authority Key Identifier: keyid:9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:69:2d:70:c2:1e:c8:5f:bf:78:15:f0:a9:d9:37:fb:e7:d8: 15:37:e1:72:5e:b4:d8:af:59:09:41:b2:7f:ff:f4:84:ec:c3: 99:3f:30:49:ab:8c:68:84:d5:21:32:99:34:f3:27:f9:ec:68: 68:97:f2:f4:8a:1e:fc:92:80:b7:24:cf:ca:a9:38:36:68:91: f6:30:1c:0a:35:8a:c7:1f:4c:9b:b4:72:41:6e:eb:dc:d9:d9: 60:21:bf:97:61:0c:f1:cf:e6:d2:d0:75:e7:6d:76:b1:52:51: ae:1d:35:74:d0:57:4e:23:51:09:04:b3:09:4a:09:d2:8c:a9: ab:31:78:b6:c8:4a:fc:a4:63:3e:ba:9d:6d:83:f8:ad:fe:62: 8d:ff:5d:8d:d7:51:35:8f:16:1f:5e:25:b3:73:d7:30:79:3f: 8f:c8:66:c8:e3:7a:b5:32:bd:7e:c5:96:18:9d:f0:77:f2:bf: 5e:bb:4d:5b:ad:56:c1:20:bb:60:45:33:be:c4:07:00:8c:62: ef:d8:99:ec:a4:3d:42:67:d5:cc:87:1c:18:59:ca:30:d0:b7: fe:e6:f8:40:ca:c1:5b:c1:8a:52:d6:14:bf:e1:63:ad:45:79: 59:4a:83:49:1f:8b:d6:b7:88:4a:e6:17:81:93:41:c3:58:a7: 3a:e3:78:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U4LNrB4ZXliUzfi4nShWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNDBlMzA3ZDEyY2UwNTY4YzI5OWUxN2NkNjVhNjZiMjZj ZGIwNGQwHhcNMjUxMjA3MDEwMDU5WhcNMjUxMjA4MDEwMDU5WjAzMTEwLwYDVQQD Eyg2OGVhNmIzMzU1NmI0ZTg5MzMyZGNmZmMzMDZhYmVmZWNjNDUwZGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RVE/3KbEeWh5RSbmRnB3vd+EddF n3iCZT6g2F4NuRrX5cJZ+tbG2+FeAec9LVf9XkdMqj2Ix8TzK1XQ8/WmOkFqFR79 pVrp8Qf6/FmD4NUfL2cMHMHKXvsPvD9dvtZQDZxXa+9xLlQ1ndt5kWPancNVrVyK SUcPTkpGisr4k8VstTgiRBpPY4fTvpVrR5y8ZQZVbupoOupdDp9ytP26/dvupMsT U9Cjw8lpNBqBs8YAggllYWSAIXtR9zLYcVOKfzLHZ7SlTidYW2XAHaWgI5VRSIBl pz+/PcYc7vioQTmIInSmSw5dAILSyQMzPme+i2/bHPLqhw+uOTqL3jrvTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGjqazNVa06JMy3P/DBqvv7MRQ3jMB8GA1UdIwQY MBaAFJxA4wfRLOBWjCmeF81lpmsmzbBNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkVEakI5RXM0RmFNS1o0WHpXV21heWJOc0UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mYWYyYWUtNmE4My00NDViLTk3NGIt OGZiMzc3OWI4NzA0LzEvbkVEakI5RXM0RmFNS1o0WHpXV21heWJOc0UwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9mYWYyYWUtNmE4My00NDViLTk3NGItOGZiMzc3OWI4NzA0 LzEvbkVEakI5RXM0RmFNS1o0WHpXV21heWJOc0UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPWktcMIe yF+/eBXwqdk3++fYFTfhcl602K9ZCUGyf//0hOzDmT8wSauMaITVITKZNPMn+exo aJfy9Ioe/JKAtyTPyqk4NmiR9jAcCjWKxx9Mm7RyQW7r3NnZYCG/l2EM8c/m0tB1 5212sVJRrh01dNBXTiNRCQSzCUoJ0oypqzF4tshK/KRjPrqdbYP4rf5ijf9djddR NY8WH14ls3PXMHk/j8hmyON6tTK9fsWWGJ3wd/K/XrtNW61WwSC7YEUzvsQHAIxi 79iZ7KQ9QmfVzIccGFnKMNC3/ub4QMrBW8GKUtYUv+FjrUV5WUqDSR+L1reISuYX gZNBw1inOuN4sg== -----END CERTIFICATE-----Generated at Sun Dec 7 03:56:45 2025 by rpki-client