This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.mft File: 7edmLVl_r8lt12VXdQjD7QKdZWc.mft (raw, json) Hash identifier: 9EZESEEH2/igoB9IF3zlt/YRb7GycBOgaHB6rg558X8= Subject key identifier: B0:66:94:4B:D6:3E:CB:9B:34:E7:D3:F7:85:70:CD:17:CB:BD:69:B6 Authority key identifier: ED:E7:66:2D:59:7F:AF:C9:6D:D7:65:57:75:08:C3:ED:02:9D:65:67 Certificate issuer: /CN=ede7662d597fafc96dd765577508c3ed029d6567 Certificate serial: 019B3AFE45B5C030D7942CA1556F97525520 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7edmLVl_r8lt12VXdQjD7QKdZWc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 09:01:40 +0000 Manifest this update: Sat 20 Dec 2025 09:01:40 +0000 Manifest next update: Sun 21 Dec 2025 09:01:40 +0000 Files and hashes: 1: 7edmLVl_r8lt12VXdQjD7QKdZWc.crl (hash: jZgH4A+EbXnznmUNtnd8sYzmINOLN2t17nCu8oOLP/0=) 2: FQLYEgJnBcxXVB0fnnabFYqwVJ4.roa (hash: V3224FLOv1W7X3uBW6dltktQIsCoHudHe1QUTyJjYBE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.mft rsync://rpki.ripe.net/repository/DEFAULT/7edmLVl_r8lt12VXdQjD7QKdZWc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:45:b5:c0:30:d7:94:2c:a1:55:6f:97:52:55:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede7662d597fafc96dd765577508c3ed029d6567 Validity Not Before: Dec 20 09:01:40 2025 GMT Not After : Dec 21 09:01:40 2025 GMT Subject: CN=b066944bd63ecb9b34e7d3f78570cd17cbbd69b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:eb:b2:10:2e:74:c1:98:06:74:5d:2e:1b:40: ed:72:a1:8e:7c:22:50:b0:c4:82:5f:b5:fd:78:64: 20:42:18:dc:83:e9:5c:10:d9:15:60:51:87:d3:d3: dc:3e:fb:10:cd:56:45:84:b5:7c:ed:b6:50:39:4c: d1:24:84:1f:62:ec:d9:85:f4:b7:b9:56:5a:96:e4: 63:e5:67:a2:6f:3e:09:59:eb:09:b5:2d:e5:80:11: ee:a0:b2:24:c8:f0:78:f0:85:79:e2:fd:a4:06:63: a3:c0:c6:72:ef:19:d2:04:1b:85:14:2a:d2:89:24: 81:81:02:2c:42:0e:da:04:61:65:81:24:db:14:6e: fd:b3:f5:6d:c9:f1:a2:ff:78:24:ea:03:d3:c1:5d: 15:e1:02:0a:29:51:2f:85:53:ac:9a:bb:61:80:41: 02:48:3c:ec:26:11:49:50:aa:bf:d5:89:ef:06:b6: 22:c3:ba:24:42:ae:06:32:f9:30:80:37:55:8e:10: 43:fd:1e:9d:9a:ff:91:76:eb:54:63:5f:41:fd:f4: 46:fc:8c:dd:d2:cb:4e:03:2b:12:3a:3e:ca:50:fa: 3d:4e:64:7f:05:69:70:d1:ed:9e:68:e7:f6:f6:a8: d9:35:20:99:00:f6:2e:0b:56:72:74:32:02:1d:0e: dd:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:66:94:4B:D6:3E:CB:9B:34:E7:D3:F7:85:70:CD:17:CB:BD:69:B6 X509v3 Authority Key Identifier: keyid:ED:E7:66:2D:59:7F:AF:C9:6D:D7:65:57:75:08:C3:ED:02:9D:65:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7edmLVl_r8lt12VXdQjD7QKdZWc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:ba:e7:aa:51:90:48:93:f1:9e:1f:17:ef:27:85:bb:ed:d2: 