This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.mft File: edad2YMzVYQB7dGmAWgmXdGg2Vg.mft (raw, json) Hash identifier: PJdcc/ujcFEGdrj5RqgmJQBe1yvByIfcnuiYcuH2yY8= Subject key identifier: BB:B8:E3:78:17:0F:84:07:D2:13:3F:1C:63:4D:16:FA:5F:BC:B0:22 Authority key identifier: 79:D6:9D:D9:83:33:55:84:01:ED:D1:A6:01:68:26:5D:D1:A0:D9:58 Certificate issuer: /CN=79d69dd98333558401edd1a60168265dd1a0d958 Certificate serial: 019AF164408AA9F67B606A41F915725C3AC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edad2YMzVYQB7dGmAWgmXdGg2Vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 02:01:10 +0000 Manifest this update: Sat 06 Dec 2025 02:01:10 +0000 Manifest next update: Sun 07 Dec 2025 02:01:10 +0000 Files and hashes: 1: edad2YMzVYQB7dGmAWgmXdGg2Vg.crl (hash: jc8l/QEOf9q/OOxmnjZeNQfIdOs56lavk3AS767RMAA=) 2: hqnI55-BtuuM4vFpZ56v79LAU1E.roa (hash: de3zBJnkxcrGTCeqUEM+8xu6xpr3xr2UbYA58RD5CTg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.mft rsync://rpki.ripe.net/repository/DEFAULT/edad2YMzVYQB7dGmAWgmXdGg2Vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:40:8a:a9:f6:7b:60:6a:41:f9:15:72:5c:3a:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79d69dd98333558401edd1a60168265dd1a0d958 Validity Not Before: Dec 6 02:01:10 2025 GMT Not After : Dec 7 02:01:10 2025 GMT Subject: CN=bbb8e378170f8407d2133f1c634d16fa5fbcb022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a2:42:9b:c5:f5:59:52:1a:6a:4b:d0:9e:90: 93:1c:16:dd:c5:58:c3:d8:35:3d:c7:27:d3:55:d3: 6b:f6:88:bb:b3:8a:da:23:11:1b:b1:21:33:78:6d: 2a:3f:f8:66:e3:a4:09:4a:e1:e7:81:fe:48:45:fd: 43:77:e4:ce:a4:da:7b:71:f9:86:bf:cd:a2:2b:f2: f7:95:b9:27:f7:33:f2:ff:8d:56:c2:16:fb:d3:2b: a0:c5:e3:5a:b1:11:79:07:c5:b1:be:7f:a7:a0:c8: 5f:3e:9c:dd:48:d2:cb:ff:04:a0:8a:dc:da:d2:01: fc:b3:84:f4:0b:f2:21:2a:24:eb:5f:14:23:43:5f: fb:41:55:0a:a7:3b:f1:cc:64:59:0e:01:0d:95:31: b6:05:18:7c:05:48:b7:84:12:94:03:2a:54:95:41: a2:a0:e9:34:f1:11:37:e1:0c:16:81:cb:31:4d:f5: ae:fa:91:c5:87:c1:be:ca:64:df:d1:83:d8:66:df: 21:82:00:99:67:c1:88:85:d9:20:f6:ad:6c:30:95: 9a:64:06:8d:d1:ca:cd:1f:5c:8b:1d:1d:10:74:14: d4:f8:35:5c:7b:78:98:8c:da:8f:04:0e:73:2f:26: ab:3f:b7:32:89:95:2f:ff:84:d7:b8:86:a5:7e:9a: b6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B8:E3:78:17:0F:84:07:D2:13:3F:1C:63:4D:16:FA:5F:BC:B0:22 X509v3 Authority Key Identifier: keyid:79:D6:9D:D9:83:33:55:84:01:ED:D1:A6:01:68:26:5D:D1:A0:D9:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edad2YMzVYQB7dGmAWgmXdGg2Vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:e3:5c:04:31:1e:ed:bb:51:d3:31:f4:7c:d3:68:52:03:bf: 