99:6f:55:93:67:05:32:78:c9:8d:f2:0f:d9:a6:97:0b:fc:a4: cf:36:4d:b2:ea:b4:8a:76:1c:2e:b2:0c:db:bd:a0:6c:3a:83: ee:26:4d:0a:25:8d:b6:fb:dd:37:c0:49:b4:30:f0:bf:12:f0: d9:21:69:95:01:89:06:a4:db:e7:ea:d4:54:77:8f:43:ac:3c: 0f:34:d9:3e:8e:9f:fe:68:42:1f:58:6f:ff:f2:9d:ce:8c:7c: bc:95:e6:74:b8:87:10:2f:56:23:c3:dd:a8:18:75:2c:dd:88: a2:b9:76:b4:14:9a:1e:1e:a2:6d:b2:93:7b:1d:ac:6d:00:3f: 56:45:ac:8f:df:91:4b:8a:22:3f:f4:ee:a5:81:84:5b:b9:9a: 68:d2:48:d6:26:ba:5b:97:45:83:d3:9e:13:de:41:53:bc:fb: 5f:a6:30:84:0a:e0:83:86:21:4a:3d:6a:91:df:50:c5:6f:ea: 32:f1:33:a6:42:5a:03:79:6b:bc:11:64:39:9f:1c:b6:91:30: 99:50:d5:db:bc:aa:1c:d7:92:07:8d:74:7a:16:3b:bb:49:de: 82:03:1a:43:51:d3:5e:f7:51:02:20:73:72:f2:21:54:2e:33: 1a:c9:35:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/kW1wDDXlCyhVW+XUlUgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkZTc2NjJkNTk3ZmFmYzk2ZGQ3NjU1Nzc1MDhjM2VkMDI5 ZDY1NjcwHhcNMjUxMjIwMDkwMTQwWhcNMjUxMjIxMDkwMTQwWjAzMTEwLwYDVQQD EyhiMDY2OTQ0YmQ2M2VjYjliMzRlN2QzZjc4NTcwY2QxN2NiYmQ2OWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeuyEC50wZgGdF0uG0DtcqGOfCJQ sMSCX7X9eGQgQhjcg+lcENkVYFGH09PcPvsQzVZFhLV87bZQOUzRJIQfYuzZhfS3 uVZaluRj5Weibz4JWesJtS3lgBHuoLIkyPB48IV54v2kBmOjwMZy7xnSBBuFFCrS iSSBgQIsQg7aBGFlgSTbFG79s/VtyfGi/3gk6gPTwV0V4QIKKVEvhVOsmrthgEEC SDzsJhFJUKq/1YnvBrYiw7okQq4GMvkwgDdVjhBD/R6dmv+RdutUY19B/fRG/Izd 0stOAysSOj7KUPo9TmR/BWlw0e2eaOf29qjZNSCZAPYuC1ZydDICHQ7dCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLBmlEvWPsubNOfT94VwzRfLvWm2MB8GA1UdIwQY MBaAFO3nZi1Zf6/JbddlV3UIw+0CnWVnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2VkbUxWbF9yOGx0MTJWWGRRakQ3UUtkWldjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yZGNlMDQtNzQ3YS00YTRkLTk2YTIt ZDM1N2Y1YWVlYjg1LzEvN2VkbUxWbF9yOGx0MTJWWGRRakQ3UUtkWldjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8yZGNlMDQtNzQ3YS00YTRkLTk2YTItZDM1N2Y1YWVlYjg1 LzEvN2VkbUxWbF9yOGx0MTJWWGRRakQ3UUtkWldjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApbrnqlGQ SJPxnh8X7yeFu+3SmW9Vk2cFMnjJjfIP2aaXC/ykzzZNsuq0inYcLrIM272gbDqD 7iZNCiWNtvvdN8BJtDDwvxLw2SFplQGJBqTb5+rUVHePQ6w8DzTZPo6f/mhCH1hv //Kdzox8vJXmdLiHEC9WI8PdqBh1LN2Iorl2tBSaHh6ibbKTex2sbQA/VkWsj9+R S4oiP/TupYGEW7maaNJI1ia6W5dFg9OeE95BU7z7X6YwhArgg4YhSj1qkd9QxW/q MvEzpkJaA3lrvBFkOZ8ctpEwmVDV27yqHNeSB410ehY7u0neggMaQ1HTXvdRAiBz cvIhVC4zGsk16g== -----END CERTIFICATE-----Generated at Sat Dec 20 12:44:02 2025 by rpki-client