42:bf:00:db:bb:56:df:2b:da:f1:a4:e9:6d:35:a9:8e:61:cd: 30:a2:28:01:41:04:fd:4e:2c:5d:e9:cd:37:59:32:81:04:4a: ab:68:b3:af:f7:d4:a8:33:d1:01:4a:b6:1d:41:69:39:9c:46: 3d:32:12:dd:76:1b:8c:12:f0:d0:e5:92:dd:92:b3:df:81:34: 9e:bb:0d:75:e9:54:f0:54:55:a3:d2:59:69:8e:35:7a:6b:68: f1:0b:c9:6b:d8:b4:79:e5:1f:c9:26:eb:67:f0:4f:40:4f:f0: 73:5f:45:d3:a5:0e:9e:d2:1c:22:7a:e1:87:1d:d0:ca:b3:ed: 96:c1:d7:28:f5:46:cb:26:20:30:c6:d8:b8:bc:30:e8:a3:75: 28:8c:17:6e:b6:bb:89:95:2c:5e:f2:d8:c2:e9:ca:46:eb:68: 6e:bf:04:8c:04:66:9a:5e:d4:ba:78:79:4e:8f:9e:37:31:c7: 91:ac:02:07:f7:6a:4e:5b:9a:a5:5c:b9:6b:e1:6e:88:8b:84: 2f:ee:e1:23:eb:02:17:57:f0:a0:04:3b:91:69:0e:c4:be:75: eb:5a:1b:15:36:d5:1a:94:89:fd:37:c3:90:fa:d5:21:d8:84: f0:f2:dc:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZECKqfZ7YGpB+RVyXDrGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5ZDY5ZGQ5ODMzMzU1ODQwMWVkZDFhNjAxNjgyNjVkZDFh MGQ5NTgwHhcNMjUxMjA2MDIwMTEwWhcNMjUxMjA3MDIwMTEwWjAzMTEwLwYDVQQD EyhiYmI4ZTM3ODE3MGY4NDA3ZDIxMzNmMWM2MzRkMTZmYTVmYmNiMDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqJCm8X1WVIaakvQnpCTHBbdxVjD 2DU9xyfTVdNr9oi7s4raIxEbsSEzeG0qP/hm46QJSuHngf5IRf1Dd+TOpNp7cfmG v82iK/L3lbkn9zPy/41Wwhb70yugxeNasRF5B8Wxvn+noMhfPpzdSNLL/wSgitza 0gH8s4T0C/IhKiTrXxQjQ1/7QVUKpzvxzGRZDgENlTG2BRh8BUi3hBKUAypUlUGi oOk08RE34QwWgcsxTfWu+pHFh8G+ymTf0YPYZt8hggCZZ8GIhdkg9q1sMJWaZAaN 0crNH1yLHR0QdBTU+DVce3iYjNqPBA5zLyarP7cyiZUv/4TXuIalfpq2MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLu443gXD4QH0hM/HGNNFvpfvLAiMB8GA1UdIwQY MBaAFHnWndmDM1WEAe3RpgFoJl3RoNlYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWRhZDJZTXpWWVFCN2RHbUFXZ21YZEdnMlZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hNDZiZTctMzE3ZS00NzA4LWEwMTYt NGZkNmI3ZDc2YTJmLzEvZWRhZDJZTXpWWVFCN2RHbUFXZ21YZEdnMlZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9hNDZiZTctMzE3ZS00NzA4LWEwMTYtNGZkNmI3ZDc2YTJm LzEvZWRhZDJZTXpWWVFCN2RHbUFXZ21YZEdnMlZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAneNcBDEe 7btR0zH0fNNoUgO/Qr8A27tW3yva8aTpbTWpjmHNMKIoAUEE/U4sXenNN1kygQRK q2izr/fUqDPRAUq2HUFpOZxGPTIS3XYbjBLw0OWS3ZKz34E0nrsNdelU8FRVo9JZ aY41emto8QvJa9i0eeUfySbrZ/BPQE/wc19F06UOntIcInrhhx3QyrPtlsHXKPVG yyYgMMbYuLww6KN1KIwXbra7iZUsXvLYwunKRutobr8EjARmml7Uunh5To+eNzHH kawCB/dqTluapVy5a+FuiIuEL+7hI+sCF1fwoAQ7kWkOxL5161obFTbVGpSJ/TfD kPrVIdiE8PLc4w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:56:28 2025 by rpki-client